Social Media Privacy in the Age of AI Scams: What to Hide First

Reduce what an impersonator can use

AI makes stolen identity information more persuasive, not magically more authentic. The practical goal is to reduce the data available to an impersonator and make important decisions depend on verification rather than familiarity.

The ICO advises people to limit personal information made widely available on social networks because it can contribute to identity fraud. Keep that in mind when deciding what to protect first: the aim is to make stolen information less useful and important requests harder to fake successfully.

What matters in practice

The ICO advises people to limit personal information made widely available on social networks because it can contribute to identity fraud.

Public information becomes more useful to a scammer when it can be assembled quickly into a believable story. Reducing unnecessary exposure removes details that make an impersonation feel convincing.

Photos, captions, employment details and family connections can reveal more when combined than any single post suggests.

Your primary email and recovery routes deserve special protection because they can unlock many other accounts. Strong authentication and well-protected recovery methods reduce the damage from a single stolen password.

Privacy settings reduce casual exposure but do not guarantee that previously shared material has not been copied.

Identity checks need a fallback that does not depend on the suspicious message itself. Known numbers, agreed phrases and separate account channels give you a way to verify a claim when voice or video cannot be trusted on appearance alone.

Where impersonation risk really comes from

Identity risk sits at the intersection of exposed information, account security and human trust. A single privacy measure cannot solve all three, so claims of complete protection deserve particular caution.

• Private accounts are not equivalent to perfect confidentiality.
• Deleting old posts cannot guarantee removal from screenshots, archives or third-party copies.

What could change the answer?

Revisit the assessment after an account breach, a change in recovery details or a large increase in public exposure. Identity protection is a maintenance job, not a one-time privacy clean-up.

What you can do now

Protect the accounts and information that make impersonation useful. Then add a separate verification habit for requests involving money, access or sensitive information.

1. Hide or remove public date-of-birth, address and unnecessary family details.
2. Review who can see older posts, stories and contact information.
3. Avoid publishing information you also use for account recovery or identity checks.

A four-question reality check

When a claim sounds dramatic, work through these four questions before deciding how much weight to give it.

Bottom line

You cannot make your identity impossible to imitate, but you can make impersonation less convincing and much harder to turn into account access, money or sensitive information.

You do not need to disappear from social media, but public birthdays, relatives, workplaces, routines, travel plans, children’s details and long voice/video clips can give an impersonator better material. Start by limiting the information that helps a stranger answer security questions or imitate context.