Historical Identity and Change Detection

What This Is

Historical identity and change detection recovers the past digital presence of a subject: usernames and names they have changed, accounts they have deleted, and profile content they have removed. Subjects who are aware they are being investigated, or who have previously tried to reduce their online footprint, will have left traces that are recoverable through archival sources and platform history features.

This phase is particularly relevant in fraud, disinformation, and threat actor investigations where subjects have deliberately changed identities or scrubbed activity to avoid attribution.

When to Use This

Use historical identity techniques when:

• A current search produces limited results inconsistent with an active online subject

• There are indicators the subject has changed usernames or names

• Accounts referenced by others no longer exist

• You have an older identifier such as a legacy email address or former username

• The investigation covers a historical period and current profiles do not reflect past activity

Subpages

• Username and Name Change History — trace previous usernames and display names across platforms

• Archived Profile Recovery — retrieve deleted or private profiles from archival sources

• Account Deletion and Reactivation Detection — identify deleted accounts and detect reactivated or replacement identities