Impersonation: is it a crime and can you sue?

The unauthorised use of your name, image, or personal data in a fake profile or other deceptive activity can have serious legal and personal consequences. In UK law, impersonation is not usually a standalone offence, but it often forms part of fraud, harassment, or misuse of private information. If you are affected, you may have both legal rights and practical remedies. Seeking advice from a specialist solicitor can help you protect your reputation and take effective action.

Quick answer: Is impersonation a crime in the UK?

In the United Kingdom, impersonation is not usually a standalone criminal offence. However, there are specific situations where it is illegal, such as impersonating a police officer.

In most other cases, impersonation becomes a crime when it is used to commit other offences, including:

• Fraud by false representation under the Fraud Act 2006, section 2.
• Harassment or stalking under the Protection from Harassment Act 1997.
• Malicious or abusive communications under the Communications Act. 2003 or the Malicious Communications Act 1988.

Misuse of personal data in breach of data protection laws. Those who impersonate others to obtain money, goods, or services may face prosecution under the Fraud Act 2006, with penalties that can be severe, including imprisonment.

What is impersonation? Legal meaning and definition

Impersonation is the act of assuming the identity of another person with the intention of deceiving others.

Key elements of the definition of impersonation include:

Assumption of identity:

• Unauthorised use of another person’s name.
• Use of photographs or videos without consent.
• Creation of fake profiles that mimic the victim.

Use of identifying details that mislead third parties:

• Intent to deceive: a deliberate attempt to mislead others.
• Creation of confusion about the impersonator’s true identity.

Inducing others to interact as if they were dealing with the real person.

Harm or gain:

• Emotional distress or reputational damage.
• Financial gain or access to money or services.

Data harvesting or further identity misuse.

The law distinguishes between:

• Harmless parody, where there is no real intention to deceive.
• Malicious impersonation, where the aim is to exploit, harass, defraud, or damage the victim.

Understanding impersonation scams and identity fraud

When impersonation is used to gain a financial advantage, it may amount to impersonation fraud ans often forms part of identity fraud.

This may involve:

• Taking out loans in your name.
• Opening bank accounts fraudulently.
• Making unauthorised purchases.
• Redirecting official correspondence.

You may only discover this form of impersonation when:

• Unexpected bills arrive.
• Your credit rating drops.
• You receive communications about accounts you did not open.

Impersonation attacks can also include email impersonation, where messages are made to appear as though they came from a trusted person or organisation.

Common tactics include:

• Phishing: Fake emails mimicking banks, government bodies or know businesses.
• Smishing: Fraudulent text messages asking for urgent action.
• Vishing: Phone calls from people pretending to be genuine institutions.

Online and social media impersonation as harassment

Social media impersonation can amount to harassment where there is a course of conduct that causes alarm or distress,under the Protection from Harassment Act 1997.

This may involve:

Non-consensual content:

• Publishing private images or videos.
• Using the victim’s likeness to create false impressions.

Defamation and misuse:

• Posting damaging statements while pretending to be the victim.
• Creating reputational harm through false or inflammatory content.

Proxy harassment:

• Contacting others while impersonating the victim.
• Damaging personal or professional relationships.

Encouraging further abuse through third parties. Psychological impact:

• Persistent fake profiles causing distress.
• Targeted circulation of harmful or humiliating material.
• Ongoing surveillance or intimidation through the false identity.

Harassment may exist even without direct contact if the overall conduct causes serious distress.

Brand impersonation and business impersonation attacks

Brand impersonation occurs when a criminal mimics a company or organisation in order to deceive customers, suppliers, or employees.

Common forms include include:

Website impersonation:

• Fake websites designed to look like legitimate businesses.
• Deceptive domains and cloned layouts intended to steal logins or payments.

Brand impersonation phishing:

• Emails using logos, names or branding.
• Fake invoices, account notices, or payment requests..

Employee impersonation:

• Pretending to be a member of staff to gain access to systems or information.
• Exploiting internal language and trust to bypass checks.

Executive impersonation (CEO fraud):

• Posing as senior leadership
• Pressuring staff into urgent payments or disclosure of sensitive information

Can you sue someone for impersonation and defamation?

Yes. Depending on the facts, impersonation can give rise to civil claims.

Possible legal include:

• Misuse of private information.
• Defamation, where false statements damage reputation.
• Breach of confidence.

Economic loss, where the impersonation causes measurable financial harm. A well-known example is the case involving Kirat Assi, which highlighted the serious emotional and legal consequences that prolonged impersonation can cause.

What to do if you are a victim of impersonation in the UK

If someone is impersonating you or your business, acting quickly is essential to limit damage and strengthen your legal position.

1. Preserve evidence immediately

• Take screenshots of profiles, messages, emails, and URLs.
• Record usernames, timestamps, and platform details.
• Keep copies of any financial transactions or communications.

Evidence is critical for both police reports and civil claims.

2. Report the impersonation

• Report fake accounts directly to the relevant platform (e.g. social media sites).
• Report fraud to Action Fraud if financial or identity fraud is involved.
• Contact your bank immediately if money or financial data is at risk.

3. Secure your accounts and data

• Change passwords on email, banking, and social media accounts.
• Enable two-factor authentication.
• Notify contacts if your identity has been misused.

4. Consider legal action

Depending on the situation, you may be able to:

• Bring a civil claim (defamation, misuse of private information, breach of confidence).
• Seek an injunction to stop ongoing impersonation.
• Apply for a Norwich Pharmacal order to identify an anonymous perpetrator.

5. Seek specialist legal advice

A solicitor can assess your case, take urgent steps to remove harmful content, and pursue compensation where appropriate.

FAQs

Is impersonation a crime in the UK? Impersonation is not usually a standalone offence, but it may become criminal when it is used for fraud, harassment, stalking, or abusive communications.

What is impersonation? It is the unauthorised assumption of another person’s identity with the intention of misleading others.

What is brand impersonation? Brand impersonation happens when a fraudster copies or imitates a business in order to deceive customers, employees, or other third parties.

Can you sue someone for impersonation? Yes. Depending on the harm caused, civil claims may be available for defamation, misuse of private information, breach of confidence, or financial loss.

This guide provides general information only and does not constitute legal advice.

Impersonation in the UK is rarely a standalone offence, but it often forms part of fraud, harassment, abusive communications, or privacy-related wrongdoing. Victims may have both criminal and civil options. Acting quickly to preserve evidence and obtain legal advice can help limit damage and support effective action.

Protect your identity and take action

If you are the victim of impersonation, Qredible’s network of specialist solicitors can help you stop the abuse, remove harmful content, and pursue the remedies available to you.

KEY TAKEAWAYS:

• Impersonation is not usually a standalone crime, but it can become unlawful when linked to fraud, harassment, or abusive communications.
• Victims should act quickly by preserving evidence, reporting the matter, and securing their accounts or finances where necessary.
• Civil claims such as defamation, misuse of private information, or breach of confidence may also be available.