For catfishing, scammers, or nuisance accounts, the combination of , post timing analysis , the forgot password loop , and (careful) link tracking will give you enough to identify the bad actor.
| | You CANNOT trace (directly): | | --- | --- | | Approximate city/region via metadata in photos | The exact IP address from Facebook’s servers | | Timezone clues from post timestamps | GPS coordinates from a live profile | | Login location from a "Forgot Password" loophole | The scammer’s home address | | Information from linked third-party apps | Real-time movements |
The hard truth is that from regular users for privacy and security reasons. You cannot simply click a button and see a city or GPS pin. However, with a combination of digital forensics, social engineering, and third-party tools, you can often narrow down the perpetrator’s location to a specific region, city, or even a neighborhood.