The obsessive profile: how criminals study you before the scam
The prior intelligence that turns a generic scam into a targeted, nearly invisible attack.
Audience: High-Profile Individuals · Risk level: ATTENTION
Blindfy Intelligence Unit · Technical review by Blindfy
Scenario
A business owner discovers the attacker knew intimate details of his schedule, his pet and a recent trip — all extracted from public stories and posts from recent weeks.
How the scam works
Attackers map routine, family circle, suppliers and exposure patterns. That dossier fuels the social engineering behind financial scams, virtual kidnapping and extortion.
Common mistake
Believing that posting "everyday life" has no operational security implications.
Impact
More convincing attacks, weakened intuitive defenses and difficulty for family and staff to spot the fraud in time.
What works
Periodic digital footprint audits, a minimum viable exposure protocol and a family culture of discretion.
Protection checklist
- Audit your digital footprint quarterly
- Restrict the audience of stories and livestreams
- Delay posting locations while traveling
- Limit exposure of children and pets
- Train family and staff in discretion
- Monitor OSINT mentions of the target
- Strip metadata from published photos
Editorial sources
- CERT.br / NIC.br — Cartilha de Segurança para Internet
- ENCCLA / Ministério da Justiça — Enfrentamento a golpes digitais
The scam doesn't start at the Pix transfer. It starts three weeks earlier, in your story.
