Step-by-step method
A reproducible path from question to conclusion.
- 1
Frame the risk
With the person or their team, define exposed roles, official channels and priority scenarios: executive impersonation, fake accounts, contact with relatives or a fabricated statement.
- 2
Inventory only necessary public traces
Record official profiles, biographies, appearances, domains, work contacts and indexed documents linked to the role. Exclude unrelated private information.
- 3
Check currency and attribution
An old role or reused image may not describe the present. Record the date, source and confidence before adding an item.
- 4
Assess plausible use
Ask whether a trace helps imitate an official channel, make a fraudulent message credible or identify a vulnerable person. Rank impact and ease of misuse.
- 5
Reduce and monitor
Correct outdated biographies, clarify authentic channels, protect accounts and request proportionate removal where appropriate. Assign an owner for follow-up.
Proportionality is part of the method
The aim is not to find everything about a person. Include a trace only when it informs a stated protection scenario.
Do not reproduce relatives’ details, home addresses or travel data in a general report. Restrict access to sensitive appendices.
Find impersonation footholds
An ambiguous official account, old contact address or lookalike domain can make fraud easier. A public photograph never proves a new profile is authentic.
Document trusted channels and reporting routes, then check whether an ordinary correspondent can find them clearly.
Prioritise feasible corrections
Some publications serve transparency duties or the public interest and cannot simply be erased. Context, alerts and account controls may still reduce risk.
Keep the correction evidence, date and action owner. Revisit exposure after an appointment, incident or channel change.
Common pitfalls
Four shortcuts that weaken the result.
Collecting without purpose
An exhaustive inventory creates exposure of its own.
Confusing namesakes
Attribution needs several matching identifiers.
Promising erasure
Some traces are legitimate or beyond control.
Circulating the file
Sensitive appendices should reach only those who need them.
Practical questions
Frequently asked questions.
Should all public presence be removed?
No. A clear official presence can help identify fake accounts.
Can family members be included?
Only under a lawful, necessary scope explicitly justified by a protection risk.
When should the audit be renewed?
After an appointment, incident, material channel change or according to the role’s sensitivity.
Editorial scope
Written and reviewed by Internet Intelligence Service on 23 September 2026. This educational guide describes a lawful, defensive method. It is not legal advice, an emergency service or authority instruction.