🎯 In 30 seconds: What you post publicly can answer your security questions, tell a thief your house is empty, and give a scammer enough of your voice to fake a call. Make old posts private, hide your birthday, friends list and location, post trips after you return, and agree on a code word with family for emergency calls.
How a public profile gets used against you
Scammers rarely hack a social account to learn about you. They read what is already public and build a file. Each post on its own seems harmless. Together they fill in the blanks for four kinds of fraud:
- Account recovery: security questions such as your first pet, your high school or your mother’s maiden name.
- Impersonation: a fake account using your photos to ask your friends for money.
- Family emergency calls: “Grandma, it’s me, I’ve been arrested,” helped by details from your posts. The FBI warned in December 2024 that criminals use AI to clone voices from short audio clips.
- Burglary and mail theft: “Two weeks in Lisbon!” posted on day one.
The settings audit
Menu names change often, so search each platform’s settings for the words in the left column.
| Setting | Change it to | Why |
|---|---|---|
| Profile audience | Friends or followers you approve | Strangers see only your name and photo. |
| Past posts | Limit old posts to friends | Years of birthdays, pets and schools disappear from public view in one click on many platforms. |
| Birthday, phone, email | Only me | Birth date plus name is a starter kit for identity theft. |
| Friends or followers list | Only me or friends | Impersonators use it to find people to message. |
| Tagging and tag review | Review before posts appear | Other people can’t place you somewhere without your approval. |
| Location | Off for the app; strip location from photos | Photos can carry the place they were taken. |
| Search engine listing | Off | Your profile won’t show up in web searches. |
| Connected apps and quizzes | Remove the ones you don’t use | Old games and quizzes may still read your profile. |
Posts that are riskier than they look
- “Your superhero name is your first pet plus the street you grew up on.” These games collect security answers in public.
- Boarding passes and new driver’s licenses. Barcodes and numbers can be read from photos.
- First-day-of-school signs with the child’s full name, school and teacher.
- Live trip updates. Post the photos after you get home.
- Long videos of you talking, on a public account. Limit them to people you know.
Make security questions useless to snoops
Where a site forces security questions, don’t give true answers. Give a random answer (“Mother’s maiden name: violet tractor 52”) and save it in your password manager next to the login. Now nothing on your profile can answer it, and a phone rep asking the question will hear something only you know.
A worked example: Leo’s public profile
Leo, 29, checks his profile while signed out. Strangers can see 412 photos, his birthday (month and day), his hometown, his high school, his dog’s name, his employer, and 3 years of check-ins.
He compares that with the 10 security questions his bank, phone carrier and email provider offer. Strangers could answer 6 of the 10 from his page alone: birthplace, high school, first pet, favorite team, first job and the city where his parents met (he posted an anniversary tribute). That is 60%.
He spends 25 minutes: limits all past posts to friends, hides the birthday and friends list, turns off search engine listing, and removes 14 connected apps. Then he replaces the 3 security answers he actually uses with random ones in his password manager. Strangers can now answer 0 of the questions that protect his money.
If someone impersonates you
- Report the fake profile through the platform’s impersonation option. Ask friends to report it too.
- Post a short note on your real account: “A fake account is using my photos. I will never ask you for money here.”
- If money was lost, report it at ReportFraud.ftc.gov, and see the Money Theft & Forensics page.
- Why are “your superhero name” posts risky? Answer: They collect real answers to common security questions.
- When should you post trip photos? Answer: After you get home.
- How do you make security questions safe? Answer: Use random answers stored in your password manager.
- What does a family code word protect against? Answer: Fake emergency calls, including cloned voices.