Catfish Investigations: Uncovering Fake Online Identities from Russia and Eastern Europe

← Back to Library

A catfish investigation is commissioned when there is a specific and concrete suspicion that an online contact is not who they claim to be — typically because something in the story, the photographs, or the pattern of communication has raised a red flag serious enough to prompt action. Unlike a general scam-risk review or identity verification, a catfish investigation is explicitly investigative in orientation: its goal is to determine, as definitively as possible, whether the presented identity is real or fabricated.

Recognising the Need for a Catfish Investigation

The triggers for a catfish investigation typically fall into several categories. The photographs do not match across platforms, or appear with different names in a reverse image search. The story contains internal inconsistencies that have accumulated over the course of the relationship. A video call has been refused or deflected repeatedly. A physical meeting that has been planned and agreed has been cancelled multiple times with escalating excuses. A financial request has been made that feels inconsistent with the character of the relationship.

In some cases the trigger is external: a third party — a friend, family member, or previous target of the same person — alerts the client that they have seen the same photographs in a different context or received the same story from the same account.

Investigating the Photograph Origin

For cases where the photographs are real photographs of a real person being impersonated, the investigation begins with a systematic search across all platforms and databases where the original images may have appeared. This extends well beyond Google Images to include VKontakte photo search, Yandex Image Search — which indexes Russian domestic content more thoroughly than Western engines — and specialist people-search tools used in the investigative community.

Where the original source is identified, investigators can establish the real person's identity, confirm that this person is not the one who contacted the client, and in many cases determine approximately when the images were scraped for fraudulent use.

Tracing the Communication

Beyond photograph origin, investigators examine the communications themselves for patterns consistent with scripted fraud. The use of particular phrases, the structure of the financial ask, and the emotional escalation pattern are cross-referenced against documented fraud scripts. Telephone numbers and messaging application identifiers, where provided, are checked against known fraud-linked number pools and may reveal connections to other fraud cases.

What the Investigation Concludes

A catfish investigation concludes with a written assessment covering photograph verification findings, identity consistency assessment, communication pattern analysis, and an overall finding on the probability that the presented identity is genuine. Where the investigation confirms fraud, the report documents the evidence basis in a form the client can retain. Where findings are inconclusive, the uncertainty is clearly stated along with the specific evidential gaps that prevent a definitive conclusion.