Digital footprint
Social platforms, marketplace profiles, public comments, breached data, photos and tiny repeated details can be stitched into a surprisingly useful picture of a person. The risk is not one embarrassing post. It is correlation.
Nigel version
Do not feed the internet a neat filing cabinet about your life. Lock down what should be private, separate audiences, remove old overshare, and assume a motivated person can join dots across platforms faster than you expect.
Public-information graph
This is a synthetic example, not a live investigation. The point is to show how ordinary public material can be joined across platforms: work, family, hobbies, locations, relatives, routines and recovery clues.
dossier
identity + relationships + routines + leverage
3 public joins still easy
LinkedInrole, employer, colleagues
Instagramfamily, places, routines
Facebookrelatives, tags, old posts
TikTokvoice, rooms, habits
Redditinterests, writing style
X / searchopinions, timing, links
Some joins are still available. This is less tidy for an attacker, but not yet boring enough.
Visibility and photo clues are under control. Now split audiences and stop recovery-question bait.
Explain the jargon
Tap a term for the plain-English version and the practical move. No fake mystique, just the bit that changes what you do at home.
Open-source intelligence: information collected from public sources such as profiles, posts, photos, comments, breach mentions, websites and public records.
Do this: Audit what is public about you before assuming a stranger could not know it.
A structured profile built by joining small facts across sources. It may include identity, relationships, locations, routines, interests and weak points.
Do this: Reduce linkable public detail and separate audiences so the joins are harder.
The act of linking accounts or facts because they share handles, avatars, bios, names, writing style, locations, friends or links.
Do this: Avoid reusing the same handle, avatar and bio across every context.
Public details that help someone answer account recovery questions or sound convincing to a telco, bank, employer or relative.
Do this: Do not publish quiz answers, pet names, birthdays, schools, first cars or routine details as public entertainment.
Full guidance
A practical OSINT-style model showing how harmless-looking fragments become a dossier, and how to reduce what strangers, scammers or nuisance actors can correlate.
A username match gives a lead. A reused avatar strengthens it. A LinkedIn role gives employer and rough income. Instagram adds family, hobbies and places. Facebook comments expose relatives. Marketplace listings can reveal suburb and items in the house. None of those facts need to be secret on their own. Together they become targeting material.
Public names, aliases, profile photos, bios, employers, schools, clubs, family relationships, comments, friends, locations, travel timing, kids' activities, vehicles, home details, shopping habits, political views, health hints and the language someone uses. A scammer does not need everything. They need enough to sound familiar.
A dossier can support impersonation, romance or investment scams, account recovery attacks, SIM-swap attempts, workplace targeting, stalking, harassment, fake invoices, doxxing or tailored phishing. The more personal the bait sounds, the less it feels like spam.
You do not need to disappear. You need audience control. Keep professional material professional, family material private, hobby accounts less linkable, and live-location/routine detail delayed or removed. If a detail helps a stranger predict where you are, who you trust or how to pressure you, it probably does not need to be public.
Children create a special problem because adults post the graph around them: school logos, sports fixtures, uniforms, birthdays, relatives, routines and locations. The child did not choose that exposure. Default to less detail, delayed posts and private audiences.
Scenario
Someone pulls LinkedIn role, Instagram family references, Facebook relatives and marketplace suburb clues, then sends a message that sounds like it came from someone who knows the household.
Better response
Worse habit
Assuming the message is trustworthy because it contains real personal details.
Holiday photos go up in real time, while older posts and marketplace listings make the home suburb obvious.
Better response
Worse habit
Broadcasting absence, routines and location because the sunset looked nice.