Report Vinted scammer accounts and VK fakes with the ID that survives a rename

By Devin Marsh Published 15 October 2026 21 min read

Most failed scam and impersonation reports fail for a dull reason: the evidence points at a name that no longer exists. A buyer who tries to report Vinted scammer accounts a day later often finds a new name on the same profile. A scammer who expects a report renames the profile, swaps the photo, or moves the same account to a new handle, and the screenshot that showed "Anna_Vintage" now describes nobody. Every platform in this guide keeps a fixed identifier behind the visible name, and each report desk acts faster when the report quotes it.

This guide works through 15 services where scams and impersonation turn up most: Vinted, VK, Threads, Tinder, Tumblr, X, Bluesky, YouTube, Vimeo, Zelle, Steam, Upwork, Shopify and standalone scam websites, plus the Australian takedown routes. For each one it covers the identifier to capture, the report path, and what that report can and cannot return, from the Vinted order claim to how to report VK profile for impersonation when a copy takes over a name.

Which ID survives when a scammer renames the account?

A rename-proof ID is the fixed number or address a platform assigns to an account, which stays the same when the display name, handle or photo changes. Vinted member links, VK profiles, Steam profiles, YouTube channels, Bluesky accounts and Shopify stores all carry one. Capturing that identifier before reporting means the report still points at the right account after the scammer renames it.

The table below lists where each identifier sits. None of it requires special tools: in most cases the identifier is part of a link the platform itself generates when the profile is shared or opened in a browser.

Rename-proof IDs matter most for spam impersonation, where one copied profile sends hundreds of identical messages with a link and then changes its name once reports start. A report that quotes only the old name forces the reviewer to search for an account that no longer carries it. A report that quotes the numeric ID needs no searching, which is why the Vinted member number is the first thing to copy when you report Vinted scammer accounts.

Imposter scams produced more than 1 million reports and over $3.5 billion in reported losses in 2025, out of 3 million fraud reports and $15.9 billion overall.Federal Trade Commission, congressional testimony, 25 March 2026

How do you report Vinted scammer accounts and keep the refund?

To report Vinted scammer activity and keep a refund possible, open the order and press "I have an issue" within 2 days of the parcel being marked delivered, or 14 days for a Pro seller. That suspends the order and holds the payment. Then report the member profile itself, and forward any fake "Vinted" email to [email protected].

The order report and the profile report do different jobs. The "I have an issue" claim is the only Vinted route that can return money, and Vinted's help pages state that once the window closes the order is completed and no refund, compensation or return is offered. When buyers report Vinted scammer profiles, the profile report is what gets the account reviewed and, for counterfeits, removed.

Vinted buyer scam report: which button for which problem

A Vinted buyer scam report filed after the 2-day window still matters for the account record, so report Vinted scammer accounts even when the refund route has closed. Vinted's phishing guidance asks for four items: screenshots of the message, the username or profile link of the member, the sender's email or phone number, and any bank transfer details the buyer was asked to pay. Quote the numeric member link rather than the username whenever you report Vinted scammer profiles, for the reason set out in the table above.

Fake support chats are a common Vinted buyer scam. In May 2024 the UK Regional Organised Crime Units warned about a scam in which victims were contacted by a fake Vinted chatbot and told to open a new Revolut account to "resolve" an order problem. Vinted's own process never needs a new bank account, and buyers who report Vinted scammer chats of this kind should include the fake chat's link or number. The German European Consumer Centre advises victims of second-hand platform fraud to file a police complaint and to ask their card issuer or payment provider about a chargeback quickly.

The Vinted counterfeit report form is for rights owners only

The Vinted counterfeit report form, called the Notice & Action form, accepts reports only from intellectual property rights owners or their authorised representatives. Vinted's item authenticity policy says that a counterfeit listing is permanently removed and the account that posted it suspended, and that repeat violations lead to a permanent block. A buyer who suspects a fake uses the ordinary item report instead, and should not expect a refund from that report alone.

For copyright rather than trademark, Vinted's US policy routes notices through the DMCA to its designated Copyright Agent. Either way, a buyer who uses the item report to report Vinted scammer listings for counterfeits can get the listing removed; the claim inside the order is still the only part that can return the purchase price.

How to report VK profile for impersonation

To report VK profile for impersonation, open the fake page, press More and then Report on desktop, or the three-dot icon and Report on mobile, and choose the reason "Copy of your profile". VK's help page asks the person being copied to file that report or contact VK Support directly. Bystanders can still report the same profile as Fraud or Spam.

VK's help page sets out three reasons, and picking the right one matters. "Copy of your profile" is the impersonation reason. "Fraud" applies when the fake asks people to transfer money; for a post, the path runs Deceit and then Fraud. "Spam" applies when the account sends suspicious links. Individual messages are reported separately by tapping and holding the message, choosing Report and picking a reason.

Who should report VK profile for impersonation, and what evidence helps

The person who should report VK profile for impersonation is the person being copied, because only that person can show the original account. A friend who spots the copy can report it as Fraud or Spam, and VK's guidance suggests that friend also asks the copied person to file "Copy of your profile" personally. VK notes that review sometimes takes longer than usual and gives no target time.

Attach the numeric vk.com/id link of both the fake and the real profile whenever you report VK profile for impersonation. Copied VK profiles usually take the victim's photos and display name and then change the short address, so a report naming only the short address may lead nowhere after a day. Screenshots of the money request, with the date visible, carry the Fraud reason.

When the copy uses the victim's own photos or videos rather than only the name, VK also runs a copyright route. A Russian IP lawyer writing in December 2025 described the form at vk.com/dmca and a postal address on Leningradsky Prospekt in Moscow, and noted that Russian Civil Code Article 1301 sets statutory compensation between 10,000 and 5,000,000 rubles. A copyright notice removes the copied photos; to remove the account as well, report VK profile for impersonation through the profile menu.

Threads, Tinder and Tumblr: whose report counts?

On Threads, Tinder and Tumblr, the copied person's own report carries the most weight. Threads impersonation goes through Meta's impersonation form, which asks for ID. Tinder accepts a report from any user, including after an unmatch. Tumblr runs a dedicated impersonation report page under its User Guidelines. Each platform allows parody, so the report must show the account claims to be the person.

Threads impersonation report: in the app or on Meta's form

A Threads impersonation report can start from the fake profile: tap the three-dot menu, choose Report, and pick the impersonation reason. The stronger route is Meta's impersonation form on the Instagram Help Centre, which also covers Threads. That form asks whether the filer is the person being impersonated, takes the fake account's username, and asks for a photo of an ID, which Meta says it deletes within 30 days. One form covers one account, so three copies need three submissions.

For a Threads report fake profile case filed by a bystander, the in-app report is the only route, and it is weaker. Threads impersonation is tied to Instagram: a Threads username follows the linked Instagram username, so the same report often needs filing on both apps. Meta's intellectual property form is a separate process and is the wrong place for an impersonation claim.

Tinder reporting fake profile: before and after an unmatch

Tinder reporting of a fake profile works from the chat: tap the shield icon on iOS or the three dots on Android, choose Unmatch, and select a reason, which creates a report to Tinder's Trust & Safety team. Tinder's safety pages state that a user can still report a profile online at any time after unmatching. Reasons include a fake profile and someone asking for money.

The catch is evidence. Unmatching deletes the conversation from both sides, so screenshots must come first. TechCrunch reported in December 2020 that Tinder added a Safety Center entry to the Match List after users found unmatched scammers impossible to report from the app.

Romance scam reports to the FTC rose 22% to 55,604 between January and September 2025, with more than $1.16 billion lost.FTC Consumer Sentinel data, reported by Global Dating Insights, 26 February 2026

A Tinder catfish removal service or a Tinder fake profile report service has no button Tinder users lack. What a paid service can do is assemble the evidence, file through the right channel, and follow up when the first report goes unanswered. What it cannot do is guarantee removal, because Tinder makes the decision. The same logic applies to the Grindr catfish report route, where the app's own categories decide what moderators see.

Tumblr impersonation removal goes through a dedicated page

Tumblr impersonation removal starts at the "Report impersonation or non-genuine behavior" page linked from Tumblr's User Guidelines, last modified 9 January 2026. The guidelines bar blogs that create confusion with another person or company, including deliberately confusing URLs, and put it bluntly: "Don't impersonate anyone." Parody is allowed, so the report has to show the blog presents itself as the real person.

Tumblr blog names can change, so record the post links, each ending in a long post number, alongside the blog URL. Where the blog reposts original art or photos, Tumblr's DMCA form is a second route, and Tumblr forwards the filer's name and email to the blog owner.

How do you report X impersonation or a Bluesky impersonator?

To report X impersonation, use X's impersonation form, which asks who is being impersonated: the filer, a company or brand, or someone else on X. The form needs no X account, and bystanders can also flag the profile directly. To take down Bluesky impersonator accounts, report the account in the app; Bluesky removes impersonation and handle-squatting accounts under a November 2024 policy change.

X's authenticity policy, dated April 2025, allows parody, commentary and fan accounts only when they meet four conditions together, including a label at the start of the account name and the same term in the bio. An account that fails them is usually asked to change its profile first and suspended on repeat. A report naming an X post link keeps working after a handle change, because the status number, not the handle, identifies the post. Requests that need a particular signer, such as an estate or a rights holder, are covered in X takedown requests sorted by signer.

X accounted for $66 million of the $2.1 billion that US consumers reported losing to scams that started on social media in 2025.FTC Consumer Sentinel figures, reported by PPC Land, 1 May 2026

Take down Bluesky impersonator accounts

Bluesky's Safety team announced in November 2024 that its impersonation policy had become "more aggressive" and that impersonation and handle-squatting accounts would be removed. Parody and fan accounts must label themselves in both the display name and the bio. An account built up under a borrowed identity and then switched to another identity, which Bluesky calls identity churning, is also removed.

Bluesky handles change easily, so record the account's DID, the did:plc: string that stays fixed across handle changes; public lookup tools such as the PLC directory resolve a handle to it. Since 2025 Bluesky has also shown blue checks for notable accounts, issued by Bluesky or by a small group of trusted verifiers that includes The New York Times and WIRED, and more than 270,000 accounts had already linked their handle to a website domain they control.

Bluesky received 9.97 million user reports in 2025 and recorded 2,446,334 takedowns and 14,659 ban-evasion removals.Bluesky 2025 Transparency Report, 29 January 2026

Bluesky's Safety account has stated that mass reporting alone does not lead to suspensions. One accurate report with the DID, the impersonated person's real account and a screenshot of the copied profile does more than a hundred duplicate flags.

YouTube scam ads, copied channels and the Vimeo DMCA claim form

To report YouTube ads and scams, open the ad's menu, go to My Ad Center and choose Report ad, or find the ad later under "Your recent ads". No ad ID is needed. To report YouTube channel for impersonation cases, use the Report option on the channel page and pick impersonation. For copied video on Vimeo, the Vimeo DMCA claim form is the route.

Report YouTube scam ads from the ad itself

Google's "How to report an ad" help page sends viewers through My Ad Center: the three dots or info icon on the ad, then the flag labelled Report ad, then a reason such as misleading content or a scam. Google sends an email confirmation and reviews the report. If the ad has scrolled away, the "Your recent ads" list in My Ad Center keeps recent ads available to report. Google states that the ad ID is not needed for a report.

Before reporting, note the advertiser name shown in the ad's My Ad Center panel and the address the ad links to. Scam ads often rotate destinations, so the landing page seen by the reviewer may differ from the one the viewer saw.

Google removed 602 million scam ads and suspended 4 million scam-linked advertiser accounts in 2025, within 8.3 billion ads blocked or removed in total.Google 2025 Ads Safety Report, via Search Engine Land

Report a YouTube channel for impersonation

Before you report YouTube channel for impersonation, capture the channel ID beginning UC from the channel's share link, because the @handle can change. File from the channel's Report option, choosing the impersonation reason, and say whether the channel copies a person or a channel. Removing a whole channel for other reasons runs on different rules, set out in taking down a whole YouTube channel.

The Vimeo DMCA claim form, for copied video

When the impersonator reuploads someone's videos, a copyright notice is often faster than an impersonation report. Vimeo's DMCA policy, last updated 21 October 2025, says a strike accrues each time material is removed and that three strikes end an account. Vimeo's help pages add that notices close together may count as one strike and that the DMCA applies whatever the video's privacy setting. After a counter-notice, the claimant has ten business days to show a court filing.

A DMCA notice is a legal statement under penalty of perjury, and Vimeo may share notices with third-party databases. The details of how a Vimeo strike lands and comes off, and the equivalent route for reporting a Twitch stream for copyright, cover the counter-notice side.

Reporting a Zelle scam: why the bank hears it first

Reporting a Zelle scam starts with the bank or credit union that sent the payment, because Zelle runs inside banking apps and the bank holds the account. Zelle closed its standalone app in early April 2025. Report the payment to the bank, then use Zelle's own Report a Scam page, then the FTC and FBI's IC3.

Zelle's support pages draw a line that decides what happens next. A scam is when the account holder knowingly sends money and does not get what was promised. Fraud is when someone else gains access to the account and sends an unauthorised payment. Unauthorised payments usually qualify for reimbursement; scams usually do not, with an exception. Zelle's operator, Early Warning Services, said in November 2023 that since 30 June 2023 banks had been reimbursing certain imposter scams, where the scammer posed as a bank or government agency.

To report Zelle scammer payments effectively, give the bank the transaction reference, the date, the amount and the email or phone number the money went to. The bank can freeze the receiving account if the funds are still there, which is the only route to recovery. ABC News reported that most of Zelle's 151 million users already reach the service through their bank's app.

A wider record of where each payment app's report goes, and which desk can return money, is in the money desk for scam reports.

Steam and Upwork: scammer reports built on account IDs

A Steam report on a scammer starts from the profile's menu: choose Report Player and pick the scam reason, quoting the 17-digit SteamID64. An Upwork scammer report uses "Flag as inappropriate" on the job post, profile or message. Neither platform returns items or money through these reports, and both treat warnings about mass reporting as a scam signal.

Steam report scammer path, and the steam mass report scam

Steam's scam FAQ says the reporter is notified with a message in Steam when action is taken, that traded items are never restored, and that all of a scammer's accounts may be banned. The SteamID64 matters because Steam custom URLs and profile names change at will, while a /profiles/ link with the 7656119 number does not.

The steam mass report scam is a separate trick. Malwarebytes has documented the "I accidentally reported you" scam, in which a stranger claims a mass report put the account at risk and directs the victim to a fake Valve agent, who then asks for login details or payment. Steam Support does not resolve reports through friend requests or Discord chats, and no report can be undone by paying anyone.

Upwork scammer report and identity theft scam report

Upwork's support article on suspicious behaviour describes report links across the platform: "Flag as inappropriate" on job posts, profiles and messages, with a reason picked before submitting. Upwork's Trust & Safety team says each report goes directly to that team. Upwork's 2026 scam guide names the common patterns: moving work or payment off Upwork, upfront fees, phishing messages and gift cards.

An Upwork identity theft scam report covers two cases. If the scammer took over the account, Upwork's compromised-account article asks the user to report the unauthorised activity and change login details. If a fake client collected an ID scan, tax number or bank login during a fake hiring process, report the job post on Upwork and file at IdentityTheft.gov, the FTC's recovery site, which builds a recovery plan. Upwork's payment protection covers only work and payment kept on the platform.

Scam website takedown, Shopify stores and Australia

A scam website takedown goes to the companies that keep the site online: the hosting provider, the domain registrar and, for a store, the platform behind it. Shopify takes reports through its Acceptable Use Policy form. In Australia, the National Anti-Scam Centre and ASIC take sites down directly, and Scamwatch receives public reports.

Each company acts on a different ground. A host acts under its own terms on content it stores. A registrar acts on the domain, and under ICANN's 2024 DNS abuse rules must take "appropriate mitigation action" on clear phishing; ICANN's advisory gives the example of a fake bank login placed on hold within two business days, while stating that the timelines are not contractual. Fake shops are content rather than DNS abuse, so to take down scam website stores the route is usually the host and the platform.

Shopify scam store takedown

A Shopify scam store takedown starts with confirming the store runs on Shopify: a "Powered by Shopify" footer, or a store address ending in .myshopify.com, which stays fixed when the custom domain changes. Shopify staff in its community forums direct reports to the Acceptable Use Policy report form and suggest "Issue with an order" for non-delivery. Shopify does not share the outcome, citing privacy.

Shopify staff also point buyers to their card issuer, since a store that collects many chargebacks draws a review from Shopify's risk team. The chargeback is the part of this process that can return money.

Takedown impersonation website: copying a person or brand

A takedown impersonation website request is stronger than a general scam report, because the copied person or brand can show the original. The request names the host, the registrar and the original site, attaches screenshots showing the copied name or logo, and states the harm. Reports that remove a copy and reports that only add to a record are compared in impersonation takedown reports that remove. When a forum thread repeats the impersonator's claims, Reddit post removal follows Reddit's own rules on personal information and impersonation.

Takedown scam website Australia and takedown impersonation website Australia

For a takedown scam website Australia request, report the site to Scamwatch, which feeds the National Anti-Scam Centre. Sites that claim to be financial firms or ASIC-authorised go to ASIC, which has run an investment scam and phishing website takedown capability since July 2023. Neither agency promises to tell the reporter the outcome.

The National Anti-Scam Centre reported 5,834 scam websites taken down from January to March 2026, including 1,960 fake online gambling sites, and referred 511 Facebook ads, profiles and groups to Meta.National Anti-Scam Centre, quarterly update, 2026

A takedown impersonation website Australia request depends on what the copy shows. eSafety can act under its image-based abuse scheme when a fake account or site claims to show intimate images of the person, even fake ones. When the copy uses only ordinary photos and a name, eSafety says that scheme is unlikely to apply and points the victim to the platform's own report. Money lost goes to ReportCyber and the police.

Someone is impersonating me online: the one-page evidence sheet

When someone is impersonating me online is the problem, the first job is a single evidence sheet that every report can draw from: the copy's rename-proof ID, dated screenshots, proof of the original account, a list of who was contacted, and any money trail. One sheet keeps the reports consistent, and consistency is what reviewers check.

1. Capture the rename-proof ID

   Copy the numeric or fixed link from the table at the top of this guide for each copy. Write down the visible name next to it with the date. On Vinted that means the member number used to report Vinted scammer profiles; on VK, the vk.com/id number.

2. Screenshot with the address bar showing

   Take full-page screenshots in a browser so the link and the date are in the image. In apps, screenshot the profile, the posts and any messages before blocking or unmatching.

3. Prove the original

   Note the original account's link and how long it has existed. Impersonation forms on Threads, X and Tumblr ask the filer to show that the real account belongs to them, and to report VK profile for impersonation the copied person files personally.

4. List who was approached

   Record which friends, buyers or clients the copy contacted and what it asked for. A request for money moves the report from impersonation to fraud on most platforms.

5. Record the money trail

   Keep transaction references, the receiving email or phone, and the bank's case number. Banks and the FTC's or IC3's forms ask for these, and platforms do not.

6. Keep every report number

   Log the date, the platform and the confirmation number of each report. A second report that cites the first is handled faster than a fresh one.

A scam or fraud report to a government agency uses the same sheet. In the US, the FTC takes reports at ReportFraud.ftc.gov and the FBI at ic3.gov; in the UK, the national fraud reporting service run by City of London Police; in Australia, Scamwatch and ReportCyber. These reports build the case files that agencies use, but they rarely produce a direct reply about a single account.

The FBI's Internet Crime Complaint Center logged 1,008,597 complaints in 2025, with reported losses of $20.9 billion.FBI IC3 2025 Internet Crime Report, reported by The Block, 12 April 2026

What can none of these reports return?

None of these reports can return money sent by choice outside a platform's protection, reveal who runs the fake account, or remove copies on other sites. Platforms disclose account owners only under legal process. A request to report Vinted scammer accounts or any other fake removes one account or one listing on one service; the same scammer can return under a new name, which is why the fixed ID matters for the next report too.

Paid services cannot change these limits. A service that promises guaranteed removal, a ban within hours, or recovery of money sent by gift card is describing an outcome no outside party controls. What outside help can do is file the right form with the right signer, keep the evidence consistent across platforms, and pursue copyright or legal routes where a platform report is too weak. Where a copy cannot be removed, search suppression is the remaining option, and the content removal service states which applies to each case.

This guide describes platform processes as published in October 2026 and is not legal advice. Platforms change their report menus often; where a button named here has moved, the help page linked from the platform's own report screen is the current version.

Frequently asked questions

Related guides

• The X impersonation form, field by field
• Which Instagram impersonation form fits
• Taking down a phishing site