Keeping your social media safe from identity theft

You know to look out for phishing emails and fraudulent calls and texts aimed at getting access to your personal information, but identity theft can also occur where you might not expect it -- among "friends" or "followers" on social media. While these communities might feel like safe spaces to share the details of your life, you may be sharing more than you think.

Identity thieves are on the lookout for more than your password. They could be trying to guess your ATM PIN or answers to your security questions so they can reset your password themselves.

By looking at the content shared on your social media profile, fraudsters can gather useful information, and then use it to take over your identity – and this information is often available at a glance!

Some of the information that fraudsters use for identity theft includes:

• Your full date of birth. Even if you don’t list the complete date, there may be details on your profile indicating the full date.

• Important dates or milestones. Fraudsters may use dates, such as birthdays or anniversaries to guess your PIN.

• Names of pets. Pet names are some of the most commonly used passwords around the world, and fraudsters may use them as part of trial and error tactics to gain access to your accounts.

• Spouse or child information. While many people like to share pictures and milestones related to loved ones, details like names and birthdays of family members may provide fraudsters with more clues about your personal life and information related to your family.

• Additional personal details, such as favourite travel destinations or high school mascot. These details are often the answers to security and password recovery questions for your personal and professional accounts.

How to protect your identity while using social media

Secure your account

• Create strong passwords and develop different passwords for each social networking site you use.
• Enable multi-factor authentication on your accounts where possible.
• Use privacy settings to control who sees what you share.

Don’t overshare

• Think before you post and avoid sharing information that might provide clues about your passwords, security questions, etc.
• Vacations are exciting, but posting real time updates and pictures alerts criminals that you’re away from home, which could leave you vulnerable to break-ins while you’re away.

Exercise caution with people you don’t know

• It’s great to meet new people, but be cautious when accepting new friends and followers on social media.
• Don’t divulge personal information before getting to know someone in the real world.

Think you might be a victim of identity theft? 

• Contact the social media platform (e.g., LinkedIn, Instagram, Facebook, etc.) to report the impostor account. 
• Encourage your friends and followers to report the impostor account. 
• Report the incident to the Canadian Anti-Fraud Centre or the Federal Trade Commission in the U.S.