California Penal Code § 528.5 makes it a crime to knowingly impersonate another real person through the internet, websites, social media, email, or other electronic means with the intent to harm, intimidate, threaten, defraud, or otherwise cause damage.

High-profile investigations frequently involve allegations of online reputation attacks, domain spoofing, impersonation campaigns, and coordinated digital harassment.

Digital impersonation cases often arise from business disputes, celebrity conflicts, political campaigns, or corporate competition where prosecutors believe someone intentionally created a false online identity to damage another person's reputation or interests.

What is Prohibited Under California Penal Code § 528.5?

Unlike many internet-related offenses that focus on unauthorized computer access or financial fraud, Penal Code § 528.5 targets the intentional use of another person's identity online to cause harm.

To obtain a conviction, prosecutors generally must establish that:

• The defendant knowingly impersonated another actual person through an internet website or another electronic medium
• The impersonation was intentional
• The defendant acted without the other person's consent
• The impersonation was done for the purpose of harming, intimidating, threatening, defrauding, or otherwise injuring another person

The statute applies to a wide range of electronic communications, including:

• Social media profiles
• Fake business websites
• Fraudulent email accounts
• Domain names designed to impersonate legitimate businesses
• Online marketplace accounts
• Messaging platforms
• Professional networking profiles
• Other internet-based communications

How Do High-Profile Digital Impersonation Investigations Develop?

Digital impersonation allegations often begin with complaints from individuals whose identities have allegedly been misused online.

In high-profile matters, complainants may include executives, elected officials, entertainers, physicians, investors, attorneys, influencers, or public companies that believe an impersonation campaign is damaging their reputation or business relationships.

Investigators may work to identify:

• IP address records
• Domain registration information
• Email account metadata
• Cloud storage records
• Social media account history
• Payment records used to purchase domains or hosting services
• Device information connected to account creation
• Search warrants served on internet service providers or technology companies

Questions surrounding account ownership, device access, attribution, and authorship frequently become significant factual disputes.

When Can Online Defamation Become Part of a Criminal Investigation?

Many online reputation disputes remain entirely civil matters. California law recognizes civil claims involving defamation, interference with contractual relationships, unfair competition, and business torts.

However, prosecutors may become involved when they believe defamatory content forms part of a broader criminal impersonation scheme prohibited by Penal Code § 528.5. Examples may include:

• Creating a fake social media account pretending to be a public official while publishing fabricated statements
• Registering a domain name closely resembling a competitor's website and sending deceptive communications to customers
• Creating an email account using another executive's identity to distribute false information affecting investors
• Operating fake online profiles intended to intimidate witnesses or influence ongoing litigation
• Impersonating licensed professionals to damage their reputation with patients or clients

The investigation often centers on whether the defendant intentionally assumed another person's identity online rather than merely expressing opinions or publishing negative commentary.

What Evidence is Commonly Used in These Cases?

Digital impersonation prosecutions rely heavily upon technical evidence gathered from multiple electronic sources. Investigators frequently examine:

• Search warrant returns from internet service providers
• Subscriber records
• Device forensic examinations
• Browser history
• Domain registration records
• Payment information
• Login timestamps
• Metadata associated with uploaded images or documents
• Cloud account activity
• Deleted communications recovered through forensic analysis

Although this evidence can appear persuasive, digital attribution is rarely as straightforward as prosecutors initially suggest.

Shared devices, compromised credentials, VPN services, third-party account access, automated posting software, and incomplete forensic analysis may complicate the government's theory regarding who actually controlled an account at a particular time.

During the investigation, qualified counsel will evaluate whether digital evidence establishes actual authorship or merely shows that activity occurred through a device or account associated with a particular individual.

Hypothetical Case Study: Coordinated Corporate Impersonation Campaign During an Acquisition

A technology company preparing for a multibillion-dollar acquisition suddenly experienced weeks of damaging online activity.

Fake LinkedIn profiles appeared using the identities of several board members. A nearly identical version of the company's website was registered under a deceptively similar domain name.

Journalists received emails that appeared to originate from the company's chief financial officer, suggesting accounting irregularities had been concealed from investors.

Investigators ultimately traced portions of the activity to a cybersecurity consultant who had previously worked for a competing investment group. Prosecutors alleged the consultant:

• Coordinated multiple anonymous contractors in different countries,
• Purchased domain names through cryptocurrency transactions, and
• Used layered VPN services to conceal the campaign's origin. 

Charges included violations of Penal Code § 528.5 along with identity theft and conspiracy allegations.

The government's evidence initially appeared overwhelming because several financial transactions and internet accounts could be linked to devices recovered from the consultant's residence.

After a detailed forensic review, our firm's white collar criminal defense attorneys identified substantial inconsistencies between the timing of the online activity and the government's attribution analysis.

Individuals outside the United States accessed several administrator accounts after the consultant's contractual relationship with the competing investment group ended.

Additional forensic examination revealed that portions of the alleged impersonation campaign originated from cloud servers that prosecutors had not fully investigated.

The digital evidence ultimately showed that multiple participants independently controlled different portions of the online campaign, making it much harder to establish beyond a reasonable doubt that the consultant personally created each impersonation account identified in the charging documents.

After extensive litigation concerning the forensic evidence and electronic attribution, the prosecution dismissed several of the most significant allegations and resolved the remaining case without a conviction under Penal Code § 528.5.

Related California Laws

In high-profile online impersonation and digital defamation investigations, prosecutors rarely file charges under a single statute—understanding how overlapping identity theft, cyber-harassment, and computer access laws apply is critical, because a single fake profile, spoofed domain, or AI-generated campaign can trigger multiple state and federal criminal counts simultaneously. The related Laws include:

1. Penal Code § 530.5 (Identity Theft): Criminalizes obtaining and using another person's personal identifying information without consent for an unlawful purpose or financial gain.

2. Penal Code § 502 (Comprehensive Computer Data Access and Fraud Act): Prosecutes unauthorized access to computers, servers, websites, or data networks, often charged when impersonation involves domain spoofing or account takeovers.

3. Penal Code § 653m (Cyber-Harassment & Annoying Electronic Communications): Prohibits sending repeated or anonymous electronic communications with the intent to annoy, harass, threaten, or intimidate another person.

4. Penal Code § 523 (Extortion by Threatening Letter or Electronic Message): Criminalizes using fake online identities or compromised accounts to threaten injury or reputational harm in order to compel money or property.

5. Penal Code § 134 / § 135 (Falsifying or Preparing False Evidence): Prohibits creating or using forged digital communications, fabricated emails, or spoofed documents intended to mislead legal proceedings or law enforcement.

Frequently Asked Questions (FAQs)

What are the criminal penalties for violating California Penal Code § 528.5?

A violation of Penal Code § 528.5 is a misdemeanor punishable by up to one year in county jail, a fine of up to $1,000, or both, in addition to potential civil liability for damages under PC 528.5(e).

Does Penal Code § 528.5 apply to parody, satire, or fan social media accounts?

No, parody, satire, and fan accounts protected under the First Amendment are not illegal under PC 528.5, provided there was no intent to deceive the public into believing the account was real or to harm, intimidate, or defraud the individual.

Can using AI tools or deepfakes to impersonate someone trigger PC 528.5 charges?

Yes, prosecutors increasingly apply PC 528.5 to individuals who use generative AI tools, deepfake media, or automated accounts to credibly impersonate a real person online with the intent to cause harm, intimidation, or fraud.

What must prosecutors prove to convict someone of online impersonation under PC 528.5?

Prosecutors must prove beyond a reasonable doubt that you knowingly, credibly, and without consent impersonated another real person through a website or electronic means with the specific intent to harm, intimidate, threaten, or defraud.

Can an IP address alone prove that I created an impersonating account?

No, an IP address alone does not prove who actually authored or created the account; shared Wi-Fi networks, open routers, compromised devices, multiple household users, and VPNs frequently create reasonable doubt regarding actual authorship.

What are common defense strategies against Penal Code § 528.5 charges?

Common defenses include challenging the technical attribution of electronic activity, demonstrating a lack of specific intent to harm or defraud, proving consent, establishing that the impersonation was not credible, or asserting First Amendment protections.

What Are the Common Legal Issues in These Cases?

Although every investigation is different, several recurring issues often determine whether prosecutors can prove the required elements.

These may include:

• Whether the impersonated identity belonged to an actual person
• Whether the defendant personally controlled the electronic account
• Whether another individual had access to the same devices
• Whether investigators correctly attributed IP address evidence
• Whether online statements were authored by someone else
• Whether consent existed for the use of the identity
• Whether prosecutors can establish the specific intent required under Penal Code § 528.5
• Whether evidence obtained through search warrants complied with constitutional requirements

Digital investigations often involve multiple jurisdictions, cloud providers, and technology companies. Preserving electronic evidence, examining forensic methodology, and evaluating attribution evidence frequently become central issues throughout the litigation process.

California's electronic impersonation statute continues to be applied in increasingly complex investigations involving social media platforms, artificial intelligence tools, business communications, and online reputation attacks.

As digital communication evolves, prosecutors continue adapting traditional investigative techniques to newer technologies, making careful analysis of electronic evidence a key part of defending allegations brought under Penal Code § 528.5.

Does Penal Code § 528.5 Apply to AI-generated Content?

This is becoming one of the fastest-growing issues in California cybercrime investigations. Artificial intelligence can create realistic emails, voice recordings, social media accounts, photographs, and videos that appear to originate from another person.

While Penal Code § 528.5 predates generative AI, prosecutors increasingly rely on the statute when they believe AI tools were used to impersonate an actual individual online.

Now investigators focus on whether a person intentionally used AI-generated content to impersonate another individual through an internet website or electronic communication with the purpose of harming, intimidating, threatening, defrauding, or otherwise causing injury.

Questions that frequently arise include:

• Whether the AI-generated profile actually impersonated a real person
• Whether the defendant created or controlled the account
• Whether multiple individuals had access to the same AI platform or online accounts
• Whether investigators can reliably attribute the generated content to a particular user
• Whether metadata, server logs, and platform records accurately identify the creator of the content

As AI tools become more common in business, politics, entertainment, and online marketing, these factual disputes will likely become increasingly important in prosecutions under Penal Code § 528.5.

Eisner Gorin LLP can help you. Schedule your consultation by calling (818) 781-1570 or by using the contact form.

Related Legal Topics

• High-Profile Identity Theft
• Annoying Communications
• Federal Identity Theft Law