Cyabra Launches Deepfake Detection

Phone-y Business: Imposter CEO Risks T-Mobile

Let’s talk about impersonations online, and more importantly, about the connection between impersonations and brand reputation: in the past year, Cyabra has witnessed a steady rise in fake profiles causing huge reputational damage by impersonating companies, brands and individuals on social media. Major brands like McDonald’s, numerous airports around the world, banks, journalists, and many others have been subjected to impersonations. Whether the imposter profiles are engaged in an elaborate phishing scheme, or actively seeking to damage the company’s reputation by impersonating it, the ease and simplicity of creating a false identity has become a growing threat.

 

Will the Real CEO Please Stand Up? 

Cyabra has identified a fake X (Twitter) profile impersonating T-Mobile’s CEO, Mike Sievert. The fake profile, which is still active at the time this story is being written, acted under a nearly identical handle, @MikeSievert_ (with the underscore being the sole distinction from the genuine one). 

In their bio, the fake profile cleverly mocked the CEO, declaring himself “Lover of finding ways to separate our #MagentaFamily from their money, one dollar at a time”. Other than insinuating that Mike Sievert was exploiting T-Mobile customers, the fake profile showed a deep familiarity with Seivert: it referred both to his personal hobby of yachts, and to a new mobile plan which T-Mobile was heavily criticized for (more on that below). It also chose a profile picture that was fairly different from the one used by the real profile, making it more difficult to detect the impersonation at a glance. 

Comparison graphic showing authentic social media profile marked Real with verification badge, colorful cityscape header, and hundreds of thousands of followers above an imposter profile marked Fake with few followers and plain gray header, highlighting cues to spot fraudulent accounts
Just one underscore makes the difference: the real Sievert and the imposter.

 

The Right Fake at the Right Time

Here’s some important background to this case: “Magenta Family” was introduced to T-Mobile users last October as an affordable new family plan, but while the company was promoting it, leaked documents posted to Reddit exposed that the plan would force customers subscribed to older plans to automatically move onto newer, expensive ones, with opting out being challenging and unintuitive. T-Mobile and Sievert were heavily criticized, until, at the end of October, T-Mobile conceded and rolled back the forced migration, allowing customers to keep their current programs

The fake profile was created and started posting at the same month the plan was announced. The imposter used the hashtag #MagentaFamily while it criticized and mocked T-Mobile and Sievert, implying they wanted to keep the forced migration quiet, and that their network had data breaches. 

Three tweets from an impersonated Mike Sievert account joking about T-Mobile plan migrations, data breaches, and temporary policy changes, using hashtags #MagentaFamily and #UnCarrier
The fake Sievert ridiculing T-Mobile.

 

This impersonation case might look like somebody was just making fun at Sievert’s expense – possibly, a client unhappy with the forced migration plan. However, the level of introduction with Sievert, including his hobbies, the paraphrased bio, the profile picture, and to top it all off, the smart and well-timed use of the PR crisis around the new Magenta Family plan, showed a malicious intent of damaging the company’s reputation. The bad actor behind this fake profile has clearly done their research and gathered information that would effectively target both Sievert and T-Mobile. 

Furthermore, the imposter didn’t stop discrediting T-Mobile when the forced migration was revoked: the profile remained active and found new topics and new reasons to criticize Sievert and T-Mobile, while of course still pretending to be the CEO. 

 

Tweet from an account labeled Mike Sievert stating T-Mobile will give customers Hulu On Us in exchange for downgraded Netflix, followed by a link and hashtags #UnCarrier #WeWontStop #TMobile #TeamMagenta
A recent post by the imposter.

 

Imposters Are Always Out to Harm Us

While impersonations of companies may be easier to detect and uncover, imposters pretending to be real people are harder to identify and stop, especially when the fake profiles are operated by a real person, with the ability to adjust details like bio and profile picture, and to write posts that sound legitimate and credible with the sole purpose of causing harm to the CEO’s or company’s reputation. Keep in mind that fake profiles can be created months before they start operating. While they lay dormant in wait, they are especially difficult to identify. 

With the right technology, it is possible to detect a fake profile before it starts inflicting damage to your reputation or to your company’s reputation. To learn more about detecting brand reputation threats and impersonations, and to stop online PR crises at their initial stages, contact Cyabra. 

Related posts

“Made in China” or by Bots? Fake Profiles Fuel Tariff Debate

Luxury fashion brands like Lululemon, Chanel, and Gucci were slammed following US tariffs discussions, accused for "misleading consumers about where their products are manufactured". Cyabra...

Rows of glowing-eyed robots at laptops generate fake social media posts urging a boycott of luxury brands during the #TariffWar and #MadeInChina debate, symbolizing automated disinformation

Rotem Baruchin

May 26, 2025

Bots Hitch a Ride on Bolt’s PR Crisis

At the end of January, ride-hailing company Bolt faced a PR crisis with a lot of the conversation playing out on X (Twitter). As Bolt...

Hand holding a smartphone displaying a city map with location pins, overlaid with network graphics connecting multiple small autonomous delivery robots against an urban street background

Rotem Baruchin

February 5, 2024

Defending Brands and Executives in the Age of Disinformation

When false narratives can go viral in seconds, the old “first hour” of crisis response is now the first 60 seconds. Cyabra’s From Paralysis to...

Rotem Baruchin

August 12, 2025