Someone Used My Email to Make a Facebook Account

Emails keep arriving from Facebook: confirm your account, a friend request, a login code. But you never created a Facebook account with this address, or your own account uses a different one. Somebody else's account is tied to your email.

In many cases this is a typing mistake by a stranger. In some, it is someone building a profile in your name or testing your inbox. Either way the fix starts the same: do not click into the account, report it through Facebook's own form, and lock down your email.

This guide helps you work out which situation you are in, which Facebook form fits, what to gather first, and what to watch for afterwards.

Last checked: 19 October 2026.

#Quick Answer

If someone created a Facebook account using your email address, report it on Facebook's Report Something form and choose "Someone is using my email address for their Facebook account". The form asks whether you have a Facebook account yourself, so you can start it either way. Facebook says this most likely happened by mistake, and that if you do not confirm the email, it will not be added as confirmed to their account. If the account also uses your name or photos, report it as impersonation instead. Do not confirm the account or use its reset link, and change your email password if anything else looks wrong.

#How Can Someone Make a Facebook Account With My Email?

Anyone can type an email address into Facebook's sign-up form. Facebook says that to finish creating an account, the person must confirm the email by clicking the link it sends, and an account that is never confirmed may be deleted after one year of inactivity.

Facebook's page on problems creating an account with your email explains the other side of this: you cannot create a new Facebook account with an email address already tied to an existing one. That is why some people only find out when they try to sign up themselves and are told the address is taken.

If you use Gmail, check one thing before you assume the worst. Google's page on getting someone else's emails says you own every dotted version of your address, so john.smith@gmail.com and johnsmith@gmail.com reach the same inbox. So if someone believes a dotted version of your address is theirs and signs up with it, Facebook's emails will still reach your inbox.

#Which Situation Are You In?

Match what you see to the closest row. The right Facebook form depends on it.

First check that the emails are genuine. Facebook's page on checking whether an email is really from Facebook lists the only domains it sends from: fb.com, facebook.com, facebookmail.com, instagram.com, meta.com, metamail.com and global.metamail.com, plus their subdomains. Treat a Facebook-branded email from any other domain as phishing: do not click it, and report it to phish@fb.com, as Facebook advises for suspicious emails, or delete it.

#Step 1: Gather the Details Before You Report

A report Facebook can act on needs specifics. Collect these before you open the form:

• Screenshots of two or three of the Facebook emails, with the date and the sender address visible.
• The name shown on the account in those emails, exactly as written.
• A link to the profile if you or a friend can find it. Ask the friend to copy the address from the profile page.
• The email address involved, written carefully, including any dots.
• If the account copies you, screenshots of the profile, its photos and any messages it sent to people you know.

Do not forward the confirmation email to anyone, and do not click its buttons to gather evidence. A screenshot is enough.

#Step 2: Report Email Misuse on Facebook's Form

Facebook's Report Something form is the route for an account using your address. The form lists several issues. Pick "Someone is using my email address for their Facebook account", answer whether you have a Facebook account yourself, and fill in what it asks.

Keep your description short and factual: you own this email address, you did not create this account, and you would like your address removed from it. Facebook does not give a response time for these reports on its form, and you may not get a detailed reply.

#Step 3: If the Account Pretends to Be You

When the account uses your name, your photos or your identity to talk to people, it is impersonation, and Facebook has a separate impostor account form. Facebook says it can only act on these reports from the person being impersonated or an authorised representative, such as a parent or legal guardian, so a friend cannot file it for you.

The form asks for your full name, a contact email, the name on the impostor profile, a link to it, and a photo of your ID. Facebook says it may encrypt and store the ID for up to one year to improve its fake ID detection, and that you can switch this off in Identity Confirmation Settings, after which the copy is deleted within 30 days.

Our guide to reporting a fake Facebook profile in your name goes deeper on impersonation reports, and the general guide to fake account removal covers other platforms.

#Why You Should Not Log In to the Account Yourself

Because the account uses your email, a reset link could let you into it. It is tempting to get in, change the email and delete the account. Do not. Facebook's own advice for an account you did not create is that the easiest thing to do is ignore the email, and an email that is never confirmed is not added as confirmed to their account.

The report form exists so Facebook can sort this out from its side. Leave the confirmation and reset links unused, and keep the screenshots.

#Step 4: Secure Your Own Email

Your inbox matters more than this Facebook account. Whoever controls it can reset almost everything else you use. Google's Gmail security tips give a good checklist, and the same ideas apply to any provider:

1. Change the email password to a strong one you use nowhere else.
2. Turn on two-step verification for the email account.
3. Check forwarding settings and filters for anything sending your mail elsewhere.
4. Check Send mail as and any delegated access for addresses or people you do not know.
5. Review recent security activity for logins you do not recognise.

If you worry the address leaked, our guide to checking whether your password appeared in a data breach shows how to look safely.

#If Facebook Says Your Email Is Already in Use

If you only want your own Facebook account, you do not have to wait for the report. Facebook's account creation page says you can sign up with a mobile phone number instead of an email address. You can add the email later once the other account no longer holds it. Do not create a second account if you already have one; Facebook's rules allow one personal account per person.

#When It Is More Than a Typo

Be more careful if the emails arrive alongside other signs: a password reset for your own email, sign-up emails from many sites at once, or friends saying an account with your name asked them for money. That pattern points to someone using your identity, not a stranger's typo.

#When a Case Review Makes Sense

A stray account made by mistake rarely needs help. A review is worth asking for when the account is actively impersonating you or your business, it has contacted your customers or family, or your reports keep coming back without action. SocialSafe by AwareXone, AwareXone's recovery and identity service, looks at the evidence first and works only through Facebook's own reporting routes. Our impersonation removal service explains that process, and our Trust Center lists what we never ask for.

#Frequently Asked Questions