How to Delete Tweets When Someone Is Impersonating You
How to clean up your timeline when fake sort A is copying and pasting your posts and photos — what X's impersonation report actually removes (spoiler: not much) and what action you should take first.
How an impersonation account uses your posts
Most likely, an "impostor" account that imitates you is not just for fun copying your life. It takes your profile picture, your banner, your bio and then just copies your tweets one by one—and sometimes with varying names and dates—until the account is old enough to DM all of your followers a link or request for money. Its not how many posts it copied but just how long it stays up: every hour the copy is live, someone with a follower overlap sees the duplicate and assumes the real one was you. Your account has no original content, no replies from people you know, and its following/follower patterns begin a few days in the past.
The Trap most of the people fall into is treating this as a delete problem. Your own tweets that you delete do not stop the impostor from copying them, nor are the copies taken down. What it does do is two things, what deleting your own posts does: It removes some of the script that the impostor is running on you, and it kills the surface area of yours that others are confusing for their own. Those are real but secondary. The cleanup comes second as the report to X is the only mechanism through which the fake account gets removed in priority.
On the other hand, the report that causes an account to be deleted
X has its own impersonation report form that differs from the general abuse report and asks you to identify what account is impersonating you, and which of your posts they copied. You must also, you know, be logged in as the account being pretended to because X cross-references the report against what it purports to impersonate. However, a bystander or friend of the target often has their report bounced back for lack of evidence. Please do NOT submit a generic report, go to the impersonation form in the Help Center, choose the appropriate category and include screenshots displaying both accounts side by side with matching profile photos and copies of the tweets.
The fake must be materially misleading to count, so a profile which simply shares a name may survive a report (although response times can take anything from hours to days). In the meantime, if you have a few other people also reporting the same account separately — because volume of reports does not equal instant takedown, but it sure helps X's reviewers know what they're looking at. Avoid speaking in public against the impostor. By replying, you are publicly making a link between both of you that allows for the copies to be found more easily, not less.
And which of your own tweets to clear and in what order
If this impostor has been emulating some of your recent posts, then your recent posts become the script and clearing them is the most direct way to end it. PS: begin with anything private that has been replicated: photographs of family, posts that point out your office, something location or one thing face. These are the ones where a fraudster actually does something damaging in real life, rather than just try to annoy or scam you. And then backtrack through your media tweets and a thread including personal info. The posts that are just commentary, or a joke can come later – the idea is to get rid of whatever an impostor could take advantage of and weaponize, not necessarily empty the account.
Scrolling back over your timeline tweet by tweet is slow (especially if the account has been active for months and has scraped hundreds of posts), and every manual deletion hits X's 50-requests-per-15-minutes deletion limit, just like a bulk tool. This is where the date filter saves the day: erase everything before a given date in one go, keep only the posts you still want, and let that impostor come to terms with an empty archive. For a copy of what you will post going forward, download your archive first − deleted posts are gone from X forever and the archive will be the only record you have.
Into: Sockpuppets: Looking for Mines the Pof.
A phishing attack usually comes with a second issue: the phony has already started DMing your fans, and some of them have responded. Or open your own DM and see the people in the requests folder asking why you asked them for cash or a link, and just tell them straight up that the other account is not you. X enables you to post a disclaimer in your bio and pin a tweet, both available only to anyone who clicks through from the impersonator's profile. What could be more help than an answer of few paragraphs? Pinning a short post saying you have one account and this is it.
Watch for security alerts you did not initiate in your inbox and enable two-step verification if it is off. Impersonation is usually an immediate secondary effect of scraping a public account but occassionally you log in for someone who wasn't you then delete tweets ( that someone will still have access to) Click on Settings and privacy -> then Security and account access -> Apps and sessions, and end any strange session. If you see one, change the password immediately because a blank timeline that can be refilled by attackers is worse than a full one.
What you cannot fix by deleting a copied account
Even if you delete your posts, the impostor copies it. They live within the fake account until their review disappears. It also doesn't blanket erase screenshots that followers made of the false posts and forwarded to you, nor does it pull back DMs already sent in your name. It also does nothing to prevent an enterprising copier from simply starting again: scrape, report, get deactivated, set up a new handle a week later. X can more easily connect a repeat report to accounts that have a stable, unique-profile link for this reason so removing some tweets from your timeline again to effectively make the copy not match anything is insufficient prevention on its own.
But there is a question that deletion can resolve. If it's about the archive of personal posts that the impersonator copied-from in the first place, then eliminating old media and posts with personal details is a way of diminishing what future copies can re-publish. Time plus deletion rate limit — 50 requests per 15 minutes means roughly 200 posts an hour at the top end, and for whichever time frame you like your combined timeline has receipts either way. Woodworker Josh says in the accompanying blog post that you can not ever reverse things like this, so export first and then delete, otherwise you'll be stuck.
If the copy is not the issue
Malicious — but not all duplicate accounts are malicious. Various of these are fan accounts that re-post your content but do not impersonate you which is frustrating although they will be removed on the notion of being an impersonator. Some are dead handles that registered a name years ago but never posted anywhere. Taking all of the above — a copied photo, combined with a copied bio and plus a profile filled in with similar posts — into account, check the actual profile before filing a report. Registration under a similar name with another photo and no content does not, and reports will simply be closed without any action on it.
Mention in the report text that the account is actively seeking cash or sending links to your followers and add images of a DM someone got (use screenshots). That moves it up in the priorities list above a simple identity complaint. Log the report number. If that same operator comes under a new handle, report them again with the original report number as a reference; X can see connected history even when you cannot.