Oversharing Online

Oversharing Online: How Social Media Can Put Your Safety, Family, and Business at Risk

In the Army, we called it OPSEC, short for operations security. The idea is simple: an adversary rarely needs your secrets. They just need enough unclassified scraps to piece together the picture themselves. One soldier mentions a shipment date. Another posts a photo with a unit patch in the background. A third complains online that his leave got canceled. None of it seems sensitive, but put together, it tells an enemy what's happening, where, and when.

I spent 22 years in counterintelligence, and I can tell you the same principle applies to everyday life. Most people don't think like investigators, scammers, or predators. They see a post as just a post. But the people with bad intentions do think that way, and social media has handed them the easiest intelligence-gathering tool ever built.

This isn't about disappearing from the internet. Social media keeps families connected, helps small businesses grow, and lets us share the moments that matter. It's about posting with the same awareness a service member is trained to use, because the stakes for your family are just as real.

A Lesson the Military Learned the Hard Way

If you think a few harmless posts can't reveal much, consider what happened in 2018. The fitness app Strava published a global "heat map" built from its users' public workout data, around 1 billion activities in all. An Australian university student noticed that the map showed the locations and running routines of military personnel at bases in the Middle East and other conflict zones. In places like Iraq and Syria, where few locals used fitness trackers, the outlines of U.S. military bases stood out clearly against the dark background, along with other lesser-known and potentially sensitive sites.

No one leaked anything. Service members were just logging their morning runs. But security analysts warned the biggest danger was that adversaries could work out "patterns of life" by tracking military or intelligence personnel as they went about their duties or headed home. The Pentagon responded by urging service members to lock down the privacy settings on their apps.

If trained military personnel can accidentally expose a base by jogging, a civilian family can easily expose their home, schedule, and children through ordinary posts.

How a Stranger Builds a Picture of Your Life

Investigators call it open-source intelligence: information anyone can find legally and publicly. I use these techniques professionally, and I'll be honest with you: for a lot of people, it takes less than an hour to learn where they live, where they work, what their kids look like, where those kids go to school, and when the house is empty.

It rarely comes from one post. It comes from stacking many small ones together. A real-time vacation photo tells someone your house is empty right now. A first-day-of-school picture reveals your child's name, grade, school, and mascot. A morning coffee check-in, a regular gym post, or a tagged lunch spot, repeated week after week, maps out your daily routine. A background detail like a street sign, house number, license plate, work badge, or open laptop screen can give away more than the post itself.

Location tags are the biggest problem. Tag your office, your favorite restaurant, your kid's ballpark, and your church often enough, and you've drawn a map of your life, including the routes between those places and the times you travel them.

A quick technical note: photos taken on a smartphone can carry hidden data, including the exact GPS coordinates where the picture was taken. Many major platforms strip that data when you upload, but photos shared directly by text, email, or some websites may keep it. It's worth turning off location access for your phone's camera unless you really need it.

Your Old Posts Answer Your Security Questions

Think about the security questions your bank asks: your mother's maiden name, your first pet, the street you grew up on, your high school mascot, your first car. Now think about the "fun" social media quizzes that ask the same things, or the birthday posts, throwback photos, and pet tributes you've shared over the years.

Identity thieves harvest this information on purpose. Every answer you've posted publicly is one less barrier between them and your accounts. For any account that matters, treat security questions like passwords: give answers that aren't true and that you keep in a password manager.

Your Voice Is Now Something Criminals Can Steal

This is newer, and many families don't know about it yet. The FTC warns that a scammer only needs a short audio clip of a family member's voice, which they could get from content posted online, and a voice-cloning program. When they call, they sound just like your loved one. Research from McAfee found a free tool needed only three to four seconds of audio to produce an 85% voice match.

That birthday video, the Reel of your son talking about his new truck, or your daughter's TikTok is enough raw material. Criminals pair the cloned voice with details from your posts, like names, the school, or the fact that you're traveling, to stage a fake emergency call: a car accident, an arrest, even a kidnapping. The FTC's advice is not to trust the voice alone. Call the person back on a number you already have, and verify the story. My advice is to set up a family code word today, one that's never been posted or texted anywhere.

Our Kids Deserve Extra Care

As a parent, I understand the urge to share every proud moment. But children can't consent to a digital footprint that will follow them for the rest of their lives, and the risks are real.

Identity theft is one of them. Back in 2018, Barclays Bank projected that by 2030, parents' posts about their children could account for two-thirds of identity fraud facing young people. Kids make ideal targets because nobody checks a child's credit, so fraud can go unnoticed for years. Javelin Research found that about 1.25 million children in the U.S., roughly 1 in 50, were victims of identity theft and fraud in a single year, with losses totaling nearly $1 billion. A child's full name, birth date, and hometown, which is exactly what goes into a typical birth announcement, is much of what a criminal needs.

The darker risk is what happens to the photos themselves. In 2023, the FBI warned the public that criminals are manipulating ordinary photos and videos to create explicit content for sextortion schemes. An investigator with Australia's eSafety office found that up to 50% of images on sites used by pedophiles could be traced back to social media and blog posts. Innocent pictures of kids at the beach or the pool are exactly what these people look for.

None of this means you can't share your family's life. It means being deliberate. Keep children's accounts and photos private and limited to people you actually know. Leave out full names, birthdays, school names, uniforms, and team jerseys that point to a specific school. Avoid posting schedules like practice times, pickup spots, and bus stops. And ask your older kids before posting about them. It teaches them that their image and privacy belong to them.

Military Families Face Unique Risks

Pensacola is a Navy town, and military families here need to be especially careful. Posts announcing that a spouse just deployed, how long they'll be gone, or which unit they're with tell a stranger that a household is running one adult short, possibly for months. Criminals also watch for these details. Scammers have spent years stealing service members' names and photos to run romance and sales frauds. Share the pride without sharing the timeline: post the homecoming after it happens, not the departure.

Older Family Members Are Targets Too

Seniors often post openly, accept friend requests freely, and share details about grandchildren, health, and travel. Scammers use that to make their pitch convincing. A "grandparent scam" caller who already knows your grandson's name, college, and recent trip sounds a lot more believable. This kind of fraud is exploding: adults 60 and older reported $7.7 billion in losses to the FBI in 2025, about a 60% increase over 2024. Help the older people in your life lock down their privacy settings, and go through their friends lists with them.

Business Owners: Your Posts Are Intelligence, Too

For small business owners, the line between personal and business posts is thin, and criminals know it. Posting that the owner is traveling, a manager is out, the office is short-staffed, a big shipment just arrived, or new equipment was delivered to a job site hands useful information to thieves, competitors, and scammers.

The most expensive version is business email compromise, where criminals impersonate an owner, executive, or vendor to trick employees into wiring money or paying a fake invoice. It cost Americans $3 billion in reported losses in 2025. These scams are timed and targeted. If a criminal knows from your posts that the boss is on a flight to a conference, they know exactly when to email the bookkeeper claiming an "urgent wire" is needed, with the boss out of reach. The FTC has warned that scammers can also clone the voice of a CEO or other executive to push employees into transferring money or paying fake invoices.

Protect your business by keeping travel off social media until you're back. Require a phone call to a known number before any payment or banking change. Train your staff to expect these tactics. And review what your employees post from job sites, including photos that show badges, access points, alarm panels, or screens.

What a Stranger Can Do Once the Picture Is Complete

Most oversharing never leads to harm. But it lowers the barrier for someone who's looking. A burglar gets timing. A stalker gets a location and a routine. An identity thief gets answers to your security questions. A scammer gets names and details that make a lie believable. A predator gets photos, a school, and a schedule.

In counterintelligence work, we don't worry about what one piece of information reveals. We worry about what someone can build from all of them. Your social media is the same.

Practical Steps You Can Take This Week

Post travel after you're home, not while you're gone. Turn off location tagging by default and camera location access on your phone. Check the background of every photo before you post it: house numbers, license plates, badges, mail, screens, and street signs. Break up routine posts so they don't show a predictable schedule. Scrub or hide old posts that answer security questions, and change those answers on your important accounts. Set your profiles to private and prune your friends and followers lists, but don't treat privacy settings as a guarantee, because anything you post can be screenshotted and shared. Agree on a family code word to defeat voice-cloning calls.

Then run the test I use with clients: search your own name, phone number, and address, and look at what comes up. Check people-search websites as well, because many of them will remove your listing if you submit an opt-out request. What a stranger finds in ten minutes is what a criminal already knows.

The One Rule to Remember

Pause before you post. Ask yourself what someone could learn from that photo, caption, or check-in if they were trying to build a picture of your life. Think about who might see it and what they'd want it for.

How Oddfellow Investigations Can Help

Sometimes the concern goes beyond prevention. Maybe you're being harassed or followed online. Maybe someone seems to know things about your life they shouldn't. Maybe your business is being targeted, or you just want to know how exposed you and your family really are. Oddfellow Investigations offers digital footprint assessments that show you what a determined stranger could find about you, and we can help you shut those doors. When there's a real threat, we investigate who is behind it and document what we find for law enforcement and attorneys.

I started this agency to help people who can't help themselves. Very often, that starts with helping them see their own lives the way an adversary would, before an adversary does.

If something feels off, call us. The conversation is confidential.

Oddfellow Investigations LLC | Veteran-owned | Pensacola, FL | (850) 426-3901
Florida Agency License A 3500096

Sources: FBI Internet Crime Complaint Center 2025 Annual Report; FBI public service announcements; Federal Trade Commission consumer alerts; Barclays (2018); Javelin Strategy & Research; McAfee; Australian eSafety Commissioner; reporting from ABC News, WIRED, and CBS News on the 2018 Strava heat map.

At Oddfellow Investigations, we understand how small details become bigger pictures. In today’s world, protecting yourself is not just about physical security. It is also about controlling the information you give away online. Concerned about what your online activity reveals? Oddfellow Investigations provides threat assessments to help you evaluate specific safety concerns and identify practical next steps.

LICENSED | INSURED

Florida Private Investigators License #C 3500090

Florida Agency License #A 3500096

Pensacola, Florida. Serving Escambia, Santa Rosa, Okaloosa and Walton counties in Northwest Florida, and Baldwin County in South Alabama.

contact@oddfellowpi.com

+1-850-426-3901

© 2026. All rights reserved.

Timeless Tradecraft. Relentless Truth.