Scams that aren't illegal (but should be)

Every year during National Consumer Protection Week, you hear warnings about phishing emails, fake IRS calls and identity theft. Those threats are real, but there is another risk that gets far less attention, and it is completely legal.

Unlike traditional scams, this does not happen in the shadows. It happens out in the open, every single day. As a result, most people only realize it is happening after someone uses their personal information against them.

Sign up for my FREE CyberGuy ReportGet my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you'll get instant access to my Ultimate Scam Survival Guide - free when you join my CYBERGUY.COM newsletter.

Then they build detailed profiles and sell them to advertisers, marketers and anyone else willing to pay. A typical profile may include:

This information often appears on people-search sites, where anyone can look you up in seconds. Scammers use these same databases to find and target victims. But even legitimate companies use them in ways most consumers never knowingly agreed to.

Search your own name online, and you may find pages listing your address, relatives' names and contact details. These sites present themselves as "background check tools" or "public records directories." But their business model depends on making personal information easy to find.

Even strangers can learn where you live, who your relatives are and how to contact you. No hacking required.

Many websites and apps track what you click, read and buy. Incogni's research found that popular apps like TikTok, Alibaba, Temu and Shein collect numerous personally identifiable data points and share them with third parties, like advertising networks and data brokers.

Over time, this data collection builds a behavioral profile. It can reveal:

This is why you may suddenly receive highly specific emails, calls, or ads that feel uncomfortably personal. Someone already knew what to say.

Once collected, this information can circulate indefinitely. You can delete a social media post, but copies of that data may already exist elsewhere.

In some cases, you have to manually disable this in settings, but it's buried in countless opt-out guides or obscure labels. For example, to opt out of LinkedIn data collection, you need to:

AI-powered apps and services continuously switch it up and make it harder for you to opt out. Why? Your data is fueling their business model. The more data points they have, the better they can train their AI and the more money they make.

Most people think data collection is just about targeted ads. But the same information can be used to make scams far more convincing. Instead of sending generic phishing emails, scammers can reference your real address or recent activities.

For example: "Hi, Mr. Smith, this is your bank. We noticed unusual activity on your bank account, ending in 0123. Please confirm your information."

National Consumer Protection Week is meant to empower people to protect themselves. That protection shouldn't stop at obvious scams. It should include limiting how easily your personal information can be found in the first place.

A data removal service helps remove your personal data from data brokers and people-search sites that collect and sell it. Instead of submitting dozens or hundreds of manual requests yourself, they automate the process and continue removing your data as it reappears.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.

When most people think about scams, they imagine criminals hiding in the shadows. But some of the biggest threats to your personal information are operating out in the open. Data brokers legally collect and sell detailed profiles about you. People-search sites make your address, phone number and even relatives easy to find in seconds. Your browsing activity is tracked, packaged and monetized. And now AI is speeding up how quickly that information can be gathered, connected and reused. This is not just about annoying ads. The more accessible your personal data is, the easier it becomes for scammers to sound convincing and target you with precision. Real consumer protection is not only about avoiding suspicious links. It is about limiting where your information lives and who can access it. The less strangers know about you, the harder it is to use your own data against you.

Have you ever searched for your name online and been surprised by what you found? Let us know by writing to us at Cyberguy.com.

Sign up for my FREE CyberGuy ReportGet my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you'll get instant access to my Ultimate Scam Survival Guide - free when you join my CYBERGUY.COM newsletter. 

Copyright 2026 CyberGuy.com. All rights reserved.