Scammers who obtain your name, phone number and address can combine that information with data from breaches to attempt SIM swaps, phishing attacks and identity theft schemes.
The three pieces of personal information are often used together in fraud attempts. When paired with additional data available through public records or previous data breaches, criminals can target victims with increasingly sophisticated scams.
SIM swap fraud, in which scammers trick cellphone carriers into transferring a victim's phone number to a device they control, is a particular concern. With a person's phone number, address and name, fraudsters have enough information to potentially convince customer service representatives to make the switch.
Once in control of a phone number, scammers can intercept two-factor authentication codes sent via text message, giving them access to email, banking and social media accounts.
Phishing attacks become more credible when scammers have personal details to include in their messages. Emails or texts referencing a victim's actual name, address or phone number are more likely to be trusted.
Identity theft is another risk. With name, address and phone number, criminals can attempt to open credit accounts, apply for loans or file fraudulent tax returns in a victim's name.
