Identity cloning is a fraud technique that imitates a real person by reusing public or stolen media and personal signals, such as profile photos, short videos, voice clips, writing style, or familiar details. The goal is not to break into an account directly, but to create a believable copy of the person well enough to fool another human or system.
This matters because many verification flows still rely on recognition rather than strong proof. Attackers can use cloned identity material in phone scams, customer support impersonation, or fake approval requests to pressure staff, relatives, or service desks into approving a transfer or resetting access. Defenders reduce the risk with step-up authentication, out-of-band confirmation, liveness checks, and policies that treat unusual behavior as suspicious even when the face or voice seems familiar. Identity cloning turns public information into attack material, so trust needs to be verified, not assumed.