Child Identity Theft Risks on Instagram
Parents who publicly share children's names, birthdates, and photos on Instagram inadvertently provide fraudsters with data usable for child identity fraud, particularly when personal details appear in captions and tagged locations.
Part of: Child Identity Theft
Last reviewed: 1 June 2026
Instagram's image-forward format encourages sharing life milestones — birthdays, school events, holiday trips — and parents naturally include their children in this visual narrative. The aggregation of these posts over years creates a detailed identity profile for a minor that fraudsters can exploit long before the child reaches the age to establish their own financial identity.
Instagram's public-by-default setting for new accounts means that these posts may be visible to anyone unless the user actively restricts access, making the data accessible to automated aggregation tools as well as individual bad actors.
How this scam works on Instagram
Fraudsters use automated tools to scan public Instagram accounts for posts tagged with children's names, schools, and locations, cross-referencing with publicly visible profile information to build identity dossiers. Posts with school uniform photos, birthday captions including the child's age, and tagged locations all contribute data points.
Some operators directly approach parents in community-focused Instagram accounts — local parenting hashtags, school pages — with offers that require children's names and birthdates: community awards, personalised gifts, or competition entries. The data collected is aggregated and used or sold for minor identity fraud.
In more targeted cases, a bad actor who identifies a high-value family — through visible wealth indicators on the parent's Instagram — constructs a detailed child identity profile specifically to open credit accounts with high approval limits.
Common red flags
- Competition or gift post in a parenting community requesting children's full names and birthdates
- Account engaging unusually with posts featuring specific children's photos and biographical details
- Message offering personalised products that request the child's name, birthday, and school
- Unexpected mail addressed to a minor at your home address from financial institutions
- Credit check result in a minor's name revealing accounts you did not open
How to protect yourself
- Set your Instagram account to private, especially if your posts regularly feature children
- Avoid tagging school names, towns, or birthdates in posts featuring children
- Use only first names or nicknames when referring to children in public Instagram captions
- Decline any offer requiring a child's full name and birthdate as verification or personalisation
- Request a credit check in your child's name annually — any credit history indicates potential fraud
- Watermark photos that feature distinctive family settings to reduce casual aggregation
How to report it
- Report accounts that appear to be harvesting children's details to Instagram using the in-app report function
- File a report with your national child protection authority if coordinated data harvesting is suspected
- Contact your national identity theft authority if fraudulent accounts have been opened using your child's data
Frequently asked questions
What specific information is most valuable to child identity fraudsters?
Full legal name, date of birth, home address, and government-issued ID number (where applicable) are the core data points. Secondary useful information includes school name, parents' names, and sibling details — all of which commonly appear in public Instagram posts. Restrict these specifically while other sharing can remain more open.