Catfishing means creating a fabricated online identity to gain someone's trust, usually to obtain money, personal information or access. This article covers the definition, why people catfish, four common examples, warning signs, and how the same tactic targets companies.
Key takeaways
- Catfishing is pretexting with a fabricated identity, from romance scams to fake recruiters.
- The motive ranges from emotional validation to financial fraud and, in a company, to system access.
- The defense is the same in every case: confirm identity through a channel the requester did not choose.
What is Catfishing?
Catfishing is a form of online deception in which someone creates a fake identity, often using fictitious names, photos, and details to lure others into a relationship or gain their trust. The catfisher typically operates on social media platforms, dating apps, or through messaging services. This form of trickery goes beyond simple dishonesty. It's often used to manipulate emotions, extract personal information, or even commit fraud.
The catfishing meaning encompasses a wide range of deceitful behaviors, from building fake romantic connections to impersonating professionals. It's essential to recognize the signs of catfishing to protect yourself from potential exploitation and harm.
Why Do People Catfish?
People engage in catfishing for various reasons, including:
- Emotional Manipulation: Some catfishers crave attention, validation, or emotional support. By creating a fictional persona, they can build relationships that satisfy their emotional needs without revealing their true identity.
- Financial Gain: Catfishers often use fabricated stories to elicit money from their victims. They might claim they need financial assistance for emergencies, medical bills, or travel expenses, playing on the victim's sympathy and trust.
- Revenge or Malice: In some cases, people catfish to embarrass, harm, or deceive others out of spite or revenge. This could involve impersonating someone to ruin their reputation or gain revenge in a personal dispute.
- Escapism: Some individuals catfish as a form of escape from their reality, using the online world to live out a fantasy life that they can control.
- Access: In a corporate setting the fabricated identity is rarely the objective. It is the means of reaching a system, a payment, or a colleague who will trust an established contact.
Examples of Catfishing
Catfishing comes in various forms, often tailored to the platform and the catfisher's specific objectives. Here are some common examples:
1. Romantic Scams
One of the most prevalent forms of catfishing occurs on dating apps and social media platforms. In a romantic scam, the catfisher creates a fake profile using attractive photos and false personal information to appear as a potential love interest.
Once they establish a connection with the victim, they may claim to live far away, serving as an excuse for not meeting in person. Over time, they build trust, sometimes even declaring deep love or commitment. Eventually, the scammer will fabricate a crisis, such as a medical emergency or financial hardship, to manipulate the victim into sending money.
Example: Jane meets "Alex" on a dating site. Over several months, they exchange affectionate messages, and "Alex" professes his love for Jane. Then, he claims he's been in a car accident and needs money for medical bills. Out of concern and love, Jane sends thousands of dollars, only to later discover that "Alex" was a fictitious persona created by a scammer.
2. Social Media Impersonation
In this form of catfishing, a person creates a fake social media profile using stolen photos and details from someone else's life. They might use this profile to interact with others under false pretenses, spread false information, or deceive people into thinking they are someone they’re not.
Catfishers might impersonate celebrities, influencers, or even regular individuals to trick friends, family, or fans into communicating with them. In some cases, they use these fake identities to lure others into sharing private information or engaging in harmful activities.
Example: A scammer uses the photos of a popular influencer to create a fake Instagram account. They reach out to fans, offering "exclusive content" for a fee or asking for personal details. Victims, believing they're interacting with the real influencer, may fall for the scam and provide money or sensitive information.
3. Business Scams and Job Fraud
Catfishing is not limited to personal relationships. Scammers also create fake professional profiles on LinkedIn or job boards to impersonate recruiters, executives, or companies. They lure job seekers or business professionals into fake opportunities to extract personal data, steal intellectual property, or solicit payments for supposed training or application fees.
Example: John receives an email from a "recruiter" claiming to represent a prestigious company. The recruiter offers John a lucrative job but requires a fee for processing his application. Excited about the opportunity, John sends the payment, only to realize that the job and recruiter never existed.
The corporate variant is more costly and less visible. A fabricated recruiter approaches an engineer with an attractive role, moves the conversation to a "technical assessment" hosted on an attacker-controlled site, and the file the candidate runs is the intrusion. Several 2025 and 2026 intrusions in crypto and fintech began exactly this way.
4. Friendship and Social Deception
Not all catfishing involves romance or financial scams. Some individuals create fake profiles to build friendships under false pretenses. They might do this for attention, to live vicariously through another identity, or simply to escape their reality. Although this form of catfishing might seem less harmful, it can lead to emotional distress and betrayal for those who become involved in the false relationship.
Example: Sarah befriends "Emily" on a social media platform. Over time, they share personal stories and secrets. One day, Sarah discovers that "Emily" was actually a middle-aged man using a fake profile to manipulate and gather information about her.
Protecting Yourself from Catfishing
Catfishing can have severe emotional, financial, and psychological consequences. To protect yourself, be cautious when interacting with people online. Look out for red flags like inconsistent stories, reluctance to meet in person, or requests for money. Always verify the identity of the person you’re communicating with, especially if the relationship starts to involve sensitive or financial matters.
At Arsen, we offer comprehensive awareness training to help you and your employees recognize signs of catfishing and other online scams.
Catfishing at Work: The Same Tactic, a Different Target
Strip out the romance and catfishing is simply pretexting with a fabricated identity. That is the most common opening move in corporate social engineering, and it arrives through four personas:
- The recruiter. Reaches engineers and executives on LinkedIn, then moves them to a file or a site the attacker controls.
- The new vendor contact. Emails accounts payable to announce updated bank details, having studied a real supplier relationship first.
- The internal colleague. Poses as IT support or a new starter in another office, usually by phone. Google attributes 23% of cloud compromises to voice calls built on this pattern.
- The executive. Impersonates a director by voice or, increasingly, by deepfake video call, to authorize a payment outside normal process.
The defense is identical in all four cases and it is not technical. It is a verification habit: confirming identity through a channel the requester did not choose. People acquire that habit by experiencing a convincing attempt and being coached immediately, which is what a simulation program delivers and what an annual training module does not.
Frequently Asked Questions
-
Catfishing means creating a fabricated online identity, usually with stolen photos and invented details, to gain someone's trust. The motive ranges from emotional validation to financial fraud and, in a corporate context, to system access.
-
Reluctance to appear on video, stories that shift between conversations, a relationship that deepens unusually fast, pressure to move off the original platform, and any request for money or credentials.
-
Creating a fake profile is not usually an offense in itself. The associated conduct often is: fraud, identity theft, harassment and extortion are all prosecutable, and a fabricated identity used to obtain money or access falls squarely within fraud statutes in most jurisdictions.
-
Through fabricated recruiters, vendor contacts, colleagues and executives. The identity is invented, the objective is a payment, a credential or a file execution. It is the same mechanism as a dating scam with a different payoff.
Would your team verify a convincing stranger?
A fabricated identity is the opening move in most corporate social engineering: the fake recruiter, the new vendor contact, the IT support call. Test whether your people verify before they comply, with phishing simulation, or see how deepfake impersonation works.
