Published: June 14, 2026
Read time: ~11 min
Tags: Safety, OSINT, Guide
Slug: how-to-verify-identity-online
Meeting people online — for dating, business, or friendship — is now completely normal. So is the fact that not everyone online is who they say they are. The problem is not that verification is hard. It is that most people do not do it until something has already gone wrong.
This guide covers five categories of verification — photo checks, social presence, video calls, professional claims, and conversation signals — in the order you should work through them. Do these early, before the relationship has a dynamic that makes scrutiny uncomfortable.
Do These Five Checks Before Any Significant Trust Is Extended
- Reverse face search their profile photo
- Check if the photo shows signs of AI generation
- Search their name across LinkedIn, Instagram, and Google
- Check the account creation date on every platform
- Request a live, unscripted video call within the first week
- Verify their employer independently — not through contact info they provide
- Note whether message timestamps match their claimed location
- Any request for money ends the verification — it answers every question
01 — Start With the Photo — Reverse Face Search
The profile photo is the first and most important thing to verify. A fake identity almost always uses a stolen photo — taken from a real person's Instagram, LinkedIn, military service page, or modelling portfolio. Running the photo through a face search engine either confirms the identity or surfaces the original source within seconds.
Run the photo through FaceSift — Upload their profile photo to FaceSift (facesift.com) to find where that face appears across the public web. A genuine person's face will typically appear on their own social media under the same name. A stolen photo will surface on profiles belonging to someone with a completely different name, often in a different country.
Run the same photo through Google Images — Drag the photo to images.google.com or right-click → 'Search image'. If the same photo appears on multiple profiles under different names, or on a stock photo site, the image is stolen.
Check for signs the photo is AI-generated — If reverse search finds nothing, the photo may be AI-generated. Look for: blurred or asymmetrical ears, garbled background text, teeth that blur together, unnaturally smooth skin at full zoom. Upload to Hive Moderation (hivemoderation.com) for an automated score.
Check multiple photos, not just one — Inconsistency between photos — different lighting styles, image quality, or backgrounds that never share the same environment — suggests multiple unrelated source images.
02 — Cross-Reference Their Social Presence
A real person accumulates a social media presence that is organic, inconsistent, and sometimes embarrassing. A fake identity is built for a purpose and shows it: too polished, too consistent, too recent, or too sparse.
Search their name across multiple platforms — Search on LinkedIn, Instagram, Facebook, Twitter/X, and Google. A real person will typically have a LinkedIn consistent with their stated career, a social media presence predating your contact, and some footprint beyond the platform where you met.
Check account creation date and history — LinkedIn shows creation month and year. Twitter/X shows join date. For Instagram, the date of the earliest post is visible by scrolling down. A profile created in the months before you met them is a significant red flag.
Look for a genuine social graph — Real people appear in other people's photos, are tagged by friends, and have followers who interact in ways suggesting actual relationships. A profile with no tagged photos and no comments from people who appear to know them personally has no genuine social graph.
Check whether their LinkedIn matches their claimed backstory — Vague job descriptions, no listed employer, or an employer that does not appear to exist are all worth investigating.
Search their username across platforms — Use Sherlock or search their username in quotes on Google. Scammers frequently reuse usernames across targets or use freshly created handles with no history.
03 — The Video Call Test
A live, unscripted video call is the single most effective verification tool available — and the one fake identities most reliably avoid.
Request a video call early — before emotional investment grows — Ask within the first week of contact. Frame it positively: 'I'd love to actually see you — are you free for a quick call this week?'
Notice the excuses, not just the outcome — A legitimate person will agree to a video call within a reasonable timeframe. A scammer will produce an escalating series of reasons — broken camera, poor internet, work restrictions — that never resolve. The pattern of avoidance is more telling than any single excuse.
During the call: ask them to do something spontaneous — Ask them to wave with a specific hand, hold up a particular number of fingers, or write your name on paper and hold it up. A live person can do this instantly. A pre-recorded video cannot.
Watch for signs of a deepfake video call — Signs: face boundary flicker at hairline or ears during movement; lighting that does not respond naturally to head rotation; blinking that is too infrequent; lip sync that degrades during fast speech.
Confirm details during the call — Their environment should be consistent with their claimed life. Major inconsistencies — wrong apparent nationality, accent inconsistent with claimed background — are worth questioning.
04 — Verify Professional and Personal Claims
Romance scammers typically claim prestigious professions — military officer, doctor, engineer, UN worker, oil rig supervisor — that justify being abroad and unable to meet.
Verify their employer independently — Do not use contact information they provide. Find the employer's official website or LinkedIn page through your own search and confirm whether the person is listed.
Check military claims — US military personnel serving abroad are not allowed to ask civilians to send money for any reason. They have access to free communication. The Defense Manpower Data Center (dmdc.osd.mil) offers a service member verification tool.
Look up professional credentials — Doctors are licensed through state medical boards. Lawyers through their state bar. Engineers through professional registration bodies. A claimed credential in a licensed profession can be verified in minutes.
Ask specific, verifiable questions about their work — Someone who genuinely works in a field will answer detailed questions about it without hesitation. Someone working from a script will give vague answers or provide details that do not match how that profession actually works.
05 — Red Flags in the Conversation Itself
They forget details you have already told them — A scammer managing dozens of simultaneous conversations periodically asks questions you have already answered. This is not forgetfulness; it is the signature of someone without a dedicated record of your specific exchanges.
Their messages arrive at unusual times for their claimed location — If someone claims to be in London but sends 'good morning' at 3am London time, their actual location is not where they say it is. Most messaging apps show timestamps in your local timezone — convert them.
The relationship accelerates faster than normal — Declarations of love within days and intense emotional intimacy before meeting in person are markers of manufactured urgency designed to build commitment before the target has time to think critically.
They push for secrecy with your friends and family — Encouraging you to keep the relationship private and framing concern from friends as jealousy are isolation tactics that remove the social checks most people rely on to catch problems.
Any request for money or financial information — A genuine person you have not met in person has no legitimate reason to ask for money, gift cards, cryptocurrency, or bank details. The request itself answers every verification question.
How to Interpret Mixed or Inconclusive Results
One inconclusive check is noise — multiple inconclusive checks are a pattern — A private account alone means little. A private account, reluctance to video call, message timestamps that do not match their claimed location, and an employer you cannot verify independently is a pattern.
What cannot be explained away matters more than what can — The question is not whether an explanation exists, but whether the accumulation of things requiring explanation is plausible for a real person living the life they describe.
Trust your reaction when you run the checks — If you find yourself avoiding the checks because you do not want to know, pay attention to that reaction.
The video call and the money request are the two definitive tests — A person who will video call without significant resistance and who never asks for money has passed the two checks that are hardest to fake.
Identity Verification Checklist
- Upload their profile photo to FaceSift — check for stolen photos
- Run the same photo through Google Images reverse search
- Check the photo for AI-generation signs (ears, teeth, background text)
- Upload to Hive Moderation for an AI detection score
- Search their full name on LinkedIn, Instagram, Facebook, and Google
- Check account creation date and earliest post date on each platform
- Look for tagged photos from other people — a genuine social graph
- Verify their claimed employer independently via your own search
- For military claims: use the DMDC service member verification tool
- For licensed professions: check the relevant regulatory body's public register
- Request a live video call within the first week
- During the call: ask them to do something unscripted and immediate
- Check message timestamps against their claimed timezone
- Note if they discourage you from mentioning them to friends or family
- Any request for money, gift cards, or financial information — stop
Top comments (0)