Identity theft can affect anyone, including children and adolescents. Let’s remember that this is a situation in which someone pretends to be another person with the main goal of financial gain, or to deceive and harm another person. Let’s see how we can react to these cases, both in the case of an account theft, and a fake profile on the Internet.
Can’t access your account?
Has a classmate taken over your account and is using it against you? Have cybercriminals stolen your account and are exploiting it for their benefit? It may be that there is no security issue, and you simply made a mistake when entering your username and password. But if the problem persists, your account may have been stolen. It could also be that you have fallen for a phishing scam, installed malware capable of stealing your passwords, or used the same password on another online platform that has experienced a data breach.
In any case, if you suspect that someone else may be using a minor’s account, it is necessary to follow these guidelines:
Recover the account: if the password has been changed and you can no longer log in, use the “forgot my password” link on the login page. Change the password: Generate a strong password, mixing uppercase and lowercase letters, symbols, and numbers, using different methods. For example, with the infographic “create your secure password step by step”, activity 7 from the cybersecurity summer workbook, or the game “improve your passwords”. You can also learn how password managers work and use one from the security tools catalog. Log out of devices: go to the account settings section, review the login history, and log out of unauthorized devices. Notify the platform: if you are unable to recover the account, contact the security center or support team of the platform.
Additionally, you can strengthen security with:
Two-factor authentication: with this activated, in addition to the password, a code generated or sent to your mobile phone is required to log in, adding an extra layer of security.
Login alerts: by activating notifications, through messages or email, when someone logs into the account from an unknown device or unusual locations.
Install and/or update and run an antivirus: to detect and eliminate possible threats on the device. Keep the system and applications up to date: these usually fix potential vulnerabilities.
Good usage practices, such as not staying signed in, or remembering the password on other devices, like shared computers in a computer class. Always remember to log out and use the browser in incognito mode or private mode (or at least clear browsing data). Avoid clicking on suspicious links or downloading apps from unknown sources.
Fake profile with your information
Have classmates created a fake profile to harm you? Has a cybercriminal created a fake profile to deceive others? Taking your data or photos to humiliate or ridicule you within an online violence situation that may be occasional, or part of cyberbullying. There are also occasions when a cybercriminal creates a fake profile with stolen information from a minor with the intention of deceiving their friends.
Gather evidence: collect evidence showing that a fake profile of the minor has been created, including messages or posts to harm them. At least with screenshots, although online witness services can also be used. Report the fake profile to the platform so they can close it and prevent it from deceiving other users. Contact the platform: if you cannot remove the fake account, contact the security center or support team of the platform. Contact the Prioritized Channel of the AEPD to request the removal of private, intimate, or violent content towards the minor that may have been disseminated on that profile.
Additionally, it is advisable to:
Inform the impersonated person and/or their acquaintances of the existence of that fake profile to ensure they do not interact with it. Periodically review privacy settings on social networks, with private profiles, without sharing personal or compromising information. Regularly egosurf to identify any suspicious posts or activity with your name.
Links to reference on various platforms
Below is a table that provides detailed information on how to change passwords, enable two-factor authentication, report, and seek help on some of the most commonly used online platforms by minors:
Service
Google How to change your password: Change or reset your password How to enable two-factor authentication: Strengthen your Google account security Apple How to change your password: Change your Apple ID password How to enable two-factor authentication: Two-factor authentication for Apple ID Microsoft How to change your password: Change your Microsoft account password How to enable two-factor authentication: How to use two-step verification with your Microsoft account
WhatsApp How to change your password: — How to enable two-factor authentication: Information about two-step verification Instagram How to change your password: Change your Instagram password How to enable two-factor authentication: How to protect your Instagram account with two-step authentication TikTok How to change your password: Reset password How to enable two-factor authentication: Account security
X (Twitter) How to change your password: Help with my compromised account How to enable two-factor authentication: Help with two-factor authentication Twitch How to change your password: Account recovery How to enable two-factor authentication: Setting up two-factor authentication (2FA)
Discord How to change your password: Forgot my password! How can I create a new one? How to enable two-factor authentication: Setting up two-step authentication Facebook How to change your password: Change your password How to enable two-factor authentication: How two-factor authentication works on Facebook
Steam How to change your password: Password recovery How to enable two-factor authentication: Two-factor authentication system Epic How to change your password: How to reset your password How to enable two-factor authentication: What two-factor authentication is and how to activate it
Xbox How to change your password: Reset or recover your lost Microsoft account password How to enable two-factor authentication: Add contact information PlayStation How to change your password: How to reset a PlayStation Network password How to enable two-factor authentication: Two-step verification
Nintendo How to change your password: How to change your Nintendo account password How to enable two-factor authentication: How to set up two-step verification for a Nintendo account Google Service How to report fake accounts: Report identity theft How to regain control of the account: Protect a hacked or compromised Google account
Apple How to report fake accounts: Recognize and avoid identity theft messages and other scams How to regain control of the account: If you believe your Apple ID is at risk Microsoft How to report fake accounts: Identity theft and suspicious behavior How to regain control of the account: How to recover a hacked or at-risk Microsoft account
WhatsApp How to report fake accounts: How to safeguard your security on WhatsApp How to regain control of the account: Stolen accounts on WhatsApp Instagram How to report fake accounts: Identity theft accounts How to regain control of the account: Hacked Instagram account
TikTok How to report fake accounts: Report others How to regain control of the account: My account has been hacked
X (Twitter) How to report fake accounts: Report identity theft accounts How to regain control of the account: Spam and fake accounts Twitch How to report fake accounts: How to report a user How to regain control of the account: What can I do if someone has accessed my account?
Discord How to report fake accounts: How to report a problem to the Trust and Safety team? How to regain control of the account: Submit a help request Facebook How to report fake accounts: Report content on Facebook How to regain control of the account: Fake and stolen accounts
Steam How to report fake accounts: Report content on the Steam Community How to regain control of the account: Recover a stolen Steam account Xbox How to report fake accounts: How to report a player How to regain control of the account: Protect your account if you believe it has been attacked
PlayStation How to report fake accounts: How to report content on PSN How to regain control of the account: Stolen (compromised) accounts and unauthorized charges
Nintendo How to report fake accounts: — How to regain control of the account: How to recover the Nintendo account
If you are facing a situation of identity theft, whether it’s an account theft or a fake profile, remember that you have the support provided by the Cybersecurity Help Line, 017. A free and confidential service where we will help you solve any problems or concerns related to the use of devices and cybersecurity.
In addition to calling 017, you can contact us through the web form Your Help in Cybersecurity, via WhatsApp (900 116 117) or through Telegram (@INCIBE017).
Content framed within the resources on the topic of Identity Theft. Content created within the framework of funding from the Recovery, Transformation, and Resilience Plan of the Government of Spain, financed by the European Union (Next Generation). via: INCIBE
Referrer: MiMub in Spanish