DEV Community: FaceSift

Best Free Reverse Image Search Tools in 2026 — Compared

FaceSift — Tue, 25 Aug 2026 13:06:18 +0000

Published: August 25, 2026 · 9 min read

"Free" means something different from tool to tool. Google Lens, Yandex Images, Bing Visual Search, and TinEye are genuinely free — no account, no paywall, no catch. Social Catfish and PimEyes are free only up to a point: they'll tell you a match exists, then ask for a recurring subscription to actually see it. None of them do what a dedicated, one-time-payment face search does.

This article compares six free and freemium reverse image search tools — what each free tier actually gives you, where it quietly runs out, and when it's worth paying for a real answer instead of a maybe.

Quick pick: tracing where an image was first published → TinEye. General search with the largest index → Google Lens. Browser-integrated and free → Bing Visual Search. Most likely to surface more photos of a person → Yandex Images. Fast catfish gut-check → Social Catfish's free preview. Confirming a face is indexed before you pay → PimEyes' free tier.

Google Lens — Best all-around free reverse image search
Yandex Images — Best free tool for surfacing more photos of a person
Bing Visual Search — Best free option built into your browser and OS
TinEye — Best free tool for tracing an image's origin
Social Catfish — Best free preview for a quick catfish gut-check
PimEyes — Best dedicated free face search, with a very small free tier
Where free tools hit a wall

Google Lens

Best all-around free reverse image search · Free · No face search

Best for: Finding exact or visually similar images across the web at no cost

Google Lens remains the strongest free reverse image search available, full stop. It identifies objects, text, landmarks, and products inside a photo and finds visually similar images across the widest index of any tool on this list — and it costs nothing, with no daily cap.

Strengths:

Completely free with no usage limits or account requirement
Largest index of any tool — best odds of finding an exact image copy
Identifies objects, products, and landmarks within a photo, not just the whole image
Built into Chrome, Android, and Google Photos — zero extra setup
Cropping tool lets you search a specific region of an image

Weaknesses:

Matches pixel patterns, not identity — rarely links different photos of the same person
Queries go to Google's servers and may feed into ad personalisation
Not built for face search — a real face-matching tool will outperform it every time
Optimised for shopping and commercial relevance over investigative accuracy

How to use: Go to images.google.com → click the camera icon → upload a file or paste a URL. On mobile, open Google Lens from the camera app or Google Photos.

Yandex Images

Best free tool for surfacing more photos of the same person · Free · No face search

Best for: Free visual similarity search that anecdotally finds more matches on people than Google

Yandex Images is a free reverse image search from the Russian search engine Yandex, and it has a long-standing reputation in OSINT circles for surfacing more results on human faces than Google Lens or Bing — likely due to a larger index of social media and forum content from the CIS region. It is still pixel/visual similarity matching, not true facial recognition, but it punches above its weight for people-search specifically.

Strengths:

Completely free with no usage limits
Frequently returns more hits on a person's face than Google or Bing
Strong index of social media, forum, and blog content underrepresented elsewhere
Simple upload-and-search flow, no account needed

Weaknesses:

Still visual similarity, not a facial embedding — accuracy on angle/lighting changes is inconsistent
Yandex is a Russian company; some users are uncomfortable with data jurisdiction
Interface defaults to Russian in some regions before switching to English
Results skew toward Russian- and Eastern European-hosted content

How to use: Go to yandex.com/images → click the camera icon → upload a file or paste a URL.

Bing Visual Search

Best free option built into your browser and OS · Free · No face search

Best for: Quick visual search without leaving Edge, Windows, or the Bing app

Bing Visual Search is Microsoft's free reverse image search, most useful because it's baked directly into Edge — right-click any image on the web and search it instantly. Its index is smaller than Google's and it leans toward shopping and product matches, but as a zero-setup free option it's solid.

Strengths:

Completely free with no usage limits
Right-click "Search the web for image" in Edge — no separate site visit needed
Decent for product, shopping, and landmark identification
Simple, uncluttered results page

Weaknesses:

Smaller index than Google Lens for general image matching
No face-specific matching capability
Leans heavily toward commercial/shopping results over investigative use
Less useful outside the Microsoft ecosystem (Edge, Windows Photos, Bing app)

How to use: Go to images.bing.com/visualsearch → upload a file or paste a URL, or right-click any image in Edge and choose "Search the web for image."

TinEye

Best free tool for tracing an image's origin · Free (150/week) · No face search

Best for: Finding the oldest known version of an image and tracking every site that's reposted it

TinEye is the original reverse image search engine, and its free tier — 150 searches a week, no account required — is generous enough for casual use. It specialises in exact and near-exact matching, making it the best free option for confirming whether a photo is a stolen stock image or an unaltered repost of something older.

Strengths:

150 free searches per week without creating an account
Excellent at finding near-exact copies even after cropping, resizing, or colour adjustment
Sort results by oldest first — useful for debunking a viral or stolen photo
Privacy-focused: queries aren't used for ads or personalisation

Weaknesses:

Weekly cap can run out quickly during an active investigation
Index is far smaller than Google's — around 70 billion images
No face recognition capability at all — won't find different photos of the same person
Interface is dated compared to newer tools

How to use: Go to tineye.com → drag and drop an image or paste a URL. Free tier resets weekly; no account required.

Social Catfish

Best free preview for a quick catfish gut-check · Freemium · Basic face search

Best for: A fast first look at whether a suspicious profile photo returns any hits at all

Social Catfish is built specifically around the dating-scam use case — upload a photo, phone number, or username and it tells you how many potential matches it found. That preview is free, which is genuinely useful for a five-second sanity check, but seeing the actual sources requires a recurring paid membership rather than a one-off fee.

Strengths:

Free preview shows a match count before you commit to anything
Purpose-built UX for checking a dating or social profile photo
Combines image, phone, and username search in one product
No technical setup — designed for non-technical users

Weaknesses:

Full report is locked behind a recurring subscription, not a one-time payment
No true facial-embedding face search on the free tier
Upsell prompts appear throughout the free flow
Subscription auto-renews unless cancelled — read the terms before signing up

How to use: Go to socialcatfish.com → choose reverse image search → upload a photo → see the free match-count preview → subscribe to view full results.

PimEyes

Best dedicated free face search, with a very small free tier · Freemium · Dedicated face search

Best for: Confirming your face is indexed anywhere before deciding whether to pay for full results

PimEyes is a dedicated facial-recognition search engine — a real facial embedding match, not pixel similarity — which makes it far more capable than any general-purpose tool on this list for finding a specific person. The free tier confirms whether matches exist at all, but every thumbnail is blurred and every source URL is hidden until you subscribe.

Strengths:

True facial-embedding search — actually finds different photos of the same person
Free tier at least confirms whether a match exists before you pay anything
Large web-scraped index across social media, news, and blogs
Monthly and yearly plans available for ongoing use

Weaknesses:

Free results are blurred, so you can't verify the match is actually correct
Cheapest way to see real results is a recurring subscription, not a single search
Has drawn public criticism for enabling stalking due to weak consent gating
No built-in ethical-use guardrails on who can search whom

How to use: Go to pimeyes.com → upload a photo → agree to the terms → view blurred preview results → subscribe to a plan to unlock full thumbnails and source URLs.

Side-by-Side Comparison

Tool	Face search	Free tier	Beyond free	Privacy	Best use case
Google Lens	✗	Unlimited	N/A — always free	Moderate	General image search
Yandex Images	✗	Unlimited	N/A — always free	Low	Broader hits on a person
Bing Visual Search	✗	Unlimited	N/A — always free	Moderate	Browser-integrated search
TinEye	✗	150/week	N/A — always free	High	Image origin tracking
Social Catfish	✓ Basic	Preview only	Recurring subscription	Moderate	Fast catfish gut-check
PimEyes	✓ Dedicated	Blurred preview only	Recurring subscription	Moderate	Confirm a match exists
FaceSift	✓ Purpose-built	None — paid per search	$1 per search, no subscription	High	Identity verification

Where Free Tools Hit a Wall

Free reverse image search splits into two very different categories, and knowing which one you're using matters — especially if you're trying to catch a catfish or find out if your own photos are being misused.

Pixel-matching tools (Google Lens, Yandex, Bing, TinEye). Genuinely free with no catch — but they match image files, not faces. A different photo of the same person almost never gets linked, so a clean result doesn't mean the person isn't out there under a different photo.
Freemium face search (Social Catfish, PimEyes). Free tier confirms a match exists, then intentionally withholds the useful part — blurred thumbnails, hidden URLs — until you commit to a recurring subscription, even if you only need to check once.
When you need one clean answer, not a subscription. A reverse face search that charges per search instead of a monthly plan gives you a purpose-built facial embedding match and full unmasked results, with nothing to remember to cancel afterward.

Free tools only got you a maybe? FaceSift gives you a real facial embedding match for $1 — no subscription, no blurred results, no account. Upload a photo and get results in under a minute.

Crypto Recovery Scams: How Fake "Fund Recovery" Agents Re-Victimize You

FaceSift — Wed, 19 Aug 2026 09:14:23 +0000

Published: August 19, 2026 · 11 min read

Crypto recovery scams target people who already lost money to a fake investment platform or romance scam, often within days of the original theft — a "specialist" or law firm claims it can trace and recover the stolen funds, then asks for an upfront fee before anything is returned. The fee is the entire scam; there was never any recovery.

This article covers how these scams actually run, where the "specialist" and law firm photos and credentials come from, the red flags in the outreach and the pitch, how to verify a recovery service before you pay, and what to do if you've already paid one.

Hard stops — disqualify the offer immediately: they contacted you first, unprompted, about recovering your funds; you're asked to pay any fee before funds are returned; or they guarantee full or near-full recovery. Skip to How to Verify a Recovery Service Before You Pay.

How Crypto Recovery Scams Actually Work

Recovery scams target the same pool of victims twice — often within days of the original crypto scam — because a person who just lost money to a fake investment platform is primed to believe a second promise that sounds like a rescue.

The "guaranteed recovery" cold outreach. Days or weeks after a pig-butchering or fake exchange scam, the victim gets a message — email, X, Telegram, a comment on their own public complaint — from a "specialist" who claims they can trace and recover the stolen crypto, often citing the exact amount lost as proof of legitimacy.
A fabricated blockchain forensics report. A PDF full of wallet addresses, transaction hashes, and "trace" diagrams is sent to look like proof the funds have been located — the report is cosmetic, assembled from public blockchain explorer data anyone can pull, and proves nothing about the sender's ability to actually recover anything.
An upfront "unlocking" or "release" fee. Before any funds move, the victim is asked to pay a fee — described as gas costs, a smart contract unlock, taxes, or a compliance bond — usually in crypto itself, which is the same one-way payment rail the original scam used.
Impersonating law enforcement, regulators, or a law firm. Some variants pose as an FBI cybercrime unit, the SEC, Interpol, or a licensed recovery law firm, using a real agency's name and seal to make the follow-up fee request feel official — real agencies never contact victims first offering paid recovery.
A fake escrow or "insurance" step. A second fee gets introduced midway through, framed as refundable escrow or insurance against the transaction failing — it isn't refundable, and the site or "agent" collecting it disappears once the victim stops paying.
The victim list gets resold. In many cases the recovery scammer is the same operation that ran the original scam, or bought the victim's contact details from it — the "recovery service" exists specifically because the target already proved willing to send crypto once.

Where the Photos and Credentials Come From

A recovery scam's credibility rests entirely on borrowed faces and borrowed credentials, since the operation itself usually has no real office, license, or track record behind it.

Stolen headshots for the "senior recovery specialist." The agent's profile photo is frequently lifted from a real cybersecurity professional's LinkedIn, a stock photography site, or an unrelated corporate bio page — a real person's face attached to a job they've never held.
A law firm website built to look established. Slick "blockchain recovery law firm" sites reuse stock office photography and generic attorney headshots, sometimes copied wholesale from a real, unrelated law firm's site with only the name and logo swapped.
Fabricated LinkedIn profiles with invented credentials. Profiles list certifications like CFE or CISSP, or claim years at real forensics firms such as Chainalysis or CipherTrace, that a search of the actual firm's staff directory or the certifying body's registry doesn't confirm.
Doctored badges and certificate images. Logos for real certifying bodies or government agencies are pasted onto a generic certificate template — the badge image alone proves nothing, since anyone can save and reuse a public logo.
Fake video testimonials from "recovered" clients. Short clips of an actor or a stock video reading a script thanking the firm for recovering their funds are used to manufacture social proof — the same clip sometimes surfaces recycled across several unrelated "recovery" brands.

Red Flags in the Outreach and the Pitch

Recovery scams tend to repeat the same handful of tells regardless of which brand name or law firm they're wearing that week.

They contacted you first. Legitimate recovery — when it happens at all — comes through law enforcement asset seizure or your own exchange's compliance team, not a stranger who found your name on a scam-victim forum and reached out unprompted.
A guarantee of full or near-full recovery. No legitimate firm can promise recovery of stolen crypto — funds routed through mixers or offshore exchanges are frequently unrecoverable — and a confident guarantee is used specifically to override the skepticism a second loss should trigger.
Any payment required before funds are returned. A real asset-recovery process, on the rare occasions it succeeds, is paid from the recovered funds or through a licensed attorney's standard retainer — not a crypto payment sent up front with nothing to show for it.
Refuses a written contract or standard consultation. A firm unwilling to put fees, scope, and a business registration number in writing, or that rushes straight to payment without a real consultation, isn't operating as a licensed business would.
Urgency around a closing "window." Claims that the stolen funds will be permanently lost, frozen, or reassigned unless you pay within hours or days is the same pressure tactic used in the original scam, repackaged as a rescue deadline.
No verifiable business registration or license. A search of state business registries, bar association databases, or financial regulator licensee lists turns up nothing for the firm name, or the details don't match what's on their site.
Requests for gas fees or "taxes" paid in crypto. A recurring script asks for small crypto payments described as network or tax fees needed to release a much larger sum — the same one-way, hard-to-trace payment method used in nearly every advance-fee scam.
The identical pitch appears under multiple brand names. Searching phrases from the message, or the agent's photo, sometimes surfaces the same script and the same stolen headshot attached to a completely different "recovery firm" name.

How to Verify a Recovery Service Before You Pay

A short set of checks — all free — rules out the overwhelming majority of recovery scams before a second payment ever leaves your wallet.

Reverse-search the agent's or attorney's photo. Run the "specialist" or lawyer's profile photo through a reverse face search — a stolen headshot often surfaces attached to a real professional's genuine profile, or to several other unrelated "recovery firm" pitches.
Check licensing and registration directly with the source. Look up attorneys on your state bar association's site and firms on your state's business registry — don't trust a badge image or a phone number given to you by the firm itself; find the contact details independently.
Search the firm name plus "scam" or "review." Recovery scam operations tend to accumulate complaints quickly on Trustpilot, Reddit, and scam-tracking sites — a firm with no independent footprint outside its own website is a strong warning sign.
Contact your exchange or bank's fraud team first. If the theft happened on a regulated exchange, its own compliance and fraud team — not a third party who contacted you — is the correct first stop, and it won't ask for an upfront fee to investigate.
Treat any upfront payment as a hard no. No legitimate recovery path requires the victim to pay before funds are returned — if that's the ask, the conversation is the scam, regardless of how official the paperwork looks.
Report suspicious outreach to IC3 before responding further. The FBI's Internet Crime Complaint Center (ic3.gov) tracks recovery scam operations specifically and can confirm whether a firm name has already been flagged.

What to Do If You've Already Paid a Fake Recovery Agent

The priority is stopping further payments immediately — recovery scammers routinely come back with a second and third fee request once the first one is paid.

Stop all further payments immediately. Once one fee is paid, expect a follow-up request for a larger "release" or "tax" fee — treat any further ask, however plausible the excuse, as part of the same scam.
Contact your bank or card issuer to dispute the charge. If any part of the payment went through a card or bank transfer rather than crypto, dispute it immediately — the recovery window for card disputes is time-sensitive.
Report to the FTC and IC3. Reportfraud.ftc.gov and the FBI's Internet Crime Complaint Center at ic3.gov both track recovery scams as a distinct category from the original crypto theft — file separately for each incident.
Report to the CFTC or SEC if investment fraud was involved. If the original loss came from a fake trading platform, the CFTC's complaint portal or the SEC's tip line are the correct regulators, and both maintain active recovery-scam watch lists.
Report the firm and its contact channels. Report the account, page, or number used to contact you to whichever platform it came through (X, Telegram, LinkedIn, email provider) — this is often the fastest way to get it taken down.
Warn others where you were first approached. If the recovery pitch arrived through a comment on your own public post about the original scam, delete or edit that post and warn others in the same scam-victim community — recovery scammers actively monitor those threads for new targets.

Full Verification Checklist

Reverse-search the agent's or attorney's profile photo
Check attorneys against your state bar association's registry directly
Check firms against your state's business registration database
Search the firm name plus "scam" or "review" before responding
Contact your exchange or bank's own fraud team first
Never pay any fee before funds are actually returned
Treat unsolicited recovery outreach as a red flag by default
Report suspicious outreach to IC3 (ic3.gov) before engaging further
If scammed, stop all further payments immediately
Dispute any card or bank charge with your issuer right away
File with the FTC (reportfraud.ftc.gov) and, for investment fraud, the CFTC or SEC
Report the contact account or page to the platform it came through

FaceSift is a reverse face search tool. Fake specialist and attorney photos are often lifted from an unrelated profile. Upload the photo to see where else that face appears online: facesift.com

Rental & Airbnb Scams: How Fake Landlords Use Stolen Photos

FaceSift — Mon, 17 Aug 2026 15:02:35 +0000

Published: August 17, 2026 · 11 min read

Rental and Airbnb scams work because renters need to move fast in a tight market, and a good unit at a fair price draws dozens of inquiries within hours. Scammers exploit that urgency with re-posted real listings, fabricated properties, stolen photos of both the home and the "landlord," and a wire transfer requested before anyone's actually seen the place.

This article covers how these scams actually run, where the property and landlord photos come from, the red flags in the listing and the conversation, how to verify before you pay, and what to do if you've already paid or signed a fraudulent lease.

Hard stops — disqualify the listing immediately: you're asked to wire a deposit before a viewing or signed lease, the landlord claims to be overseas and can't show the unit live, or you're pushed to pay outside Airbnb or the rental platform. Skip to How to Verify a Listing and Landlord Before You Pay.

How Rental & Airbnb Scams Actually Work

Renters move fast — a good unit at a fair price gets dozens of inquiries within hours — and scammers exploit that urgency to get a deposit wired before anyone's actually seen the place.

A real listing, re-posted by someone who doesn't own it. A scammer copies an active listing from Zillow, Realtor.com, or a legitimate Airbnb host, then re-posts it on Craigslist or Facebook Marketplace at a slightly lower price with their own contact details — the property is real, the "landlord" isn't.
A property that doesn't exist, or isn't for rent at all. Entirely fabricated listings use stock photography or images stolen from an unrelated home for sale — sometimes a house that's owner-occupied and not on the rental market in any form.
The "landlord is overseas" deposit request. A story about being a missionary, military member, or expat unable to show the unit in person is used to justify wiring a deposit and first month's rent before you've ever seen the inside.
Fake Airbnb or Booking.com listings that push payment off-platform. A listing on a legitimate short-term rental site looks normal until the "host" asks you to finish the booking outside the app — by email invoice or a lookalike payment page — to avoid the service fee, which also strips away buyer protection.
The subletting scam. Someone signs a real lease on a real unit, then re-lists it to multiple "tenants" at once, collects several deposits, and disappears before the actual move-in date.
Bait-and-switch on move-in day. You arrive to find the unit doesn't match the listing, is already occupied, or the person who took your deposit has no connection to the actual property owner or management company at all.

Where the Photos and Listing Details Come From

A listing's photos are usually the most trustworthy-looking part of a scam, and also the easiest part to fake or steal wholesale from somewhere else.

Scraped from a real MLS or Airbnb listing. Professional real estate photos are public by design, which makes them trivial to copy from an active for-sale listing or a completely different Airbnb host and repost under a fake rental ad.
Stock photography staged to look like a real home. Generic "model home" stock photos get reused across dozens of fake listings in different cities — a reverse image search on the interior shots often surfaces the same photo set attached to furniture catalogs or staging company portfolios.
A landlord or agent photo lifted from an unrelated profile. The "landlord's" headshot is frequently pulled from a LinkedIn profile, a real estate agent's public bio, or even a dating profile — a real person's face attached to a rental conversation they have no idea is happening.
AI-generated interiors and fabricated floor plans. Increasingly, the listing photos themselves are AI-generated — a photorealistic living room or kitchen that was never built, paired with a floor plan created to match, so a reverse image search on the property photos returns nothing at all.
Screenshotted "proof" of ownership or ID. When pressed, some scammers send a screenshot of a deed, utility bill, or ID card — these are simple to fabricate or lift from a document template, and a screenshot alone proves nothing about who actually controls the property.

Red Flags in the Listing and the Conversation

Most rental scams show their hand before any money changes hands, if you know what to look for in the listing text and the first few messages.

Priced noticeably below comparable units nearby. A rent well under similar listings in the same building or neighborhood is the single most common lure.
The landlord can't show the unit in person, ever. A recurring excuse — traveling, overseas, "the current tenant is still moving out" — that always ends the same way: pay first, see it later.
Pressure to wire money before viewing or signing anything. Urgency to send a deposit "to hold the unit" before a lease is signed or a viewing happens is the same pressure tactic used across nearly every version of this scam.
Refuses a live video walkthrough. A legitimate landlord, agent, or current tenant can usually do a quick live video call showing the unit and a requested landmark within minutes.
The same listing appears in multiple cities or under different names. A sign it's a template being reused across many scam attempts at once.
Payment only by wire transfer, crypto, gift card, or cash app. A request to pay by any method that's difficult or impossible to reverse is a strong signal the transaction isn't meant to be traceable.
No lease, or a lease with inconsistent details. A generic template lease with the wrong property address, mismatched owner name, or no reference to a specific unit number doesn't hold up to a close read.

How to Verify a Listing and Landlord Before You Pay

A handful of checks — most of them free and a few minutes each — catch the overwhelming majority of rental and Airbnb scams before any money moves.

Reverse-search the listing and landlord photos. Run the property photos and the landlord or agent's profile photo through a reverse face search — a stolen photo set often surfaces attached to a completely different listing, name, or unrelated social profile.
Cross-check the address against public property records. Most counties publish property tax and ownership records online — search the address to see who actually owns the unit, and compare that name against whoever is asking you for money.
Insist on a live video walkthrough. Ask for a real-time video call showing the actual unit, including something specific like today's date written on paper or a requested angle.
Use the platform's built-in secure payment. Book and pay through Airbnb, Zillow, Apartments.com, or a similar platform's own payment flow rather than a wire transfer or an off-platform invoice.
Request an in-person or agent-assisted showing. Whenever possible, view the unit in person or have a local friend, agent, or property management company confirm it.
Search the address plus "scam" before you commit. A quick search frequently surfaces prior victims who've posted warnings in local forums, Nextdoor, or renter subreddits.

What to Do If You've Already Paid or Signed Something

Acting within the first day or two gives you the best chance of recovering funds and stopping the same listing from reaching the next renter.

Contact your bank or payment provider immediately. Wire transfers are hard to reverse but not always impossible if reported within hours — contact your bank's fraud department right away.
Report the listing to the platform. Report the ad on Airbnb, Zillow, Craigslist, or Facebook Marketplace directly so it gets taken down before it reaches the next renter.
File a police report, especially if you traveled to the property. It's often required by your bank or insurer and creates a record tied to the address and date.
File a report with the FTC and IC3. Reportfraud.ftc.gov and the FBI's Internet Crime Complaint Center at ic3.gov both track rental fraud specifically.
Get legal help if you signed a fraudulent lease. Local legal aid organizations and tenant rights groups can advise on next steps if you signed with someone who didn't actually have authority to rent the unit.
Warn others where the listing was posted. A comment on the original ad, a post in a local renter group, or a note on Nextdoor can stop the same script from working on the next person who finds it.

Full Verification Checklist

Reverse-search the listing photos and the landlord or agent's profile photo
Cross-check the address against public county property tax records
Insist on a live video walkthrough with a requested detail shown on camera
Book and pay only through the platform's own secure payment flow
View the unit in person, or have a local contact confirm it for you
Search the address plus "scam" before sending any money
Never wire a deposit before a lease is signed and the unit is viewed
Read the lease closely for the correct address and matching owner name
If scammed, call your bank's fraud line the same day
Report the listing to the platform (Airbnb, Zillow, Craigslist, Facebook)
File a police report if you traveled to the property or paid in person
File with the FTC (reportfraud.ftc.gov) and IC3 (ic3.gov)

FaceSift is a reverse face search tool. Fake landlord and agent photos are often lifted from an unrelated profile. Upload the photo to see where else that face appears online: facesift.com

AI Companion Scams: How Fake Chatbot Relationships Drain Your Wallet

FaceSift — Tue, 11 Aug 2026 07:40:48 +0000

Published: August 11, 2026 · 11 min read

An AI companion never sleeps, never gets bored, and never runs out of the right thing to say — which is exactly what makes it such an effective engine for a scam. Fake "girlfriend" and "boyfriend" bots, cloned companion apps, and chatbots impersonating real people on dating platforms are turning loneliness into a recurring subscription charge.

This article covers how these scams are actually built, where the photos, voices, and personas come from, the warning signs that give a bot away, how to verify who — or what — you're really talking to, and what to do if you've already paid or shared personal information.

If an AI companion or dating match is asking you for money right now: stop payments immediately, insist on a live video call, and skip to How to Protect Yourself and Verify Who's Really Talking.

How AI Companion Scams Actually Work

Some of this runs on legitimate companion apps that get abused; a lot of it is purpose-built scam infrastructure — a chatbot that never sleeps, never runs out of patience, and never breaks character.

Legit companion apps hijacked as an attack surface. Real AI companion apps are wrapped or impersonated by lookalike clones with near-identical branding, then modified to add payment-harvesting flows the original app never had — installed from a sideloaded file or a copycat store listing rather than the official one.

A chatbot posing as a real person on a dating or social app. The same romance-scam scripts that used to require a human operator now run on an LLM, holding thousands of parallel "relationships" at once, each one personalized in real time based on what the victim responds to.

The "unlock more photos" paywall. Once a rapport is established, the companion offers to share more personal or explicit photos behind a one-time "unlock" fee — which repeats with a new photo set every few days, framed each time as a special, limited offer just for you.

Escalating gifts, tips, and "verification" charges. The requests mirror classic romance-scam asks — a crypto "gift," a subscription upgrade to keep the relationship "exclusive," or a small "identity verification" fee — except now they're triggered automatically by a model tuned to notice when a user is most engaged.

Speed and patience no human scammer can match. An AI companion answers instantly at 3am, remembers every detail you've ever mentioned, and never gets tired of the conversation — consistency that reads as devotion to a lonely user, but is really just a model with no downtime and no other victims competing for its attention.

Where the Photos and Persona Come From

The companion's face, voice, and backstory are almost never what they appear to be — built from generative tools, stolen image sets, or a cloned app shell designed to look trustworthy.

AI-generated faces that don't belong to anyone. Diffusion models can produce a photorealistic "companion" face with no real person behind it — which means it won't turn up on a reverse image search anywhere else, and that absence is often mistaken for proof the person is private rather than proof they don't exist.
Stolen photo sets stitched onto the AI persona. To seem more legitimate, some operations pair the chatbot's text with a real photo set lifted from an influencer, model, or private individual's account — meaning a real person's face is now attached to a conversation they have no idea is happening.
Cloned voice notes to deepen the illusion. Short AI-generated voice memos — a "good morning" clip, a laugh, a birthday message — are used to make the companion feel more human once text-based trust is already established.
White-labeled clones of real companion apps. Scam operators frequently wrap a legitimate LLM API in an app that closely mimics a well-known companion app's name, icon, and color scheme, distributed through unofficial app stores or sideloaded APKs where store review processes don't apply.
Data harvesting disguised as "getting to know you." Questions that feel like normal relationship small talk — where you work, your daily routine, your financial situation, your family's names — are frequently logged and fed back into the script to make later requests feel more personally tailored and harder to refuse.

Warning Signs You're Talking to a Scam Bot

A single odd response could be a bad day. A pattern across several of these is the model, not the person, doing the talking.

Replies arrive instantly, at any hour, every single day. A response that lands in seconds regardless of the time of day, with no gaps for sleep, work, or a bad signal, is a pace no human maintains for long.
The conversation keeps circling back to money. Affectionate conversation that consistently pivots toward a crypto "investment opportunity," a gift card, or a payment to "unlock" something is a scripted loop, not a coincidence.
It breaks character when you go off-script. Asking a deliberately odd or out-of-context question — an unrelated fact, a nonsensical request, a direct "are you an AI" — often produces a generic pivot back to the romantic script instead of the confused, curious reaction a real person would give.
The photos and voice notes feel almost too perfect. AI-generated images still tend to slip on fine detail — hands, background text, jewelry symmetry — and cloned voice notes often carry a flatness in tone and pacing that a real spontaneous recording doesn't have.
It resists a live, two-way video call. The same excuses used in human romance scams — bad connection, camera broken, "not ready yet" — show up here too, because a convincing real-time deepfake video call is still far more resource-intensive to fake than a chat message or a pre-recorded clip.

How to Protect Yourself and Verify Who's Really Talking

The goal is the same as with any impersonation scam — test the relationship against something a script can't fake before any money or personal information changes hands.

Reverse image search every photo before trusting it. Run their photos through a reverse face search rather than a plain image search — a stolen photo set often surfaces attached to a completely different name, while a fully synthetic face typically returns nothing at all.
Ask questions no script anticipates. A specific, slightly odd question — about a made-up shared memory, a strange hypothetical, or a direct question about being AI — tends to expose a scripted response pattern.
Insist on a live, unscripted video call. Not a voice note, not a pre-recorded clip — a real, live, two-way video conversation where you can ask them to do something unplanned.
Check the app itself before you download it. Verify the developer name, read recent reviews for complaints about billing or fake-looking profiles, and confirm the listing matches the official app rather than a near-identical clone.
Never pay to "unlock," "verify," or "upgrade" a companion. Legitimate companion apps bill through transparent, cancel-anytime subscriptions handled by the app store itself — a request for gift cards, crypto, or a one-off "unlock" payment outside that system is a scam pattern regardless of how genuine the relationship feels.

What to Do If You've Already Paid or Shared Information

Acting quickly limits further loss, and reporting it helps platforms and regulators catch the same bot, app, or photo set before it reaches someone else.

Stop payments and cancel recurring subscriptions immediately. Deleting an app does not stop a recurring charge tied to your app store account — cancel through your subscription settings.
Contact your bank or card issuer to dispute charges. Card issuers can flag and reverse charges from merchants showing a pattern of complaints.
Report the account or app to the platform. Flag the chatbot profile on whichever dating or social platform it appeared on, and report a lookalike app listing to the Google Play Store or Apple App Store.
File a report with the FTC and IC3. Report it at reportfraud.ftc.gov and with the FBI's Internet Crime Complaint Center at ic3.gov, noting it involved an AI companion or chatbot specifically.
Lock down any personal information you shared. Change passwords on any accounts you may have referenced, and monitor your financial accounts afterward.

Full Response Checklist

Reverse image search every photo they've sent, not just a plain image search
Ask a specific, unscripted question and watch for a generic pivot back to the romance
Insist on a live, unscripted video call before trusting anything further
Verify the app's developer name and reviews before downloading a companion app
Never pay to "unlock," "verify," or "upgrade" a companion — cancel-anytime subscriptions only
Check your app store and card statement for recurring charges, then cancel them
Contact your bank or card issuer to dispute unauthorized or repeat charges
Report the profile or app listing to the platform, app store, or dating service
File a report at reportfraud.ftc.gov and with the FBI's IC3 at ic3.gov
Change passwords and monitor accounts for information you shared during the chats
Warn friends or family so the same photo set and script don't work twice

FaceSift is a reverse face search tool. Stolen photo sets often turn up attached to a completely different name elsewhere online. Upload the photo to see where that face actually appears: facesift.com

Military Romance Scams: How Fraudsters Use Stolen Soldier Photos

FaceSift — Thu, 06 Aug 2026 20:43:37 +0000

Published: August 6, 2026 · 11 min read

A uniformed profile photo, a deployment story that conveniently blocks video calls, and a relationship that turns romantic within days — the military romance scam is one of the most consistent fraud patterns tracked by the FTC and Department of Defense, and it works by borrowing the trust people place in service members.

This article covers how these scams are actually built, where the stolen photos and fabricated stories come from, the warning signs that show up early, how to verify who you're really talking to before sending anything, and what to do if you've already sent money.

If someone claiming to be a deployed soldier is asking you for money right now: stop sending money immediately, insist on a live video call, and skip to How to verify before you send anything.

How Military Romance Scams Actually Work

The pitch is almost always the same: a uniformed, decorated soldier stationed overseas falls fast and hard for someone they've never met, then slowly needs money for reasons a real service member would never actually face.

A stolen photo with a rank attached. The scammer builds a profile around a real soldier's photo — usually lifted from a public Facebook, Instagram, or LinkedIn account — paired with an invented rank, unit, and deployment story that has nothing to do with the person actually in the picture.

Fast, intense emotional investment. "I love you" often arrives within days, framed as the loneliness of deployment finally being answered. The speed isn't sloppy writing — it's designed to build attachment before the victim has a reason to slow down and check anything.

A built-in excuse for never video calling. "Secure communications don't allow video" or "the base blocks it for operational security" is the standard line. It sounds plausible to someone unfamiliar with military life, and it conveniently prevents the one thing that would immediately expose a stolen photo.

Money requests dressed up as military bureaucracy. Once trust is established, the requests start: fees to ship a footlocker of gifts or gold through customs, money for a satellite phone, payment to process early leave paperwork, or help releasing a frozen retirement fund. None of these are real military expenses.

A slow burn that can run for months. Unlike a smash-and-grab scam, these often unfold over weeks or months of daily messages, building enough trust that a request for a few hundred dollars in "shipping fees" feels like a small favor rather than a red flag — and each payment makes the next one easier to ask for.

Where the Fake Persona Comes From

Almost nothing about the profile is original — the photo, the biography, and often the entire script are lifted or generated wholesale, which is exactly what makes the persona checkable if you know where to look.

Real soldiers' public photos, used without consent. Active-duty and veteran service members frequently discover their own photos are being used in dozens of unrelated scam profiles simultaneously, with no way to stop the reuse once it's out there.
Fabricated ID cards and deployment orders. When a victim asks for proof, scammers often send an image of a military ID card or deployment order — easily produced with basic photo editing and a template.
A biography copied from a real officer's public profile. Names, ranks, and base assignments are often lifted wholesale from real personnel, so a basic name check can turn up a genuine person who has no idea their identity is being used.
Organized scam operations, not lone actors. Many of these profiles are run out of the same boiler-room operations behind other romance and investment fraud, complete with shared photo libraries and message scripts.
AI-generated faces built to dodge reverse image search. A growing share of profiles now use entirely synthetic, AI-generated faces instead of a stolen photo of a real person, specifically to avoid surfacing a match.

Warning Signs of a Military Romance Scam

Individually, a few of these details might have an innocent explanation. Together, in the same relationship, they're one of the most consistent fraud patterns tracked by the FTC and Department of Defense.

Professes love within days or weeks of first contact. A declaration of love or talk of marriage before you've had a real phone call is disproportionately common in scam scripts.
Always deployed, never available for a live video call. A story that conveniently keeps the person permanently overseas, with a rotating cast of excuses for why a real-time video call never quite works out, is the single strongest tell.
Contact drifts off-platform almost immediately. Scammers push the conversation to personal email or a messaging app within the first few exchanges, since dating platforms actively scan for and remove known scam accounts.
A story built around money that's stuck, not money that's available. A frozen retirement account, an inheritance held up in customs, or savings that can't be accessed until leave papers are processed are recurring plot devices.
Photos that look too polished, or don't match reverse search results. Professional-looking headshots or a face that turns up attached to a completely different name are strong indicators the photo doesn't belong to the person messaging you.

How to Verify Before You Send Anything

The goal is to test the story against details a scammer can't fake — a real live conversation, a real institution, or a real photo match — before any money changes hands.

Reverse image search every photo they've sent. Run their profile photos through a reverse face search rather than a plain image search — a stolen photo often surfaces attached to a completely different name or a real soldier's own social media account.
Insist on a live, unscripted video call. Not a pre-recorded clip, not a call that mysteriously drops the moment you ask a specific question. A refusal that persists after weeks of "almost working out" is a decision, not a technical problem.
Check the story against the Department of Defense. The DoD's Digital Media/CID and most branches' public affairs offices can confirm whether a stated name, rank, and unit correspond to a real deployed service member.
Look for rank, insignia, and terminology mismatches. Uniform insignia that doesn't match the claimed rank, incorrect chain-of-command terminology, or a duty station that doesn't align with the branch described are common script errors.
Treat any request for money, gift cards, or crypto as a hard stop. Real service members do not pay for leave, do not need help releasing their own retirement funds, and do not ship personal belongings through a private citizen's credit card.

What to Do If You've Already Sent Money

Acting quickly gives you the best — though still limited — chance of recovering a payment, and reporting it helps investigators connect your case to the same operation targeting other victims.

Stop all contact and all further payments immediately. Continued conversation is often used to justify one more payment, framed as the very last one needed.
Contact your bank or gift card issuer right away. Banks can occasionally intercept a wire transfer before it settles, and gift card issuers can sometimes freeze an unredeemed balance — but only within a narrow window.
Report to the FTC, IC3, and the DoD. File a report at reportfraud.ftc.gov, with the FBI's Internet Crime Complaint Center at ic3.gov, and with the Department of Defense's Digital Media/CID, which specifically tracks military-impersonation romance scams.
Report the profile to the platform it came from. Flag the account on whichever dating app, social network, or messaging platform it originated on.
Watch for a follow-up "recovery" scam. Victims are frequently targeted a second time by someone posing as a recovery agent or lawyer who claims they can retrieve the lost funds for an upfront fee. There is no legitimate version of this offer.

Full Response Checklist

Reverse image search every photo they've sent, not just a plain image search
Insist on a live, unscripted video call before any relationship gets serious
Verify the claimed identity through DoD Digital Media/CID or unit public affairs
Watch for rank, insignia, and chain-of-command details that don't add up
Treat any request for money, gift cards, or crypto as a hard stop
Never pay "shipping," "customs," "leave," or "release" fees — none are real
Report the profile to the dating app, social network, or platform it came from
If money is already sent, call your bank's fraud line immediately
File a report at reportfraud.ftc.gov and with the FBI's IC3 at ic3.gov
Watch for a follow-up "recovery agent" scam targeting the same loss
Warn friends or family so the same photo and script don't work twice

FaceSift is a reverse face search tool. Stolen military photos often turn up attached to a completely different name elsewhere online. Upload the photo to see where that face actually appears: facesift.com

AI Voice Cloning Scams: How Fraudsters Fake a Family Member's Voice

FaceSift — Wed, 05 Aug 2026 07:40:20 +0000

Published: August 5, 2026 · 11 min read

Modern voice cloning tools need three to ten seconds of audio — a voicemail greeting, a TikTok, a voice note forwarded in a group chat — to produce a clone convincing enough to fake a panicked call from a grandchild, a kidnapping hostage, or a CEO ordering an urgent wire transfer.

This article covers how these scams are actually built, the warning signs that survive even a perfect voice clone, what to do in the moment a suspicious call comes in, how to respond if you've already sent money, and how to make the scam fail before it starts.

If you're on a call right now that feels like this: hang up and call the person back on a saved number, never send gift cards or wire money under pressure, and skip to What to do during the call.

How AI Voice Cloning Scams Actually Work

Voice cloning used to require hours of studio-quality audio. Modern models need three to ten seconds to produce a convincing clone that can say anything the scammer types.

The "grandparent scam," rebuilt with a real voice. A caller claims to be a grandchild in trouble — arrested, in a car accident, stranded abroad — and needs money wired immediately, often through gift cards or crypto to avoid a paper trail. The classic version relied on a shaky connection and a stranger's guess at family names. The AI version plays back an actual cloned voice of the grandchild, pulled from a public social media video, making the panic far harder to shake off.

Fake executive calls for wire transfers. A finance employee gets a call or voicemail that sounds exactly like the CEO or CFO, instructing an urgent, confidential wire transfer — usually timed around a real acquisition, board meeting, or travel day pulled from public company news. Several real corporate losses in the seven-figure range have been traced to this exact pattern.

Kidnapping and hostage hoaxes. Scammers call claiming to be holding a family member hostage, playing a cloned voice crying or begging for help in the background to prevent the target from hanging up and verifying independently. The audio is often looped or short, since a live conversation would expose the trick.

Where the source audio comes from. Public Instagram Reels and TikTok videos, YouTube appearances, voicemail greetings, podcast clips, and even voice notes sent in a group chat that later gets scraped or breached. Almost none of it requires hacking a phone — it's built from audio the person, or someone in their circle, already posted publicly.

Combined with a cloned face. The same generative tools that clone a voice can drive a real-time deepfake video overlay on a call. A small but growing number of scams now pair a cloned voice with a live video deepfake, making a video call with the "family member" or "colleague" just as unreliable as an audio-only one.

Warning Signs During the Call

A cloned voice can nail the tone and cadence of someone you know, but the surrounding pressure tactics and technical artifacts are much harder for a scammer to fake convincingly.

Extreme urgency paired with secrecy. "Don't tell anyone else, I need this right now" is the single most consistent tell across voice cloning scams. Legitimate emergencies rarely require secrecy from the rest of your family or company at the exact moment help is available.
Payment method that can't be reversed. Requests for gift cards, wire transfers, or cryptocurrency — rather than a normal payment app or card — are a hallmark of nearly every version of this scam, because none of those methods can be clawed back once sent.
Refusal or avoidance of a video call. If the caller has an excuse for why they can't switch to video while insisting the call continue, treat that refusal itself as a red flag, even if the voice sounds exactly right.
Slight audio artifacts or unnatural pacing. Some clones have flattened emotional range, uneven pacing on longer sentences, cut-off word endings, or background noise that doesn't shift naturally. Easy to miss under stress — which is exactly why the scam relies on pressuring you not to slow down.
Details that don't add up on a second thought. A location, timeline, or circumstance that shifts when you ask a clarifying question is a stronger signal than the voice itself — voices can be cloned, but a coherent, verifiable story is much harder to fabricate on the fly.

What to Do During the Call

Hang up and call back on a known number. End the call and dial the person directly using a number already saved in your phone — never a number the caller gives you.
Use a family or company safe word. Agree in advance on a word or phrase only real family members or colleagues would know, used any time money is requested urgently by phone.
Ask a question the scammer can't script. A specific, personal detail — not something guessable from a public profile — often breaks the illusion immediately.
Verify through a second channel before sending anything. Text the person on a different platform, or call another family member or coworker who could confirm the situation.
Never act on the call alone under time pressure. Legitimate emergencies involving money almost always allow a few minutes to verify. A caller insisting there is zero time to check is one of the strongest indicators of a scam in progress.

What to Do If You've Already Sent Money

Speed matters more than anything else here — the window to reverse a wire transfer, freeze a gift card, or flag a crypto transaction closes fast, often within hours.

Contact your bank or wire service immediately. Request a recall or reversal — banks can sometimes intercept a wire transfer before it settles, but only within a narrow window.
Report gift card scams to the issuer right away. Apple, Google Play, Amazon, Target, and other issuers have fraud lines that can occasionally freeze an unredeemed card's balance if reported quickly.
Report to the FTC and IC3. File at reportfraud.ftc.gov and, for larger losses, with the FBI's Internet Crime Complaint Center at ic3.gov.
Monitor for follow-up attempts. Scammers who succeed once frequently return claiming the first transfer "didn't go through," or with a new emergency. Flag the account for extra fraud monitoring.
Warn your family or company. This closes the door on a scammer trying the same script on someone else in your circle using the same cloned voice.

Protecting Yourself and Family Going Forward

You can't stop your voice from being cloneable, but you can build habits that make a cloned-voice call fail regardless of how convincing the audio is.

Set up a safe word with family and close colleagues now. Do this before an emergency, not during one — and make sure older relatives, who are frequently targeted, know it too.
Limit how much voice and video content is public. Private social accounts, trimming old public videos with long clean audio, and caution with voice notes in large group chats all shrink the raw material available for cloning.
Establish call-back verification for business wire requests. Never trust a number provided in the same call or email — always call back a previously verified number, regardless of how senior the requester sounds.
Talk to older relatives specifically about this scam. Older adults are disproportionately targeted by grandparent and kidnapping-hoax variants, partly because they're less likely to have heard voice cloning is now a mainstream scam technique.
Treat a matching video call with the same suspicion. Cloned voices are increasingly paired with real-time deepfake video. A reverse face search on a suspicious profile photo used alongside the call is one more way to check who you're actually dealing with.

Full Response Checklist

Hang up and call the person back on a number already saved in your phone
Never send gift cards, wire transfers, or crypto under time pressure
Use a pre-agreed family or company safe word to confirm identity
Refuse any request to keep the call secret from family or coworkers
Ask a personal question that a scammer couldn't script from public info
Verify the story through a second channel before sending anything
Set up call-back verification for any business wire request
Limit public voice and video clips that provide raw cloning material
If money is already sent, call your bank's fraud line immediately
Report gift card scams directly to the issuer for a possible freeze
File a report at reportfraud.ftc.gov and, for large losses, ic3.gov
Warn family or coworkers so the same script doesn't work twice

FaceSift is a reverse face search tool. If a suspicious call is paired with a stolen profile photo or a deepfake video, upload the photo to see where that face actually appears online: facesift.com

# Best Reverse Image Search Apps for Mobile in 2026 — Compared

FaceSift — Tue, 04 Aug 2026 08:06:04 +0000

Published: August 4, 2026 · 9 min read

Most reverse image searches now start on a phone — a screenshot from a dating app, a photo from a marketplace listing, a face in a group chat you don't recognize. But not every tool that works great on desktop translates cleanly to mobile. Some need a dedicated app, some are just a scaled-down website, and some are built mobile-first from day one.

This guide compares the five best ways to run a reverse image or face search directly from your phone — what's a real app, what's browser-only, and which one to reach for depending on what you're trying to find.

Quick Pick by Use Case

Use case	Best option
Identify an object or landmark using your camera	Google Lens
Search visually using Bing or Edge instead of Google	Bing Visual Search
Run a full identity check (photo + name + phone) from an app	Social Catfish
Face search from a mobile browser, nothing to install	PimEyes or FaceSift
Snap a photo and instantly find the same face online	FaceSift
Verify a dating profile photo before meeting up	FaceSift → then Google Lens

Apps Covered

Google Lens — Best all-purpose visual search built into your phone
Bing Visual Search — Best Google Lens alternative with Copilot integration
Social Catfish — Best dedicated app for investigating a specific person
PimEyes — Best web-based face search from a mobile browser
FaceSift — Best mobile-first reverse face search, no app to install

#1 Google Lens

Best all-purpose visual search built into your phone · Free

Best for: Identifying objects, translating text, and finding visually similar images instantly from your camera

Ratings: Overall ★★★★★ | Face match ★★ | Coverage ★★★★★ | Privacy ★★★ | Ease of use ★★★★★

Google Lens is baked directly into the Android camera and the Google app on iOS, so there's rarely a separate install needed. Point your camera at anything — or pick a photo from your library — and it identifies objects, text, landmarks, and products, and surfaces visually similar images from across the web.

Strengths

Built into the Android camera and Google app on iOS — usually no separate download required
Instant on-device recognition of objects, text, landmarks, and products
Free with no usage limits
Crop tool lets you narrow the search to one part of the photo
Largest visual index of any mobile option

Weaknesses

Matches pixel patterns, not identity — rarely links different photos of the same person
No dedicated face search
Queries tied to your Google account, which some users find invasive
Requires an internet connection to process

How to use: On Android, open the Camera app or Google app and tap the Lens icon. On iOS, open the Google app → tap the camera icon in the search bar → upload or snap a photo.

#2 Bing Visual Search

Best Google Lens alternative with Copilot integration · Free

Best for: Visual search on iOS or Android through the Bing or Edge app, especially if you're avoiding a Google account

Ratings: Overall ★★★ | Face match ★ | Coverage ★★★ | Privacy ★★★ | Ease of use ★★★★

Bing's visual search sits inside the Bing and Edge mobile apps and works much like Google Lens — snap or upload a photo and get matched objects, products, and similar images back. Its edge is Copilot integration, which lets you ask follow-up questions about what's in the photo.

Strengths

Built into the Bing and Edge mobile apps, no extra download
Copilot lets you ask conversational follow-up questions about the image
Strong product and shopping recognition
Free with no usage caps

Weaknesses

Smaller visual index than Google
No face-matching capability
Full feature set requires signing into a Microsoft account
Object detection is noticeably less accurate than Lens on cluttered photos

How to use: Open the Bing or Edge app → tap the camera icon in the search bar → upload a photo or take one on the spot.

#3 Social Catfish

Best dedicated app for investigating a specific person · Paid · Face search

Best for: Running a full identity investigation — photo, name, and phone number — from a native app

Ratings: Overall ★★★ | Face match ★★★ | Coverage ★★★ | Privacy ★★★ | Ease of use ★★★★

Social Catfish is a native iOS and Android app built specifically for catfish and identity investigations. Rather than pure image matching, it combines a reverse photo search with name, phone, and email lookups against people-search databases, aiming to give a fuller picture of who's behind a profile.

Strengths

Real native app with a guided, non-technical flow
Combines photo search with name, phone, and email lookup in one place
Useful when you have more than just a photo to go on

Weaknesses

Subscription required to see any meaningful results
Face-matching accuracy is weaker than dedicated face search engines
Persistent upsell prompts throughout the app
Results often padded with generic people-search data unrelated to the photo

How to use: Download Social Catfish from the App Store or Google Play → sign up for a plan → upload a photo, name, or phone number to start a search.

#4 PimEyes

Best web-based face search from a mobile browser · Freemium · Face search

Best for: Getting a second opinion face search from your phone without installing anything

Ratings: Overall ★★★★ | Face match ★★★★★ | Coverage ★★★★ | Privacy ★★★ | Ease of use ★★★

PimEyes doesn't have a native app — it runs entirely through a mobile browser — but its face-matching engine is one of the strongest available, built on a deep index of faces crawled from across the public web.

Strengths

Powerful face-matching engine with a deep index
Works in any mobile browser, nothing to install
No account required to run a first search

Weaknesses

No native app, so the interface is a shrunk-down desktop layout, not built for touch
Most results are locked behind a paid PROtect subscription
Can surface unexpected adult-content matches
Checkout and account flow are clunky on a small screen

How to use: Open pimeyes.com in your phone's browser → upload a photo from your camera roll → review blurred preview matches → subscribe to unlock full results.

#5 FaceSift

Best mobile-first reverse face search, no app to install · Freemium · Face search

Best for: Taking a photo with your phone and finding the same face across the web in under a minute

Ratings: Overall ★★★★★ | Face match ★★★★★ | Coverage ★★★★ | Privacy ★★★★★ | Ease of use ★★★★★

FaceSift is designed mobile-first rather than adapted from a desktop layout. You can snap a photo directly with your camera or pick one from your library, walk through a touch-friendly consent step, and get results sized to read comfortably on a phone screen — no download, no account.

Strengths

Built mobile-first — camera capture and photo picker work natively, not through a clunky file browser
No app download and no account required
Consent flow designed for touch, not a shrunk desktop modal
Results and confidence scores are readable without zooming or scrolling sideways
Pay-per-search ($1) instead of a recurring subscription

Weaknesses

Face search only — not useful for objects, products, or scenes
Unlocking source URLs costs $1 per search
No offline or native app, browser-only by design
Requires a clear human face in the photo

How to use: Open facesift.com in your phone's browser → tap to take a photo or choose one from your library → accept the consent step → wait about a minute for results → unlock source URLs for $1.

Side-by-Side Comparison

App	Face search	Native app	Price	Privacy	Best use case
Google Lens	✗	✓ (built-in)	Free	Moderate	General visual search
Bing Visual Search	✗	✓	Free	Moderate	Google Lens alternative
Social Catfish	✓	✓	Subscription	Moderate	Full identity investigation
PimEyes	✓ Strong	✗ (mobile web)	Freemium	Moderate	Deep face-index search
FaceSift	✓ Purpose-built	✗ (mobile web)	$1/search	High	Mobile face verification

When to Combine Options

A single mobile search rarely settles a question on its own. These combinations work well from a phone:

Verifying a dating profile photo on the go
FaceSift (finds different photos of the same face) → Google Lens (checks for exact copies elsewhere)

Meeting someone from an app for the first time
FaceSift (confirms the face is real and findable) → Social Catfish (cross-checks name and phone number)

Investigating a photo shared in a group chat
Google Lens (context — where else has this image appeared) → FaceSift (identity — who is this person)

Checking a marketplace seller's profile photo before buying
Google Lens (quick copy check) → FaceSift (confirm the face isn't stolen from someone else)

Need to check a face from your phone, right now? FaceSift is built mobile-first — no app to download, no account to create. Open facesift.com in your browser and get results in under a minute.

Marketplace Scams: How to Spot a Fake Buyer or Seller Before You Meet

FaceSift — Sun, 02 Aug 2026 19:23:02 +0000

Published: August 2, 2026 · 11 min read

Facebook Marketplace, Craigslist, and OfferUp work because buyers and sellers extend a small amount of trust to a stranger before a platform can fully verify either side. Scammers exploit exactly that gap — with fake payment screenshots, phantom shipping labels, overpayment refund tricks, and in-person meetups gone wrong.

This article covers how these scams actually run, the red flags in the listing and the chat, how to verify a buyer or seller in a few minutes, and what to do if you've already paid, shipped, or been scammed.

Hard stops: if you're asked to trust a payment screenshot instead of your own account, refund an "overpayment," ship using a label you didn't buy, or pay by gift card, wire, or crypto only — stop. These disqualify the deal regardless of how legitimate everything else looks.

How Marketplace Scams Actually Work

The listing never existed (or never will ship). A too-good price on a popular item — a console, a phone, concert tickets — draws you into a chat that moves off-platform fast. You pay by Zelle, CashApp, or gift card "to hold it," and the seller goes silent the moment the payment clears.

Fake payment confirmation screenshots. A "buyer" sends a screenshot that looks exactly like a Zelle, Venmo, or PayPal confirmation and asks you to ship or hand over the item before you check your actual account balance. The screenshot is fabricated — no money ever moves.

Overpayment refund scams. A buyer "accidentally" sends more than the asking price — often via a fake or stolen payment method — and asks you to refund the difference through a different channel. The original payment later reverses or was never real, and the refund you sent is gone.

Shipping-label and tracking-number scams. For items sold for shipping, a buyer sends a "prepaid shipping label" PDF that looks legitimate but is fake or stolen — the package gets seized or redirected, and you're left having shipped a real item for a payment that never lands.

Fake escrow or "marketplace protection" sites. A buyer insists on using a third-party escrow or protection service to make the deal feel safer — but the site is a lookalike built for the scam, and any funds you send to it disappear immediately.

Meet-up robbery or bait-and-switch. For high-value in-person sales (electronics, jewelry, vehicles), a "buyer" arranges a meetup to rob you outright, or shows up with counterfeit cash, a stolen check, or a device that's been swapped for a broken one after you've already handed over the real item.

Red Flags in the Listing or the First Message

Price is significantly below market value. A listing priced well under what similar items sell for is the single most common lure.
The seller or buyer wants to move off-platform immediately. A message that pushes you to continue over WhatsApp or Telegram within the first exchange is avoiding a platform with built-in reporting and message history.
Urgency to pay before you can inspect the item. Pressure to "send payment now to secure it" before you've seen the item or met is designed to get money moving before you've had a chance to think it through.
Only stock photos, or the same photo used across many listings. A reverse image search on the listing or profile photo often reveals it's a stock image, or reused across dozens of unrelated listings.
New or nearly empty profile with no history. An account created days ago, with no prior sales or mutual friends, carries meaningfully more risk.
Refuses a video call or live photo. A legitimate seller can usually send a quick video or a photo with today's date within minutes.

Red Flags When You're Asked to Pay, Ship, or Meet

A payment "confirmation" you haven't verified in your own account. Never ship or hand over an item based on a screenshot. Log into your own bank or payment app directly and confirm the funds actually landed first.
You're asked to refund an overpayment. If a buyer sends more than agreed and asks for money back through a different method, treat it as a scam by default.
A shipping label you didn't generate yourself. Only ship using a label you purchased yourself through a carrier's official site.
Insistence on a third-party escrow or "protection" link. Legitimate marketplaces handle protection internally.
Payment methods that are hard to reverse. Requests to pay by gift card, wire transfer, cryptocurrency, or Zelle for a stranger's goods are difficult or impossible to claw back once sent.
Pressure to meet somewhere private or off-camera. This raises your physical risk, not just your financial risk.

How to Verify Before You Pay, Ship, or Meet

Confirm funds in your own account, not in a screenshot.
Reverse-search the listing and profile photos to check whether it's a stock photo, stolen, or reused across many other listings.
Meet in a public, well-lit, monitored location — many local police departments offer designated "safe exchange zones" with security cameras.
Buy shipping labels yourself, and use tracked, insured shipping.
Use the platform's built-in payment and messaging when offered.
Trust your instinct on urgency. If a deal only works because you have to decide in the next few minutes, that pressure is itself the red flag.

What to Do If You've Already Paid, Shipped, or Been Scammed

Contact your bank or payment provider immediately.
Report the listing and the account to the platform.
File a police report for in-person theft or robbery.
File a report with the FTC and IC3 — reportfraud.ftc.gov and ic3.gov both take marketplace fraud reports.
Stop shipping or communicating the moment something feels wrong.

Fake marketplace profiles often reuse a stolen photo across dozens of listings. Upload the photo to FaceSift and see where else that face appears online. 60 seconds. No account required.

Originally published on FaceSift.

Online Privacy Audit: What Can Strangers Find About You? (2026)

FaceSift — Sat, 01 Aug 2026 19:39:39 +0000

Originally published on the FaceSift blog.

Most people assume their online presence is roughly under control. They set their Instagram to private, they use a different name on forums, they are "careful" about what they share. Then they actually search for themselves — and find their home address on a data broker site, their face on a fake dating profile, a decade of forum posts linked to their real name, and their daily commute route reconstructed from location check-ins.

This guide walks through a complete online privacy audit you can run in about 15 minutes. No technical skills required. Just a browser and the willingness to see what is actually out there.

What a Motivated Stranger Can Learn About You in 10 Minutes

Using only free, public tools:

Your face and where it appears online
Your home neighbourhood from location tags
Your employer from LinkedIn or bio
Your daily routine from post timestamps
Your phone number from old forum posts
Your relationships from tagged photos
Your email address from data breaches
Whether your passwords have been leaked

Audit Steps

Face Search Audit — ~3 min
Username & Email Exposure — ~2 min
Social Media Leaks — ~3 min
Search Engine Footprint — ~2 min
App & Device Permissions — ~3 min
How to reduce your footprint

01 · Face Search Audit

~3 min · Threat: Fake profiles, impersonation, commercial misuse

Upload your photo to a reverse face search engine to see every public page where your face appears. Most people are surprised — photos they posted years ago on platforms they no longer use, appearances in news articles, backgrounds of other people's photos, or active fake profiles using their face.

How to run this check:

Choose 2–3 photos you commonly use as profile pictures
Upload each one to FaceSift and wait for results
Review matches above 75% similarity — check the source pages
Also run each photo through Google Images to catch exact file copies

Red flags to look for:

Your face appearing under a different name on a dating platform
Your photo on a site you have never visited or given permission to
Commercial use — advertising, product pages, stock photo sites

Run your face audit now: FaceSift scans the public web for your face across different photos — not just exact image copies. Upload your most common profile photo to start. Also check our full guide on finding photo misuse.

02 · Username & Email Exposure

~2 min · Threat: Account enumeration, credential stuffing, targeted phishing

Your username and email address are more revealing than they look. A single username used across multiple platforms creates a trail that links your gaming identity to your professional profile to your forum posts — potentially exposing years of activity you thought was anonymous.

How to run this check:

Go to sherlock-project.com and enter your most-used username
Review every platform where that username is registered
Search your email address on haveibeenpwned.com to check for data breaches
Google your username in quotes — check what content surfaces

Red flags to look for:

Your username appearing on platforms you don't remember registering on
Your email in a data breach — especially one that included passwords
Forum posts or comments from years ago surfacing with personal details

03 · Social Media Leaks

~3 min · Threat: Location tracking, routine exposure, relationship mapping

Social media profiles leak far more than most people realise — not through a single post, but through the accumulation of small details across many posts. A determined stranger can piece together your home neighbourhood, daily routine, workplace, relationship network, and income level from a public profile in minutes.

How to run this check:

View your own profile as a logged-out stranger (open in private browser)
Check tagged photos — others may have tagged your location or workplace
Review your oldest posts and photos — what did you share years ago?
Check what appears when you Google your full name + social platform names

Red flags to look for:

Location check-ins, tagged locations, or backgrounds that reveal your home area
Routine patterns visible in post timestamps (same time every day = predictable schedule)
Phone number, email, or workplace visible in bio or old posts
Photos that show your car, home exterior, or street address

04 · Search Engine Footprint

~2 min · Threat: Data aggregation, background check sites, doxxing

Google your own name — properly. Most people do this casually and stop at the first page. A thorough audit goes deeper and tries different search combinations that a stranger with bad intent would actually use.

How to run this check:

Search: "Your Full Name" — check the first 3 pages
Search: "Your Full Name" + your city
Search: "Your Full Name" + your employer or school
Check the Images tab for any photos you didn't publish yourself
Look for data broker listings (Spokeo, BeenVerified, Whitepages, PeekYou)

Red flags to look for:

Your home address appearing on data broker sites
Phone number visible in search results
Court records, property records, or other public documents surfacing
Photos appearing that you did not post yourself

05 · App & Device Permissions

~3 min · Threat: Location harvesting, microphone/camera access, contact scraping

The data collected by apps on your phone is often more sensitive than anything you post online — continuous location tracking, contacts, microphone access, photo library. Most people grant permissions without reviewing them and never check again.

How to run this check:

Open Settings → Privacy on your phone and review Location permissions
Check which apps have access to Camera, Microphone, and Contacts
Review apps with 'Always On' location access — reduce to 'While Using'
Check which apps can access your photo library and whether 'All Photos' is necessary

Red flags to look for:

Apps with 'Always' location access that don't need it (games, utilities)
Apps with microphone access that serve no audio purpose
Old apps you no longer use but that still hold permissions

How to Reduce Your Footprint

Once you know what is out there, here is how to pull it back. Start with the highest-impact steps.

High impact — do these first

Set social profiles to private. Instagram, Facebook, and TikTok all allow you to restrict who sees your posts and profile. Do this for any platform where you share personal content.
Opt out of data broker sites. Sites like Spokeo, BeenVerified, Whitepages, and Radaris aggregate and sell your personal data. Each has an opt-out form. It is tedious but effective — or use a service like DeleteMe (~$100/year) to automate it.
Remove your phone number from public profiles. Phone numbers are one of the most useful pieces of data for targeted attacks. Remove them from all public-facing profiles unless strictly necessary.
Request Google to remove personal data from search results. Google's 'Results about you' tool (myaccount.google.com) lets you request removal of results showing your address, phone number, or other personal information.

Medium impact — do these next

Audit old posts and photos. Set a few hours aside to review your oldest content. Delete or restrict posts that reveal your address, routine, workplace, or relationships in ways you would not want a stranger to see.
Use different usernames across platforms. A single username linking your professional, gaming, and personal identities creates a data aggregation risk. Use distinct usernames for contexts you want to keep separate.
Enable 2FA on all accounts. Leaked passwords are only dangerous if the attacker can actually log in. Two-factor authentication stops most credential stuffing attacks even after a breach.
Review app permissions every 6 months. Apps accumulate permissions over time. A periodic review revokes access from apps you no longer use and limits ongoing data collection.

Ongoing — run these periodically

Re-run this audit every 6 months. Your digital footprint changes as you post new content, appear in others' photos, or have your data included in new breaches. A periodic audit catches new exposure before it becomes a problem.
Set a Google Alert for your name. Go to google.com/alerts → enter your full name in quotes → set to 'As it happens'. You will be notified any time your name appears in newly indexed content.
Monitor for new data breaches. Have I Been Pwned (haveibeenpwned.com) offers free breach monitoring — enter your email address and you will receive an alert any time it appears in a newly disclosed breach.

Your Privacy Audit Checklist

01  Run reverse face search on your 2–3 main profile photos
02  Check your photos on Google Images
03  Run your username through Sherlock
04  Check your email on Have I Been Pwned
05  View your social profiles logged out
06  Google your full name + city + employer
07  Check data broker sites for your address
08  Review app location permissions
09  Set a Google Alert for your name
10  Enable 2FA on critical accounts

Start with your face audit. The fastest way to see where your face appears online. Upload a photo at facesift.com — results in under a minute.

# Job Offer & Task Scams: How to Spot a Fake Recruiter Before You Pay

FaceSift — Sat, 01 Aug 2026 19:06:38 +0000

Published: August 1, 2026 · 11 min read

Job scams have moved off obviously sketchy classifieds sites and onto LinkedIn, WhatsApp, and Telegram — platforms people already trust with their real job search. The pitch varies — a remote role, a "task" that pays per completion, an app-testing gig — but the goal is almost always the same: get money or personal data from you before any real employer enters the picture.

This article covers how these scams actually run, the red flags in the offer itself and in onboarding, how to verify a recruiter or company in a few minutes, and what to do if you've already paid or shared information.

Hard stops: if you're asked to pay for training or equipment, deposit a check and send part of it elsewhere, or receive and reship packages — stop. These disqualify the offer regardless of how legitimate everything else looks.

How Job & Task Scams Actually Work

Task scams (app-testing / product-review jobs). You're recruited to "optimise" listings or leave reviews for an app or online store, earning a small commission per task. Early tasks pay out instantly to build trust. Eventually a task requires you to deposit your own money to "unlock" a higher commission tier — and the balance, along with your deposit, becomes permanently unwithdrawable.

Fake recruiter outreach. A message arrives out of nowhere — often on LinkedIn, then quickly moved to WhatsApp or Telegram — offering a well-paid remote role with minimal qualifications required. The recruiter's profile photo, company name, and even a fake careers page are often real details stolen or spoofed to look legitimate.

Overpayment / check cashing scams. You're "hired", sent a check for equipment or supplies that's larger than needed, and told to deposit it and wire back the difference. The check later bounces — days after you've already wired real money from your own account.

Reshipping and "money mule" jobs. A "logistics coordinator" or "quality control" role asks you to receive packages at your home address and reship them elsewhere, or to move money through your personal bank account. Both are typically laundering stolen goods or fraud proceeds — and you can be held legally liable even if you didn't know.

Pay-to-start onboarding. After a fast, informal "interview" — sometimes text-only — you're told the role requires you to purchase your own equipment, software licences, or a "training kit" through a specific link, with a promise of reimbursement in your first paycheck that never arrives.

Red Flags in the Job Offer Itself

Pay that's high relative to the effort described. A vague role description paired with an unusually high hourly rate for minimal experience is the single most common tell.
Contact moves off the hiring platform immediately. A recruiter who messages you on LinkedIn and asks to continue on WhatsApp or Telegram within the first message is avoiding a platform with reporting tools and a paper trail.
You're hired with no real interview. A same-day hire based on a short chat, with no call and no discussion of your actual experience, is a scripted process designed to move fast before you think it through.
Urgency to accept or start immediately. Pressure to respond within hours is designed to short-circuit the research you'd otherwise do.
The job description is vague or generic. Postings that describe pay and flexibility in detail but say almost nothing concrete about daily responsibilities are frequently templated across dozens of fake listings.

Red Flags During the Interview or Onboarding

Requests for sensitive data before an official offer letter. A legitimate employer collects your SSN, bank details, or ID only after a formal, signed offer — not informally in chat.
You're told to buy your own equipment through a specific link. Real employers provide equipment directly or reimburse through a normal expense process — they don't require one specific vendor link with promised reimbursement "in your first check".
You're asked to deposit a check and send part of it elsewhere. No legitimate onboarding ever requires this. It's check fraud, and you're liable once the check bounces.
Communication comes from a personal email domain. An "HR" contact emailing from Gmail, or a domain that only loosely resembles the real company's, is one of the easiest scams to catch — compare it character-by-character against the company's actual website.
The recruiter's photo doesn't match who they claim to be. A reverse face search on the profile photo can reveal if it belongs to someone else entirely, or appears across multiple unrelated "recruiter" profiles.

How to Verify Before You Pay or Share Anything

Go to the company's official careers page directly. Type the URL yourself and check whether the role is actually listed there.
Search the recruiter's name and company together. A search for "[recruiter name] scam" or "[company name] hiring scam" surfaces reports from prior targets remarkably often.
Call the company through a number you find independently. Not one given to you in the offer — this single step defeats the majority of fake-recruiter scripts.
Never pay to get a job. Legitimate employment never requires payment for training, equipment, or "processing fees" before you've received a paycheck.
Don't deposit checks or move money on someone else's instruction. If onboarding involves depositing a check and forwarding money, or reshipping packages, stop immediately.

What to Do If You've Already Paid or Shared Information

Contact your bank or payment provider immediately. Some transfers can still be reversed or flagged within a narrow window, and your bank needs to know a fraudulent check was deposited to your account.
Change passwords and freeze your credit. If you shared your SSN, ID, or bank details, place a fraud alert or credit freeze with the major credit bureaus.
Report it to the platform where contact started. This gets the listing taken down and can prevent the same script from reaching other people.
File a report with the FTC and IC3. Reportfraud.ftc.gov and the FBI's Internet Crime Complaint Center (ic3.gov) both take job scam reports.
Stop any reshipping or fund transfers immediately. Keep records of everything — dates, tracking numbers, instructions received — in case you need to demonstrate you were an unknowing participant.

Fake recruiter profiles often reuse a stolen headshot across dozens of listings. Upload the photo to FaceSift and see where else that face appears online. 60 seconds. No account required. Check a Photo →

# Is Someone Using My Photos Without Permission? How to Find Out

FaceSift — Thu, 30 Jul 2026 07:40:23 +0000

Published: June 2, 2026 · 9 min read

Your photos can end up in places you never intended — a fake dating profile using your face to scam strangers, a stock photo site selling your image for profit, a news article that cropped you from a group shot, or a scammer running a romance fraud operation with your identity. Most people never find out. This guide shows you how to check, what to do when you find something, and how to make it harder to happen again.

How Photos Get Stolen and Reused

Most photo theft is not personal — it is opportunistic. Scammers, spammers, and fraudsters scrape publicly visible profiles looking for attractive, credible-looking photos that will serve their purpose. Your face does not need to be famous to be useful to someone running a fake identity.

Romance scam profiles
This is the most common misuse. Your photos are used to build a fake persona on a dating app or social network. The person behind the profile uses your face to attract victims, build emotional connections, and eventually extract money. You will not know it is happening unless someone tells you or you find it yourself.

Fake social media accounts
Your photos are used to create an account impersonating you — sometimes to damage your reputation, sometimes to approach your friends and family, sometimes simply to create a believable fake persona for some other fraud. These accounts can exist for months before anyone notices.

Unauthorised commercial use
Photos scraped from public profiles have appeared on stock photo sites, in advertisements, on product packaging, and in news articles — all without the subject's consent or payment. In many jurisdictions this is illegal regardless of whether the original photo was publicly posted.

Data broker and background check sites
Sites like BeenVerified, Spokeo, and dozens of others aggregate public data including photos and sell access to it. Your face may appear alongside your name, address, employer, and relatives on sites you have never visited and cannot directly control.

AI training datasets
Publicly posted photos have been scraped en masse for use in AI training datasets — without consent. Several major lawsuits are ongoing. If your photos were public at any point, there is a real possibility they are in one or more AI datasets.

How to Search for Your Own Face Online

Use multiple tools — each covers different ground. A thorough audit runs all three.

1. Reverse face search — finds your face across different photos (most important)

Upload a clear photo of yourself to FaceSift and it scans the public web for other pages where your face appears — even in completely different photos that share no pixels with the one you uploaded. This catches fake profiles, news appearances, commercial uses, and any other context where your face was indexed.

Run this for each of your commonly used profile photos — different photos may surface different results. Takes about 60 seconds per search.

2. Google Images reverse search — finds exact copies

Go to images.google.com, click the camera icon, and upload your photo. Google will find pages that contain an identical or near-identical copy of that specific image file. This catches direct reposts — someone who saved your exact photo and reused it. It will not find photos of you taken from a different angle or at a different time. Run this for each individual photo you want to track.

3. TinEye — traces where a photo was first published

tineye.com is specialised for tracking image copies and their origin. Upload a photo and it returns all indexed pages where that image appears, sortable by oldest first. If one of your photos has been copied and spread across multiple sites, TinEye often shows the full chain. Particularly useful for commercial misuse where your photo was published on a website rather than a social platform.

4. Name + image search on Google

Search your full name on Google and check the Images tab. Browse through results to verify each appearance is legitimate. Try variations — first name only, name + city, name + job title. Also search your name in combination with keywords like "profile" or "dating" if you are concerned about impersonation on dating platforms specifically.

What You Might Find — and What It Means

Your photo on a dating profile with a different name

This is active identity theft. Your face is being used to deceive people on a dating platform — potentially to run a romance scam. This warrants immediate action: reporting to the platform, notifying potential victims if possible, and documenting everything.

Your photo on news sites, blogs, or forums

May or may not require action depending on context. A photo taken in a public space and used in a news article about an event you attended may be legal in many jurisdictions. A photo taken from your private profile and used without credit or consent is a different matter — especially if it implies endorsement of a product or position you do not hold.

Your photo used commercially

If your photo is being used in advertising, on product packaging, or on a commercial website without your consent, you may have a legal claim regardless of whether the original photo was public. Right of publicity laws in many countries protect against commercial use of your likeness without permission. Document everything and consider legal advice.

Your photo on data broker sites

Sites like Spokeo, BeenVerified, or PeekYou aggregate public data. Finding your photo there is unsettling but common. Most of these sites have opt-out processes — time-consuming but effective. Some privacy-focused services like DeleteMe automate removal requests across dozens of these sites.

Legitimate appearances you forgot about

Many results will simply be your own legitimate social media profiles, articles you were quoted in, events you attended, or professional pages. These are not a problem — but reviewing them gives you a clear picture of your actual digital footprint, which is useful in itself.

What to Do When You Find Misuse

Document before acting

Screenshot everything — the page, the URL, the date, the context. Before any takedown request is filed, you need a record of what existed and where. Platforms respond to reports by removing content, which means the evidence disappears. Save it first.

Report to the platform

Every major platform has a mechanism for reporting unauthorised use of your likeness or impersonation:

Dating apps (Tinder, Bumble, Hinge): Report the profile as "Using someone else's photos" or "Impersonation" — most apps have a dedicated flow
Instagram / Facebook: Report → It's pretending to be me → Me
LinkedIn: Report profile → Fake profile → Using my photos
X (Twitter): Report → They're pretending to be someone else → Me
Google (image in search results): Request removal via google.com/intl/en/about/products → Legal → Removals

File a DMCA takedown for copyright violation

In most countries, you own the copyright to photos you took of yourself (selfies, self-portraits). If someone is republishing your copyrighted photo on a website, you can file a DMCA takedown notice directly with the hosting provider. The host is legally required to remove the content or lose safe harbour protection. Google also accepts DMCA requests to remove URLs from search results.

Alert potential victims if a fake profile is active

If your face is being used in an active romance scam, real people are being deceived right now. If you can identify who the scammer is targeting — for example through mutual connections on a platform — consider warning them directly. Scam-reporting communities like SCARS (scamsurvivors.com) can also help spread awareness.

For commercial use: consider legal action

Unauthorised commercial use of your likeness is actionable in most jurisdictions. If a company is using your photo in advertising or on a product without your consent, the potential damages can be significant. Document the use thoroughly and consult an intellectual property or right-of-publicity lawyer — many offer free initial consultations.

How to Prevent It Going Forward

You cannot make your photos completely theft-proof if you participate in any public-facing online activity. But these steps significantly reduce your exposure:

Set social media profiles to private. The most effective single step. Scammers target publicly visible profiles. If your photos require a follow or connection request to view, they are inaccessible to scrapers.
Audit your existing public photos. Go through your profiles and remove or restrict photos you would not want appearing on a fake profile. Old photos are often the source — people forget what they posted years ago.
Watermark photos used for professional purposes. If you publish photos publicly for professional reasons — a portfolio, a blog, a business page — adding a subtle watermark with your name or domain makes misuse attributable and slightly harder to present as someone else.
Use different profile photos across platforms. If you use the same photo everywhere, a single theft covers every platform. Different photos for different contexts limits the blast radius and makes it easier to track the source of a leak.
Run a face search audit every few months. A one-time check is a snapshot. Periodic searches catch new misuse before it causes lasting harm. Set a recurring reminder to re-run your own face search every 3–6 months.
Reverse search before posting new photos. Before posting a new profile photo, quickly check it has no unexpected prior appearances — especially if you bought it from a photographer or stock site and do not exclusively own it.

Search for your own face right now. Upload your photo at facesift.com and find where your face appears across the public web. No account required. Takes 60 seconds.

# How to Verify Someone's Identity Before You Trust Them Online (2026)

FaceSift — Mon, 27 Jul 2026 07:50:49 +0000

Published: June 14, 2026
Read time: ~11 min
Tags: Safety, OSINT, Guide
Slug: how-to-verify-identity-online

Meeting people online — for dating, business, or friendship — is now completely normal. So is the fact that not everyone online is who they say they are. The problem is not that verification is hard. It is that most people do not do it until something has already gone wrong.

This guide covers five categories of verification — photo checks, social presence, video calls, professional claims, and conversation signals — in the order you should work through them. Do these early, before the relationship has a dynamic that makes scrutiny uncomfortable.

Do These Five Checks Before Any Significant Trust Is Extended

Reverse face search their profile photo
Check if the photo shows signs of AI generation
Search their name across LinkedIn, Instagram, and Google
Check the account creation date on every platform
Request a live, unscripted video call within the first week
Verify their employer independently — not through contact info they provide
Note whether message timestamps match their claimed location
Any request for money ends the verification — it answers every question

01 — Start With the Photo — Reverse Face Search

The profile photo is the first and most important thing to verify. A fake identity almost always uses a stolen photo — taken from a real person's Instagram, LinkedIn, military service page, or modelling portfolio. Running the photo through a face search engine either confirms the identity or surfaces the original source within seconds.

Run the photo through FaceSift — Upload their profile photo to FaceSift (facesift.com) to find where that face appears across the public web. A genuine person's face will typically appear on their own social media under the same name. A stolen photo will surface on profiles belonging to someone with a completely different name, often in a different country.

Run the same photo through Google Images — Drag the photo to images.google.com or right-click → 'Search image'. If the same photo appears on multiple profiles under different names, or on a stock photo site, the image is stolen.

Check for signs the photo is AI-generated — If reverse search finds nothing, the photo may be AI-generated. Look for: blurred or asymmetrical ears, garbled background text, teeth that blur together, unnaturally smooth skin at full zoom. Upload to Hive Moderation (hivemoderation.com) for an automated score.

Check multiple photos, not just one — Inconsistency between photos — different lighting styles, image quality, or backgrounds that never share the same environment — suggests multiple unrelated source images.

02 — Cross-Reference Their Social Presence

A real person accumulates a social media presence that is organic, inconsistent, and sometimes embarrassing. A fake identity is built for a purpose and shows it: too polished, too consistent, too recent, or too sparse.

Search their name across multiple platforms — Search on LinkedIn, Instagram, Facebook, Twitter/X, and Google. A real person will typically have a LinkedIn consistent with their stated career, a social media presence predating your contact, and some footprint beyond the platform where you met.

Check account creation date and history — LinkedIn shows creation month and year. Twitter/X shows join date. For Instagram, the date of the earliest post is visible by scrolling down. A profile created in the months before you met them is a significant red flag.

Look for a genuine social graph — Real people appear in other people's photos, are tagged by friends, and have followers who interact in ways suggesting actual relationships. A profile with no tagged photos and no comments from people who appear to know them personally has no genuine social graph.

Check whether their LinkedIn matches their claimed backstory — Vague job descriptions, no listed employer, or an employer that does not appear to exist are all worth investigating.

Search their username across platforms — Use Sherlock or search their username in quotes on Google. Scammers frequently reuse usernames across targets or use freshly created handles with no history.

03 — The Video Call Test

A live, unscripted video call is the single most effective verification tool available — and the one fake identities most reliably avoid.

Request a video call early — before emotional investment grows — Ask within the first week of contact. Frame it positively: 'I'd love to actually see you — are you free for a quick call this week?'

Notice the excuses, not just the outcome — A legitimate person will agree to a video call within a reasonable timeframe. A scammer will produce an escalating series of reasons — broken camera, poor internet, work restrictions — that never resolve. The pattern of avoidance is more telling than any single excuse.

During the call: ask them to do something spontaneous — Ask them to wave with a specific hand, hold up a particular number of fingers, or write your name on paper and hold it up. A live person can do this instantly. A pre-recorded video cannot.

Watch for signs of a deepfake video call — Signs: face boundary flicker at hairline or ears during movement; lighting that does not respond naturally to head rotation; blinking that is too infrequent; lip sync that degrades during fast speech.

Confirm details during the call — Their environment should be consistent with their claimed life. Major inconsistencies — wrong apparent nationality, accent inconsistent with claimed background — are worth questioning.

04 — Verify Professional and Personal Claims

Romance scammers typically claim prestigious professions — military officer, doctor, engineer, UN worker, oil rig supervisor — that justify being abroad and unable to meet.

Verify their employer independently — Do not use contact information they provide. Find the employer's official website or LinkedIn page through your own search and confirm whether the person is listed.

Check military claims — US military personnel serving abroad are not allowed to ask civilians to send money for any reason. They have access to free communication. The Defense Manpower Data Center (dmdc.osd.mil) offers a service member verification tool.

Look up professional credentials — Doctors are licensed through state medical boards. Lawyers through their state bar. Engineers through professional registration bodies. A claimed credential in a licensed profession can be verified in minutes.

Ask specific, verifiable questions about their work — Someone who genuinely works in a field will answer detailed questions about it without hesitation. Someone working from a script will give vague answers or provide details that do not match how that profession actually works.

05 — Red Flags in the Conversation Itself

They forget details you have already told them — A scammer managing dozens of simultaneous conversations periodically asks questions you have already answered. This is not forgetfulness; it is the signature of someone without a dedicated record of your specific exchanges.

Their messages arrive at unusual times for their claimed location — If someone claims to be in London but sends 'good morning' at 3am London time, their actual location is not where they say it is. Most messaging apps show timestamps in your local timezone — convert them.

The relationship accelerates faster than normal — Declarations of love within days and intense emotional intimacy before meeting in person are markers of manufactured urgency designed to build commitment before the target has time to think critically.

They push for secrecy with your friends and family — Encouraging you to keep the relationship private and framing concern from friends as jealousy are isolation tactics that remove the social checks most people rely on to catch problems.

Any request for money or financial information — A genuine person you have not met in person has no legitimate reason to ask for money, gift cards, cryptocurrency, or bank details. The request itself answers every verification question.

How to Interpret Mixed or Inconclusive Results

One inconclusive check is noise — multiple inconclusive checks are a pattern — A private account alone means little. A private account, reluctance to video call, message timestamps that do not match their claimed location, and an employer you cannot verify independently is a pattern.

What cannot be explained away matters more than what can — The question is not whether an explanation exists, but whether the accumulation of things requiring explanation is plausible for a real person living the life they describe.

Trust your reaction when you run the checks — If you find yourself avoiding the checks because you do not want to know, pay attention to that reaction.

The video call and the money request are the two definitive tests — A person who will video call without significant resistance and who never asks for money has passed the two checks that are hardest to fake.

Identity Verification Checklist

Upload their profile photo to FaceSift — check for stolen photos
Run the same photo through Google Images reverse search
Check the photo for AI-generation signs (ears, teeth, background text)
Upload to Hive Moderation for an AI detection score
Search their full name on LinkedIn, Instagram, Facebook, and Google
Check account creation date and earliest post date on each platform
Look for tagged photos from other people — a genuine social graph
Verify their claimed employer independently via your own search
For military claims: use the DMDC service member verification tool
For licensed professions: check the relevant regulatory body's public register
Request a live video call within the first week
During the call: ask them to do something unscripted and immediate
Check message timestamps against their claimed timezone
Note if they discourage you from mentioning them to friends or family
Any request for money, gift cards, or financial information — stop

DEV Community: FaceSift

Best Free Reverse Image Search Tools in 2026 — Compared

In This Article

Google Lens

Yandex Images

Bing Visual Search

TinEye

Social Catfish

PimEyes

Side-by-Side Comparison

Where Free Tools Hit a Wall

Crypto Recovery Scams: How Fake "Fund Recovery" Agents Re-Victimize You

In This Article

How Crypto Recovery Scams Actually Work

Where the Photos and Credentials Come From

Red Flags in the Outreach and the Pitch

How to Verify a Recovery Service Before You Pay

What to Do If You've Already Paid a Fake Recovery Agent

Full Verification Checklist

Rental & Airbnb Scams: How Fake Landlords Use Stolen Photos

In This Article

How Rental & Airbnb Scams Actually Work

Where the Photos and Listing Details Come From

Red Flags in the Listing and the Conversation

How to Verify a Listing and Landlord Before You Pay

What to Do If You've Already Paid or Signed Something

Full Verification Checklist

AI Companion Scams: How Fake Chatbot Relationships Drain Your Wallet

In This Article

How AI Companion Scams Actually Work

Where the Photos and Persona Come From

Warning Signs You're Talking to a Scam Bot

How to Protect Yourself and Verify Who's Really Talking

What to Do If You've Already Paid or Shared Information

Full Response Checklist

Military Romance Scams: How Fraudsters Use Stolen Soldier Photos

In This Article

How Military Romance Scams Actually Work

Where the Fake Persona Comes From

Warning Signs of a Military Romance Scam

How to Verify Before You Send Anything

What to Do If You've Already Sent Money

Full Response Checklist

AI Voice Cloning Scams: How Fraudsters Fake a Family Member's Voice

In This Article

How AI Voice Cloning Scams Actually Work

Warning Signs During the Call

What to Do During the Call

What to Do If You've Already Sent Money

Protecting Yourself and Family Going Forward

Full Response Checklist

# Best Reverse Image Search Apps for Mobile in 2026 — Compared

Quick Pick by Use Case

Apps Covered

#1 Google Lens

#2 Bing Visual Search

#3 Social Catfish

#4 PimEyes

#5 FaceSift

Side-by-Side Comparison

When to Combine Options

Marketplace Scams: How to Spot a Fake Buyer or Seller Before You Meet

In This Article

How Marketplace Scams Actually Work

Red Flags in the Listing or the First Message

Red Flags When You're Asked to Pay, Ship, or Meet

How to Verify Before You Pay, Ship, or Meet

What to Do If You've Already Paid, Shipped, or Been Scammed

Online Privacy Audit: What Can Strangers Find About You? (2026)

What a Motivated Stranger Can Learn About You in 10 Minutes

Audit Steps

01 · Face Search Audit

02 · Username & Email Exposure

03 · Social Media Leaks

04 · Search Engine Footprint

05 · App & Device Permissions

How to Reduce Your Footprint

High impact — do these first

Medium impact — do these next

Ongoing — run these periodically