Pathwise

Stay Safe Online · Lesson 9 of 12 · 12 min

Share less, on purpose

See how scammers build believable stories from what you post, decide which app permissions make sense, and do a ten-minute privacy check-up on your phone and messengers.

RAW MATERIAL

Scammers work from what you post

A message that knows your child's school, your workplace or that you're travelling feels real, because it is partly real. Most of that detail comes from public posts, profiles and group chats. The less a stranger can learn about you in five minutes, the harder you are to fool.

"Hi, this is the school office. Your daughter Sahar hurt her arm in PE, please pay the clinic here." The name and the school came from a public birthday post.

Check yourself

Parisa posts a public story at the airport: a photo of her boarding pass and "Two weeks in Istanbul, finally!" Which part of the post is the real problem?

  1. Nothing: stories disappear after a day, so there's no risk
  2. The pass details, and saying her home is empty for two weeks
  3. Naming the city, because it shows which airline she chose
  4. The word "finally", because it shows she doesn't travel often
Show the answer

The pass details, and saying her home is empty for two weeks

Yes. The name and booking code on a boarding pass can be enough to open her booking, and a public "two weeks away" tells anyone that her flat is empty. She can post the photos when she's back.

APP PERMISSIONS

Give each app only what its job needs

Your phone asks before an app can use your location, contacts, camera, microphone or photos. Ask one question: does this app's job need it? When it does, choose "only while using the app" where your phone offers it. You can see and change every permission later in your phone's settings.

A map app needs your location while you navigate. It doesn't need it at 3am while you sleep.

Keys for the workers in your home

A plumber fixing your kitchen needs the front door key, not the key to your desk drawer. Permissions are the same: each app gets the rooms its job needs. Where the analogy breaks: you can take a permission back at any time, but anything the app already copied, like your whole contact list, stays copied.

Check yourself

Does the request make sense for the app?

  • A map app asks for your location
  • A flashlight app asks for your contacts
  • A video call app asks for the camera and microphone
  • A calculator asks for your location all the time
  • A photo editor asks for your photos
  • A simple puzzle game asks to read your SMS
Show the answer

Makes sense: A map app asks for your location, A video call app asks for the camera and microphone, A photo editor asks for your photos

Suspicious: A flashlight app asks for your contacts, A calculator asks for your location all the time, A simple puzzle game asks to read your SMS

MESSENGERS

The settings strangers use to reach you

Most messengers let you choose who can see your phone number, profile photo and last seen, and who can add you to groups or call you. The defaults are often "everybody". Setting them to "my contacts" cuts off a large share of scam groups and fake "support" messages.

A stranger who can't see your number or your photo, and can't drop you into a group, has very little to start a conversation with.

A ten-minute privacy check-up

  1. Phone permissions

    Open the privacy or permissions page in settings. Look at location, contacts and microphone first, and switch off anything that doesn't fit the app's job.

  2. Messenger privacy

    Phone number, last seen, profile photo, groups and calls: set each to "my contacts" or "nobody".

  3. Social profiles

    Decide whether each account needs to be public. Check what your bio and old posts say about your work, family and where you live.

  4. Search yourself

    Search your name and phone number. What a stranger finds in five minutes is what a scammer will use.

Check yourself

Ali sends a photo from his balcony "as a file" instead of as a normal photo, so the quality stays high. That file can still carry the location where the photo was taken.

Show the answer

True

True. If your camera saves location, the position is written into the photo file. Many apps strip it when they compress a normal photo, but sending it as a file usually keeps the original, location included. You can turn off location in your camera settings.

Check yourself

Leila keeps getting added to "prize draw" groups by strangers, who then message her privately. Which change helps most?

  1. Leave each new group as soon as it appears
  2. Change her profile photo to a cartoon so she looks less interesting
  3. Report every group and wait for the messenger to ban the people who keep adding her
  4. Allow only contacts to add her to groups and hide her number from others
Show the answer

Allow only contacts to add her to groups and hide her number from others

Right. That removes the door they are using. Leaving groups one by one treats each case but never stops the next one.

Lesson recap

  • Every detail you post publicly is material for a more believable scam.
  • Give apps only the permissions their job needs, and prefer "only while using the app".
  • Set messenger number, photo, last seen and group adds to "my contacts" or "nobody".
  • Never post ID or bank card photos, one-time codes, or answers to security questions.

Keep it, don't just read it

Pathwise brings each idea back just before you'd forget it, with a quick question. Free on Android and on the web, in English and Persian.

Cafe Bazaar Myket Open the web app

All lessons in this course

  1. How accounts really get taken
  2. Strong passwords you don't have to remember
  3. Two-step login: a stolen password isn't enough
  4. Phishing: the message that wants you to hurry
  5. Fake pages, fake payment gates and fake apps
  6. SMS, call and messenger scams
  7. Pay without handing over your card
  8. Public Wi-Fi and your home network
  9. Share less, on purpose
  10. Stop pressing "later"
  11. Backups: the 3-2-1 rule
  12. If you get hacked: the first hour