What Not to Post Online: Identity Edition
Everyday posts can hand criminals the details they need for identity fraud and scams. What to avoid posting, from boarding passes and birthdays to new-job and travel updates.
Most identity fraud does not need hacking. It needs details: your full name, date of birth, address, mother's maiden name, school, pet, phone number. Many of those are sitting on social media, posted with the best intentions. A little restraint makes you a much harder target.
Things to avoid posting
| Post | Why it is risky |
|---|---|
| ID, passport, driving licence photos | Directly usable for identity fraud. |
| Boarding passes and tickets | Barcodes and references reveal details and can give access to bookings. |
| Full date of birth | A key identity check. |
| New bank cards or cheques | Numbers can be read from photos. |
| Home address or house number | Used for fraud and physical risks. |
| Answers to security questions | First pet, school, mother's maiden name. See security questions. |
| Real-time travel | Signals an empty home and helps "emergency" scams on family. |
| Children's full names and schools | Helps impersonation and targeting. See children's identities. |
| New job details with your employer's systems | Helps targeted phishing at work. |
Quizzes and "fun" posts
"Your rock star name is your first pet plus your mother's maiden name!" These posts collect security answers. See social media quizzes.
Privacy settings to check
- Who can see your posts, friends list and photos.
- Whether your phone number and email are visible.
- Location tagging on photos.
- Whether search engines can find your profile.
Before posting, ask: would I be comfortable if a stranger who wanted to impersonate me saw this?
Already posted something?
Delete or restrict it, change any security answers it revealed, and for exposed card or ID details, contact the issuer. See leaked ID numbers.
Got a message that knows too much about you? Paste it into CyberWatch AI Scan for a free check.
For more, read about protecting your identity in our complete guide.
Frequently asked questions
Is it dangerous to post my birthday?
Your full date of birth is often used to verify identity. Showing the day but not the year, or keeping it private, reduces risk.
Why shouldn't I post my boarding pass?
The barcode and booking reference can reveal personal details and let someone access or change your booking.
Is posting holiday photos while away risky?
It can tell people your home is empty and helps scammers target family with 'emergency' stories. Consider posting after you return.
Sources
- Social media: how to use it safely, UK National Cyber Security Centre
- Protect Your Personal Information From Hackers and Scammers, US Federal Trade Commission
- Avoid Scams When You Travel, US Federal Trade Commission
