Social media allows individuals to connect with others, share experiences, stay informed and even earn a living. You may scroll through your feed trying to learn new information or keep up with friends. Simultaneously though, you are sharing valuable information that companies and advertisers use to better understand your interests and online habits in order to more effectively sell you services and products.
Oversharing personal information or falling victim to deceptive threat actors can put both your personal and professional information and accounts at risk. Many scams begin on social media, but cybercriminals also use information from your posts to make phishing emails, text messages and phone calls appear more convincing. This tactic, known as social engineering, relies on trust and publicly available information to trick victims.
Being safe on social media platforms means protecting your personally identifiable information (PII), securing your accounts from hackers and recognizing online scams before they cause harm. Always control who can view your posts and regularly review your privacy settings. These simple steps not only protect your information but can also reduce the risk of cyberbullying, harassment, stalking and unwanted contact from strangers.
Follow the tips below and familiarize yourself with common scams to help protect your information on all of your social media accounts.
Protect Your Data
Set your accounts to private.
- Review the privacy settings on each of your social media accounts.
- Choose the highest privacy settings that meet your needs. Limit your posts and personal information visibility to trusted friends and family whenever possible.
Turn off location tags.
- Disable location services or location tagging for social media apps, unless you intentionally want to share your location.
- Restricting sharing your location helps prevent others from learning where you live, work or frequently visit.
Turn on multifactor authentication (MFA).
- Enable MFA whenever it is available. This adds an extra layer of security by requiring a second verification step, such as a code sent to your phone or generated by an authentication app.
- Even if a cybercriminal steals your password, MFA makes it much harder for them to access your account.
Use strong, unique passwords on all accounts.
- Make every password complex. Use letters, numbers, special characters and even passphrases (a sequence of random words or a short sentence used for authentication). A passphrase functions like a traditional password but is typically much longer, prioritizing length over complexity to make it highly resistant to hacking while remaining easy for a person to memorize.
- Never use the same password for multiple websites.
Use caution with online quizzes.
- Online quizzes, such as “What Movie Character Are You?” or “Which Superhero Are You?” appear to be harmless fun, but use caution when opening them. These quizzes often collect personal information or request unnecessary access to your social media account.
- In some cases, online quizzes can also lead to malicious websites designed to steal login credentials or install malware.
Be Careful What You Post
- We all have a digital footprint, meaning nearly everything we do online leaves a lasting record. Before posting, consider whether you would be comfortable with that information being seen years from now by friends, employers or strangers.
- Not everyone on social media is who they claim to be. Before accepting a friend or follower request, verify through another (preferably offline) method that the request is legitimate, even if the request is from someone you already know.
- Cybercriminals pay attention to what people share online. By collecting small details over time (birthdays, family members, vacation plans, workplaces or hobbies) they can build convincing phishing messages or impersonation scams that target you, your friends or your family.
Watch Out for Scams
Do not click strange links.
- If you receive a direct message containing an unexpected or suspicious link, especially from someone you do not know, do not click on it.
- Even if the message appears to come from a friend or a trusted business, contact them another way if the message seems unusual, as their account may have been compromised.
Ignore fake friend requests.
- Be very careful who you accept as a friend. If you get a second friend request from someone you are already friends with, their account might have been hacked.
- Many social media platforms verify the identities of businesses, public figures and organizations with verification badges. Look for these indicators before interacting with well-known brands or individuals. However, remember that a badge alone does not guarantee every message is legitimate.
- Report any accounts you think may be fake or impersonating someone else. Reporting suspicious activity helps protect both you and the broader online community.
Social media itself is neither inherently good nor bad; it depends on how it is used. While these platforms offer valuable opportunities to connect, learn and share experiences, cybercriminals are always looking for ways to exploit unsuspecting users. Staying informed about common scams, protecting your personal information and thinking carefully before interacting with suspicious content can greatly reduce your risk.
If you receive an unexpected message, request or link, take a moment to verify that it is legitimate, even if it appears to come from someone you know. A few extra seconds of caution can prevent a costly mistake.
Finally, don’t forget to unplug from time to time. Taking regular breaks from social media can improve your well-being while reducing your exposure to online scams and other digital threats.
Cyber Habit of the Month: Recognizing, Avoiding and Reporting Online Marketplace Scams
Online marketplaces are a convenient way to buy and sell items, but they have also become a popular target for scammers. Common scams include:
- Buyers who “accidentally” overpay and ask you to send money back before the original payment is reversed. The original payment is fake, and you lose the money you returned.
- Fake payment confirmation emails claiming you must pay a fee to receive your money.
- Sellers who insist on payment through cryptocurrency or gift cards because those payments are difficult or impossible to recover.
- Scammers that send you a link to "verify your identity" before they buy your item. The link goes to a fake website that steals your login and password.
The best defense against marketplace scams is to slow down and verify before acting. Be cautious of anyone creating a sense of urgency or asking you to act immediately. Never trust links or contact information included in suspicious messages. If you feel unsure, reach out to the marketplace’s customer support resources for help. Finally, when meeting to buy or sell an item, always do so at a public place. Many police stations offer a safe space for meeting a buyer or seller.
Additional Resources
