Threads and Bluesky Impersonation: Protecting Your Identity on the Newest Social Platforms
Key Takeaways
Everyone is migrating. Frustrated with X, curious about alternatives, or just following the crowd, millions of people have poured into Threads and Bluesky over the past year. Bluesky alone grew from 10 million users in September 2024 to over 40 million by November 2025. Threads crossed 300 million monthly active users by early 2025.
Here's what followed them there: scammers.
Impersonation is one of the oldest tricks online. But new platforms create a perfect storm, enthusiastic users, loose moderation infrastructure, and almost no verification tools. According to the Identity Theft Resource Center (ITRC), impersonation scams surged 148% year-over-year in 2025 and now account for 34% of all reported scams. AI is making it worse. Creating a convincing fake profile that looks like your favorite journalist, financial advisor, or even a friend used to take effort. Now it takes minutes.
If you've just joined Threads or Bluesky, or if you have a real following on either, this is what you need to know.
What impersonation actually looks like on these platforms
Impersonation isn't always someone stealing your exact name and photo. It comes in a few flavors.
Carbon-copy fakes. Someone creates an account with your name, your profile picture, and nearly identical bio copy. They reach out to your followers, your contacts, your community, and people assume it's you.
Handle-squatting. A bad actor registers your name (or a very close variation of it) before you get there. When you eventually join the platform, you find "yourusername" is already taken, by a fake account posting under your identity.
Typosquatting. Your handle is @janedoe, the impersonator registers @jane.doe or @janedoe_ and posts content that looks like yours. Followers don't notice the period or the underscore.
Bait-and-switch accounts. These accounts build a following under one identity, then quietly swap names and photos once they have enough followers to run a scam.
Celeb and brand impersonation. Fake versions of public figures, businesses, or even customer support accounts. They DM followers with "exclusive offers," fake giveaways, or requests to verify account details.
The end goals vary. Some impersonators want to damage a reputation, others want to steal money or account credentials. Some just want your followers.
Why Threads and Bluesky are especially risky right now
Bluesky has no official verification system
This is the big one. Bluesky does not have a traditional checkmark verification system. Anyone can create an account with any name. The platform's closest equivalent to verification is domain-based handles, where a user links their handle to a domain they own, like @nytimes.com. If you see a Bluesky handle that's an actual domain name (e.g., @wyden.senate.gov), you can be fairly confident it's legitimate because it's tied to a real website.
But most accounts don't use domain handles. And most users don't know to look for this.
Bluesky's safety team acknowledged the problem directly in late 2024, committing to quadruple their moderation team and updating their impersonation policy to explicitly remove handle-squatting accounts and fake profiles. Bluesky Safety has also repeatedly warned users, most notably around November 2025, that scammers were impersonating "Bluesky Support" in DMs and offering fake "verification" badges, a scam in itself.
Bluesky's moderation is improving, but it's still catching up to the scale of the problem.
Threads relies on Meta's infrastructure, which has its own issues
Threads benefits from being tied to Instagram, meaning it inherits Meta's moderation systems and verification processes. If you're already verified on Instagram, that carries over. That's a meaningful layer of protection compared to Bluesky.
But it's not a clean bill of health. Meta's fake account problem is well-documented. The platform takes down hundreds of millions of fake accounts every quarter, but plenty still slip through. On Threads specifically, impersonation complaints are common, and users report that getting fake accounts removed can take significant time and persistence.
New platforms attract rushed signups, and scammers know it
When people migrate to a new platform en masse, they move fast. They search for accounts of people they already followed, they click links in bios, they DM to reconnect. Scammers exploit exactly this behavior. A fake account of a journalist or creator you trusted on X is incredibly effective in the first weeks of a platform migration, when everyone is trying to find their people and trust signals are low.
How to spot an impersonation account
You don't need a cybersecurity background to catch these. The red flags apply to both platforms:
- New account, big following. Legitimate accounts tend to grow gradually. An account created recently with thousands of followers is a warning sign.
- Slight handle variations. Look for extra characters, dots, underscores, or numbers appended to a name.
- No post history or very thin content. Fake accounts often have few posts, and those they have are vague, reposted content, or filler.
- Unsolicited DMs with links or requests. A celebrity or brand representative is not going to DM you about a prize, a crypto opportunity, or a "verification" link.
- Requests that feel off. Real people you know don't suddenly ask you to wire money, share your login info, or click an "exclusive offer."
- On Bluesky specifically: No domain-verified handle, no vouching from other trusted accounts in their network.
What to do if you're being impersonated
On Bluesky: Report the account via Bluesky's in-app report tool. Select "Impersonation" as the reason. You can also contact support@bsky.app directly. For higher-profile cases, Bluesky has historically acted quickly once a report includes clear evidence, a link to both the fake account and the legitimate one.
On Threads: Go to the fake profile, tap the three-dot menu, select Report, then choose "Pretending to be someone else." If you're the person being impersonated, use Meta's dedicated impersonation contact form. Meta Verified users have access to a priority reporting channel. For those without an Instagram or Threads account who are still being impersonated, Meta has a form for non-users to submit reports.
In either case: document everything first. Take screenshots of the fake account, its posts, and any messages it has sent before you report. Platforms sometimes remove the evidence when they take down an account.
How to protect your identity before it happens
The best move is a proactive one. Here's what to do now:
- Claim your username on new platforms early. Even if you're not ready to use Threads or Bluesky yet, register your handle before someone else does. Handle-squatting is much easier to prevent than to undo.
- Set up domain verification on Bluesky. If you own a domain, a personal website or a business domain, link it to your Bluesky handle. It's the most credible trust signal the platform currently offers.
- Cross-link your accounts. Put your Bluesky and Threads handles in your bio on platforms where you have an established, verified presence. This makes it easy for your audience to find the real you.
- Tell your audience where you are. Post once on your established platforms: "Here's where to find me on Threads/Bluesky, and here's what my handle looks like." One post can save dozens of your followers from being scammed.
- Use a security layer beyond the platforms themselves. Platform moderation alone isn't enough. Guardio blocks scam sites and phishing links in your browser in real time, catching threats that social platforms often miss entirely, especially when scammers combine a fake profile with a spoofed website. Since most Threads and Bluesky activity happens in the mobile app, be extra cautious with links sent through DMs or bios: don't tap straight through, and instead copy the link and check it in a browser, or search for the destination site by name, before entering any information.
- Turn on login notifications. On both platforms, make sure you're alerted to any new login sessions. Enable two-factor authentication so even if a scammer gets your password, they can't get in.
The bigger picture
Impersonation scams are not a niche problem. The ITRC's 2025 data shows they're now the single most reported scam type, and AI is accelerating how fast, convincingly, and cheaply they can be deployed. New platforms, despite the best intentions of their trust and safety teams, are a natural hunting ground.
The answer isn't to avoid new platforms. The answer is to move onto them smart, with your handle claimed, your audience informed, and a security layer in place that doesn't stop at the platform edge.
Your identity is worth protecting on day one. Not after something goes wrong.
Get a free security scan with Guardio today and stay protected.
Conclusion
Impersonation on Threads and Bluesky is a real and growing problem, but it's one you can get ahead of. Claim your handles, verify where you can, and don't rely on platform moderation alone to keep your identity safe.
FAQs
Can someone impersonate me on Bluesky if I haven't joined yet?
Yes. Bluesky has no reservation system for usernames, so anyone can register a handle that matches your name or brand before you do. This is called handle-squatting. The best way to prevent it is to create a Bluesky account and claim your preferred handle now, even if you don't plan to use the platform actively.
Does Bluesky have account verification like a blue checkmark?
Bluesky does not have a traditional checkmark verification system. Instead, it uses domain-based handles, where users link their handle to a domain they own (for example, @nytimes.com). If a Bluesky handle is an actual registered domain name, that's the platform's current equivalent of verified identity. Most accounts don't use this feature, which is why impersonation remains a significant risk.
How do I report an impersonation account on Threads?
To report an impersonation account on Threads, go to the fake profile, tap the three-dot menu in the top right, select Report, and choose 'Pretending to be someone else.' If you're the person being impersonated, you can also submit a report through Meta's dedicated impersonation contact form. Meta Verified users have access to a priority reporting channel for faster resolution.
What's the difference between impersonation and a parody account?
An impersonation account pretends to be someone else without their knowledge or consent, typically to deceive followers or commit fraud. A parody account mimics a real person or brand for satirical or comedic purposes and is usually labeled clearly (for example, '@elonmusk_parody'). Both Threads and Bluesky allow parody accounts as long as they are clearly labeled. Unlabeled parody accounts that create confusion can be reported as impersonation.
How does Guardio help with social media impersonation?
Guardio monitors for phishing links, scam sites, and fake web pages in your browser in real time, including spoofed websites that impersonators set up alongside fake social profiles. If a scammer pairs a fake Threads or Bluesky account with a lookalike website and you open that link in your browser, Guardio detects and blocks it before you interact with it. Because most impersonation attempts reach you inside the Threads or Bluesky app itself, treat any link sent through a DM or bio with caution regardless of the device you're on, verify the account first, and avoid entering login or payment details on a page you reached through an unsolicited link.
Is impersonation on social media a crime?
In many jurisdictions, yes. In the United States, social media impersonation can violate state laws against identity fraud, cyberstalking, or harassment, depending on the intent and harm caused. Federal laws like the Computer Fraud and Abuse Act may also apply if the impersonator accessed accounts without authorization. If you're being impersonated in a way that causes financial harm or harassment, documenting the evidence and contacting local law enforcement is advisable alongside reporting to the platform.
Identity%20Theft%201.avif)
