Think identity theft can't happen to you? Think again.
In 2022, 15.4 million Americans fell victim to identity theft, according to Javelin Strategy's 2023 Identity Fraud Study. Identity thieves made off with $20 billion, though there is a silver lining, as that amount represents a 15% decrease from the previous study.1
Many of those identity thieves find unwitting victims through social media. If checking in on Instagram or TikTok is a regular part of your routine, you could be putting yourself at risk for identity theft without even realizing it. Before logging on, take a look at the social media habits that can catch an identity thief's attention.
-
Clicking Unfamiliar Links
In the ever-evolving landscape of social media, the risk of falling prey to sophisticated phishing scams has intensified, especially if you click on a link whose authenticity you haven't verified. Scammers are better than ever at reeling us in using what looks like a legitimate message, often powered by artificial intelligence (AI).
As you navigate through emails that appear to come from social networks like Facebook or Twitter, prompting you to confirm your identity or update your password, it's crucial to remain vigilant. Clicking on unknown links in suspicious messages can lead to downloading malware to your computer or mobile device that allows an identity thief to steal your information. Before doing so, verify the sender's authenticity, scrutinize the message for any inconsistencies, and hover over links to check for matching URLs, ensuring they start with "https" for security.
Turning on two-factor authentication (2FA) for your social media is a smart move to prevent scams. It's like having an extra lock on your accounts since it creates a second line of defense against ID theft by requiring you to log in with a unique code that you receive via text or email. Also, be sure to regularly adjust your privacy settings to keep your personal details under wraps and keep up with browser extensions and security apps that can help double-check the links you come across.
If you think you've been targeted by an email phishing scam, report the message to your email provider. You can also report the message as spam and/or block the sender's address.
-
Using Weak Passwords
Strong passwords can be a good defensive barrier against identity thieves, but only if you're using them. Consider updating your social media passwords to include upper- and lowercase numbers, special characters, or acronyms to make them harder to guess.
It's also wise to avoid using these same social media passwords for your email, bank account, credit card, or other financial services accounts, including shopping apps. Using the same password across multiple channels – even if it's unique – can make it even easier for an identity thief to hack their way into more of your accounts.
If you struggle to remember multiple passwords, consider using a secured password manager like Dashlane Password Manager or 1Password. With tools like these in place, you can put a wall between your personal information and an identity thief by creating strong passwords for every site you visit, without having to commit them all to memory.
-
Oversharing
Social media makes people feel connected, but when it comes to sharing personal information, it's possible to have too much of a good thing. Identity thieves can scan profiles to look for details they may be able to use to find your financial information. That can include things like your:
- Physical address
- Phone number
- Place of work
From there, they may be able to get your driver's license number and, eventually, your Social Security number, giving them all the tools they need to set up a fraudulent credit card account or make off with your tax refund.
It's important to educate yourself on social engineering, in which identity thieves often use social engineering tricks to gather personal information. Be wary of social media quizzes and games – they may seem fun, but they often collect a surprising amount of personal data under the guise of harmless entertainment. Toward that end, be sure to maintain your privacy settings so that only friends or certain groups can view your posts (public posts are a no-no). By giving away too much about your personal life for anyone and everyone to see, you can significantly increase your vulnerability to identity theft. Steer clear!
-
Using Geolocation Tags
Geolocation tags essentially tell your friends or followers where you are at any given time. If you snap a photo at home and post it to one of your social media accounts, the tag may list your actual address as the location, versus just the city.
This level of detail may not be a good thing if an identity thief is prowling your profile looking for information. To keep your home address private (and out of the hands of identity thieves), adjust the location services settings on your social media accounts before you post. Facebook, X (formerly Twitter), and Instagram all allow you to turn location data off so your home sweet home isn't compromised. Also, be aware of new platforms and updates to existing ones, as settings and features can change, requiring a regular check to maintain your privacy.
-
Checking In Everywhere You Go
Using geotags at home can potentially lead to identity theft problems, but it's fine to check in when you're hanging out with friends or traveling, right? Not so fast.
Checking in at the places you frequent most often – like the bank, your job, or the gym – gives identity thieves a window into your personal life. If an identity thief knows where you bank, for example, and they're able to get your home address or other personal information, they could use it to wreak havoc with your finances.
You may also want to think twice about tagging people in your posts if your profiles are all set to private. If an identity thief is able to see who's on your friends list or gain access to their account, they might be able to use that to track down more of your identifiable information. Also, even if your profiles are set to private, tagging others can inadvertently expose your network and personal information.
-
Sharing Your Birthday
Accepting birthday wishes through social media puts you in the spotlight for the day, but there may be an unintended consequence if an identity thief misuses that information.
Consider this: 59% of adults in the U.S. use their birthdays and names to create online passwords.2 By sharing your birthday, you could be giving identity thieves a free pass to gain entry to your bank or email account, especially if you're using the same password for multiple logins.
Here's another tip: Watch out for social media memes that are birthday-focused – those social engineering scams we mentioned earlier. For example, you might come across a meme entitled, "What kind of cat are you?" on Facebook. To get your results, you have to share your birth month and day in the comments. It's a silly, mindless way to have a little fun online. The trouble is that identity thieves can use these kinds of comment threads to try and figure out passwords or dig up other personal information for potential targets.
-
Being Friends With Everyone
Having a large social media network is great – if you actually know the people you're connecting with. However, it could get you into trouble if you're accepting invites from everyone without taking a closer look at the profile.
One way identity thieves find their victims is by setting up fake social media accounts. These accounts can act as a launching point for phishing scams or fraud attempts. The next time you get a friend request from someone you don't know, you may want to think twice before accepting.
Identity theft is no laughing matter, and the more proactive you are about keeping your information safe, the better. Rethinking your social media habits can go a long way toward deterring identity thieves from targeting you and your accounts.
1 Javelin. "2023 Identity Fraud Survey: The Butterfly Effect." Published March 28, 2023. Accessed December 2023.
2 Exploding Topics. "50+ Password Statistics: The State of Password Security in 2023." Published February 6, 2023. Accessed December 2023.
