A clone account is impersonation aimed not at the person copied but at the people who trust them. The offender copies a target’s public profile — display name, profile and cover photos, bio, sometimes scraped posts — to produce a convincing look-alike, then sends friend or follow requests and direct messages to the target’s real contacts. Because the message appears to come from someone the recipient knows, ordinary skepticism drops: a request that would be dismissed from a stranger is entertained from “a friend.”
The offender then runs a small con through the borrowed identity — a claimed emergency needing quick money, a “you should apply for this government grant, here’s the agent” referral, a crypto or giveaway “tip,” a request to receive a verification code (to hijack the recipient’s own account), or a link to a phishing page. Cloning is cheap and fast because it needs only public information; no account is actually hacked. It differs from account takeover (where the real account is compromised and messaged directly) and from catfishing (a wholly fabricated persona rather than a copy of a real one).
The trust being spent is the copied person’s reputation. Clones are often short-lived and thrown away once reported, and offenders run many in parallel; a common secondary harm is that the impersonated person must warn their network and clean up, while defrauded contacts may blame them.