The growing threat of digital impersonation has struck again, targeting public officials in an attempt to exploit their social networks for financial gain. Luca Lombardi, a regional assessor, has issued an urgent warning to his followers after discovering that his Facebook profile had been cloned by unknown actors.
The incident, which came to light this morning, serves as a stark reminder of the evolving tactics used in social engineering attacks. These scams do not necessarily require a breach of the victim’s actual account; instead, lousy actors create a near-identical “mirror” profile to deceive unsuspecting contacts into believing they are interacting with the legitimate individual.
For public figures, the stakes of such identity theft are particularly high. Beyond the personal violation, the primary goal of these cloned accounts is often to facilitate fraudulent activities, such as soliciting money or sensitive information from the target’s established circle of friends and colleagues.
Immediate Legal Action and Public Warning
Following the discovery of the duplicate account, Lombardi announced his intention to take immediate legal steps to address the impersonation. He confirmed plans to report the incident to the Carabinieri in Sanremo to initiate a formal investigation into the source of the cloning.
“This morning I discovered that someone has cloned my profile on Facebook,” Lombardi stated, noting that he intends to protect his identity through all available legal channels. “I will immediately go to the Carabinieri command in Sanremo to report this distressing event.”
Beyond legal recourse, the regional assessor has issued a direct advisory to his digital community. He urged followers to remain hyper-vigilant when receiving unexpected communications from what appears to be his account. Specifically, Lombardi warned that if any user receives a new friend request or, more critically, a request for money, they should treat it as a fraudulent attempt.
To mitigate the risk, Lombardi advised users to follow a specific protocol: do not accept the request, block the profile immediately, and report the message using the platform’s built-in reporting functions. This rapid response is essential to preventing the scam from spreading further through the social graph.
A Recurring Pattern of Digital Impersonation
This is not an isolated incident for the regional official. The current Facebook cloning attempt follows a similar pattern of targeted digital harassment seen earlier this year. In November, Lombardi was the victim of a profile cloning attempt on Instagram, suggesting a persistent interest by bad actors in compromising his digital presence across multiple platforms.
This pattern highlights a broader trend in the cybersecurity landscape: “platform hopping.” Once attackers identify a high-value target, they often attempt to replicate their identity across various social media ecosystems to maximize the surface area for potential fraud. By targeting both Facebook and Instagram, attackers increase the likelihood of catching a victim or their associates off-guard.
Understanding Profile Cloning vs. Account Hacking
From a technical perspective, it is crucial for users to distinguish between account hacking and profile cloning, as the defense mechanisms for each differ significantly.
- Account Hacking: This involves gaining unauthorized access to a user’s actual credentials (username and password) to take control of the existing account. This is typically achieved through phishing, credential stuffing, or malware.
- Profile Cloning: This is a form of social engineering where the attacker creates a completely new, fraudulent account using the victim’s name, photos, and biographical information. The original account remains untouched, but the “clone” appears legitimate to the victim’s friends and followers.
Cloning is often harder to detect initially because the victim’s actual account continues to function normally, providing a false sense of security. Because the attacker is not “stealing” the account but rather “mimicking” it, traditional security alerts for unusual logins may not be triggered.
How to Protect Your Digital Identity
As identity theft becomes increasingly sophisticated, maintaining a proactive security posture is no longer optional. Whether you are a public official or a private citizen, the following best practices can help safeguard your social presence.
1. Verify Before You Trust
If a friend or colleague suddenly reaches out via a new account or through a direct message asking for financial assistance, unexpected gifts, or sensitive data, pause. Use an alternative communication channel—such as a phone call or a known email address—to verify their identity before responding.
2. Audit Your Privacy Settings
Minimize the amount of public information available to strangers. Most social media platforms allow you to restrict who can see your friend list, your photos, and your personal details. Reducing this visibility makes it significantly more difficult for scammers to gather the “building blocks” needed to create a convincing clone.
3. Monitor for Impersonation
Periodically search for your own name on various social media platforms to see if any unauthorized duplicates appear. If you find a suspicious account, do not engage with it. Instead, use the platform’s reporting tools to flag it for impersonation immediately.
| Scenario | Recommended Action |
|---|---|
| Received a suspicious friend request from a known contact | Do not accept; contact the person via phone to verify. |
| Contact receives a request for money or bank details | Immediately block the user and report the account. |
| Discovered a duplicate/clone of your own profile | Report the impersonation to the platform and local authorities. |
For more comprehensive advice on protecting yourself from online fraud, resources such as the Federal Trade Commission (FTC) provide detailed modules on recognizing and avoiding impersonation scams.
The Path Forward: Legal and Investigative Steps
The resolution of this incident now rests with law enforcement. As Lombardi moves forward with his report to the Carabinieri, the investigation will likely focus on tracing the digital footprint of the cloned account. While the anonymity of social media can provide cover for attackers, digital forensics can often reveal IP addresses, device identifiers, and other metadata that link fraudulent activity to specific locations or individuals.
For the public, the message is clear: digital identity is a valuable asset that requires active management. The attempt to impersonate a regional official is a reminder that the boundary between our physical and digital lives is increasingly porous, and the risks associated with the latter can have real-world financial and social consequences.
Next Steps: We will continue to monitor updates regarding the official investigation by the Sanremo Carabinieri and any subsequent legal developments involving the identified perpetrators.
Have you or someone you know encountered a social media impersonation attempt? Share your experiences in the comments below to help alert our community.