OSINT
Verifying a Profile Belongs to Your Subject
Finding an account with the right name is easy. Proving it is your subject is the job, and it is where most reports quietly fall apart.
Common names are common. There are thousands of James Harrises, and several of them live in the same state as yours. A report that identifies the wrong one is worse than a report that identifies nobody, because somebody will act on it.
What counts as verification
You are looking for independent corroboration — two or more facts that come from different sources and agree.
| Strength | Evidence |
|---|---|
| Strong | A photograph of the subject you already have, appearing on the profile |
| Strong | Employer on the profile matching an employer you established elsewhere |
| Strong | A relative you identified independently, connected and interacting |
| Moderate | Location matching a known address history |
| Moderate | A username reused on an account already tied to the subject |
| Weak | Name match |
| Weak | Approximate age |
| Worthless | “It looks like him” |
Start from what you already proved
Verification runs from established facts outward, not from the profile inward. Before you look at social media you should already have an address history, an employer, relatives and a date of birth from records.
Then you are testing the profile against known facts rather than accepting the profile’s claims.
Check the friend and follower graph
The strongest single indicator. If you have identified a spouse, a sibling or a parent from probate, property or court records, and they are connected to this account, that is real corroboration.
People change names, towns and jobs. They rarely stop being connected to their family.
Compare photographs properly
Run any photo you already hold and any photo from the profile through the image comparison tool. Identical file hashes mean the same file was posted in both places, which is a hard link.
A high perceptual similarity score means the same photograph, re-saved — also strong. Two different photographs of a similar-looking person is not evidence.
Test the timeline against the record
Posts about moving house, a new job, a wedding, a birth, a death in the family. Do those dates line up with the deeds, the licence renewals, the probate filing?
Contradiction is as useful as agreement. If the profile shows someone in Arizona in 2022 and your records place the subject in Ohio, you have the wrong person or an unexplained gap.
Look for the accidental identifier
A vehicle in a driveway that matches a VIN you decoded. A house that matches an assessor photograph. A business logo on a van. A visible street number.
These are the details that turn a probable match into a documented one.
Rule out the obvious alternatives
Search the same name in the same area and see how many candidates exist. If there are four, say so in your report and explain how you eliminated three.
A report that shows the elimination is far more defensible than one that presents a single answer with no working.
Write it down the way you would defend it
In the report, state the identification and the basis for it separately:
“The Facebook account at [URL] is identified as the subject on the following basis: (1) the profile photograph is byte-identical to the photograph obtained from [source] on [date]; (2) the account is connected to [name], identified as the subject’s sister through the probate file in [case number]; (3) the stated employer matches the employer of record on the subject’s [state] licence, verified [date]. Three other individuals of the same name were identified in the region and eliminated on the basis of age and location.”
Capture what you relied on at the time you relied on it. Profiles change and posts get deleted. A screenshot with a visible URL and date, plus an archived copy, is the difference between evidence and an assertion.
Go deeper
The Social Media Investigator’s Guide
Tracing and verifying social media accounts, advanced search beyond basic queries, facial recognition strategies to identify individuals, uncovering hidden or deleted posts, and the ethical and legal considerations. $49.99.
See the course