Catfishing and Synthetic Media: What Evidence Can Show
Reviewed September 30, 2026.
Synthetic Media Changes The Questions
A suspicious profile may use a stolen photograph, edited media, a synthetic image, or a real person's image without permission. Keep the media-authenticity question separate from who operates the account and whether its conduct is fraudulent.
Avoid Visual Certainty
Odd lighting, distorted backgrounds, or inconsistent movement can justify closer review, but compression, camera conditions, and ordinary editing can also affect an image. Their presence is not proof of AI generation, and their absence is not proof of authenticity.
NIST's synthetic-content overview describes multiple approaches, including provenance and detection, with limitations. Record the detector, version, input quality, and stated uncertainty if a tool is used. Do not treat a detector score or a video call as conclusive identity verification.
Corroborate Beyond The Media
Preserve the source URL, available timestamps, and how the material was obtained. Review whether public names, profile history, and independently checkable claims are consistent. An empty image-search result only describes that search's coverage; it does not identify the origin of the image.
Writing style and posting times may have ordinary explanations, including translation, scheduling, or shared account management. Avoid attributing authorship or wrongdoing from those patterns alone.
Preserve Evidence And Limit Contact
Keep relevant messages already received and document requests for money or sensitive information. Use Verify Identity to discuss a permitted review if the evidence needs corroboration. Do not confront the account or send tracking links as a test. The useful output is a clear record of supported findings, contradictions, and unanswered questions.
Relevant Investigation Paths
Stronger workflow and use-case pages derived from this briefing.
Deep Search
Use a scoped investigation when the first job is to verify what is real, reconstruct the timeline, and produce a defensible case record.
Verify Identity
Check whether a person, alias, or suspicious profile is real before trust deepens.
Fraud / Seller / Crypto Check
Vet a seller, trader, wallet-linked identity, or suspicious counterparty before sending funds.
Related Illustrative Cases
Illustrative composite example
Organizing Evidence of Repeated WhatsApp Harassment for a Protective-Order Filing
A client receiving threats from rotating WhatsApp numbers needed the messages, timing, and visible account details organized into an evidence file for their attorney.
Illustrative composite example
Pig-Butchering Scam: From a WhatsApp Message to a Public Website and Wallet Trail
A retiree lost savings to a fake crypto trading platform introduced over WhatsApp. The review documented the platform's public web infrastructure and the public wallet trail.
Illustrative composite example
Reviewing Video-Call Recordings for Synthetic-Media and Facial-Consistency Indicators
A person asked for money by an online partner shared recordings of their video calls. Analysts documented synthetic-media indicators and found the face imagery reused from public modeling photos.