Consultation
Digital profile11 October 202610 min read

How to check your online reputation: a step-by-step self-audit

Most people first google themselves seriously in a crisis — after a deal collapses or a bank says no. By then the negative has set. The value of a self-check is that you can do it in advance, in quiet. Here is how to do it properly.

IMG 0116:9
Article cover for “How to check your online reputation: a step-by-step self-audit”

Checking yourself in search feels like a five-minute job: type your name, glance at the first links, relax. But that kind of check is exactly the one that misleads you — it shows a flattering picture that nobody else sees. A real audit is a few hours of methodical work to a clear method: every variant of your name, every search surface, an honest label on each result, and a risk map at the end. Below is the order that gives you the picture the way the person checking you sees it, not the way your own browser does.

Why check yourself before anyone else does

Today your public image is defined not by you but by the people who check you. An employer, a bank, an investor, a deal counterparty — even a vendor before signing — all type your name before the first meeting. If that query returns emptiness, a random namesake, or a single old negative note, the decision is made on that picture, and you never get the chance to explain it. What exactly a bank sees, and how it affects whether an account is opened, we covered in “What a bank sees before it opens your account”.

The point of a self-check is precisely that you can do it early and calmly. You learn about a problem before the people who will check you do, and you keep a reserve of time to respond correctly rather than in a rush. In a crisis that reserve is gone: the negative has settled at the top, and there is no quiet day left to work.

Step 1. Incognito and every variant of your name

Any work starts with an honest photograph of the current state. Open Google and Bing in a private (incognito) window — signed out — so you see results that aren’t shaped by your own browsing history. This matters: when signed in, personalisation almost always shows you a more favourable version of yourself than an outside reviewer gets.

Then check your name in every form in which people might search for it: with and without a middle name or initial, transliterated spellings, paired with your company, job title and city. Run the “pain” queries separately — your name plus words like “reviews”, “scam”, “lawsuit”, “complaint”, “fraud” — because that is exactly how a hostile party or a thorough compliance officer will check you. Capture the first two or three pages of results in full, not just the top: almost nobody reaches page five, but pages two and three still shape the impression.

IMG 0216:9
Illustration for “Step 1. Incognito and every variant of your name”

Step 2. The five search surfaces

The classic list of ten blue links is only part of the picture. Your reputation is also shaped by the blocks people rarely look at. Go through each of the five surfaces on its own.

  1. Organic results. The first two or three pages of Google and Bing for every variant of your name. Read not just the titles but the descriptions under the links — negatives often hide there.
  2. Images and autocomplete. Which photo comes up first, and what search suggests as you start typing your name. Autocomplete is built from the mass queries of other people, so a word that pops up next to your name is a signal of an established query, not an accident.
  3. Maps and reviews. Business cards on Google Maps and local services, reviews on industry platforms and aggregators, the rating and how recent the comments are.
  4. Records and people-search sites. Court and public records, company registries, counterparty-check services, data-broker and people-search sites (Spokeo, BeenVerified, Whitepages and the like), and your profiles on social networks and messengers.
  5. AI answers. What ChatGPT, Perplexity, Gemini and Google’s AI Overviews reply to “who is…” or “what is known about…”. They are increasingly the first thing a person learns about you.

Two surfaces deserve special attention. The autocomplete suggestion “name + scam” is an echo of other people’s queries that no ordinary publication can erase; and AI answers can confidently retell inaccurate or confused data. How AI models assemble an answer about a person in the first place, and why they get it wrong, is set out in “How AI models build an answer about a person”. The way a Knowledge Panel feeds those answers is covered in “The Google Knowledge Panel”.

IMG 034:3
Diagram for “The five search surfaces”: organic, images, maps, records, AI answers
IMG 044:3
Detail for the section: autocomplete as a signal of an established query

Step 3. Labelling results and the risk map

The list you’ve gathered is useless until it becomes a map. Go through each result and give it two labels. The first is attitude: “works for me”, “neutral”, “harmful”. The second, for anything harmful, is type: an inaccurate statement of fact, out-of-date information, a lawful publication, an opinion, or a different person who shares your name.

This labelling decides everything, because the type dictates the tool: an inaccuracy is disputed, out-of-date material is removed under the right to be forgotten, lawful content and opinion are suppressed, and a namesake calls for separate work to untangle the profiles. Assess position separately too: a negative on page one and a negative on page five are different levels of threat. The map of “what, which type, at which position” is your action plan. What to do with each type next is covered in “Removing negative information online”, and how to push down what can’t be removed is in “Suppressing negative search results”.

A self-check is valuable because you can do it in advance, in quiet. You learn about a problem before the people who will check you — and you keep a reserve of time to respond correctly rather than in a rush.Estena’s position

Free tools for monitoring

A one-off check shows today’s snapshot, but reputation moves. To avoid repeating the audit by hand every week, set up free monitoring: Google Alerts for your name and company with spelling variants, Search Console’s built-in stats if the site is yours, and the habit of repeating an incognito search every so often. It is also worth periodically asking an AI assistant “who is…” and watching whether the answer has changed. Have I Been Pwned will tell you whether your email has surfaced in a known data breach.

What free tools don’t see: closed databases, messengers, reviews across every platform at once, and mentions that don’t name you directly. For the full picture you need systematic monitoring that reaches those layers too; how ours is built is described in our mention-monitoring service. A separate risk zone is data from leaks and lookup bots, which never appears in ordinary search results; we cover those in “Data leaks and lookup bots”.

Common mistakes in a self-check

It is easy to run a check that reassures you rather than helps you. Five mistakes repeat most often.

  • Looking from your own account. Personalised results show a favourable picture that nobody else sees.
  • Stopping at page one and a single neutral query. You miss the autocomplete and the “pain” phrasings people will actually use to check you.
  • Forgetting about namesakes. Search will happily attribute someone else’s negative to you if you haven’t checked who you’re being confused with.
  • Writing to the author or hitting “remove” straight away. A hasty reaction often inflates attention to the material.
  • Treating a one-off check as enough. Without monitoring, the picture goes stale within weeks.

When it’s time to call specialists

A self-check is excellent at diagnosis — showing what is happening. But if it turns up false accusations, court records, signs of a coordinated attack, or negatives capable of affecting a deal, a job or your safety, you enter work where the cost of a mistake is high. Here the priority is not to make things worse with your first moves: showing your findings to a specialist before reacting is almost always cheaper than fixing the fallout of a rushed complaint.

Regular professional monitoring is worth having in its own right — to be the first to know about new mentions. And if the check showed that your name results are weak or distorted overall, that is already a digital-profile task, which we discuss in “Personal reputation management”.

IMG 0521:9
Closing diagram: from the incognito audit across every surface to a risk map and ongoing monitoring

What to record, and how to keep track

An audit only has value when its results are written down and you can return to them. Memory deceives: a month later you won’t recall the position a given result held, or whether it was there at all. So it helps to keep a simple table of findings — the same one is convenient to show a specialist if it comes to real work.

  • URL and date. The exact address and the day of the check — without them you can’t prove what was visible and when.
  • Screenshot. A capture of the page and the results with a visible date; for legally significant cases, a notarised inspection record, before the author edits the material.
  • Search engine and position. Google or Bing, the page number and place in the results — a negative on page one and on page five need different urgency.
  • Type and attitude. “Works for me / neutral / harmful”, and for anything harmful — inaccurate, out-of-date, lawful, opinion, or namesake.
  • Surface. Where exactly it appeared: organic, images, autocomplete, maps, records, AI answer.

A table like this turns the anxious “there’s something bad about me online” into a concrete plan: each row shows what to dispute, what to remove under the right to be forgotten, and what to suppress. It also becomes your baseline for monitoring — so that at the next check you immediately see what has changed. How the systematic monitoring that does this automatically works is described in our monitoring service.

Frequently asked questions

Why do my search results differ from a colleague’s?

Personalisation. Search tailors results to your query history, location and device, so you see your own name in a more favourable light than an outsider does. To see the picture the way an employer or a bank sees it, open search in incognito, signed out, and where possible cross-check from a different region.

How often should I check my reputation?

Run a full check before important events: a job change, a deal, opening an account, launching a public project. In quiet times, a person is fine checking once a quarter, a company more often. After a conflict or an attack you raise the frequency, or the negative has time to settle at the top.

Which free tools help track mentions?

For a one-off check, search in incognito across every variant of your name, plus the images, autocomplete and maps blocks, is enough. For monitoring, use free mention alerts (Google Alerts) and Search Console’s built-in stats if the site is yours. Ask an AI assistant separately. Free tools don’t cover closed databases and messengers — for completeness you need systematic monitoring.

What should I do if the check finds something negative?

Don’t delete in a panic and don’t write to the author. First, record the find with a dated screenshot and work out its type: an inaccurate statement, out-of-date information, a lawful publication, or an opinion. The path depends on the type — a complaint, the right to be forgotten, court, or suppression. If the negative could affect a deal or a job, show your findings to a specialist before your first move.

What to do next

Run the audit to this method in a quiet period, not the day before a deal: incognito, every variant of your name, the five surfaces, a label on each result, and a risk map at the end. By the labelling stage it will already be clear where everything is fine and where the picture is distorted or exposed. From the map it’s then easy to decide what to dispute, what to remove under the right to be forgotten, and what to suppress with credible content.

If the check turns up something serious, or you simply want to be the first to know about new mentions, the Estena team will run an extended audit confidentially and set up monitoring for your situation. The easiest place to start is an express audit.

Compliance risk assessmentWe see you as a bank or reviewer will, before they do
Learn more →

Tell us about your situation. We reply within one business day.

The first meeting is free and carries no obligation. We sign an NDA before you share any details.

TELEGRAM  @estena
E-MAIL    hello@estena.agency
OFFICES   Moscow · Tbilisi · Dubai

By clicking the button, you agree to our privacy policy.