Executive impersonation

Fake executives, found and taken down.

Scammers pose as your CEO, board members and senior staff to pressure employees into sending payments or sensitive data, and to win the trust of customers and job seekers. Unphish finds the fake profiles, numbers, email domains and job ads using your people's names, and gets them removed.

Impersonating “Jane Lee, CEO”Example
  1. WhatsApp
    +61 4XX XXX 291 · “Jane”Messages staff asking for urgent gift cards
    Suspended
  2. LinkedIn
    Jane Lee · CEO, Solstice PayCopy of her profile, photo and job history
    Removed
  3. Telegram
    Jane Lee OfficialInvites followers to a private investment group
    Removed
  4. Job ad
    Solstice Pay Talent TeamFake recruiter charging an onboarding fee
    Reported
4fakes using one name
3already removed
4channels covered

How it works

Found wherever your people's names are used.

Executive impersonation works because people trust authority and act fast under pressure. We find the fakes across social media, messaging apps, email domains and job sites, prove they're not real and get them removed.

01

Detect

We watch for your people's names.

Profiles, messages, channels, ads and job listings using your executives' and staff names or photos are found across social media, messaging apps, job boards and the web.

Fake profilesMessaging appsJob adsLookalike emailTeam reports
02

Investigate

Prove it isn't really them.

Evidence is captured automatically, including screenshots, profile details, phone numbers and linked accounts. AI-assisted analysis scores each threat and an analyst validates it.

AI-assisted analysisScreenshotsProfile historyAnalyst review
03

Disrupt

Removed, or escalated until it is.

Reviewed threats go to enforcement in one click, reported under each platform's rules for impersonating a real person, with proof of who they are. If action is slow, we escalate.

One-click enforcementPlatform reportsRegistrarsEscalation
04

Understand

See who's using whose name.

Fakes using the same people, numbers or scripts are clustered into campaigns, and removed accounts are checked so you know when they come back.

Threat clustersVerification checksReportsAudit trail

What we remove

Every way they borrow your people's names.

A familiar name gets a reply, a payment or a click. These are the executive and staff fakes we find and remove.

Fake executive profiles

Jane Lee · CEO, Solstice Pay

Copies of a leader's profile, photo and job history

CEO messages

“It's Jane, are you free?”

WhatsApp and text messages asking staff for gift cards or payments

Lookalike email domains

jane.lee@solstice-pay.co

Domains registered to send convincing emails as your leaders

Fake recruiters

Solstice Pay Talent Team

Recruiters and HR accounts using your name to run job scams

Fake job ads

Cabin crew · Sydney

Roles that don't exist, posted to collect applicants' details or fees

Fake endorsements

“Jane's secret investment”

Ads and posts that use a leader's face or name to sell a scam

Investment channels

t.me/janelee_official

Telegram and WhatsApp groups run in an executive's name

Staff impersonation

Mary · Customer supervisor

Fake team members who “escalate” complaints into scams

VIPs and spokespeople

Ambassador giveaway

Fakes of ambassadors, presenters and other public faces of your brand

Someone pretending to be your CEO?

Send us the profile, number or message. We'll check it, capture the evidence and get it removed.

The results

Proven on real impersonation cases.

From executive, staff, recruitment and social media cases we closed for our clients in the first half of 2026.

100%

of executive, staff and recruiter impersonations we pursued were taken down

94%

of fake job ads were down the same day we reported them

99%

of fake accounts we pursued on Facebook, X and Instagram were taken down

1 click

to send a reviewed impersonation straight to enforcement

Where executive fakes show up

  • WhatsApp and SMS“CEO” messages asking staff for gift cards and payments
  • LinkedInFake executive profiles and recruiters
  • TelegramInvestment channels and HR bots in a leader's name
  • EmailLookalike domains sending as your executives
  • Facebook and InstagramFake staff, endorsements and giveaways
  • Job boards and sitesRoles that don't exist, posted in your name

Scammers go wherever a familiar name gets a fast reply, which is usually a private message.

Source: Unphish executive, staff, recruitment and social media impersonation cases opened January to June 2026. Takedown rates exclude cases closed for other reasons, such as at the client's request.

Case study · Airline group

100%

of the fake cabin crew job ads we found were taken down the same day.

One site was posting cabin crew and flight attendant roles that didn't exist, in the airline's name, to draw job seekers away from its real careers page.

What we found

  • One site, many citiesFake roles in Sydney, Melbourne, Brisbane, Perth, Cairns, Auckland and Singapore
  • Targeted at language speakersAds aimed at Hindi, Japanese, Italian, Spanish and French speakers to look more convincing
  • Linked and removed togetherEvery ad was connected to the same campaign and taken down the day it was reported

Client name withheld to protect confidentiality. January to June 2026.

How the scam works

The fake CEO message.

A message arrives from a number nobody recognises, signed with the CEO's name. She's in meetings, it's urgent, and it needs to stay quiet. Within a few messages, someone is buying gift cards or approving a payment.

  • The name and photo come from public profiles
  • Urgency and secrecy stop people checking
  • The ask starts small, then grows
  • The same script is sent to many staff at once
Explore social media protection →
Private messageExample
JL
Jane Lee (CEO)+61 4XX XXX 291 · not in your contacts

Hi Sam, it's Jane. I'm in back-to-back meetings. Are you free for a quick task?

Sure, what do you need?

I need five $200 gift cards for a client today. Send me the codes and keep this between us for now.

Number not in staff directory · photo copied from LinkedInSuspended

Scams Prevention Framework

Ready for Australia's Scams Prevention Framework?

The SPF requires banks, telcos and digital platforms to take reasonable steps to prevent, detect, disrupt and report scams. Unphish gives you the action and the evidence to show you have.

01

Prevent

Spot lookalike domains, fake profiles and scam ads before they reach your customers.

02

Detect

Continuous monitoring across the web, social media, app stores and ads.

03

Disrupt

Rapid removal of scam websites, accounts and ads, backed by enforcement-grade evidence.

04

Report

A complete audit trail of every detection and takedown, ready for regulator reporting.

What's included

Everything you need to protect your people's names.

CasesSearch…⌘K
←CASE-20260514-7C11E8P1Export Case Packet
https://wa.me/614XXXXX291UnphishScan

Case status

Resolved

State: Closed

Verification history

DownAccount suspended by platform15 May 2026, 10:42
Profile screenshotCaptured
JLJane Lee (CEO)+61 4XX XXX 291

About: CEO at Solstice Pay. In meetings, message only.

Profile photo copied from LinkedIn
OverviewEvidence & AnalysisTimelineNotes

Description of abuse

WhatsApp account using the CEO's name and photo to message staff, asking them to buy gift cards and send the codes

Threat type
Executive impersonation
Platform
WhatsApp
Detected
14 May 2026
Case age
1 day to resolve

Outcome

Successfully suspended

Classification confidence97%
  • Screenshot evidence available
  • Proof of identity attached
  • Same script sent to 9 staff

Add a comment

Add a comment for your enforcement team
Add comment

Illustration of the Unphish client portal with example data.

Executive and VIP monitoringYour leaders' and public faces' names and photos watched across social, messaging and the web
Messaging app coverageFake numbers, channels and bots on WhatsApp and Telegram
Fake recruiter and job ad removalRecruiters, HR accounts and job listings using your name
Lookalike email domainsDomains registered to send emails as your executives, suspended at the registrar
AI-assisted analysisEvidence gathered and risk-scored before an analyst validates every threat
One-click enforcementReviewed threats move straight into takedown, where configured
EscalationIf a platform is slow or says no, we escalate through alternative contacts and trust and safety channels
Removal verifiedAutomated checks confirm the fake is gone and flag it if it reappears
Threat intelligenceFakes using the same people, numbers or scripts clustered into campaigns
Spotted one? Send it inIf your staff get a suspicious message, flag it and we'll take it from there
Proof of identity handledWe prepare the identity evidence platforms need to act on a real person's report
Reporting and audit trailDashboards, timelines, scheduled reports and a record of every action

Why it's different

Unphish vs a reactive approach.

Reactive approachWith Unphish
Visibility

Staff forward a strange message

Continuous monitoring of your people's names

Detection

Found after money or data is gone

Detected and risk-scored early

Patterns

Each fake handled on its own

Same scripts and numbers linked into campaigns

Takedown

The executive files their own report

Evidence and identity proof handled for them

After removal

Nobody checks if it comes back

Removal verified, reappearance tracked

Reporting

Scattered emails and screenshots

One dashboard with timelines and outcomes

Found someone pretending to be one of your people?

Request a takedown →

FAQ

Executive impersonation questions, answered.

What is executive impersonation?

It's when scammers pose as senior leaders, board members, staff or other high-profile people to pressure employees into sending payments or sensitive information, or to deceive customers and job seekers. It works by exploiting trust and hierarchy rather than a technical weakness.

Where do you find executive impersonation?

On social media and LinkedIn, in WhatsApp and Telegram, on lookalike email domains, on job boards and websites, and in ads that use a leader's name or face.

How do you get fake executive profiles removed?

We report each fake under the platform's rules for impersonating a real person, with the evidence and proof of identity the platform needs, and escalate if action is slow. Every executive, staff and recruiter impersonation we pursued in the first half of 2026 was taken down.

Can you stop fake CEO emails?

We don't filter your inbox, but we find lookalike domains registered to send emails as your executives and get them suspended, often before they're used. Once the domain is down, every email sent from it stops working.

Do you cover fake recruiters and job ads?

Yes. We remove fake recruiters, HR accounts and job listings using your company's name. In the first half of 2026, 94% of the fake job ads we pursued were down the same day we reported them.

Can our staff report suspicious messages?

Yes. Anyone on your team can send us a suspicious profile, number or message at any time, and it goes through the same evidence, validation and takedown process.

Does Unphish help with UK scam and fraud rules?

Yes. Unphish helps UK organisations detect, disrupt and document impersonation, with a full audit trail of every detection and takedown. That record supports your work under the Online Safety Act and APP fraud reimbursement rules.

Spot the fake

Is it really your CEO?

Six messages all claim to come from Solstice Pay's CEO, Jane Lee, or her team. Which ones are really from her?

  1. Spot
  2. Reveal
  3. Take down

Real or fake?

  1. JL

    Jane Lee LinkedIn · CEO at Solstice Pay · joined 2014

    Proud of the whole team for this quarter's results. Thank you all.

  2. JL

    Jane Lee (CEO) WhatsApp · +61 4XX XXX 291

    Hi, it's Jane. In meetings all day. Can you buy five $200 gift cards for a client? Keep this between us.

  3. JL

    Jane Lee Email · jane.lee@solsticepay.com

    Reminder: today's town hall has moved to 3pm. See you there.

  4. JL

    Jane Lee Email · jane.lee@solstice-pay.co

    Please approve this supplier payment before 5pm. I'll explain later.

  5. JL

    Jane Lee Official Telegram · t.me/janelee_official

    Join my private investment group. Limited spots for Solstice Pay customers.

  6. TT

    Solstice Pay Talent Team LinkedIn · recruiter

    You're hired! Pay $150 for your onboarding kit and you can start Monday.

Tag all six, then check your answers.

Results

Real
  • LinkedIn postHer real profile, years old, and asking for nothing.
  • Town hall emailSent from the real solsticepay.com domain, about something routine.
Fake
  • WhatsApp gift cardsAn unknown number, urgency and secrecy. The classic CEO scam.
  • Supplier payment emailsolstice-pay.co is a lookalike domain, not the company's.
  • Telegram channelExecutives don't run private investment groups for customers.
  • Talent Team recruiterReal employers never charge you to start a job.

Take them down

Four fakes, four channels, four different ways to remove them.

WhatsApp numberImpersonation report

Reported as a fake of a real person, with proof of who she is.

Lookalike domainRegistrar suspension

Suspending solstice-pay.co stops every email sent from it.

Telegram channelPlatform takedown

Reported as impersonation and investment fraud, then escalated if needed.

Fake recruiterProfile + job ad removal

The account and every job ad it posted are taken down together.

Pause before you act. If a leader asks for money, codes or secrecy, check with them on a channel you already trust.

Liked that one? Follow us on LinkedIn for scam insights, research, takedown stories and company news.

Keep exploring

See where your brand is being abused.

Run a free threat scan or book a demo to see what's targeting your customers right now.