DEV Community: FaceSift

Military Romance Scams: How Fraudsters Use Stolen Soldier Photos

FaceSift — Thu, 06 Aug 2026 20:43:37 +0000

Published: August 6, 2026 · 11 min read

A uniformed profile photo, a deployment story that conveniently blocks video calls, and a relationship that turns romantic within days — the military romance scam is one of the most consistent fraud patterns tracked by the FTC and Department of Defense, and it works by borrowing the trust people place in service members.

This article covers how these scams are actually built, where the stolen photos and fabricated stories come from, the warning signs that show up early, how to verify who you're really talking to before sending anything, and what to do if you've already sent money.

If someone claiming to be a deployed soldier is asking you for money right now: stop sending money immediately, insist on a live video call, and skip to How to verify before you send anything.

How Military Romance Scams Actually Work

The pitch is almost always the same: a uniformed, decorated soldier stationed overseas falls fast and hard for someone they've never met, then slowly needs money for reasons a real service member would never actually face.

A stolen photo with a rank attached. The scammer builds a profile around a real soldier's photo — usually lifted from a public Facebook, Instagram, or LinkedIn account — paired with an invented rank, unit, and deployment story that has nothing to do with the person actually in the picture.

Fast, intense emotional investment. "I love you" often arrives within days, framed as the loneliness of deployment finally being answered. The speed isn't sloppy writing — it's designed to build attachment before the victim has a reason to slow down and check anything.

A built-in excuse for never video calling. "Secure communications don't allow video" or "the base blocks it for operational security" is the standard line. It sounds plausible to someone unfamiliar with military life, and it conveniently prevents the one thing that would immediately expose a stolen photo.

Money requests dressed up as military bureaucracy. Once trust is established, the requests start: fees to ship a footlocker of gifts or gold through customs, money for a satellite phone, payment to process early leave paperwork, or help releasing a frozen retirement fund. None of these are real military expenses.

A slow burn that can run for months. Unlike a smash-and-grab scam, these often unfold over weeks or months of daily messages, building enough trust that a request for a few hundred dollars in "shipping fees" feels like a small favor rather than a red flag — and each payment makes the next one easier to ask for.

Where the Fake Persona Comes From

Almost nothing about the profile is original — the photo, the biography, and often the entire script are lifted or generated wholesale, which is exactly what makes the persona checkable if you know where to look.

Real soldiers' public photos, used without consent. Active-duty and veteran service members frequently discover their own photos are being used in dozens of unrelated scam profiles simultaneously, with no way to stop the reuse once it's out there.
Fabricated ID cards and deployment orders. When a victim asks for proof, scammers often send an image of a military ID card or deployment order — easily produced with basic photo editing and a template.
A biography copied from a real officer's public profile. Names, ranks, and base assignments are often lifted wholesale from real personnel, so a basic name check can turn up a genuine person who has no idea their identity is being used.
Organized scam operations, not lone actors. Many of these profiles are run out of the same boiler-room operations behind other romance and investment fraud, complete with shared photo libraries and message scripts.
AI-generated faces built to dodge reverse image search. A growing share of profiles now use entirely synthetic, AI-generated faces instead of a stolen photo of a real person, specifically to avoid surfacing a match.

Warning Signs of a Military Romance Scam

Individually, a few of these details might have an innocent explanation. Together, in the same relationship, they're one of the most consistent fraud patterns tracked by the FTC and Department of Defense.

Professes love within days or weeks of first contact. A declaration of love or talk of marriage before you've had a real phone call is disproportionately common in scam scripts.
Always deployed, never available for a live video call. A story that conveniently keeps the person permanently overseas, with a rotating cast of excuses for why a real-time video call never quite works out, is the single strongest tell.
Contact drifts off-platform almost immediately. Scammers push the conversation to personal email or a messaging app within the first few exchanges, since dating platforms actively scan for and remove known scam accounts.
A story built around money that's stuck, not money that's available. A frozen retirement account, an inheritance held up in customs, or savings that can't be accessed until leave papers are processed are recurring plot devices.
Photos that look too polished, or don't match reverse search results. Professional-looking headshots or a face that turns up attached to a completely different name are strong indicators the photo doesn't belong to the person messaging you.

How to Verify Before You Send Anything

The goal is to test the story against details a scammer can't fake — a real live conversation, a real institution, or a real photo match — before any money changes hands.

Reverse image search every photo they've sent. Run their profile photos through a reverse face search rather than a plain image search — a stolen photo often surfaces attached to a completely different name or a real soldier's own social media account.
Insist on a live, unscripted video call. Not a pre-recorded clip, not a call that mysteriously drops the moment you ask a specific question. A refusal that persists after weeks of "almost working out" is a decision, not a technical problem.
Check the story against the Department of Defense. The DoD's Digital Media/CID and most branches' public affairs offices can confirm whether a stated name, rank, and unit correspond to a real deployed service member.
Look for rank, insignia, and terminology mismatches. Uniform insignia that doesn't match the claimed rank, incorrect chain-of-command terminology, or a duty station that doesn't align with the branch described are common script errors.
Treat any request for money, gift cards, or crypto as a hard stop. Real service members do not pay for leave, do not need help releasing their own retirement funds, and do not ship personal belongings through a private citizen's credit card.

What to Do If You've Already Sent Money

Acting quickly gives you the best — though still limited — chance of recovering a payment, and reporting it helps investigators connect your case to the same operation targeting other victims.

Stop all contact and all further payments immediately. Continued conversation is often used to justify one more payment, framed as the very last one needed.
Contact your bank or gift card issuer right away. Banks can occasionally intercept a wire transfer before it settles, and gift card issuers can sometimes freeze an unredeemed balance — but only within a narrow window.
Report to the FTC, IC3, and the DoD. File a report at reportfraud.ftc.gov, with the FBI's Internet Crime Complaint Center at ic3.gov, and with the Department of Defense's Digital Media/CID, which specifically tracks military-impersonation romance scams.
Report the profile to the platform it came from. Flag the account on whichever dating app, social network, or messaging platform it originated on.
Watch for a follow-up "recovery" scam. Victims are frequently targeted a second time by someone posing as a recovery agent or lawyer who claims they can retrieve the lost funds for an upfront fee. There is no legitimate version of this offer.

Full Response Checklist

Reverse image search every photo they've sent, not just a plain image search
Insist on a live, unscripted video call before any relationship gets serious
Verify the claimed identity through DoD Digital Media/CID or unit public affairs
Watch for rank, insignia, and chain-of-command details that don't add up
Treat any request for money, gift cards, or crypto as a hard stop
Never pay "shipping," "customs," "leave," or "release" fees — none are real
Report the profile to the dating app, social network, or platform it came from
If money is already sent, call your bank's fraud line immediately
File a report at reportfraud.ftc.gov and with the FBI's IC3 at ic3.gov
Watch for a follow-up "recovery agent" scam targeting the same loss
Warn friends or family so the same photo and script don't work twice

FaceSift is a reverse face search tool. Stolen military photos often turn up attached to a completely different name elsewhere online. Upload the photo to see where that face actually appears: facesift.com

AI Voice Cloning Scams: How Fraudsters Fake a Family Member's Voice

FaceSift — Wed, 05 Aug 2026 07:40:20 +0000

Published: August 5, 2026 · 11 min read

Modern voice cloning tools need three to ten seconds of audio — a voicemail greeting, a TikTok, a voice note forwarded in a group chat — to produce a clone convincing enough to fake a panicked call from a grandchild, a kidnapping hostage, or a CEO ordering an urgent wire transfer.

This article covers how these scams are actually built, the warning signs that survive even a perfect voice clone, what to do in the moment a suspicious call comes in, how to respond if you've already sent money, and how to make the scam fail before it starts.

If you're on a call right now that feels like this: hang up and call the person back on a saved number, never send gift cards or wire money under pressure, and skip to What to do during the call.

How AI Voice Cloning Scams Actually Work

Voice cloning used to require hours of studio-quality audio. Modern models need three to ten seconds to produce a convincing clone that can say anything the scammer types.

The "grandparent scam," rebuilt with a real voice. A caller claims to be a grandchild in trouble — arrested, in a car accident, stranded abroad — and needs money wired immediately, often through gift cards or crypto to avoid a paper trail. The classic version relied on a shaky connection and a stranger's guess at family names. The AI version plays back an actual cloned voice of the grandchild, pulled from a public social media video, making the panic far harder to shake off.

Fake executive calls for wire transfers. A finance employee gets a call or voicemail that sounds exactly like the CEO or CFO, instructing an urgent, confidential wire transfer — usually timed around a real acquisition, board meeting, or travel day pulled from public company news. Several real corporate losses in the seven-figure range have been traced to this exact pattern.

Kidnapping and hostage hoaxes. Scammers call claiming to be holding a family member hostage, playing a cloned voice crying or begging for help in the background to prevent the target from hanging up and verifying independently. The audio is often looped or short, since a live conversation would expose the trick.

Where the source audio comes from. Public Instagram Reels and TikTok videos, YouTube appearances, voicemail greetings, podcast clips, and even voice notes sent in a group chat that later gets scraped or breached. Almost none of it requires hacking a phone — it's built from audio the person, or someone in their circle, already posted publicly.

Combined with a cloned face. The same generative tools that clone a voice can drive a real-time deepfake video overlay on a call. A small but growing number of scams now pair a cloned voice with a live video deepfake, making a video call with the "family member" or "colleague" just as unreliable as an audio-only one.

Warning Signs During the Call

A cloned voice can nail the tone and cadence of someone you know, but the surrounding pressure tactics and technical artifacts are much harder for a scammer to fake convincingly.

Extreme urgency paired with secrecy. "Don't tell anyone else, I need this right now" is the single most consistent tell across voice cloning scams. Legitimate emergencies rarely require secrecy from the rest of your family or company at the exact moment help is available.
Payment method that can't be reversed. Requests for gift cards, wire transfers, or cryptocurrency — rather than a normal payment app or card — are a hallmark of nearly every version of this scam, because none of those methods can be clawed back once sent.
Refusal or avoidance of a video call. If the caller has an excuse for why they can't switch to video while insisting the call continue, treat that refusal itself as a red flag, even if the voice sounds exactly right.
Slight audio artifacts or unnatural pacing. Some clones have flattened emotional range, uneven pacing on longer sentences, cut-off word endings, or background noise that doesn't shift naturally. Easy to miss under stress — which is exactly why the scam relies on pressuring you not to slow down.
Details that don't add up on a second thought. A location, timeline, or circumstance that shifts when you ask a clarifying question is a stronger signal than the voice itself — voices can be cloned, but a coherent, verifiable story is much harder to fabricate on the fly.

What to Do During the Call

Hang up and call back on a known number. End the call and dial the person directly using a number already saved in your phone — never a number the caller gives you.
Use a family or company safe word. Agree in advance on a word or phrase only real family members or colleagues would know, used any time money is requested urgently by phone.
Ask a question the scammer can't script. A specific, personal detail — not something guessable from a public profile — often breaks the illusion immediately.
Verify through a second channel before sending anything. Text the person on a different platform, or call another family member or coworker who could confirm the situation.
Never act on the call alone under time pressure. Legitimate emergencies involving money almost always allow a few minutes to verify. A caller insisting there is zero time to check is one of the strongest indicators of a scam in progress.

What to Do If You've Already Sent Money

Speed matters more than anything else here — the window to reverse a wire transfer, freeze a gift card, or flag a crypto transaction closes fast, often within hours.

Contact your bank or wire service immediately. Request a recall or reversal — banks can sometimes intercept a wire transfer before it settles, but only within a narrow window.
Report gift card scams to the issuer right away. Apple, Google Play, Amazon, Target, and other issuers have fraud lines that can occasionally freeze an unredeemed card's balance if reported quickly.
Report to the FTC and IC3. File at reportfraud.ftc.gov and, for larger losses, with the FBI's Internet Crime Complaint Center at ic3.gov.
Monitor for follow-up attempts. Scammers who succeed once frequently return claiming the first transfer "didn't go through," or with a new emergency. Flag the account for extra fraud monitoring.
Warn your family or company. This closes the door on a scammer trying the same script on someone else in your circle using the same cloned voice.

Protecting Yourself and Family Going Forward

You can't stop your voice from being cloneable, but you can build habits that make a cloned-voice call fail regardless of how convincing the audio is.

Set up a safe word with family and close colleagues now. Do this before an emergency, not during one — and make sure older relatives, who are frequently targeted, know it too.
Limit how much voice and video content is public. Private social accounts, trimming old public videos with long clean audio, and caution with voice notes in large group chats all shrink the raw material available for cloning.
Establish call-back verification for business wire requests. Never trust a number provided in the same call or email — always call back a previously verified number, regardless of how senior the requester sounds.
Talk to older relatives specifically about this scam. Older adults are disproportionately targeted by grandparent and kidnapping-hoax variants, partly because they're less likely to have heard voice cloning is now a mainstream scam technique.
Treat a matching video call with the same suspicion. Cloned voices are increasingly paired with real-time deepfake video. A reverse face search on a suspicious profile photo used alongside the call is one more way to check who you're actually dealing with.

Full Response Checklist

Hang up and call the person back on a number already saved in your phone
Never send gift cards, wire transfers, or crypto under time pressure
Use a pre-agreed family or company safe word to confirm identity
Refuse any request to keep the call secret from family or coworkers
Ask a personal question that a scammer couldn't script from public info
Verify the story through a second channel before sending anything
Set up call-back verification for any business wire request
Limit public voice and video clips that provide raw cloning material
If money is already sent, call your bank's fraud line immediately
Report gift card scams directly to the issuer for a possible freeze
File a report at reportfraud.ftc.gov and, for large losses, ic3.gov
Warn family or coworkers so the same script doesn't work twice

FaceSift is a reverse face search tool. If a suspicious call is paired with a stolen profile photo or a deepfake video, upload the photo to see where that face actually appears online: facesift.com

# Best Reverse Image Search Apps for Mobile in 2026 — Compared

FaceSift — Tue, 04 Aug 2026 08:06:04 +0000

Published: August 4, 2026 · 9 min read

Most reverse image searches now start on a phone — a screenshot from a dating app, a photo from a marketplace listing, a face in a group chat you don't recognize. But not every tool that works great on desktop translates cleanly to mobile. Some need a dedicated app, some are just a scaled-down website, and some are built mobile-first from day one.

This guide compares the five best ways to run a reverse image or face search directly from your phone — what's a real app, what's browser-only, and which one to reach for depending on what you're trying to find.

Quick Pick by Use Case

Use case	Best option
Identify an object or landmark using your camera	Google Lens
Search visually using Bing or Edge instead of Google	Bing Visual Search
Run a full identity check (photo + name + phone) from an app	Social Catfish
Face search from a mobile browser, nothing to install	PimEyes or FaceSift
Snap a photo and instantly find the same face online	FaceSift
Verify a dating profile photo before meeting up	FaceSift → then Google Lens

Apps Covered

Google Lens — Best all-purpose visual search built into your phone
Bing Visual Search — Best Google Lens alternative with Copilot integration
Social Catfish — Best dedicated app for investigating a specific person
PimEyes — Best web-based face search from a mobile browser
FaceSift — Best mobile-first reverse face search, no app to install

#1 Google Lens

Best all-purpose visual search built into your phone · Free

Best for: Identifying objects, translating text, and finding visually similar images instantly from your camera

Ratings: Overall ★★★★★ | Face match ★★ | Coverage ★★★★★ | Privacy ★★★ | Ease of use ★★★★★

Google Lens is baked directly into the Android camera and the Google app on iOS, so there's rarely a separate install needed. Point your camera at anything — or pick a photo from your library — and it identifies objects, text, landmarks, and products, and surfaces visually similar images from across the web.

Strengths

Built into the Android camera and Google app on iOS — usually no separate download required
Instant on-device recognition of objects, text, landmarks, and products
Free with no usage limits
Crop tool lets you narrow the search to one part of the photo
Largest visual index of any mobile option

Weaknesses

Matches pixel patterns, not identity — rarely links different photos of the same person
No dedicated face search
Queries tied to your Google account, which some users find invasive
Requires an internet connection to process

How to use: On Android, open the Camera app or Google app and tap the Lens icon. On iOS, open the Google app → tap the camera icon in the search bar → upload or snap a photo.

#2 Bing Visual Search

Best Google Lens alternative with Copilot integration · Free

Best for: Visual search on iOS or Android through the Bing or Edge app, especially if you're avoiding a Google account

Ratings: Overall ★★★ | Face match ★ | Coverage ★★★ | Privacy ★★★ | Ease of use ★★★★

Bing's visual search sits inside the Bing and Edge mobile apps and works much like Google Lens — snap or upload a photo and get matched objects, products, and similar images back. Its edge is Copilot integration, which lets you ask follow-up questions about what's in the photo.

Strengths

Built into the Bing and Edge mobile apps, no extra download
Copilot lets you ask conversational follow-up questions about the image
Strong product and shopping recognition
Free with no usage caps

Weaknesses

Smaller visual index than Google
No face-matching capability
Full feature set requires signing into a Microsoft account
Object detection is noticeably less accurate than Lens on cluttered photos

How to use: Open the Bing or Edge app → tap the camera icon in the search bar → upload a photo or take one on the spot.

#3 Social Catfish

Best dedicated app for investigating a specific person · Paid · Face search

Best for: Running a full identity investigation — photo, name, and phone number — from a native app

Ratings: Overall ★★★ | Face match ★★★ | Coverage ★★★ | Privacy ★★★ | Ease of use ★★★★

Social Catfish is a native iOS and Android app built specifically for catfish and identity investigations. Rather than pure image matching, it combines a reverse photo search with name, phone, and email lookups against people-search databases, aiming to give a fuller picture of who's behind a profile.

Strengths

Real native app with a guided, non-technical flow
Combines photo search with name, phone, and email lookup in one place
Useful when you have more than just a photo to go on

Weaknesses

Subscription required to see any meaningful results
Face-matching accuracy is weaker than dedicated face search engines
Persistent upsell prompts throughout the app
Results often padded with generic people-search data unrelated to the photo

How to use: Download Social Catfish from the App Store or Google Play → sign up for a plan → upload a photo, name, or phone number to start a search.

#4 PimEyes

Best web-based face search from a mobile browser · Freemium · Face search

Best for: Getting a second opinion face search from your phone without installing anything

Ratings: Overall ★★★★ | Face match ★★★★★ | Coverage ★★★★ | Privacy ★★★ | Ease of use ★★★

PimEyes doesn't have a native app — it runs entirely through a mobile browser — but its face-matching engine is one of the strongest available, built on a deep index of faces crawled from across the public web.

Strengths

Powerful face-matching engine with a deep index
Works in any mobile browser, nothing to install
No account required to run a first search

Weaknesses

No native app, so the interface is a shrunk-down desktop layout, not built for touch
Most results are locked behind a paid PROtect subscription
Can surface unexpected adult-content matches
Checkout and account flow are clunky on a small screen

How to use: Open pimeyes.com in your phone's browser → upload a photo from your camera roll → review blurred preview matches → subscribe to unlock full results.

#5 FaceSift

Best mobile-first reverse face search, no app to install · Freemium · Face search

Best for: Taking a photo with your phone and finding the same face across the web in under a minute

Ratings: Overall ★★★★★ | Face match ★★★★★ | Coverage ★★★★ | Privacy ★★★★★ | Ease of use ★★★★★

FaceSift is designed mobile-first rather than adapted from a desktop layout. You can snap a photo directly with your camera or pick one from your library, walk through a touch-friendly consent step, and get results sized to read comfortably on a phone screen — no download, no account.

Strengths

Built mobile-first — camera capture and photo picker work natively, not through a clunky file browser
No app download and no account required
Consent flow designed for touch, not a shrunk desktop modal
Results and confidence scores are readable without zooming or scrolling sideways
Pay-per-search ($1) instead of a recurring subscription

Weaknesses

Face search only — not useful for objects, products, or scenes
Unlocking source URLs costs $1 per search
No offline or native app, browser-only by design
Requires a clear human face in the photo

How to use: Open facesift.com in your phone's browser → tap to take a photo or choose one from your library → accept the consent step → wait about a minute for results → unlock source URLs for $1.

Side-by-Side Comparison

App	Face search	Native app	Price	Privacy	Best use case
Google Lens	✗	✓ (built-in)	Free	Moderate	General visual search
Bing Visual Search	✗	✓	Free	Moderate	Google Lens alternative
Social Catfish	✓	✓	Subscription	Moderate	Full identity investigation
PimEyes	✓ Strong	✗ (mobile web)	Freemium	Moderate	Deep face-index search
FaceSift	✓ Purpose-built	✗ (mobile web)	$1/search	High	Mobile face verification

When to Combine Options

A single mobile search rarely settles a question on its own. These combinations work well from a phone:

Verifying a dating profile photo on the go
FaceSift (finds different photos of the same face) → Google Lens (checks for exact copies elsewhere)

Meeting someone from an app for the first time
FaceSift (confirms the face is real and findable) → Social Catfish (cross-checks name and phone number)

Investigating a photo shared in a group chat
Google Lens (context — where else has this image appeared) → FaceSift (identity — who is this person)

Checking a marketplace seller's profile photo before buying
Google Lens (quick copy check) → FaceSift (confirm the face isn't stolen from someone else)

Need to check a face from your phone, right now? FaceSift is built mobile-first — no app to download, no account to create. Open facesift.com in your browser and get results in under a minute.

Marketplace Scams: How to Spot a Fake Buyer or Seller Before You Meet

FaceSift — Sun, 02 Aug 2026 19:23:02 +0000

Published: August 2, 2026 · 11 min read

Facebook Marketplace, Craigslist, and OfferUp work because buyers and sellers extend a small amount of trust to a stranger before a platform can fully verify either side. Scammers exploit exactly that gap — with fake payment screenshots, phantom shipping labels, overpayment refund tricks, and in-person meetups gone wrong.

This article covers how these scams actually run, the red flags in the listing and the chat, how to verify a buyer or seller in a few minutes, and what to do if you've already paid, shipped, or been scammed.

Hard stops: if you're asked to trust a payment screenshot instead of your own account, refund an "overpayment," ship using a label you didn't buy, or pay by gift card, wire, or crypto only — stop. These disqualify the deal regardless of how legitimate everything else looks.

How Marketplace Scams Actually Work

The listing never existed (or never will ship). A too-good price on a popular item — a console, a phone, concert tickets — draws you into a chat that moves off-platform fast. You pay by Zelle, CashApp, or gift card "to hold it," and the seller goes silent the moment the payment clears.

Fake payment confirmation screenshots. A "buyer" sends a screenshot that looks exactly like a Zelle, Venmo, or PayPal confirmation and asks you to ship or hand over the item before you check your actual account balance. The screenshot is fabricated — no money ever moves.

Overpayment refund scams. A buyer "accidentally" sends more than the asking price — often via a fake or stolen payment method — and asks you to refund the difference through a different channel. The original payment later reverses or was never real, and the refund you sent is gone.

Shipping-label and tracking-number scams. For items sold for shipping, a buyer sends a "prepaid shipping label" PDF that looks legitimate but is fake or stolen — the package gets seized or redirected, and you're left having shipped a real item for a payment that never lands.

Fake escrow or "marketplace protection" sites. A buyer insists on using a third-party escrow or protection service to make the deal feel safer — but the site is a lookalike built for the scam, and any funds you send to it disappear immediately.

Meet-up robbery or bait-and-switch. For high-value in-person sales (electronics, jewelry, vehicles), a "buyer" arranges a meetup to rob you outright, or shows up with counterfeit cash, a stolen check, or a device that's been swapped for a broken one after you've already handed over the real item.

Red Flags in the Listing or the First Message

Price is significantly below market value. A listing priced well under what similar items sell for is the single most common lure.
The seller or buyer wants to move off-platform immediately. A message that pushes you to continue over WhatsApp or Telegram within the first exchange is avoiding a platform with built-in reporting and message history.
Urgency to pay before you can inspect the item. Pressure to "send payment now to secure it" before you've seen the item or met is designed to get money moving before you've had a chance to think it through.
Only stock photos, or the same photo used across many listings. A reverse image search on the listing or profile photo often reveals it's a stock image, or reused across dozens of unrelated listings.
New or nearly empty profile with no history. An account created days ago, with no prior sales or mutual friends, carries meaningfully more risk.
Refuses a video call or live photo. A legitimate seller can usually send a quick video or a photo with today's date within minutes.

Red Flags When You're Asked to Pay, Ship, or Meet

A payment "confirmation" you haven't verified in your own account. Never ship or hand over an item based on a screenshot. Log into your own bank or payment app directly and confirm the funds actually landed first.
You're asked to refund an overpayment. If a buyer sends more than agreed and asks for money back through a different method, treat it as a scam by default.
A shipping label you didn't generate yourself. Only ship using a label you purchased yourself through a carrier's official site.
Insistence on a third-party escrow or "protection" link. Legitimate marketplaces handle protection internally.
Payment methods that are hard to reverse. Requests to pay by gift card, wire transfer, cryptocurrency, or Zelle for a stranger's goods are difficult or impossible to claw back once sent.
Pressure to meet somewhere private or off-camera. This raises your physical risk, not just your financial risk.

How to Verify Before You Pay, Ship, or Meet

Confirm funds in your own account, not in a screenshot.
Reverse-search the listing and profile photos to check whether it's a stock photo, stolen, or reused across many other listings.
Meet in a public, well-lit, monitored location — many local police departments offer designated "safe exchange zones" with security cameras.
Buy shipping labels yourself, and use tracked, insured shipping.
Use the platform's built-in payment and messaging when offered.
Trust your instinct on urgency. If a deal only works because you have to decide in the next few minutes, that pressure is itself the red flag.

What to Do If You've Already Paid, Shipped, or Been Scammed

Contact your bank or payment provider immediately.
Report the listing and the account to the platform.
File a police report for in-person theft or robbery.
File a report with the FTC and IC3 — reportfraud.ftc.gov and ic3.gov both take marketplace fraud reports.
Stop shipping or communicating the moment something feels wrong.

Fake marketplace profiles often reuse a stolen photo across dozens of listings. Upload the photo to FaceSift and see where else that face appears online. 60 seconds. No account required.

Originally published on FaceSift.

Online Privacy Audit: What Can Strangers Find About You? (2026)

FaceSift — Sat, 01 Aug 2026 19:39:39 +0000

Originally published on the FaceSift blog.

Most people assume their online presence is roughly under control. They set their Instagram to private, they use a different name on forums, they are "careful" about what they share. Then they actually search for themselves — and find their home address on a data broker site, their face on a fake dating profile, a decade of forum posts linked to their real name, and their daily commute route reconstructed from location check-ins.

This guide walks through a complete online privacy audit you can run in about 15 minutes. No technical skills required. Just a browser and the willingness to see what is actually out there.

What a Motivated Stranger Can Learn About You in 10 Minutes

Using only free, public tools:

Your face and where it appears online
Your home neighbourhood from location tags
Your employer from LinkedIn or bio
Your daily routine from post timestamps
Your phone number from old forum posts
Your relationships from tagged photos
Your email address from data breaches
Whether your passwords have been leaked

Audit Steps

Face Search Audit — ~3 min
Username & Email Exposure — ~2 min
Social Media Leaks — ~3 min
Search Engine Footprint — ~2 min
App & Device Permissions — ~3 min
How to reduce your footprint

01 · Face Search Audit

~3 min · Threat: Fake profiles, impersonation, commercial misuse

Upload your photo to a reverse face search engine to see every public page where your face appears. Most people are surprised — photos they posted years ago on platforms they no longer use, appearances in news articles, backgrounds of other people's photos, or active fake profiles using their face.

How to run this check:

Choose 2–3 photos you commonly use as profile pictures
Upload each one to FaceSift and wait for results
Review matches above 75% similarity — check the source pages
Also run each photo through Google Images to catch exact file copies

Red flags to look for:

Your face appearing under a different name on a dating platform
Your photo on a site you have never visited or given permission to
Commercial use — advertising, product pages, stock photo sites

Run your face audit now: FaceSift scans the public web for your face across different photos — not just exact image copies. Upload your most common profile photo to start. Also check our full guide on finding photo misuse.

02 · Username & Email Exposure

~2 min · Threat: Account enumeration, credential stuffing, targeted phishing

Your username and email address are more revealing than they look. A single username used across multiple platforms creates a trail that links your gaming identity to your professional profile to your forum posts — potentially exposing years of activity you thought was anonymous.

How to run this check:

Go to sherlock-project.com and enter your most-used username
Review every platform where that username is registered
Search your email address on haveibeenpwned.com to check for data breaches
Google your username in quotes — check what content surfaces

Red flags to look for:

Your username appearing on platforms you don't remember registering on
Your email in a data breach — especially one that included passwords
Forum posts or comments from years ago surfacing with personal details

03 · Social Media Leaks

~3 min · Threat: Location tracking, routine exposure, relationship mapping

Social media profiles leak far more than most people realise — not through a single post, but through the accumulation of small details across many posts. A determined stranger can piece together your home neighbourhood, daily routine, workplace, relationship network, and income level from a public profile in minutes.

How to run this check:

View your own profile as a logged-out stranger (open in private browser)
Check tagged photos — others may have tagged your location or workplace
Review your oldest posts and photos — what did you share years ago?
Check what appears when you Google your full name + social platform names

Red flags to look for:

Location check-ins, tagged locations, or backgrounds that reveal your home area
Routine patterns visible in post timestamps (same time every day = predictable schedule)
Phone number, email, or workplace visible in bio or old posts
Photos that show your car, home exterior, or street address

04 · Search Engine Footprint

~2 min · Threat: Data aggregation, background check sites, doxxing

Google your own name — properly. Most people do this casually and stop at the first page. A thorough audit goes deeper and tries different search combinations that a stranger with bad intent would actually use.

How to run this check:

Search: "Your Full Name" — check the first 3 pages
Search: "Your Full Name" + your city
Search: "Your Full Name" + your employer or school
Check the Images tab for any photos you didn't publish yourself
Look for data broker listings (Spokeo, BeenVerified, Whitepages, PeekYou)

Red flags to look for:

Your home address appearing on data broker sites
Phone number visible in search results
Court records, property records, or other public documents surfacing
Photos appearing that you did not post yourself

05 · App & Device Permissions

~3 min · Threat: Location harvesting, microphone/camera access, contact scraping

The data collected by apps on your phone is often more sensitive than anything you post online — continuous location tracking, contacts, microphone access, photo library. Most people grant permissions without reviewing them and never check again.

How to run this check:

Open Settings → Privacy on your phone and review Location permissions
Check which apps have access to Camera, Microphone, and Contacts
Review apps with 'Always On' location access — reduce to 'While Using'
Check which apps can access your photo library and whether 'All Photos' is necessary

Red flags to look for:

Apps with 'Always' location access that don't need it (games, utilities)
Apps with microphone access that serve no audio purpose
Old apps you no longer use but that still hold permissions

How to Reduce Your Footprint

Once you know what is out there, here is how to pull it back. Start with the highest-impact steps.

High impact — do these first

Set social profiles to private. Instagram, Facebook, and TikTok all allow you to restrict who sees your posts and profile. Do this for any platform where you share personal content.
Opt out of data broker sites. Sites like Spokeo, BeenVerified, Whitepages, and Radaris aggregate and sell your personal data. Each has an opt-out form. It is tedious but effective — or use a service like DeleteMe (~$100/year) to automate it.
Remove your phone number from public profiles. Phone numbers are one of the most useful pieces of data for targeted attacks. Remove them from all public-facing profiles unless strictly necessary.
Request Google to remove personal data from search results. Google's 'Results about you' tool (myaccount.google.com) lets you request removal of results showing your address, phone number, or other personal information.

Medium impact — do these next

Audit old posts and photos. Set a few hours aside to review your oldest content. Delete or restrict posts that reveal your address, routine, workplace, or relationships in ways you would not want a stranger to see.
Use different usernames across platforms. A single username linking your professional, gaming, and personal identities creates a data aggregation risk. Use distinct usernames for contexts you want to keep separate.
Enable 2FA on all accounts. Leaked passwords are only dangerous if the attacker can actually log in. Two-factor authentication stops most credential stuffing attacks even after a breach.
Review app permissions every 6 months. Apps accumulate permissions over time. A periodic review revokes access from apps you no longer use and limits ongoing data collection.

Ongoing — run these periodically

Re-run this audit every 6 months. Your digital footprint changes as you post new content, appear in others' photos, or have your data included in new breaches. A periodic audit catches new exposure before it becomes a problem.
Set a Google Alert for your name. Go to google.com/alerts → enter your full name in quotes → set to 'As it happens'. You will be notified any time your name appears in newly indexed content.
Monitor for new data breaches. Have I Been Pwned (haveibeenpwned.com) offers free breach monitoring — enter your email address and you will receive an alert any time it appears in a newly disclosed breach.

Your Privacy Audit Checklist

01  Run reverse face search on your 2–3 main profile photos
02  Check your photos on Google Images
03  Run your username through Sherlock
04  Check your email on Have I Been Pwned
05  View your social profiles logged out
06  Google your full name + city + employer
07  Check data broker sites for your address
08  Review app location permissions
09  Set a Google Alert for your name
10  Enable 2FA on critical accounts

Start with your face audit. The fastest way to see where your face appears online. Upload a photo at facesift.com — results in under a minute.

# Job Offer & Task Scams: How to Spot a Fake Recruiter Before You Pay

FaceSift — Sat, 01 Aug 2026 19:06:38 +0000

Published: August 1, 2026 · 11 min read

Job scams have moved off obviously sketchy classifieds sites and onto LinkedIn, WhatsApp, and Telegram — platforms people already trust with their real job search. The pitch varies — a remote role, a "task" that pays per completion, an app-testing gig — but the goal is almost always the same: get money or personal data from you before any real employer enters the picture.

This article covers how these scams actually run, the red flags in the offer itself and in onboarding, how to verify a recruiter or company in a few minutes, and what to do if you've already paid or shared information.

Hard stops: if you're asked to pay for training or equipment, deposit a check and send part of it elsewhere, or receive and reship packages — stop. These disqualify the offer regardless of how legitimate everything else looks.

How Job & Task Scams Actually Work

Task scams (app-testing / product-review jobs). You're recruited to "optimise" listings or leave reviews for an app or online store, earning a small commission per task. Early tasks pay out instantly to build trust. Eventually a task requires you to deposit your own money to "unlock" a higher commission tier — and the balance, along with your deposit, becomes permanently unwithdrawable.

Fake recruiter outreach. A message arrives out of nowhere — often on LinkedIn, then quickly moved to WhatsApp or Telegram — offering a well-paid remote role with minimal qualifications required. The recruiter's profile photo, company name, and even a fake careers page are often real details stolen or spoofed to look legitimate.

Overpayment / check cashing scams. You're "hired", sent a check for equipment or supplies that's larger than needed, and told to deposit it and wire back the difference. The check later bounces — days after you've already wired real money from your own account.

Reshipping and "money mule" jobs. A "logistics coordinator" or "quality control" role asks you to receive packages at your home address and reship them elsewhere, or to move money through your personal bank account. Both are typically laundering stolen goods or fraud proceeds — and you can be held legally liable even if you didn't know.

Pay-to-start onboarding. After a fast, informal "interview" — sometimes text-only — you're told the role requires you to purchase your own equipment, software licences, or a "training kit" through a specific link, with a promise of reimbursement in your first paycheck that never arrives.

Red Flags in the Job Offer Itself

Pay that's high relative to the effort described. A vague role description paired with an unusually high hourly rate for minimal experience is the single most common tell.
Contact moves off the hiring platform immediately. A recruiter who messages you on LinkedIn and asks to continue on WhatsApp or Telegram within the first message is avoiding a platform with reporting tools and a paper trail.
You're hired with no real interview. A same-day hire based on a short chat, with no call and no discussion of your actual experience, is a scripted process designed to move fast before you think it through.
Urgency to accept or start immediately. Pressure to respond within hours is designed to short-circuit the research you'd otherwise do.
The job description is vague or generic. Postings that describe pay and flexibility in detail but say almost nothing concrete about daily responsibilities are frequently templated across dozens of fake listings.

Red Flags During the Interview or Onboarding

Requests for sensitive data before an official offer letter. A legitimate employer collects your SSN, bank details, or ID only after a formal, signed offer — not informally in chat.
You're told to buy your own equipment through a specific link. Real employers provide equipment directly or reimburse through a normal expense process — they don't require one specific vendor link with promised reimbursement "in your first check".
You're asked to deposit a check and send part of it elsewhere. No legitimate onboarding ever requires this. It's check fraud, and you're liable once the check bounces.
Communication comes from a personal email domain. An "HR" contact emailing from Gmail, or a domain that only loosely resembles the real company's, is one of the easiest scams to catch — compare it character-by-character against the company's actual website.
The recruiter's photo doesn't match who they claim to be. A reverse face search on the profile photo can reveal if it belongs to someone else entirely, or appears across multiple unrelated "recruiter" profiles.

How to Verify Before You Pay or Share Anything

Go to the company's official careers page directly. Type the URL yourself and check whether the role is actually listed there.
Search the recruiter's name and company together. A search for "[recruiter name] scam" or "[company name] hiring scam" surfaces reports from prior targets remarkably often.
Call the company through a number you find independently. Not one given to you in the offer — this single step defeats the majority of fake-recruiter scripts.
Never pay to get a job. Legitimate employment never requires payment for training, equipment, or "processing fees" before you've received a paycheck.
Don't deposit checks or move money on someone else's instruction. If onboarding involves depositing a check and forwarding money, or reshipping packages, stop immediately.

What to Do If You've Already Paid or Shared Information

Contact your bank or payment provider immediately. Some transfers can still be reversed or flagged within a narrow window, and your bank needs to know a fraudulent check was deposited to your account.
Change passwords and freeze your credit. If you shared your SSN, ID, or bank details, place a fraud alert or credit freeze with the major credit bureaus.
Report it to the platform where contact started. This gets the listing taken down and can prevent the same script from reaching other people.
File a report with the FTC and IC3. Reportfraud.ftc.gov and the FBI's Internet Crime Complaint Center (ic3.gov) both take job scam reports.
Stop any reshipping or fund transfers immediately. Keep records of everything — dates, tracking numbers, instructions received — in case you need to demonstrate you were an unknowing participant.

Fake recruiter profiles often reuse a stolen headshot across dozens of listings. Upload the photo to FaceSift and see where else that face appears online. 60 seconds. No account required. Check a Photo →

# Is Someone Using My Photos Without Permission? How to Find Out

FaceSift — Thu, 30 Jul 2026 07:40:23 +0000

Published: June 2, 2026 · 9 min read

Your photos can end up in places you never intended — a fake dating profile using your face to scam strangers, a stock photo site selling your image for profit, a news article that cropped you from a group shot, or a scammer running a romance fraud operation with your identity. Most people never find out. This guide shows you how to check, what to do when you find something, and how to make it harder to happen again.

How Photos Get Stolen and Reused

Most photo theft is not personal — it is opportunistic. Scammers, spammers, and fraudsters scrape publicly visible profiles looking for attractive, credible-looking photos that will serve their purpose. Your face does not need to be famous to be useful to someone running a fake identity.

Romance scam profiles
This is the most common misuse. Your photos are used to build a fake persona on a dating app or social network. The person behind the profile uses your face to attract victims, build emotional connections, and eventually extract money. You will not know it is happening unless someone tells you or you find it yourself.

Fake social media accounts
Your photos are used to create an account impersonating you — sometimes to damage your reputation, sometimes to approach your friends and family, sometimes simply to create a believable fake persona for some other fraud. These accounts can exist for months before anyone notices.

Unauthorised commercial use
Photos scraped from public profiles have appeared on stock photo sites, in advertisements, on product packaging, and in news articles — all without the subject's consent or payment. In many jurisdictions this is illegal regardless of whether the original photo was publicly posted.

Data broker and background check sites
Sites like BeenVerified, Spokeo, and dozens of others aggregate public data including photos and sell access to it. Your face may appear alongside your name, address, employer, and relatives on sites you have never visited and cannot directly control.

AI training datasets
Publicly posted photos have been scraped en masse for use in AI training datasets — without consent. Several major lawsuits are ongoing. If your photos were public at any point, there is a real possibility they are in one or more AI datasets.

How to Search for Your Own Face Online

Use multiple tools — each covers different ground. A thorough audit runs all three.

1. Reverse face search — finds your face across different photos (most important)

Upload a clear photo of yourself to FaceSift and it scans the public web for other pages where your face appears — even in completely different photos that share no pixels with the one you uploaded. This catches fake profiles, news appearances, commercial uses, and any other context where your face was indexed.

Run this for each of your commonly used profile photos — different photos may surface different results. Takes about 60 seconds per search.

2. Google Images reverse search — finds exact copies

Go to images.google.com, click the camera icon, and upload your photo. Google will find pages that contain an identical or near-identical copy of that specific image file. This catches direct reposts — someone who saved your exact photo and reused it. It will not find photos of you taken from a different angle or at a different time. Run this for each individual photo you want to track.

3. TinEye — traces where a photo was first published

tineye.com is specialised for tracking image copies and their origin. Upload a photo and it returns all indexed pages where that image appears, sortable by oldest first. If one of your photos has been copied and spread across multiple sites, TinEye often shows the full chain. Particularly useful for commercial misuse where your photo was published on a website rather than a social platform.

4. Name + image search on Google

Search your full name on Google and check the Images tab. Browse through results to verify each appearance is legitimate. Try variations — first name only, name + city, name + job title. Also search your name in combination with keywords like "profile" or "dating" if you are concerned about impersonation on dating platforms specifically.

What You Might Find — and What It Means

Your photo on a dating profile with a different name

This is active identity theft. Your face is being used to deceive people on a dating platform — potentially to run a romance scam. This warrants immediate action: reporting to the platform, notifying potential victims if possible, and documenting everything.

Your photo on news sites, blogs, or forums

May or may not require action depending on context. A photo taken in a public space and used in a news article about an event you attended may be legal in many jurisdictions. A photo taken from your private profile and used without credit or consent is a different matter — especially if it implies endorsement of a product or position you do not hold.

Your photo used commercially

If your photo is being used in advertising, on product packaging, or on a commercial website without your consent, you may have a legal claim regardless of whether the original photo was public. Right of publicity laws in many countries protect against commercial use of your likeness without permission. Document everything and consider legal advice.

Your photo on data broker sites

Sites like Spokeo, BeenVerified, or PeekYou aggregate public data. Finding your photo there is unsettling but common. Most of these sites have opt-out processes — time-consuming but effective. Some privacy-focused services like DeleteMe automate removal requests across dozens of these sites.

Legitimate appearances you forgot about

Many results will simply be your own legitimate social media profiles, articles you were quoted in, events you attended, or professional pages. These are not a problem — but reviewing them gives you a clear picture of your actual digital footprint, which is useful in itself.

What to Do When You Find Misuse

Document before acting

Screenshot everything — the page, the URL, the date, the context. Before any takedown request is filed, you need a record of what existed and where. Platforms respond to reports by removing content, which means the evidence disappears. Save it first.

Report to the platform

Every major platform has a mechanism for reporting unauthorised use of your likeness or impersonation:

Dating apps (Tinder, Bumble, Hinge): Report the profile as "Using someone else's photos" or "Impersonation" — most apps have a dedicated flow
Instagram / Facebook: Report → It's pretending to be me → Me
LinkedIn: Report profile → Fake profile → Using my photos
X (Twitter): Report → They're pretending to be someone else → Me
Google (image in search results): Request removal via google.com/intl/en/about/products → Legal → Removals

File a DMCA takedown for copyright violation

In most countries, you own the copyright to photos you took of yourself (selfies, self-portraits). If someone is republishing your copyrighted photo on a website, you can file a DMCA takedown notice directly with the hosting provider. The host is legally required to remove the content or lose safe harbour protection. Google also accepts DMCA requests to remove URLs from search results.

Alert potential victims if a fake profile is active

If your face is being used in an active romance scam, real people are being deceived right now. If you can identify who the scammer is targeting — for example through mutual connections on a platform — consider warning them directly. Scam-reporting communities like SCARS (scamsurvivors.com) can also help spread awareness.

For commercial use: consider legal action

Unauthorised commercial use of your likeness is actionable in most jurisdictions. If a company is using your photo in advertising or on a product without your consent, the potential damages can be significant. Document the use thoroughly and consult an intellectual property or right-of-publicity lawyer — many offer free initial consultations.

How to Prevent It Going Forward

You cannot make your photos completely theft-proof if you participate in any public-facing online activity. But these steps significantly reduce your exposure:

Set social media profiles to private. The most effective single step. Scammers target publicly visible profiles. If your photos require a follow or connection request to view, they are inaccessible to scrapers.
Audit your existing public photos. Go through your profiles and remove or restrict photos you would not want appearing on a fake profile. Old photos are often the source — people forget what they posted years ago.
Watermark photos used for professional purposes. If you publish photos publicly for professional reasons — a portfolio, a blog, a business page — adding a subtle watermark with your name or domain makes misuse attributable and slightly harder to present as someone else.
Use different profile photos across platforms. If you use the same photo everywhere, a single theft covers every platform. Different photos for different contexts limits the blast radius and makes it easier to track the source of a leak.
Run a face search audit every few months. A one-time check is a snapshot. Periodic searches catch new misuse before it causes lasting harm. Set a recurring reminder to re-run your own face search every 3–6 months.
Reverse search before posting new photos. Before posting a new profile photo, quickly check it has no unexpected prior appearances — especially if you bought it from a photographer or stock site and do not exclusively own it.

Search for your own face right now. Upload your photo at facesift.com and find where your face appears across the public web. No account required. Takes 60 seconds.

# How to Verify Someone's Identity Before You Trust Them Online (2026)

FaceSift — Mon, 27 Jul 2026 07:50:49 +0000

Published: June 14, 2026
Read time: ~11 min
Tags: Safety, OSINT, Guide
Slug: how-to-verify-identity-online

Meeting people online — for dating, business, or friendship — is now completely normal. So is the fact that not everyone online is who they say they are. The problem is not that verification is hard. It is that most people do not do it until something has already gone wrong.

This guide covers five categories of verification — photo checks, social presence, video calls, professional claims, and conversation signals — in the order you should work through them. Do these early, before the relationship has a dynamic that makes scrutiny uncomfortable.

Do These Five Checks Before Any Significant Trust Is Extended

Reverse face search their profile photo
Check if the photo shows signs of AI generation
Search their name across LinkedIn, Instagram, and Google
Check the account creation date on every platform
Request a live, unscripted video call within the first week
Verify their employer independently — not through contact info they provide
Note whether message timestamps match their claimed location
Any request for money ends the verification — it answers every question

01 — Start With the Photo — Reverse Face Search

The profile photo is the first and most important thing to verify. A fake identity almost always uses a stolen photo — taken from a real person's Instagram, LinkedIn, military service page, or modelling portfolio. Running the photo through a face search engine either confirms the identity or surfaces the original source within seconds.

Run the photo through FaceSift — Upload their profile photo to FaceSift (facesift.com) to find where that face appears across the public web. A genuine person's face will typically appear on their own social media under the same name. A stolen photo will surface on profiles belonging to someone with a completely different name, often in a different country.

Run the same photo through Google Images — Drag the photo to images.google.com or right-click → 'Search image'. If the same photo appears on multiple profiles under different names, or on a stock photo site, the image is stolen.

Check for signs the photo is AI-generated — If reverse search finds nothing, the photo may be AI-generated. Look for: blurred or asymmetrical ears, garbled background text, teeth that blur together, unnaturally smooth skin at full zoom. Upload to Hive Moderation (hivemoderation.com) for an automated score.

Check multiple photos, not just one — Inconsistency between photos — different lighting styles, image quality, or backgrounds that never share the same environment — suggests multiple unrelated source images.

02 — Cross-Reference Their Social Presence

A real person accumulates a social media presence that is organic, inconsistent, and sometimes embarrassing. A fake identity is built for a purpose and shows it: too polished, too consistent, too recent, or too sparse.

Search their name across multiple platforms — Search on LinkedIn, Instagram, Facebook, Twitter/X, and Google. A real person will typically have a LinkedIn consistent with their stated career, a social media presence predating your contact, and some footprint beyond the platform where you met.

Check account creation date and history — LinkedIn shows creation month and year. Twitter/X shows join date. For Instagram, the date of the earliest post is visible by scrolling down. A profile created in the months before you met them is a significant red flag.

Look for a genuine social graph — Real people appear in other people's photos, are tagged by friends, and have followers who interact in ways suggesting actual relationships. A profile with no tagged photos and no comments from people who appear to know them personally has no genuine social graph.

Check whether their LinkedIn matches their claimed backstory — Vague job descriptions, no listed employer, or an employer that does not appear to exist are all worth investigating.

Search their username across platforms — Use Sherlock or search their username in quotes on Google. Scammers frequently reuse usernames across targets or use freshly created handles with no history.

03 — The Video Call Test

A live, unscripted video call is the single most effective verification tool available — and the one fake identities most reliably avoid.

Request a video call early — before emotional investment grows — Ask within the first week of contact. Frame it positively: 'I'd love to actually see you — are you free for a quick call this week?'

Notice the excuses, not just the outcome — A legitimate person will agree to a video call within a reasonable timeframe. A scammer will produce an escalating series of reasons — broken camera, poor internet, work restrictions — that never resolve. The pattern of avoidance is more telling than any single excuse.

During the call: ask them to do something spontaneous — Ask them to wave with a specific hand, hold up a particular number of fingers, or write your name on paper and hold it up. A live person can do this instantly. A pre-recorded video cannot.

Watch for signs of a deepfake video call — Signs: face boundary flicker at hairline or ears during movement; lighting that does not respond naturally to head rotation; blinking that is too infrequent; lip sync that degrades during fast speech.

Confirm details during the call — Their environment should be consistent with their claimed life. Major inconsistencies — wrong apparent nationality, accent inconsistent with claimed background — are worth questioning.

04 — Verify Professional and Personal Claims

Romance scammers typically claim prestigious professions — military officer, doctor, engineer, UN worker, oil rig supervisor — that justify being abroad and unable to meet.

Verify their employer independently — Do not use contact information they provide. Find the employer's official website or LinkedIn page through your own search and confirm whether the person is listed.

Check military claims — US military personnel serving abroad are not allowed to ask civilians to send money for any reason. They have access to free communication. The Defense Manpower Data Center (dmdc.osd.mil) offers a service member verification tool.

Look up professional credentials — Doctors are licensed through state medical boards. Lawyers through their state bar. Engineers through professional registration bodies. A claimed credential in a licensed profession can be verified in minutes.

Ask specific, verifiable questions about their work — Someone who genuinely works in a field will answer detailed questions about it without hesitation. Someone working from a script will give vague answers or provide details that do not match how that profession actually works.

05 — Red Flags in the Conversation Itself

They forget details you have already told them — A scammer managing dozens of simultaneous conversations periodically asks questions you have already answered. This is not forgetfulness; it is the signature of someone without a dedicated record of your specific exchanges.

Their messages arrive at unusual times for their claimed location — If someone claims to be in London but sends 'good morning' at 3am London time, their actual location is not where they say it is. Most messaging apps show timestamps in your local timezone — convert them.

The relationship accelerates faster than normal — Declarations of love within days and intense emotional intimacy before meeting in person are markers of manufactured urgency designed to build commitment before the target has time to think critically.

They push for secrecy with your friends and family — Encouraging you to keep the relationship private and framing concern from friends as jealousy are isolation tactics that remove the social checks most people rely on to catch problems.

Any request for money or financial information — A genuine person you have not met in person has no legitimate reason to ask for money, gift cards, cryptocurrency, or bank details. The request itself answers every verification question.

How to Interpret Mixed or Inconclusive Results

One inconclusive check is noise — multiple inconclusive checks are a pattern — A private account alone means little. A private account, reluctance to video call, message timestamps that do not match their claimed location, and an employer you cannot verify independently is a pattern.

What cannot be explained away matters more than what can — The question is not whether an explanation exists, but whether the accumulation of things requiring explanation is plausible for a real person living the life they describe.

Trust your reaction when you run the checks — If you find yourself avoiding the checks because you do not want to know, pay attention to that reaction.

The video call and the money request are the two definitive tests — A person who will video call without significant resistance and who never asks for money has passed the two checks that are hardest to fake.

Identity Verification Checklist

Upload their profile photo to FaceSift — check for stolen photos
Run the same photo through Google Images reverse search
Check the photo for AI-generation signs (ears, teeth, background text)
Upload to Hive Moderation for an AI detection score
Search their full name on LinkedIn, Instagram, Facebook, and Google
Check account creation date and earliest post date on each platform
Look for tagged photos from other people — a genuine social graph
Verify their claimed employer independently via your own search
For military claims: use the DMDC service member verification tool
For licensed professions: check the relevant regulatory body's public register
Request a live video call within the first week
During the call: ask them to do something unscripted and immediate
Check message timestamps against their claimed timezone
Note if they discourage you from mentioning them to friends or family
Any request for money, gift cards, or financial information — stop

Related Guides

How to Detect Fake Profiles on LinkedIn, Instagram & X (2026)

FaceSift — Sun, 14 Jun 2026 07:36:06 +0000

Published: May 30, 2026 · 11 min read

Fake profiles are not a minor nuisance — they are the infrastructure of most online fraud. Romance scams, recruitment fraud, impersonation attacks, and coordinated influence operations all depend on manufactured identities that appear credible enough to gain trust. Understanding how fake accounts are built — and what distinguishes them from real ones — is the most reliable defence.

This guide covers the red flags specific to each major platform, the tools you can use to verify any account in minutes, and what to do once you have confirmed a profile is fake.

Why Fake Profiles Exist

Fake accounts are created for specific purposes, and the platform dictates the method. Understanding the goal of a fake profile is useful because it tells you what to look for — each type leaves different traces.

Purpose	Common platform	What the attacker wants
Romance / emotional manipulation	Dating apps, Facebook, Instagram	Money, personal information, emotional control
Recruitment scam	LinkedIn	CV data, interview fees, fake job offers
Corporate espionage	LinkedIn	Internal information, employee contacts, org charts
Influencer fraud	Instagram, TikTok	Paid promotions for fake products
Crypto / investment scam	X, Telegram	Investment deposits that disappear
Impersonation	Any platform	Damage to a real person's reputation
Coordinated influence operation	X, Facebook	Amplify narratives, manufacture social proof
Marketplace fraud	Facebook, Craigslist	Payment for goods never delivered

Platform-Specific Red Flags

Primary use: Professional credibility fraud, recruitment scams, corporate espionage

Profile photo is a stock-photo-quality headshot with no casual or candid photos
Career history lists impressive companies but no mutual connections despite hundreds of claimed connections
Job titles are vague or aspirational — "Strategy & Innovation Leader", "Global Business Development"
The profile was created recently but claims 15+ years of experience
Endorsements are all from accounts that also look new or generic
No recommendations, or recommendations that read like templates
Education lists prestigious universities but no alumni connections
Activity consists only of sharing content, never original posts or genuine engagement

LinkedIn fake accounts often target recruiters and hiring managers, or are used to approach employees at specific companies for information gathering. The profile is designed to appear just credible enough to accept a connection request.

Instagram

Primary use: Romance scams, influencer fraud, product promotion scams

All photos are highly polished — no candid shots, no tagged photos from others
High follower count but very low engagement (likes, comments) relative to followers
Comments are generic — "Great post! 🔥", "Love this!" — rather than specific
Account was recently created or recently renamed (check the username history)
Bio links to a suspicious or newly registered website
Stories are rarely posted or seem recycled
Following-to-follower ratio is unusual (following 5,000, followed by 312)
Photos have inconsistent quality — some clearly professional, others oddly low-res

On Instagram, fake accounts frequently impersonate real influencers to sell counterfeit products, or operate as romance bait accounts using stolen photos of attractive people.

X (Twitter)

Primary use: Influence operations, impersonation, crypto scams

Account handle is a real person's name with added numbers or underscores
Profile photo and banner match a real public figure or celebrity exactly
Joined date is recent but the account has thousands of posts — indicating bulk activity
All posts are replies to high-profile accounts, designed to appear in those threads
Posts consistently promote a single topic, link, or product
Followers are accounts with no profile photos, no posts, or names that look auto-generated
The blue checkmark is from a self-verified paid subscription, not the legacy verified program
Bio includes unsolicited financial advice or DM solicitations

X fake accounts are heavily used in coordinated influence operations and crypto promotion scams. The goal is often to appear in the replies of influential accounts to build credibility by association.

Facebook

Primary use: Romance scams, marketplace fraud, political manipulation

Account was created recently but has a full-looking profile — photos uploaded in one burst
Photos are few, professionally taken, and suspiciously consistent in quality
No tagged photos from friends or family going back years
Friends list is small, and those friends also look like new or generic accounts
Personal timeline has no posts before a certain date, or posts from years ago look backdated
The About section is complete but vague — city listed, but no check-ins or local connections
Marketplace listings have no purchase history or reviews

Facebook fake profiles are most commonly used for romance scams and Facebook Marketplace fraud, where the fake identity builds just enough trust before a transaction goes wrong.

Tools to Verify Any Profile

Red flags raise suspicion — these tools confirm or rule it out. Most take under five minutes.

Reverse Face Search (Most effective)

Upload their profile photo to find where else that face appears online. If the photo is stolen, the real person will appear under a different name. This is the single most efficient verification step.

How: Save their profile photo → upload to FaceSift → review matches by similarity score
Strength: Catches stolen photos even when the file itself is different
Limitation: Only works for faces; cannot verify non-photo identity claims

Google Reverse Image Search

Finds exact copies of an image file across the web. Less powerful than face search (won't find different photos of the same person) but fast and free.

How: Go to images.google.com → click the camera icon → upload or paste the image URL
Strength: Finds exact photo copies quickly
Limitation: Misses photos of the same person if the file is different

Username Lookup (Sherlock / Maigret)

Checks whether a username is registered across 300+ platforms. Reveals the full extent of someone's online presence — or its suspicious absence.

How: Run Sherlock via command line: sherlock <username>. Or use the web version at sherlock-project.com
Strength: Maps a person's full online footprint in seconds
Limitation: Requires knowing their username; won't help with anonymised accounts

Wayback Machine

Archives of web pages going back years. Check whether a profile or website existed before it claims to, or find deleted content.

How: Go to web.archive.org → paste the profile URL → browse snapshots
Strength: Catches recently created profiles falsely appearing old
Limitation: Social media platforms often block archiving; coverage is inconsistent

Account Creation Date Check

Every major platform shows when an account was created.

How: LinkedIn: view page source and search for 'createdAt'. X: check the Join Date in the profile. Facebook: About → Intro → Joined
Strength: Zero cost, often immediately revealing
Limitation: Old accounts can be purchased or repurposed — age alone isn't proof

What to Do After Detecting a Fake Profile

Do not engage further

If you suspected a fake profile while in a conversation — especially on a dating platform or LinkedIn — stop responding. Continued engagement gives the operator information about your level of suspicion, which they will use to adjust their approach. Silence is better than confrontation.

Report to the platform

Every platform has a reporting flow for fake accounts. Use it — platforms take volume seriously:

LinkedIn: Three-dot menu on profile → Report / Block → Fake profile
Instagram: Three-dot menu → Report → It's a scam / spam / fake account
X: Three-dot menu on profile → Report → They're pretending to be someone else
Facebook: Three-dot menu → Find support or report → Fake account

Notify the real person if applicable

If your reverse face search revealed whose photos are being stolen, consider informing them. Many people are unaware their photos are being used fraudulently across multiple platforms. They can file DMCA takedown requests and alert their own followers.

If money or data was involved

Contact your bank immediately if any payment was made. File a report with the relevant authority — FBI IC3 (ic3.gov) in the US, Action Fraud in the UK, or your national cybercrime unit. For recruitment scams involving submitted CVs, monitor your accounts for identity fraud in the months following.

For corporate security teams

If a fake account is impersonating an employee or targeting your organisation on LinkedIn, treat it as a social engineering attempt. Alert the impersonated employee, report the account to LinkedIn's Trust & Safety team directly (faster than the standard flow), and brief other employees to be alert for similar connection requests. Document everything in case the incident escalates.

Quick Reference: Verification Checklist

Check the account creation date — recent creation + claimed long history = red flag
Run their profile photo through a reverse face search
Google their name + job title + city — real professionals leave a footprint
Run their username through Sherlock to see where else it appears
Check engagement — fake follower counts don't produce real comments
Ask for a spontaneous live video call if it is a personal connection
Trust your instincts — if something feels constructed, it usually is

Verify a profile photo in 60 seconds. Upload their photo at facesift.com and find where that face appears across the public web. No account required.

How to Catch a Catfish: 7 Ways to Spot a Fake Profile (2026)

FaceSift — Thu, 11 Jun 2026 20:10:56 +0000

Published: May 21, 2026 · 9 min read

A catfish is someone who creates a fake online identity — usually using stolen photos — to deceive others into emotional or financial relationships. The FBI estimates romance scams cost Americans over $1 billion every year, and the number keeps rising. Whether you met someone on Tinder, Instagram, or a gaming platform, this guide gives you concrete steps to verify who you are really talking to.

What Is Catfishing?

Catfishing is the act of creating a fictional online persona to lure someone into a relationship. The term comes from the 2010 documentary Catfish and has since entered mainstream vocabulary.

Catfishers typically steal photos from real people — models, soldiers, doctors, or ordinary people with public social media accounts — and use them to build a believable profile. Their motivations range from loneliness and entertainment to targeted financial fraud and blackmail.

Romance scams — the most financially damaging form of catfishing — often follow a predictable pattern: rapid emotional bonding, an excuse to never meet in person (overseas job, military deployment, illness), and eventually a request for money.

Warning Signs of a Fake Profile

Before running any verification tool, these behavioral red flags are often enough to raise suspicion:

Too good to be true. The profile photo is model-level attractive, the job is impressive (surgeon, military officer, engineer abroad), and they show intense interest in you almost immediately.
Refuses video calls. They always have a reason the camera doesn't work — bad connection, broken phone, camera shy. This is the single biggest red flag.
Very few photos. A real person accumulates years of tagged photos, stories, and posts. A catfish account often has 3–10 photos that all look professionally taken or suspiciously similar in style.
Moves fast emotionally. Declarations of love within days or weeks. Pushing to communicate outside the dating app immediately (WhatsApp, Telegram) to avoid platform moderation.
Inconsistent details. Small contradictions in their story — ages, locations, timelines — that don't quite add up when you compare messages over time.
Eventually asks for money. A sudden crisis: medical emergency, stuck abroad, business deal, or even a plane ticket to finally come meet you.

7 Ways to Catch a Catfish

1. Run a Reverse Face Search

This is the most powerful method available. A reverse face search takes the profile photo and scans the public internet for other pages where that same face appears. If the photo is stolen, you will likely find the real person it belongs to — often with a completely different name, country, and profession.

How to do it: Save the profile photo, then go to FaceSift, upload the photo, and review the matches. If the same face appears under a different name or on a stock photo site, you have your answer.

2. Use Google Reverse Image Search

Google's reverse image search finds exact copies of a photo across the web. It won't find different photos of the same person (that's what face search is for), but it will catch catfishers who lazily reuse the exact same image file. Go to images.google.com, click the camera icon, and upload the photo. If it shows up on a modeling portfolio or someone else's Instagram, the profile is fake.

3. Request a Live Video Call

Ask for a spontaneous video call — not pre-scheduled. Real people can jump on a quick FaceTime; catfishers will always have an excuse. If they do agree to video but only send pre-recorded clips, or the video quality is suspiciously low, treat it as suspicious. Ask them to wave, hold up a specific number of fingers, or write your name on a piece of paper while on camera.

4. Search Their Name + Photo Together

Google their name alongside keywords like their claimed job, city, or university. Real professionals leave a digital footprint — LinkedIn profiles, conference mentions, company websites. A surgeon with no LinkedIn, no publications, and no colleagues who can verify them is a major red flag. Combine this with a face search to see if the face matches the name.

5. Check the Account's History

On Facebook and Instagram, you can see when an account was created and review older posts. A profile created recently with backdated activity (lots of posts in a short burst) is suspicious. Look at who comments on their posts — are the commenters also new accounts, or do they have real histories? Catfish networks sometimes inflate each other's profiles.

6. Look at Photo Metadata (EXIF Data)

Photos taken on a phone embed location, date, and device information in their EXIF metadata. If someone sends you a photo claiming to be from New York but the EXIF location points to West Africa, something is wrong. Tools like Jeffrey's Exif Viewer or exifdata.com let you inspect this data for free. Note: most social media platforms strip EXIF on upload, so this works better on photos sent directly.

7. Use a Phone Number Lookup

If they have given you a phone number, run it through a reverse phone lookup service such as Truecaller or BeenVerified. Catfishers often use disposable VoIP numbers (Google Voice, TextNow) that have no real identity attached. A number registered to a telecom provider in a country that doesn't match their claimed location is another red flag.

What to Do When You Find a Catfish

Do not confront them directly

Confronting a catfish rarely leads anywhere useful. They will deny it, disappear, or create a new account. More importantly, if money has already changed hands, confrontation can prompt them to block you before you have documented evidence.

Document everything first

Screenshot all conversations, the profile, any photos they sent, and any payment requests. These records are essential if you report to authorities or your bank.

Report the account

Use the platform's reporting tools to flag the profile as fake. Most dating apps and social networks take these reports seriously and will investigate. Reporting also protects other potential victims.

If money was involved, act fast

Contact your bank or payment provider immediately. Wire transfers and crypto are the hardest to recover, but banks can sometimes reverse recent card transactions. File a report with the FBI's Internet Crime Complaint Center (ic3.gov) or your country's cybercrime authority.

Tell the real person whose photos were stolen

If your face search reveals the real identity of the person whose photos are being used, consider notifying them. They may not know their photos are being misused, and they can take further action such as filing DMCA takedown requests.

How to Protect Yourself Going Forward

Run a face search before investing emotionally. Do it early — before you have weeks of conversation built up — so the result is purely factual rather than emotionally loaded.
Never send money to someone you have not met in person. This is the single rule that prevents the most harm. No exception is legitimate.
Slow down on emotional escalation. Catfishers push for fast intimacy because it clouds judgment. If the pace feels unusually intense, that is intentional.
Lock down your own photos. Set social media profiles to private so your photos cannot be easily stolen and used to catfish others.
Trust your gut. If something feels off, it usually is. Verification tools confirm what instincts often already suspect.

Suspect a catfish? Run a face search now. Upload their profile photo at facesift.com and find out where that face really appears online. No account required. Results in under a minute.

How Scammers Research Their Targets Before Making Contact

FaceSift — Wed, 10 Jun 2026 19:09:18 +0000

Published: June 5, 2026

Read time: ~11 min

Tags: Safety, Scams, OSINT

Slug: how-scammers-research-targets

The first message from a romance scammer rarely feels like a scam. It feels like someone paying genuine attention — someone who noticed something specific about you, shares your values, and seems almost too compatible to be coincidence. That feeling is not an accident. It is the product of research done before you ever appeared in their inbox.

Understanding how scammers work the targeting phase — where they look, what they collect, and how they use it — is the most effective way to protect yourself. Most prevention advice focuses on what happens after contact. This guide covers what happens before.

What a Scammer Can Learn About You in Under 10 Minutes

Your relationship status and recent heartbreaks
Your approximate income from employer and lifestyle posts
Your family structure — children, grandchildren, parents
Your religious or political identity
Every platform where you use the same profile photo
Your home city or neighbourhood from location tags
Your daily routine from post timestamps
Whether you live alone or with family

Phase 01 — Where Scammers Find Potential Victims

Scammers do not pick targets at random. They work platforms and communities where vulnerable people are concentrated and where public profile data is easy to harvest. Dating apps are the obvious hunting ground, but they are far from the only one. Grief support groups, divorce forums, military spouse communities, and Facebook groups for retirees are all actively targeted because they signal emotional availability, loneliness, and — in some cases — financial assets.

Dating apps — Tinder, Hinge, Bumble, and older platforms like Match and eHarmony. Photos, age, rough location, and opening line all visible without matching. Some scammers run bots that swipe right on every profile and collect data at scale.

Facebook groups — Grief support, expat communities, military families, investment discussion, and religious groups. Membership signals emotional state, financial interest, and community trust.

Instagram and TikTok — Public accounts expose a continuous feed of personal content — location, relationships, lifestyle, and emotional state. Scammers follow, like, and comment to initiate contact organically.

LinkedIn — Job title, employer, career history, and education are all public by default. Used to tailor a fake persona that looks plausibly compatible — same industry, similar background.

WhatsApp and Telegram groups — Crypto investment groups, business networking channels, and community groups are prime sourcing grounds. Phone numbers are often visible to all members.

Phase 02 — How They Build a Profile Before the First Message

Once a scammer identifies a potential target, they spend time — sometimes days — researching them before making any contact. This research phase is what makes the eventual approach feel uncannily personal.

Cross-platform username search — The same username across Instagram, Reddit, and a forum links your professional identity to comments you thought were anonymous. Tools like Sherlock automate this in seconds.

Reverse image search on profile photos — Running your profile photo through a face search engine surfaces every other platform where you use the same image — giving the scammer a complete map of your online presence from a single photo.

Google name + city search — Searching "First Last" + city surfaces data broker listings, news mentions, court records, and business filings. Home address, phone number, and employer can all be found this way for free.

Social media post analysis — Reading months of posts reveals your relationship history, financial situation, travel patterns, family structure, and emotional flashpoints.

LinkedIn career history — Job title and employer reveal income bracket. Career trajectory reveals ambition and stress points. Mutual connections create a plausible "how we could have met" story.

Phase 03 — The Data They Collect and What They Do With It

Every piece of information feeds directly into the manipulation script. The goal is to construct a persona that feels like fate.

Relationship status and history — Widowed, divorced, or recently single all signal emotional availability. References to a past relationship tell the scammer what went wrong and what emotional needs are unmet.

Financial indicators — Home ownership, travel photos, car, employer, and profession all suggest income bracket. Scammers target people with disposable income — enough to send money without going bankrupt on the first transfer.

Family structure — Children and grandchildren are mentioned to build trust and later used as emotional leverage in crisis scripts.

Religious or political identity — Shared values create instant rapport. A scammer who knows you are deeply religious will construct a persona with matching faith.

Geographic isolation — Living alone, working remotely, or having moved to a new city all reduce the chance of a friend or family member noticing something is wrong.

Phase 04 — How They Build the Fake Identity to Match

The persona is constructed to fit the target. A scammer who has identified that you work in healthcare, value travel, and recently lost a spouse will not approach you as a local plumber. They will be a widowed doctor working abroad, recently retired from volunteering in conflict zones, with a teenage child they are raising alone.

The stolen photo — Photos are taken from real people — often military personnel, doctors, engineers, or models — whose public Instagram or LinkedIn provides a convincing backstory. The real person rarely knows their face is being used.

The backstory — Widowed, with children, working abroad in a respectable profession. The abroad detail explains why they cannot meet in person.

The mirroring — Early conversations are designed to find and reflect back your values, interests, and opinions. "I feel the same way" is engineered to create a sense of deep connection quickly.

The timeline compression — Real relationships develop slowly. Scammers accelerate artificially — declarations of love within days, talk of a future together within weeks. The goal is to build emotional commitment before the target has time to think critically.

Phase 05 — Why the First Message Feels So Personal

After completing their research, a scammer's opening message is not generic — it is tailored. This specificity is what separates a skilled scammer from a bot.

Referencing specific content — Mentioning a photo you posted, a place you visited, or a book in your bio makes the approach feel personal and observant.

Opening with vulnerability — Sharing something "personal" early triggers reciprocal disclosure. Once you share something vulnerable in return, the emotional bond begins.

Moving off-platform quickly — Dating apps have fraud detection. Moving to WhatsApp or Telegram within the first few messages puts the conversation outside platform monitoring.

The consistency of contact — Good morning messages, check-ins throughout the day, and long late-night conversations create the feeling of an attentive partner. This consistency is often scripted and managed across dozens of targets simultaneously.

How to Make Yourself a Harder Target

Remove the signals scammers rely on most

Set social media profiles to private. A private account forces a follow request — you can vet who is asking before granting access to your content history.
Use different photos across platforms. The same profile photo lets anyone run a reverse face search and immediately find every platform you are on. Use distinct photos per context.
Remove or restrict location data. Turn off location tagging on posts. Delete old check-ins.
Do not list your relationship status publicly. Widowed, divorced, or "single" are the flags scammers scan for.

Recognize the approach when it happens

Slow down if the first message is unusually specific. Genuine cold approaches are generic. Specific openers that feel personal are a signal worth noticing.
Reverse image search any profile photo immediately. Before investing any emotional energy, run their profile photo through FaceSift or Google Images.
Be suspicious of any request to move off-platform quickly. Legitimate people do not need to urgently exit the platform where you met.
Talk to someone you trust before money enters the picture. If you find yourself hiding an online relationship or defending it defensively, that reaction itself is worth examining.

Early Warning Signs the Research Phase Is Already Complete

They referenced something specific from your profile in the first message
Their backstory matches your stated interests and values almost perfectly
They want to move to WhatsApp or Telegram within the first few days
Declarations of strong feelings arrive within the first week
Their profile photo appears on other platforms under a different name
They are always abroad, always with a reason they cannot video call clearly
Any mention of money — even indirect — before you have ever met in person

Related Guides

How Does Face Recognition Work? The AI Behind Face Search Explained

FaceSift — Tue, 09 Jun 2026 18:48:38 +0000

Published: May 22, 2026 · 10 min read

You upload a photo and seconds later a system tells you it has found the same face on a news article from three years ago. How does that actually work? The answer involves several layers of AI, each solving a different sub-problem. This article explains the full pipeline — from raw pixels to a match score — in plain language, with no mathematics required.

Face Detection vs. Face Recognition

These two terms are often used interchangeably, but they describe different tasks:

Task	Question it answers	Example
Face detection	Is there a face in this image, and where?	The camera drawing a box around your face
Face verification	Are these two photos the same person?	Face ID unlocking your phone
Face recognition / search	Who is this, across a large database?	Reverse face search finding matches on the web

Reverse face search is the hardest of the three — it involves comparing one face against millions of indexed faces and returning the closest matches, ranked by similarity. Everything described in this article applies primarily to that task.

The Recognition Pipeline Step by Step

When you upload a photo to a face search engine, it passes through several distinct stages before a result is returned:

1. Face Detection
The first model scans the image to locate faces. It outputs a bounding box — the rectangular region containing each face. Modern detectors handle faces at extreme angles, partially occluded by hands or glasses, and at very small sizes within a larger scene. If no face is detected, the search stops here.

2. Face Alignment
The detected face is cropped and geometrically normalised. Key landmarks — the corners of the eyes, the tip of the nose, the corners of the mouth — are identified and used to rotate and scale the face into a standard position. This ensures that a face photographed from slightly to the left is processed identically to the same face photographed head-on.

3. Feature Extraction (Embedding)
The aligned face is passed through a deep neural network — typically a variant of ResNet or a purpose-built architecture like ArcFace — which converts the face into a vector of numbers. This vector, called a facial embedding, encodes the geometric relationships between facial features: the distance between the eyes, the width of the jaw relative to the forehead, the shape of the nose bridge. A typical embedding has 128 to 512 dimensions.

4. Similarity Search
The embedding is compared against a database of pre-computed embeddings using a distance metric — usually cosine similarity or Euclidean distance. Faces with very similar embeddings are close together in this mathematical space; faces of different people are far apart. The system returns the closest matches above a set threshold.

5. Ranking and Scoring
Matches are sorted by similarity score, typically expressed as a percentage (0–100%). A score near 100% means the embeddings are nearly identical. The threshold below which a match is considered a different person varies by system and use case — stricter thresholds reduce false positives at the cost of missing more true matches.

What Facial Embeddings Are

The embedding is the central concept in modern face recognition, and it is worth understanding properly because it explains both the power and the limits of the technology.

Think of an embedding as a postal address for a face — a unique location in a mathematical space with hundreds of dimensions. Two photos of the same person, taken years apart, in different lighting, will produce embeddings that are very close to the same address. Photos of different people will produce embeddings that are far apart.

The neural network that generates embeddings is trained on millions of face pairs — pairs labelled "same person" and "different person". The training objective is to pull same-person pairs closer together and push different-person pairs further apart in the embedding space. After training on enough examples, the network learns to encode identity rather than surface features like lighting, angle, or expression.

Why this matters for reverse face search: Because the comparison happens in embedding space, not pixel space, the system can match a face from a low-resolution old photo against a high-resolution recent one, or a photo taken from the left against one taken from the right. The embedding abstracts away those surface differences and focuses on underlying facial geometry. This is why reverse face search can find matches that Google's pixel-based reverse image search completely misses.

How Accuracy Is Measured

Face recognition accuracy is typically measured on benchmark datasets using two metrics:

True Accept Rate (TAR) — the percentage of genuine same-person pairs correctly identified as a match. A high TAR means the system finds most true matches.
False Accept Rate (FAR) — the percentage of different-person pairs incorrectly accepted as a match. A low FAR means the system rarely confuses two different people.

These two metrics are in tension: lowering the match threshold reduces false accepts but also causes the system to miss more genuine matches, and vice versa. The threshold is set differently depending on the use case — a border control system tolerates almost zero false accepts; a web face search can afford to surface uncertain matches for the user to review.

What the similarity score on a result actually means

Score range	Interpretation	Recommended action
90–100%	Very strong match — likely the same person	Check the source page; high confidence
75–89%	Probable match — faces are very similar	Investigate and corroborate with other signals
60–74%	Possible match — notable similarity	Treat as a lead, not a conclusion
Below 60%	Weak match — may be coincidental resemblance	Low weight; verify through other means

What Face Recognition Gets Wrong

Modern face recognition is impressive but not infallible. Understanding its failure modes prevents misuse of results:

Identical twins

Identical twins share virtually the same facial geometry. Most systems cannot reliably distinguish them. A match against an identical twin is a real match — just not necessarily the right person.

Extreme age gaps

Facial geometry changes significantly between childhood and adulthood, and more gradually through later life. Systems trained primarily on adult faces perform less reliably on very young or very old faces, and across large age differences.

Heavy occlusion or image quality

Sunglasses, scarves, heavy make-up, or very low image resolution all degrade embedding quality. If the face is not clearly visible, the embedding is correspondingly uncertain — and the match score reflects that.

Lookalikes

Some pairs of unrelated people happen to have very similar facial geometry. A high similarity score means the faces are geometrically alike — it does not guarantee they are the same person. This is why verification through the source page is always necessary before drawing any conclusion.

Coverage gaps in the index

A face search engine can only return results for faces it has indexed. If a person has no public web presence — no social media, no news coverage, no public records with photos — they will not appear in results regardless of how good the model is.

Privacy Implications

Face recognition is one of the most privacy-sensitive technologies in widespread use because it enables identification without the subject's knowledge or consent. Several legal frameworks have developed specifically to address this:

Illinois BIPA (Biometric Information Privacy Act)
Requires explicit written consent before collecting biometric data including facial geometry. Has produced some of the largest privacy settlements in US history — over $650M against Facebook and $100M against Google.

EU GDPR
Classifies biometric data used for unique identification as a special category of personal data requiring explicit consent. The EU AI Act further restricts real-time remote biometric identification in public spaces.

US State Laws
Texas, Washington, and several other states have biometric privacy laws. Federal legislation remains pending as of 2026, though sector-specific rules (FCRA for employment decisions, COPPA for minors) already apply.

Responsible face search services — including FaceSift — require explicit user consent before processing any photo, restrict searches to publicly available images, and prohibit uses like employment screening, stalking, or searching for minors. The technology is powerful; the ethical and legal constraints on how it can be used are what distinguish legitimate tools from surveillance platforms.

See the technology in action. Upload a photo at facesift.com and watch the pipeline produce real results — face detection, embedding, and ranked matches — in under a minute.

DEV Community: FaceSift

Military Romance Scams: How Fraudsters Use Stolen Soldier Photos

In This Article

How Military Romance Scams Actually Work

Where the Fake Persona Comes From

Warning Signs of a Military Romance Scam

How to Verify Before You Send Anything

What to Do If You've Already Sent Money

Full Response Checklist

AI Voice Cloning Scams: How Fraudsters Fake a Family Member's Voice

In This Article

How AI Voice Cloning Scams Actually Work

Warning Signs During the Call

What to Do During the Call

What to Do If You've Already Sent Money

Protecting Yourself and Family Going Forward

Full Response Checklist

# Best Reverse Image Search Apps for Mobile in 2026 — Compared

Quick Pick by Use Case

Apps Covered

#1 Google Lens

#2 Bing Visual Search

#3 Social Catfish

#4 PimEyes

#5 FaceSift

Side-by-Side Comparison

When to Combine Options

Marketplace Scams: How to Spot a Fake Buyer or Seller Before You Meet

In This Article

How Marketplace Scams Actually Work

Red Flags in the Listing or the First Message

Red Flags When You're Asked to Pay, Ship, or Meet

How to Verify Before You Pay, Ship, or Meet

What to Do If You've Already Paid, Shipped, or Been Scammed

Online Privacy Audit: What Can Strangers Find About You? (2026)

What a Motivated Stranger Can Learn About You in 10 Minutes

Audit Steps

01 · Face Search Audit

02 · Username & Email Exposure

03 · Social Media Leaks

04 · Search Engine Footprint

05 · App & Device Permissions

How to Reduce Your Footprint

High impact — do these first

Medium impact — do these next

Ongoing — run these periodically

Your Privacy Audit Checklist

# Job Offer & Task Scams: How to Spot a Fake Recruiter Before You Pay

In This Article

How Job & Task Scams Actually Work

Red Flags in the Job Offer Itself

Red Flags During the Interview or Onboarding

How to Verify Before You Pay or Share Anything

What to Do If You've Already Paid or Shared Information

# Is Someone Using My Photos Without Permission? How to Find Out

In This Article

How Photos Get Stolen and Reused

How to Search for Your Own Face Online

1. Reverse face search — finds your face across different photos (most important)

2. Google Images reverse search — finds exact copies

3. TinEye — traces where a photo was first published

4. Name + image search on Google

What You Might Find — and What It Means

Your photo on a dating profile with a different name

Your photo on news sites, blogs, or forums

Your photo used commercially

Your photo on data broker sites

Legitimate appearances you forgot about

What to Do When You Find Misuse

Document before acting

Report to the platform

File a DMCA takedown for copyright violation

Alert potential victims if a fake profile is active

For commercial use: consider legal action

How to Prevent It Going Forward

# How to Verify Someone's Identity Before You Trust Them Online (2026)

Do These Five Checks Before Any Significant Trust Is Extended

01 — Start With the Photo — Reverse Face Search

02 — Cross-Reference Their Social Presence

03 — The Video Call Test