How to Know If Someone Is Real Online (or a Catfish): 9 Checks

By Di TangUpdated 7 min readSources & method

Quick answer

You cannot establish that an online contact is safe from a photo, badge or call. Start with what they ask you to do: protect money, codes and personal boundaries. Check only public claims that affect your decision, keep useful evidence, and choose a next step even if their identity remains unresolved.

Jump to a section8 sections

9 Checks for Someone You Met Online

This guide covers online contacts from dating apps, social media, games and forums. Its goal is a decision you can act on, not a verdict about a stranger. For photo-specific methods, use the dating image-search comparison; for one app's badges and reporting, use the Tinder guide.

  1. Slow the interaction. A deadline in a message does not require an immediate reply.
  2. Check the request first. Protect money, passwords, one-time codes, documents and device access.
  3. Preserve relevant evidence. Keep the profile link, request, date and payment reference if safe.
  4. Choose one public claim that matters. Use an independent official source when one can answer it.
  5. Use image search only for a photo-source question. Upload only your own image or one you have permission to search.
  6. Consider face search only if necessary. A specific different-photo source question must justify the additional upload.
  7. Read the original page. Record what its caption and context support, leaving account control unresolved.
  8. Offer an optional call or safe meeting plan. Both people can decline; neither establishes identity or intent.
  9. Stop when the next action is clear. Decline, pause, report or continue cautiously without forcing certainty.

If a limited photo question remains, the public photo-source guide explains possible routes. If your own photos are being used, go directly to the photo-misuse reporting checklist.

Choose an action for money, logins, threats or a first meeting

SituationAction nowWhat to keep
Money requested or already sentDecline further payments. Contact the bank or payment service through its official channel if you paid, and ask what can be stopped or disputed.Amount, currency, time, destination, receipt and the request.
Password, code or device access sharedUse the affected service's official recovery process from a safe device. Secure exposed credentials and review unfamiliar sessions.The affected account, what you shared and any security alerts.
Threats or intimate-image pressureDo not pay or negotiate. Seek specialist help and local emergency assistance for immediate danger.The threat text and account link if safe; do not circulate intimate material.
A first meeting is proposedChoose a busy public place, arrange your own transport, tell someone you trust and keep control of leaving.The plan and a check-in arrangement, shared privately with that trusted person.

The FTC advises against sending money or gifts to an online love interest you have not met. Australian eSafety guidance covers meeting and online-contact precautions. For Australian intimate-image harm, use eSafety's reporting route; elsewhere, use your local specialist service.

A photo lookup is not a recovery step for an exposed password or a pending transfer. Contact the affected provider first, even if you have only a partial record. Recovery is not guaranteed, but an unresolved identity does not prevent you from requesting help.

Separate unsafe requests from ordinary differences

Catfishing means using a false online identity, but the label is less useful than the behavior you can describe. Money requests, pressure to conceal a transfer, threats and attempts to obtain account access give you a concrete reason to act.

ObservationHow to treat it
A “safety verification” link asking for card detailsDo not enter them. The FBI describes this fraud pattern. Open genuine platform features yourself.
A claim about an employer, event or charityIf relevant, check the organisation's own public source. Its existence does not establish that the contact belongs to it.
Photo reuse under another captionRecord the reuse and context; do not assume who copied whom.
Polished photos, few posts, an accent or a declined callNone establishes deception. People have different styles, privacy needs and accessibility constraints.

You can decline a request without proving that the other person intended harm. An ordinary explanation for a missing detail also does not oblige you to keep talking. Keep decisions grounded in your boundaries rather than a tally of weak clues.

Save a small record you can use

Keep the account URL or handle, the specific request, relevant dates and any payment confirmation. Record what happened separately from what you suspect. For example, “the account asked for a transfer on Tuesday” is an observation; a name from a search result is not evidence of who sent that request.

  • Account and platform: where the interaction occurred.
  • Event: the payment, code, link or threat and when it occurred.
  • Exposure: what you actually sent or shared.
  • Action: provider contacted, report number and next follow-up.
  • Unresolved point: any claim you could not confirm.

You can copy this checklist into a private note or print it. Leave out unrelated relatives, addresses, identity documents and other people's contact details. Store sensitive originals securely and send them only through the official route that needs them.

For a professional or recruiting approach, use the LinkedIn claim-and-request guide. Its useful question is whether an independently found employer source confirms a role or request, not whether a face-search result establishes someone's employment history.

Keep photo checks optional and narrow

A reverse image search may find copies or visually related pictures. Open a relevant page and read the caption, publisher and date. A face-focused search may return candidates across different photos, but a resemblance score does not establish account ownership.

Choose a tool only after writing a source question that matters. Google's help describes image-search results; the method comparison explains when different-photo candidates might be relevant. If the decision is already to refuse a transfer, another image upload adds no necessary step.

Do not use a photo's polish or an apparent visual defect to declare it real or generated. Our AI-image guide explains the limitations. With any method, no useful result leaves the question open. A saved celebrity example illustrates an output format only and cannot establish who controls your conversation.

Use calls and meetings as shared choices

A short in-app call can add conversational context if both people want it. It cannot prove a legal name, job, background or future intentions. Refusing a call can have ordinary privacy, safety or accessibility reasons.

Do not demand an identity document, an intimate image, a forced pose or a view of someone's home. If a call is unavailable and you are uncomfortable continuing, you may pause. You do not need to turn your uncertainty into a test another person must pass.

For a first meeting, use the action card above and the platform's own current advice, such as Tinder's safety tips. Keep your transport and departure independent of the person you are meeting. Search results should not change those precautions.

A complete example with identity left unresolved

Hypothetical example, not a customer case: after several weeks of messages, a contact asks for money to release a delayed travel booking. You have already made one transfer. They now want another payment and ask you not to tell your bank why.

Start with the exposed money: call your bank through its usual app or number, explain the transfer and ask about stopping further loss. Save the payment receipt and the messages requesting secrecy. The bank needs transaction facts; you do not need a real-world name for the operator before calling.

An optional image lookup returns no useful page. Record that the photo question is unresolved and stop searching. Report the account's request through the platform, retain the reference, and tell a trusted person what support would help. Whether the photo is original, copied or generated does not change the payment boundary.

If you are helping someone, offer to sit with them while they take the next step. Avoid demanding that they admit the entire relationship was false. Scamwatch's support guidance favours practical, non-blaming help.

Know where to stop and where to get help

Stop collecting information when the relevant claim is answered, remains unresolved after a proportionate check, or would not change your action. More copied pages are not necessarily more evidence. Do not contact people found in image results or ask a crowd to identify them.

Use each reporting route for its role: the platform for the account and content, the provider for exposed funds or access, and your country's official fraud or cybercrime channel for the incident. Australian readers can use Scamwatch's recovery guide, which links bank, police and IDCARE support. A platform report does not contact these services automatically.

Decline offers from strangers who promise to recover funds for a fee. Keep case numbers and follow-up instructions in your private record. You may leave the identity question unanswered and still complete the useful work: secure access, stop further exposure and get support.

Frequently Asked Questions

What is the fastest way to check if someone you met online is real?

Start with the request, not the photo. Refuse unsafe payments, codes or access, and contact the affected provider if you already shared something. Then check only a specific public claim that affects your decision. No photo search, badge or call verifies identity or guarantees safety.

Should I use reverse image search or reverse face search?

Start with exact-image search for copies. Consider public-web face search only when a candidate page across different photos could add necessary context. You may not need both. Each has incomplete coverage, and neither establishes who controls an account or verifies identity.

Does a clean search result prove the person is real?

No. A no-result outcome leaves the question unresolved. A consistent-looking set of pages may only reflect copied material or incomplete coverage. Neither outcome establishes account control or intentions, and neither should override unsafe requests or the boundaries you have set.

What if the person refuses every reasonable verification step?

A refusal can have legitimate privacy, safety, accessibility, or personal reasons and is not proof of deception. You can still pause or end contact if the interaction no longer feels safe. Focus on pressure, money, threats, secrecy, unsafe links, and whether your boundaries are respected.

Choose a safety plan for your next interaction

Use the dating-safety hub for app-specific reporting and first-meeting guidance. Photo lookup remains optional.

Open the dating-safety guide
How we researched this

Official consumer-safety and platform guidance was reviewed on 6 November 2026. This guide prioritises actions over identity conclusions. The worked example is explicitly hypothetical, and no device test or individual investigation is claimed.

Source review: Di Tang. First published March 16, 2026.

Related Articles