Falsehood spreads faster than facts. In repressive environments, disinformation is deployed deliberately to fracture movements, manufacture consent, and paralyze coordination. This guide is a field-ready framework for anyone who needs to identify, verify, and counter false narratives at the community level, with or without reliable internet access.
Identify
The first step is knowing what you’re looking at. Misinformation is designed to bypass your logic and strike your emotions. It spreads through fake headlines, deepfakes, manipulated media, doctored screenshots, and deliberately vague claims. In authoritarian or high-risk environments, even local gossip can be weaponized. Learn to spot these red flags early.
// Know the Difference
False content shared without intent to deceive. The person passing it along believes it. Wrong, but sincere, and correctable through calm engagement.
Falsehood deliberately fabricated and deployed to achieve an effect: to fracture, to discredit, to paralyze. The sender knows it’s false. That intent changes how you respond.
Genuine information weaponized: private records leaked, true facts stripped of context, real photos reframed. The content is authentic; the deployment is the attack.
This guide addresses all three. Full definitions of these and related terms live in the Irregular Warfare Glossary.
// Common Traits of Misinformation
Be suspicious of messages that say “a friend of a friend” or “someone close to the government.” These sourcing patterns are frequently fabricated and impossible to trace by design.
If it makes you angry or afraid before giving you facts, it’s likely designed to control your reaction. Emotional activation is the mechanism.
Messages like “share this before it gets taken down” or “don’t tell anyone I told you” are manipulative by design. Urgency prevents verification. Secrecy prevents scrutiny.
Watch for images or videos with no source, timestamp, or location. These may be AI-generated, staged, or ripped from unrelated events and reframed to suit a narrative.
Fake government alerts or NGO statements often use logos, bold formatting, or red text to trick the eye. Legitimate official communications rarely need such theatrical emphasis.
These are easy to fake and hard to verify, especially in encrypted or closed platforms like WhatsApp, Telegram, or Signal. Treat all unverified media in closed groups as suspect.
// Cognitive Traps to Watch For
“Everyone knows this” or “it’s all over the streets” is often the illusion of scale, not a sign of reliability. Coordinated amplification can make a fringe claim appear universal.
Does the post reinforce what you already believe? Treat that as a sign it was engineered for you. The most effective disinformation confirms existing suspicions.
Seeing something many times doesn’t make it more true. False narratives rely on saturation: repeated exposure creates familiarity, which the brain mistakes for credibility.
// The Adversary’s Playbook
Disinformation is deployed by actors with doctrine, budgets, and staff. Recognizing the deployment pattern tells you what you’re facing:
High volume, multiple channels, no commitment to consistency: contradictory versions of the same event pushed simultaneously. The goal is exhaustion. When nothing can be believed, nothing can be organized around.
Troll farms and sockpuppet networks manufacturing the appearance of consensus. Hundreds of accounts posting the same claim within minutes is a signature of coordination. This machinery powers the false-consensus trap above.
Rumors seeded from within: accusations that a trusted member is an informant, fabricated grievances between factions, calls to premature action. The most damaging disinformation wears a friendly face.
Mostly genuine leaked documents with forgeries inserted among them. The real material authenticates the fake. Verify each damaging document independently. Never accept a dump as a unit.
The persuasion theory behind these techniques (framing, repetition, symbolism, borrowed authority) is covered in Influence. The organizational attack they support is covered in Subversion.
Within days of Malaysia Airlines Flight 17 being shot down over Ukraine, state-aligned outlets pushed multiple mutually contradictory explanations: a Ukrainian jet, a ground-to-air ambush aimed at another aircraft, staged wreckage. The contradiction was the tell: truth produces one story, the firehose produces many.
// Field Clues for Denied Environments
In denied environments, you may not have digital tools. Here’s what to look for with no technology at all:
Compare spelling, font, and formatting with actual government or news publications. Even small errors reveal fraud. Official documents maintain consistent style standards.
Check for inconsistencies in speech patterns, uniforms, or language in voice messages and videos. Actors playing officials frequently get details wrong under scrutiny.
No dates, no authors, no publication references: all signs of a suspect document. Always ask: where did this come from? Who benefits if I believe it?
Misinformation thrives in closed groups and screenshots. Always ask two questions before sharing: Where did this come from? and Who benefits if I believe it?
Verify
Before you share anything, verify it. False claims spread faster than retractions, and every reshared lie undermines your movement’s credibility. In authoritarian environments, independent verification becomes both a survival tool and a shield for the truth. Tools change; the drill below doesn’t.
// The SIFT Drill: Run It Every Time
Four moves, in order, before anything gets shared. This is the SIFT method, a repeatable verification drill:
-
Stop. Notice the emotional pull: anger, fear, vindication. That reaction is the payload. Pause before the claim moves one person further.
-
Investigate the source. Who is telling you this, and what is their track record? Thirty seconds on the account’s history beats an hour arguing about the claim.
-
Find better coverage. Read laterally: search whether independent, credible outlets report the same claim. If only one ecosystem carries it, treat it as unconfirmed.
-
Trace to the original. Find the first version of the claim, image, or quote. Context strips away with every reshare. The original almost always tells a different story.
// Cross-Check with Reliable Sources
AP Fact Check
An Associated Press service that investigates and debunks false or misleading claims circulating in news reports, social media, and public statements. Focuses on manipulated media, distorted statistics, and viral hoaxes, especially those that influence public perception during elections, conflicts, or crises.
How to use: Visit apnews.com/hub/ap-fact-check to browse fact checks by topic and date. Use the search function to look up specific rumors or keywords. Follow on social media to receive real-time corrections before false claims spread further.
Bellingcat
An independent investigative journalism outlet known for using open-source intelligence (OSINT) to verify events, media, and claims, especially in conflict zones. Combines satellite imagery, social media analysis, geolocation, and metadata to uncover truth behind misinformation and covert operations. Their methods can be adapted to low-tech environments.
How to use: Visit bellingcat.com and explore their guides under “Resources”: tutorials on verifying photos, tracing videos, and analyzing digital evidence. Their toolkits and case studies are useful for training local verification groups.
BBC Monitoring
A division of the BBC that tracks, translates, and analyzes media from around the world, including state-run broadcasts, regional newspapers, and social media in dozens of languages. Provides a real-time window into how events are being reported across different regions, especially in authoritarian or high-conflict areas. Essential for spotting coordinated messaging campaigns.
How to use: Access monitoring.bbc.co.uk where available, or follow publicly released summaries via BBC News. Compare how different countries or factions report the same event to spot bias, propaganda, or coordinated framing.
// Simple Digital Verification Tools
Digital misinformation often relies on recycled or manipulated images. These free tools help trace origin, detect edits, and uncover hidden metadata.
Google Reverse Image Search
Traces the origin of a photo or graphic by uploading it or pasting its URL, determining whether an image is original, has been used before in unrelated events, or has been misrepresented. A common tactic in misinformation campaigns is reusing old photos from unrelated conflicts.
How to use: Go to images.google.com and click the Lens icon to upload or paste a link. On mobile, use Google Lens or long-press an image in Chrome. Returns visually similar images, dates, and sites where the image has previously appeared.
TinEye
A dedicated reverse image search engine that finds where an image has appeared online, including earlier versions or altered copies. Unlike Google, TinEye matches the actual image file rather than surrounding text, making it especially useful for tracking manipulations or tracing origin sources.
How to use: Go to tineye.com, upload an image or paste the URL. Returns a list of sites that have hosted the same or similar image, sorted by date or relevance. Check for the earliest known version to identify when and where an image originated.
Exif.tools
A free metadata inspector that reveals the hidden EXIF data stored inside image files: when and where a photo was taken, what device was used, and whether editing software has touched it. Critically for high-risk users, analysis runs locally in your browser: the file never uploads to a server. Missing metadata is itself a red flag.
How to use: Visit exif.tools and select the original image file (not a screenshot or compressed version). Displays timestamps, GPS coordinates, camera type, and software history. Check if the date matches the claimed event or if editing software is listed. For fully offline work, the command-line tool ExifTool does the same job with no browser at all.
InVID-WeVerify Verification Plugin
The standard free toolkit for video verification, built for journalists and open to anyone. A browser plugin that breaks videos into keyframes for reverse image searching across multiple engines, inspects video metadata, and includes image magnification and forensic filters. Fills the gap that image-only tools leave: most viral misinformation now moves as video.
How to use: Install the plugin for Chrome or Firefox. Paste a video URL to extract keyframes, then reverse-search each frame the same way you would a photo. A recycled video from an old conflict falls apart in minutes.
Wayback Machine
The Internet Archive’s snapshot library of the web. Check what a page said before it was edited, confirm whether a “deleted post” ever existed, and capture evidence before a takedown. Under censorship, archives are often the only record that survives, and archiving a page yourself takes one click.
How to use: Go to web.archive.org and paste the URL to see saved versions by date, or use “Save Page Now” to archive a live page before it disappears. Archive.today serves the same role and captures some pages the Wayback Machine can’t.
Content Credentials Verify
Inspects an image or video for C2PA Content Credentials: cryptographic provenance data recording what device or software created the file and how it was edited. As cameras and AI generators adopt the standard, provenance is becoming the reliable answer to “is this AI?” One warning: “AI detector” apps that promise a percentage score are unreliable. Do not stake credibility on them.
How to use: Upload the file at contentcredentials.org/verify. Credentials present: read the capture and edit history. Credentials absent: proves nothing by itself; fall back on manual checks (hands, text in the background, lighting physics, repeating textures) plus reverse search and SIFT.
Create a trusted team of 3 to 5 people in your area who can verify news and distribute only what’s been vetted. One person verifies, another summarizes, another distributes. Rotate roles to avoid burnout and targeting. This simple structure is one of the most effective defenses against coordinated disinformation.
When the regime throttled internet access during the post-election protests, Telegram channels became the population’s verification and distribution hubs: collecting footage from the streets, cross-checking it, and pushing vetted updates to millions. Decentralized verification networks outran state media because trust was the scarce resource.
Counter
Countering misinformation requires clarity. The goal is to replace a false narrative with a verified one, delivered calmly, through trusted channels, in language your community understands.
// Prebunking: Inoculate Before the Lie Arrives
Prebunking is the best-evidenced counter-technique: it exposes people to manipulation techniques in advance, in weakened form, so the real thing fails on contact.
-
Teach the technique, not the claim. Walk your community through fake urgency, recycled photos, and impersonated officials before they appear. A technique exposed once is recognized everywhere it’s reused.
-
Micro-dose real examples. Show a debunked manipulation from elsewhere and let people take it apart themselves. Discovering the trick builds stronger immunity than being told about it.
-
Refresh regularly. Inoculation fades. Rotate examples as the adversary’s tactics shift. Last year’s recycled-photo drill won’t cover this year’s AI-generated voice note.
// Countermeasures
-
Create calm, verified updates in local languages using trusted spokespeople or community elders. Authority and familiarity increase credibility.
-
Use visual formats. Simple infographics or screenshots with verified timestamps are more shareable and harder to reframe than blocks of text.
-
Replace rumors with stories. Frame corrections in human terms, not just facts: “This was reported, but it turns out the video was from another country three years ago…”
-
Neutral tone only. Avoid shaming or blaming; it drives people further into echo chambers. Embarrassment entrenches belief; calm reason opens it.
-
Offline? Use handwritten updates, bulletin boards, or encrypted USB drives for community news circulation. Physical distribution bypasses censorship entirely.
-
Know when silence wins. If a falsehood has little reach, a public correction can hand it the audience it never earned. Correct what is spreading; starve what isn’t.
Structure every correction the same way: lead with the fact, briefly flag the falsehood without repeating its framing, and close with the fact again. Never open with the lie. Whatever comes first is what memory keeps. This is the working method behind the warning below about repeating government narratives.
// Community Resilience
-
Keep a rumor log. Record each rumor as it appears: the wording, where it surfaced, and when. No single message reveals a campaign; the pattern across entries does. Identical phrasing arriving through unrelated channels is a mark of coordination.
-
Back up data offline. If cut off from the internet, use peer-to-peer tools or QR code hubs to keep updates flowing within the community.
During WWII, psychologists and the Boston Herald ran a weekly “Rumor Clinic”: collecting the rumors actually circulating in the city, tracing each to its source, and publishing calm point-by-point corrections. Systematic collection plus trusted local correction is the same model as the rumor log and verification group on this page, eighty years proven.
- Use phones with no personal data stored, or keep devices in Faraday bags to prevent tracking during sensitive coordination.
- Share updates via Briar, an open-source, security-audited mesh app that moves messages over Bluetooth and Wi-Fi with no internet, or distribute printed summaries in denied areas.
- Avoid repeating government narratives even to correct them. Doing so can amplify the original message before the correction lands.
// Advertisement
// Quick Nav
// Field Kit & Reading
As an Amazon Associate and affiliate partner, The Resistance Hub earns from qualifying purchases at no extra cost to you.