Most advice about auditing your social media focuses on looking professional. Clean up your profile so employers like what they see. Remove those college photos. Present your best self online. For more, see The Art of Invisibility.
That advice is fine as far as it goes, but it misses the real reason you should audit your social media: security. Your posts, photos, check-ins, and tagged content are an intelligence file that criminals, scammers, and predators can use against you and your family. I spent 20 years managing technology and cybersecurity at the enterprise level, and I can tell you that what most people share publicly on social media would make a professional security auditor’s head spin.
This isn’t theoretical. People have been targeted for burglary because vacation posts revealed an empty house. Families have received virtual kidnapping calls from scammers who knew their children’s names, schools, and schedules from public social media posts. Teenagers’ photos have been stolen from public accounts and used to create fake dating profiles. The information was all freely available because nobody thought to audit what they were sharing.
What Do Criminals Learn From Your Social Media?
Where you live, when you’re away, who your family is and the answers to your security questions, all from posts you forgot you made.
Heard elsewhere
Most breaches start with social engineering, not brute force, fake uniforms and bad links doing the work. Richard covered the pattern on The Douglas Coleman Show.
Your posts, photos, and check-ins are a map for anyone who wants to target you.Share on X
Think about your social media the way a criminal would. What could someone learn about you from your public posts? For more, see expert tips to master social media etiquette and brilliant ways to use your book with social media.
Geotagged photos reveal your home address, your workplace, and the places you visit regularly. Check-ins at restaurants and airports tell people when you’re away from home. Photos of new purchases advertise what’s worth stealing. Posts about your children’s schools, sports teams, and activity schedules tell predators exactly where to find them and when.
For less than $50, a criminal can purchase detailed profiles from data brokers that include your income range, purchasing habits, and psychological triggers. Your social media fills in the rest: your daily routines, your relationships, your vulnerabilities.
Here’s a test from my book Family Cybersecurity: review your family’s social media activity as if you were planning to rob yourselves. What would you learn about your schedules, your financial situation, and your security gaps? If the answer makes you uncomfortable, you have work to do.
The Professional Consequences Are Real
The security angle is the most important reason to audit, but the professional consequences are real too. Employers search candidates’ social media. Loan officers check it. Business partners look you up before signing deals. Your digital footprint makes first impressions before you ever get the chance to.
The cases are well documented. Kevin Hart stepped down from hosting the Oscars after old tweets resurfaced. James Gunn was fired from the Guardians of the Galaxy franchise over old social media posts (and later rehired after massive public support). Roseanne Barr had her show canceled after a single tweet. Gilbert Gottfried lost a major endorsement deal over tweets about a tsunami.
These are public figures with massive platforms. But the same dynamic plays out at every level. A hiring manager who finds inflammatory posts from a job candidate moves on to the next resume. A client who sees unprofessional content from a potential business partner finds someone else. You never hear about these consequences because the people making the decisions don’t explain why they passed on you.
How Do You Audit Your Social Media?
Forget the 11-step guides. A social media audit comes down to three actions.
First, review everything you’ve posted and delete anything that creates a security risk or misrepresents who you’re now. This includes posts that reveal your routines, your home location, your children’s schedules, or your travel plans. It also includes old content that no longer reflects your values or professionalism. Be ruthless. If a post doesn’t serve you, it’s serving someone else.
Second, lock down your privacy settings on every platform. Default settings on most platforms make your content more visible than you realize. Disable location tracking and geotagging. Control who can see your posts, tag you in photos, and contact you. Review these settings quarterly because platforms change their privacy policies and add new data collection features that are enabled by default without telling you.
Third, audit who you’re connected to. The people in your network post content that reflects on you. If someone in your connections regularly shares offensive, inflammatory, or dangerous content, that association is visible to anyone looking at your profile. Disconnect from accounts that create risk.
What is a virtual kidnapping scam?
Virtual kidnapping is a scam where criminals call you claiming to have kidnapped your child and demand ransom. They don’t actually have your child. They have your social media.
From public posts, they learn your children’s names, what school they attend, what activities they participate in, and what your work schedule looks like. They time the call for when you’re away from home and your children are at school, making it impossible to immediately verify their safety. Then they use the specific details they gathered to make the threat sound credible.
The terror is real even though the kidnapping isn’t. Parents have paid ransoms before discovering their children were safe at school the entire time.
This scam works because people post detailed information about their families without considering who might use it. The solution is simple: stop posting your children’s school names, activity schedules, and location information publicly. If you want to share milestones with family, do it through private channels, not public feeds.
What Should You Stop Posting on Social Media?
Your home address or photos that reveal it. For more on building a massive organic following, see Richard’s interview with Dan Shinder. Your daily routines. Your children’s school names and schedules. Your travel plans before or during the trip (post vacation photos after you return). Photos of expensive purchases. Your full birth date. Your phone number. Information about your security system or lack of one. Posts about when your house will be empty.
None of this means you can’t use social media. It means being intentional about what you share and who can see it. The difference between smart social media use and dangerous social media use isn’t volume. It’s awareness.
How often should you audit your social media?
A social media audit isn’t a one-time cleanup. Platforms change their settings. You accumulate new content. Tagged posts appear without your control. Build a quarterly review into your routine: check privacy settings, review recent posts and tags, and remove anything that creates unnecessary risk.
The time investment is small. The protection it provides is significant. And unlike most security measures, this one costs nothing but attention.
For a complete guide to protecting your digital life, see Family Cybersecurity: A Practical Guide to Protecting Your Digital Life. For more on how your digital presence affects your professional reputation, see The Ethical Workplace.
Schedule a free consultation to discuss your book project.
Frequently Asked Questions
Cybersecurity Ghostwriting
I spent 33 years in enterprise security before writing about it. If your security expertise belongs in a book, I ghostwrite it with the field time to get it right. Explore Cybersecurity Ghostwriting.
