Six ways online identity theft can happen

How does online identity theft happen?

Online identity theft happens when scammers successfully get a hold of your personal information through fraud. They’re able to lure users through phishing scams and implant malware onto devices, which gives them access to software, private files, and network details. Most victims of online identity theft are affected financially, but some scammers use people’s personal information to participate in illegal activities or pass along the information to other criminals on the dark web.

Microsoft Defender

Stay safer online with one easy-to-use app<sup>1

1</sup>Microsoft 365 Personal or Family subscription required; app available as separate download

Learn more

Ways you can be affected by online identity theft

Scammers will use a variety of methods to reach you in order to forcefully take your information. Here are six ways that online identity theft can happen to you:

Email scams

A common and easy way that scammers will try to get into your system is to send fake emails to your inbox. Email scams often contain links that allow scammers to hack into your system, but this can only work if you click on the link. Some scammers may also pose as loan providers, companies, or even as someone you know to try and trick you into providing details about yourself. Although most email platforms are able to filter out spam, some scam emails can still get through to your main inbox.

Texting scams

Like with email, scammers can also send out text message scams that contain suspicious links to get you to click on them. This type of scam is more likely to affect your smartphone, which can be especially dangerous if you have apps on your phone. Smartphone apps often store lots of personal information, and a compromised phone gives hackers access to your usage activity and data.

Fake Wi-Fi hotspots

Connecting to the wrong Wi-Fi network can also put you at risk for online identity theft. Scammers can put fake Wi-Fi hotspots, also known as “evil twin” hotspots, in public places to obtain information from your device. These networks typically don’t require passwords, and they share similar names to surrounding businesses to trick people into thinking it is a complimentary Wi-Fi offering for guests. When connecting to Wi-Fi in a public setting, be sure to confirm with the business or establishment that you’re using the correct network.

QR code scams

Even if you’re careful about clicking on suspicious links, scammers can still get you to open a fraudulent website with a fake QR code. A QR code allows you to pull up a website or PDF just by scanning it with your phone’s camera, and scanning a counterfeit code can lead you to a page that can implant malware onto your phone. Make sure to never scan a QR code in a public place if you’re not sure where it came from.

Sketchy online advertisements

The use of fake online ads, or malvertising, is a method that scammers use to disguise shady links as ads and put them directly onto your browser. When you visit a harmful or illegitimate website, you may receive a slew of advertisements that look off or have typos in them. Avoid clicking on advertisements from untrustworthy sites or install an adblocker to keep them from appearing on your browser altogether.

Social media scams

Scammers are all over social media platforms too. They can send you spam messages or hack personal accounts and use them to post links that contain malware. If any of your social media connections post or send messages that are out of the ordinary, it’s important that you do not engage with the content. Clicking on these links can make your account information accessible to scammers and allow them to post on your behalf without your permission.

If you believe that your personal information was compromised online, don’t panic. Do some research on what to do after a ransomware attack, and download an antivirus software to minimize the damage. Find more privacy & safety tips to help you stay safe while browsing the internet.