Por Renan Filho · 2026-10-10**Lead**
Imagine receiving a text that reads, “We have your full name, phone number, and home address. Pay $500 in Bitcoin or we leak everything.” It sounds like a hollow threat – until you realize the scammer already possesses the keys to your digital life. In the United States, where personal data is routinely exposed through data breaches, social media oversharing, and public records, a combination of name, phone, and address is more than enough to launch sophisticated attacks. Security experts from the Federal Trade Commission (FTC) and the Cybersecurity and Infrastructure Security Agency (CISA) warn that such basic identifiers can be used to impersonate victims, take over accounts, commit financial fraud, and even orchestrate real-world stalking or harassment.
**Contexto**
The scenario is far from hypothetical. Data breaches at major companies – including Equifax, Marriott, and T-Mobile – have leaked the personal information of hundreds of millions of Americans. According to the Identity Theft Resource Center, the number of U.S. data breaches in recent years has consistently exceeded 1,000 annually, exposing records that include names, phone numbers, addresses, and more. Once this data circulates on the dark web, scammers aggregate it with other publicly available information – property records, voter registration, and social media profiles – to build a detailed dossier on a target.
With just a name and address, a scammer can often find your date of birth through public records or online people-search services. Add a phone number to the mix, and they have enough to call your mobile carrier, pretend to be you, and request a SIM swap. The FCC has documented a surge in SIM-swapping complaints, where criminals transfer your phone number to their device, then use it to intercept two-factor authentication codes for your bank, email, and social media accounts. Once inside, they can drain bank accounts, apply for credit cards in your name, or lock you out of your own digital identity.
**Analise**
The ability to combine name, phone, and address also enables a technique known as “vishing” (voice phishing). Scammers call victims while spoofing the caller ID to appear as a legitimate number – for instance, the customer service line of a large bank. They already know your address and phone number, so they sound convincing. They might claim your account has been compromised and ask for your Social Security number or answers to security questions. The FTC’s consumer Sentinel network reports that imposter scams remain the most common fraud category in the United States, with losses in the billions of dollars annually.
Beyond financial harm, the same data can be used for doxxing – the malicious public release of private information. In extreme cases, doxing has led to SWATting, where a prank call dispatchs a police tactical team to a victim’s home on false pretenses. The FBI has investigated multiple instances of SWATting linked to online disputes and extortion attempts that started with nothing more than a name and address scraped from a social media profile.
**Sources**
- Federal Trade Commission (FTC) – Consumer Education Materials on Identity Theft and Scams n- Cybersecurity and Infrastructure Security Agency (CISA) – Social Engineering Awareness Guidance n- Identity Theft Resource Center – Annual Data Breach Reports and Analysis n- Federal Communications Commission (FCC) – SIM SwaP and Port-Out Fraud Resources n- FBI Internet Crime Complaint Center (IC3) – Annual Reports on Cyber-Enabled Fraud and Swatting Incidents