Scammers are exploiting public data broker websites to construct detailed profiles on individuals. These sites, accessible to anyone, aggregate personal information such as age, addresses, phone numbers, relatives, and even property value. Scammers use this readily available data to target individuals, their families, and friends without needing to hack into systems.

The process is straightforward. Scammers search names on people-finder sites like Spokeo, Whitepages, BeenVerified, and Intelius. Within minutes, they can assemble a profile confirming identity, revealing family connections (spouse, children, parents), and past addresses. This information is used to lend credibility to scam calls or messages, making them seem more legitimate.
Further, data brokers often include financial clues such as estimated income, home value, and ownership status. Scammers tailor their approach based on this data, targeting higher-income individuals with investment scams or others with job or rental scams. They often cross-check information from multiple sources, including social media, to ensure accuracy before launching an attack.
This practice has led to legal action against data brokers and is linked to a significant portion of fraud cases involving older Americans. Data is sourced from public records, social media, marketing surveys, and other brokers, making it difficult to remove permanently. Data brokers continuously update their databases, requiring ongoing vigilance.
To combat this, individuals are advised to search for their own data, submit manual opt-out requests, or use automated removal services. Establishing family protocols, like code words for financial requests, and changing common security questions can also deter scammers. The key is to make personal profiles difficult to access and to create enough friction to deter potential attackers.