You’ve heard the advice: don’t share your passwords, protect your Social Security number, watch out for suspicious emails. That advice is still valid. But in the AI era, there’s a threat that doesn’t require your passwords or your SSN. It just requires access to your social media.
Scammers don’t need to hack you. They just need to watch you.
Every photo you post, every location you tag, every relationship you identify publicly gives scammers data they can use to build a personalized attack. Your grandchild’s name, your daughter’s college, your son’s voice from a graduation video. All of the information you post is raw material for voice cloning, targeted phishing, and social engineering.
What Scammers Are Looking For
- Family relationships and names are used to construct emergency scams
- Voice clips from videos are used for voice cloning
- Location and travel information are used to establish “plausible” emergency scenarios
- Financial hints are mentions of a new home, an inheritance, a business deal
- Pet names, birthplaces, childhood memories are used to guess security questions
- Your regular routines are used to know when you’re home, traveling, or distracted
The FBI notes that scammers routinely scrape social media accounts to build detailed profiles before targeting a victim. A scammer who knows your grandchild’s name and college creates a far more believable emergency than one making random cold calls.
Practical Steps to Reduce Your Exposure
- Audit your privacy settings on every social media platform. Set personal accounts to “friends only.”
- Think twice before posting videos where family members are speaking. Voice clips are the primary raw material for AI cloning.
- Avoid announcing travel plans publicly until after you return.
- Don’t publicly link your family members in ways that identify relationships such as “my granddaughter starting college at ASU this fall.”
- Periodically Google your own name to see what’s publicly available about you.
- Review what information is on data broker sites like Spokeo, Whitepages, and BeenVerified. Many allow you to request removal.