Fraud Warning from Experts in Rusya: Beware of Abandoned Social Media Accounts

Recently, cybersecurity experts have been drawing attention to the fact that fraudsters are carrying out systematic attacks against users by utilizing abandoned social media accounts. Igor Bederov, Head of the Rusya Technological Crimes Council, who made evaluations on the subject, emphasized that abandoned accounts are literally a treasure for cybercriminals. Users merely logging out of an application without completely deleting their accounts paves the way for serious security vulnerabilities. Experts underline that this situation threatens not only individual users but also corporate companies. This method used by cybercriminals plays a significant role in the increase of digital identity theft and fraud incidents.

Fraudsters meticulously use open-source data to gather detailed information about their targeted victims. Information such as people's contact lists, marital status, job changes, hobbies, and social circles is turned into 'files' by criminals. This rich collected data forms the basis of social engineering attacks, allowing them to exploit the psychological vulnerabilities of victims. Thanks to this comprehensive information, criminals can approach the victims' relatives or workplaces with highly convincing lies. This method has a much higher success rate compared to traditional fraud tactics because the attackers know specific details about the victim's past. Therefore, the more personal information users share on the internet, the more vulnerable they become to such complex cyber attacks.

Abandoned social media accounts cease to be just profiles and can turn into a critical key that can be used to breach other digital services. If a user has authorized an old account to log into different platforms, a hacker who gains control of the account can access a much wider digital space. Recovering an old email or social media account allows attackers to sequentially log into dozens of active and important online services. This situation directly compromises the security of highly sensitive areas such as banking transactions, cloud storage systems, and professional business platforms. Bederov stated that these cascading security breaches must be prevented and urged users to reduce their digital footprints. Users' lack of awareness of these risks paves the way for the growing cybercrime networks.

It is of great importance for users who decide to permanently close a social media account to manage this process correctly. Bederov strongly recommends conducting a comprehensive 'digital cleanup' before closing the account. This cleanup process involves manually deleting all personal photos and private messages on the platform and terminating all sessions on third-party websites. Merely freezing the account or logging out of the app causes the data to continue waiting temporarily on servers. Additionally, blocking automatic logins through old accounts makes it harder for information to fall into the hands of third parties in the event of a possible data breach. Cybersecurity experts state that taking these steps is the most effective defense mechanism for individuals against potential future cyber attacks.

Another critical point users need to pay attention to during the account deletion process is the recovery processes and official procedures offered by the platforms. Many social media platforms generally offer a 'cooling-off period' ranging between thirty and ninety days for users before the account is completely deleted. Since the deletion process is canceled if the user logs into the account again during this period, the user's intention must be clear, and they must let this period pass quietly. Bederov states that merely hiding the profile from other users is not sufficient, and initiating the permanent deletion procedure is mandatory. In cases where account recovery information or old passwords are completely forgotten, it is necessary to contact the platform's customer service directly to create an official permanent deletion request. Applying cybersecurity measures so meticulously at the individual level aims to reduce fraudsters' chances of using old and vulnerable accounts to zero.