Encyphir Risk Management
6 min read

Is Catfishing Illegal? Laws, Criminal Charges, and Legal Recourse

Andrew Lyssand
Andrew Lyssand
June 24, 2025
Is Catfishing Illegal? Laws, Criminal Charges, and Legal Recourse

Table of contents

Is Catfishing a Crime? The General RuleCatfishing Laws by StateFederal Charges Available in Catfishing CasesCan You Press Charges for Catfishing?Can You Sue Someone for Catfishing?Legal Action Against a Catfish: Practical StepsCommon Catfishing Scenarios That Cross Into Criminal TerritoryCorporate and Executive Exposure to Catfishing SchemesHow Professional Investigators Build a Prosecutable CaseWhat to Do in the First 72 Hours After Discovering You Were Catfished

Categories

Online Dating SafetyCatfishingLegal

Is catfishing illegal? The answer depends on what the catfisher actually did, and the jurisdiction. Catfishing as a general practice (creating a false online identity) is not uniformly criminalized in the United States. But catfishing that involves fraud, financial theft, impersonation of a real person, or sexual exploitation is frequently criminal under existing federal and state law, even without a specific "catfishing statute."

Is Catfishing a Crime? The General Rule

Creating a fake online persona, by itself, is not a federal crime. It is also not criminalized in most U.S. states. The First Amendment protects a degree of anonymous or pseudonymous online expression.

However, catfishing almost never stops at creating a fake identity. Criminal charges become available under existing law when the false identity is used to:

  • Obtain money
  • Impersonate a real specific person
  • Engage in sexual exploitation
  • Stalk or harass

Catfishing Laws by State

Several states have enacted laws that specifically address online impersonation and catfishing-adjacent conduct:

California prohibits electronic impersonation under Penal Code § 528.5. It is a misdemeanor to impersonate a real person through electronic means without their consent and with intent to harm or defraud.

Texas has one of the stronger online impersonation statutes. It is a criminal offense to create a fake online profile of a real person without consent to harm, defraud, intimidate, or threaten.

New York, Florida, and other states address catfishing conduct primarily through broader fraud and harassment statutes rather than specific impersonation laws.

The legal landscape varies significantly by state, and new legislation continues to emerge. Consulting an attorney in your jurisdiction is the appropriate step for specific legal advice.

Federal Charges Available in Catfishing Cases

Even without a federal catfishing statute, federal prosecutors have several tools available when catfishing crosses into criminality:

Wire fraud (18 U.S.C. § 1343). This is the primary federal charge in romance scam prosecutions. Using electronic communications to execute a scheme to defraud is federal wire fraud. That description fits the financial exploitation component of most romance scams. Penalties reach up to 20 years per count. Additional charges may apply when the scheme crosses international borders.

Catfishing and identity theft. If the catfisher used a real person's photos and identity to deceive victims, charges under the Identity Theft Enforcement and Restitution Act may be available.

Computer fraud (18 U.S.C. § 1030). If the catfisher accessed accounts or systems without authorization, the Computer Fraud and Abuse Act applies.

Money laundering. In organized romance scam operations, money laundering charges frequently accompany fraud charges.

Can You Press Charges for Catfishing?

You can report catfishing to law enforcement. But whether charges are filed is a decision made by prosecutors, not victims. For law enforcement action to be taken:

  • There should typically be financial harm (romance scam fraud) or serious personal harm (stalking, harassment, sexual exploitation)
  • Evidence of the deception and any financial transactions should be documented and preserved
  • The catfisher's identity should ideally be known or determinable

File reports with the FTC (reportfraud.ftc.gov) and FBI's IC3 (ic3.gov) for financial fraud. Report to local law enforcement if you are in a state with specific online impersonation laws and the catfisher impersonated a real person.

Can You Sue Someone for Catfishing?

Civil legal action against a catfisher is possible in principle. Viable civil claims may include:

  • Fraud, intentional misrepresentation that caused financial or personal harm
  • Intentional infliction of emotional distress, where the conduct was extreme and outrageous
  • Invasion of privacy, if real personal information was used in the deception
  • Defamation, if the fake profile damaged the reputation of the real person whose identity was used

The practical challenge of suing a catfisher is identifying who they are, particularly in international operations. A professional investigation to establish identity is typically a prerequisite to civil action.

If you are pursuing legal recourse after being catfished:

  1. Preserve all evidence: screenshots, transaction records, account information
  2. Report to IC3 and FTC immediately if money was involved
  3. Consult an attorney in your jurisdiction about available state law claims
  4. Consider professional investigation to identify the catfisher if their real identity is unknown

Encyphir's investigators work with individuals and law firms to establish catfisher identities through licensed investigative means. This provides the foundation for both criminal reporting and civil action. Our digital forensics team preserves the chain of custody on messages, photos, and transaction records. Contact us to discuss your situation confidentially.

Common Catfishing Scenarios That Cross Into Criminal Territory

The line between a misleading online profile and a prosecutable offense often comes down to intent and harm. Understanding the patterns that prosecutors take seriously can help victims frame their cases effectively when reporting to law enforcement or seeking counsel.

The classic romance scam remains the most common scenario that leads to prosecution. A victim meets someone on a dating app or social platform and develops what feels like a genuine emotional connection over weeks or months. The victim is eventually asked for money to cover a crisis: a medical emergency, a customs fee, a business setback, or travel expenses to finally meet in person. These schemes are overwhelmingly operated by organized groups working from overseas call centers, often in West Africa or Southeast Asia. They generate billions of dollars in losses each year according to FBI IC3 reporting. Wire transfers, gift cards, and cryptocurrency payments leave a traceable footprint. Investigators working in tandem with a Certified Fraud Examiner can often reconstruct the money flow even when the impersonator's identity is hidden behind a proxy or VPN.

A second recurring pattern involves sextortion. The catfisher induces the victim to share intimate images or video, then threatens to release the material unless payment is made. This conduct typically implicates federal extortion statutes and state revenge-porn laws. In cases involving minors, serious child exploitation charges apply. A third pattern, sometimes called "pig butchering," blends romance manipulation with fraudulent investment platforms. These usually involve fabricated cryptocurrency trading dashboards that show fake gains until the victim attempts to withdraw.

Corporate and Executive Exposure to Catfishing Schemes

Catfishing is not limited to dating apps or personal relationships. Businesses face a growing category of deception in which threat actors construct fake LinkedIn profiles, pose as recruiters, impersonate vendors, or cultivate relationships with executives to extract confidential information or authorize fraudulent payments. Business email compromise frequently begins with a catfishing phase. A bad actor studies an executive's online presence, builds a credible false identity, and uses it to establish trust before the financial ask.

For companies, these incidents raise distinct legal and reputational questions. A senior leader who is catfished may expose the organization to data loss, regulatory reporting obligations, or shareholder scrutiny. Encyphir supports corporate clients in responding to these incidents. We conduct executive misconduct investigations when a catfishing incident raises questions about an executive's judgment, use of company resources, or potential breach of fiduciary duty. Pre-transaction due diligence on prospective partners, investors, and counterparties also helps organizations detect fabricated identities before a business relationship is formed.

How Professional Investigators Build a Prosecutable Case

Law enforcement agencies receive enormous volumes of online fraud complaints. They prioritize cases with strong documentation and a developed suspect lead. A complaint that consists only of a story and a few screenshots is unlikely to generate traction. A complaint supported by forensically preserved communications, traced financial transactions, attributable IP and device data, and a named or narrowly identified subject is a materially different prospect.

Licensed private investigators contribute to this process in several ways. Digital evidence preservation ensures that messages, profile snapshots, and metadata are captured in a manner that authenticates the content and establishes when it was collected. Open-source intelligence techniques can often link a fake persona to a real individual through reused photographs, writing patterns, phone number registrations, and cross-platform account linkages. Financial tracing, including the analysis of cryptocurrency wallets and mule account networks, is frequently the most productive route to attribution in international romance scams. When a subject is identified in the United States, physical surveillance may be used to confirm identity, document continuing conduct, or support service of process in a civil action.

Investigators also perform background investigations on identified subjects. These often reveal prior fraud history, related civil judgments, or patterns of similar conduct that strengthen both criminal referrals and civil complaints. This body of work transforms a victim's narrative into a documented, admissible case file.

What to Do in the First 72 Hours After Discovering You Were Catfished

The period immediately following discovery is critical for both recovery and legal positioning. Victims are understandably distressed. A natural instinct is to confront the catfisher, delete the conversations, or close the relevant accounts. Each of those impulses can undermine a later investigation or prosecution.

Preserve the platforms and accounts in place rather than deleting them. Do not confront or accuse the catfisher directly. Doing so typically causes them to burn the persona, block the victim, and destroy the evidentiary trail. Capture full-page screenshots of every profile, message thread, and transaction receipt, and save them to at least two separate locations. If money was sent, contact the originating bank, wire service, or cryptocurrency exchange immediately to request a recall or freeze. Recovery is rare after 72 hours but occasionally possible within the first day. File the IC3 and FTC reports promptly, because these reports generate case numbers that financial institutions and investigators can reference.

Finally, consider engaging professional help before taking irreversible steps. A conversation with a licensed investigator or attorney can clarify which actions preserve options and which close them off. Encyphir offers confidential consultations through our online match investigation service. Victims can also reach our team directly through our contact page to discuss next steps without commitment. Early, measured action consistently produces better outcomes than delayed or reactive responses, whether the ultimate goal is criminal prosecution, civil recovery, or simply the confidence of knowing who was actually on the other side of the screen.