How do scammers decide which specific people to contact?
Scammers use a mix of purchased data lists, social media profiling, demographic targeting, and opportunistic scanning of people who have publicly indicated vulnerability or financial availability.
Last reviewed: 10 June 2026
Explanation
Scam outreach is rarely random at the individual level, even when it appears to be. Mass operations like robocalling or spam email do send messages to enormous lists, but even those lists are curated — sorted by country, age range, income indicators, and past response rates. A person who once responded to a sweepstakes call is more valuable than one who never has, so response history is tracked and sold.
Social media has made targeting dramatically more precise. Public profiles contain names, rough ages, employers, family structures, life events like marriages, bereavements, moves, and retirements, and sometimes explicit financial references like paying off a mortgage. All of this data helps a scammer construct a personalised approach. Someone who just posted about a bereavement and settling an estate is a valuable target for investment fraud. Someone who posted that they are excited to start a new job abroad is a target for rental fraud.
Data brokers aggregate these signals at scale. Companies that legally compile consumer profiles for marketing can sell information that, when used by a scammer, becomes targeting intelligence. Even if each individual data source is legitimate, the combination can create a profile precise enough to underpin a convincing fraud.
Scammers also use platform algorithms without knowing it. When a fake profile engages with content about loneliness, investment, or relationship advice, the platform's algorithm may show that profile to people who also engage with those topics — inadvertently surfacing vulnerable targets. This is not a deliberate exploitation of algorithms but an emergent effect of how recommendation systems work.
Common red flags
- A contact knows unusual personal details — your name, recent life event, or employer
- You receive targeted messages shortly after posting about a personal situation online
- The platform where you were contacted is one where you have a detailed public profile
- An offer or approach is suspiciously well matched to your recent stated needs
- You have recently entered a competition, made a purchase, or had financial news
What to do now
- Audit your social media privacy settings and restrict personal details to trusted contacts
- Remove your phone number, address, and financial details from any public-facing profiles
- Be aware that life transitions — new job, bereavement, divorce, retirement — increase targeting risk
- Opt out of data broker profiles using your right to erasure where this applies legally
- Treat any highly personalised unsolicited contact with extra caution
Frequently asked questions
Does closing or deactivating social media accounts reduce targeting?
It reduces new targeting significantly, but data already collected about you persists in broker databases. Opt-out requests to data brokers and removal of personal data from public listings addresses the historical exposure.
Can scammers target by postcode or neighbourhood?
Yes. Property transaction records are often public, and scammers targeting property or estate-related fraud can use postcode-level information to approach people who have recently bought, sold, or inherited property.