How to Spot a Catfish

Catfishing is when someone builds a fake online identity - usually with stolen or AI-generated photos - to deceive another person, most often for romance, money, or attention. Spotting it reliably isn’t about gut feeling; it’s about running the same few checks every time, in the same order, regardless of how convincing the conversation feels. This guide covers the real red flags, the tactics that repeat across nearly every case, and a concrete 3-pass verification method you can use today.

Where catfish photos actually come from

Understanding the source makes the pattern easier to recognize. Stolen photos tend to fall into a few recurring categories: professional models and influencers with large public photo libraries (easy to pull dozens of high-quality images from), military service members (chosen because deployment is a built-in excuse for being unreachable), and ordinary people from a different country or platform whose photos are less likely to be recognized locally. AI-generated faces are an increasingly common fourth category - they avoid the “reverse image search finds the original” problem entirely, since there is no original photo anywhere to find, which is exactly why a face search and a live call matter more than ever.

A typical timeline

Most romance scams follow a recognizable arc, and knowing the shape of it helps you notice which stage you’re in:

1. Contact and rapid rapport - a match or message, followed by fast, flattering, high-frequency conversation.
2. Love bombing - declarations of strong feelings and future plans well before it would normally be warranted.
3. Isolation and excuse-building - reasons pile up for why video calls, meeting in person, or involving friends isn’t possible yet.
4. The ask - a request for money, gift cards, crypto, or personal/financial information, often framed as a one-time emergency.
5. Escalation or disappearance - if the first ask succeeds, further requests often follow; if refused, the account frequently goes quiet or blocks you.

Recognizing stage two or three for what it is - before stage four arrives - is where the checklist below earns its keep.

Red flags, scored

No single flag proves anything by itself. What matters is how many stack up, and how heavily weighted the serious ones are. Check off what applies to get a rough risk read:

The tactics that repeat across almost every case

Romance scams and catfishing schemes are surprisingly formulaic once you’ve seen a handful of them. The specific names, jobs, and photos change every time, but the underlying playbook barely does - which is good news, because it means a fixed checklist catches the overwhelming majority of cases without needing to guess at intent from a gut feeling.

Stolen or AI-generated photos

The profile photos belong to someone else entirely - a model, an influencer, a random stranger - or were generated by AI and correspond to no real person at all. This is the foundation almost every other tactic is built on top of, since the fake identity needs a face. Read AI-generated faces and catfishing for why these profiles often pass reverse image search entirely.

Love bombing

Intense affection, declarations of love, and future plans arrive unusually fast, often within days. It’s designed to build emotional investment before you’ve had time to verify anything.

A story that shifts under scrutiny

Small details - job title, hometown, family situation - change between conversations, or don’t quite add up when you ask a follow-up question. Genuine people rarely contradict basic facts about their own lives.

Money, gifts, or “emergencies”

Requests for money, gift cards, crypto transfers, or help with a sudden emergency - a medical bill, a stuck shipment, a stranded trip - are the actual endpoint of most romance scams. This is the single highest-weighted red flag for a reason: it’s the part of the interaction where real financial harm happens.

Refusing video calls

A live video call is the hardest thing to fake convincingly on demand. Persistent excuses - broken camera, bad connection, “too shy,” always a reason not today - are one of the most reliable tells, because a real person with a real face can usually manage a short call eventually.

Pushing off-platform fast

Moving the conversation to text, WhatsApp, or a different app quickly removes the paper trail and the platform’s own safety tools, making it harder for you to report and harder for the platform to catch patterns across victims.

A public-facing job with no digital footprint

Claims of being a doctor, engineer on an oil rig, or military deployment are extremely common in scam scripts precisely because they explain away unavailability - yet a genuine professional in these fields usually leaves some public trace (a registry listing, a LinkedIn, colleagues who can be found).

Common excuses, and what they usually mean

The 3-pass verification method

Instead of relying on instinct, run the same three-step process every time trust actually matters - before sending money, sharing personal information, or making plans to meet.

Pass 1: free reverse image search

Run the clearest profile photo through Google Lens and Yandex. This alone catches a large share of cases, because many catfish accounts reuse the exact same stolen photos across multiple platforms - and those exact photos are often already documented as scam images.

Pass 2: face search

If the free pass comes back clean, or you need to check whether the same face - not the same file - shows up elsewhere, run a face search. This catches cases where the scammer used a different photo of the same stolen identity than the one that’s already been reported. See face search vs reverse image search for exactly why this step catches things the free pass misses.

Pass 3: live verification

No tool replaces this step. Ask for a short, low-effort live video call - even thirty seconds, with a simple real-time request like waving or saying today’s date. This is the one thing a fake identity built on borrowed or generated photos genuinely cannot produce.

Where this happens most

Dating apps are the most obvious setting, but romance scams and catfishing extend well beyond them - into social media DMs, gaming communities, comment sections, and even professional networking platforms. The mechanics stay the same regardless of platform: a flattering opening message, fast escalation, and eventually a request. Anywhere direct messaging with strangers is possible, the same three-pass method applies.

Who gets targeted, and why the answer isn’t “gullible people”

Romance scams succeed against smart, careful people constantly - the manipulation is built around emotional investment and time pressure, not intelligence. People going through a life transition (recent divorce, bereavement, relocation) are disproportionately targeted, likely because scammers perceive them as more receptive to fast emotional connection. None of this reflects poorly on a victim; the tactics are specifically engineered to work on anyone, which is exactly why a mechanical checklist — rather than relying on “I’d know if it happened to me” - is worth using every time.

What a photo check can and can’t tell you

A clean result - no matches found anywhere - feels reassuring but proves less than it seems to. It can mean the person is genuinely private online, or it can mean the photo is AI-generated and therefore has no prior public footprint to match against. A photo check is strongest when it finds something (a stolen photo, a duplicate profile under another name) and weakest when it finds nothing, which is exactly why it should never be your only check. For the honest version of this limitation, see how accurate is face search.

What to do once you’ve confirmed it

1. Stop responding, and stop sending money or personal information immediately.
2. Save evidence: screenshot messages, the profile, usernames, and any payment details before the account disappears.
3. Report the profile to the platform it’s on - most dating apps and social platforms have a dedicated fraud/scam report path.
4. Block the account so it can’t continue contact through a different name.
5. If money was sent, report it to your bank or payment provider immediately, and file a report with a fraud reporting agency in your country.
6. Tell a friend or family member. Romance scams work partly through isolation, and saying it out loud out breaks that.

When it probably isn’t a catfish

Not every red flag on its own means deception. Some genuinely careful people avoid video calls early for privacy reasons, keep a low public digital footprint on purpose, or are simply shy about their appearance. The distinction is pattern and stacking: one cautious behavior with an otherwise consistent story and a willingness to eventually verify is very different from a cluster of red flags plus a hard refusal to ever verify at all. Use the checklist above as a scoring tool, not a single-flag trigger.

Habits that prevent most of this before it starts

• Do a quick photo check before the conversation gets emotionally invested, not after.
• Ask for a short video call within the first couple of weeks, framed as normal and non-negotiable for you.
• Never send money, gift cards, or account access to someone you haven’t met in person or verified on video.
• Keep the conversation on the original platform for a while - it preserves a record and keeps the platform’s own fraud detection in play.
• Talk to a friend about the relationship early. An outside perspective catches inconsistencies you might rationalize away.

A short script for asking to verify

Directness works better than most people expect. Something like: “I’d love to hop on a quick video call sometime this week, even just a few minutes - just something I like to do before getting more invested.” A genuine person will usually agree, even if scheduling takes a few tries. Repeated, vague deflection over multiple asks is the signal, not a single reasonable delay.

If you’re not sure yet

If you’ve run all three passes and still feel uneasy, trust that feeling enough to slow down rather than force a conclusion either way. Ambiguous results are common, and the right response to ambiguity is more time and more verification, not a rushed decision to fully trust or fully cut contact. There’s rarely a real cost to waiting for a clean video call before anything financial or deeply personal is exchanged.

Key takeaways

• No single red flag is proof - weigh the pattern, especially money requests and video-call avoidance.
• Run free reverse image search first, then a paid face search if it comes back clean.
• A clean photo-check result doesn’t prove someone is genuine - AI-generated faces have no history to match.
• A live video call is the one verification step nothing else replaces.
• If money is ever requested, treat that as the highest-priority signal, regardless of everything else.