OSINT
Finding Someone on Facebook Without an Account
Facebook shows a logged-out visitor very little. What leaks out is mostly through Google, business pages, and other people’s posts.
Two reasons to work from outside rather than logging in. First, you may not have an account you are willing to use. Second, and more importantly, browsing while logged in creates a record of your interest and risks the platform suggesting you to your subject as a person they may know. That has ended cases.
What is still reachable
| Reachable | Not reachable |
|---|---|
| Business and public pages | Personal profiles set to private |
| Posts set to Public | Friends lists, in almost all cases |
| Public group descriptions and member counts | Private group content |
| Reviews and recommendations | Direct messages, obviously |
| Profile photo, cover photo, name | Anything requiring a login to view |
Search Facebook through Google, not through Facebook
site:facebook.com "james harris" "concord"
Google indexes public pages and public posts. Facebook’s own search is closed to logged-out users, but the index is not.
Add a town, an employer or a school to cut the noise. Add -groups or
-events to filter what you do not want.
Go through the business page, not the person
A subject who runs any kind of business almost certainly has a Facebook business page, and business pages are public by design.
They carry an address, a phone number, opening hours, photographs of premises and vehicles, posts with dates, and reviews. The owner frequently replies to reviews from their personal account, which links the two.
Read the reviews and the replies
Customers name staff. Owners reply with first names. Complaints mention addresses, jobs and dates.
A one-star review saying “Jim never came back after taking the deposit in March” is a dated fact about your subject from a third party.
Look for them in public group content
site:facebook.com/groups "harris" "for sale"
Local buy-and-sell groups, town groups, trade groups. People post vehicles, tools and furniture for sale with photographs taken at their house.
A marketplace listing is a dated indication of where somebody is and what they own.
Use the archives for what has changed
Public pages get captured by web archives. An old capture of a business page may carry a previous address, a previous phone number, or a staff list that has since been removed.
Work the photographs
Profile and cover photos are visible without a login. Run them through reverse image search — the same photograph very often appears on a dating profile, a company bio, or an older account.
The thing not to do
Do not create a fake profile to send a friend request. It violates the platform’s terms, it is a misrepresentation made to obtain information, and in a licensed jurisdiction it is the kind of conduct that draws a complaint to your board. If the case is worth that risk, it is worth doing lawfully through discovery instead.
If you must use a real account, use a clean browser. A separate profile, no logged-in sessions, and never visit the subject from an account that has any social connection to you or your client. Platform suggestion algorithms are the most common way a subject learns they are being looked at.
Go deeper
The Social Media Investigator’s Guide
Advanced search techniques beyond basic queries, tracing and verifying accounts, uncovering hidden or deleted posts, and investigating digital footprints and connections — with the ethical and legal considerations set out. $49.99.
See the course