Your pet's name is a fraudster's best friend.
You may think you're giving up precious little when you tell your Facebook friends that you're dressing your pooch, Puddles, in your favorite color, red, for brunch at Grandma's on Sunday. But you've actually just opened a Pandora's box of risks.
The information consumers willingly, and oftentimes unwittingly, unleash on social-media websites sets off a feeding frenzy among fraudsters looking to steal everything from your flat-screen TV to your identity.
What's more, tidbits like your birth date, birthplace and the last school you attended are typically challenge questions posed to verify your identity at bank websites or online retailers.
"Despite all the awareness that people have about identity fraud and privacy on social networks, there is a disconnect between what people are disclosing in online space and social environments and what they may be using in other places of their lives," says Thomas Oscherwitz, chief privacy officer for ID Analytics, a San Diego-based consumer risk management firm.
Say you post on a social-media site that you're at a tanning salon ahead of your week-long trip to the Bahamas the day after your birthday. You're telling potential burglars that not only are you away from home for an hour or so, but beginning Tuesday, your home likely will be empty for seven days.
"Even listing daily activities can let strangers know your routine and put you at risk," says Gail Cunningham, spokeswoman for the National Foundation of Credit Counseling.
Too much information can hurt you in other ways. John Sileo, a Denver-based identify-theft expert, says your online chatter could equip an ex-spouse with ammunition for a court challenge. Future or current employers could have a problem with information about your personal life that they deem inappropriate for a member of their staff, he says. You also could be furnishing a would-be stalker with information about your whereabouts.
"We are giving people the little pieces of our trust or access to our trust that allows them to get bigger things out of us," says Mr. Sileo, founder of the ThinkLikeaSpy.com newsletter.
A Harris Interactive survey conducted in October for ID Analytics found that more than 24 million Americans 18 years old and older are still leaving their social-network profiles mostly public, meaning they aren't activating privacy controls that limit who can see their information online.
The survey also found that nearly 70 million U.S. adults on social-networking sites include their birthplace — one of the most common security questions asked by financial institutions — on their profiles.
"The information people are disclosing is not the entire piece of the puzzle but it's certainly helpful," Mr. Oscherwitz says. Thieves steal identities in pieces, he says, and layer them on each other for a clearer picture.
Here's some advice from Mr. Sileo, who wrote the "Facebook Safety Survival Guide" about protecting online privacy on all social-networking sites:
Never post your exact date and place of birth. It's invaluable information to identity thieves, particularly when the two are bundled together.
Never post your address, phone number or email address. This is plum to scammers and marketers who are looking for nuggets of your identity.
Control who can see your personal information. Many social-networking sites have privacy features, but they're often changing. Know what they are, stay on top of them and restrict your page to your real friends, not friends of friends or someone you met in a bar.
Limit information about your activities. If you must brag about a trip or a fabulous party, do it after the fact.
Remember that what you post is public and permanent. Don't put up embarrassing photos that you wouldn't show your grandmother. Don't complain about your job or your boss. Don't say something to or about someone that you wouldn't say to their face. Don't threaten others.
Know the four types of Facebook users: friends, outsiders, businesses and enemies.
You should know exactly who wants to be your friend or is asking you to link into their network. Some people will befriend your friends to get to you or your company.
Be wary of seemingly harmless quizzes. When someone invites you to take a survey, say, "10 Things Others Don't Know About You" or "My Favorite Things," it may be designed to harvest your data. The name of the street you grew up on or your favorite vacation spot could be clues to your passwords.
Before you share any information anywhere online about yourself or your workplace, ask this question: What would the consequences be if this information fell into the hands of my boss, competitor or people who don't like me?
Brought to you by:
Originally published January 5, 2011
©2013 Dow Jones & Company, Inc. All Rights Reserved.
The views of the authors of these articles do not necessarily represent the views of First Republic Bank.