In short: On 3 August 2026 Russia's Interior Ministry (MVD) urged people to share less about themselves online. The warning is blunt: photos, geotags, subscriptions and comments let a stranger rebuild your home address, daily routine, usual routes and family ties — enough to craft a convincing pretext for a scam. Below is what actually leaks from an ordinary post, and a short routine to shrink your exposure.
What the Interior Ministry warned about
In its advisory the MVD asked citizens not to publicise their home address, place of study or work, or details about relatives. The reason is that recruiters and fraudsters build a psychological profile of a target from social-media data, find weak spots, and pick a scenario of contact, pressure or deception that fits. The ministry framed it plainly: photos, comments, subscriptions and place check-ins help a stranger work out your interests, your circle, your usual routes and your family — and then invent a believable reason to approach you. This is the same aggregation problem we described in our report on how automated tools stitch a dossier from scattered traces: no single post is secret, but combined they draw a map of your life.
What actually leaks from an ordinary post
Two layers leak at once. The visible layer is what you meant to share: a photo tagged at your gym every morning, a check-in near home, a school in a bio, a comment naming a relative. Together they reveal a schedule and a place. The hidden layer is metadata. If your camera has location enabled, each photo carries EXIF data — latitude, longitude, sometimes altitude, plus the time and device model — embedded in the file itself. A picture that looks harmless can quietly announce the exact coordinates of your home or workplace to anyone who opens the original.
Security researchers make the same point: a geotag in an image can hand out your home's GPS coordinates without a word of caption. The danger is not one revealing photo but the pattern — post enough of them and your movements become predictable.
How criminals use it
Collected fragments let an attacker study a victim before ever making contact. Knowing where you live, when you are out, who your family is and what you care about, they can pose as a neighbour, a delivery service, a school contact or an official — and reach you with a script tuned to your life. The MVD noted this is recurring guidance; it issued similar warnings before, because the raw material — your own public data — keeps accumulating. The same fragments feed the wider worry about how much apps and platforms already know about ordinary users.
How to protect your data
Turn off geotags at the source. In your phone's camera settings, disable location for photos so new pictures stop carrying GPS coordinates. Before uploading older images, strip their metadata with a tool that clears EXIF.
Lock down what is public. Set profiles to private, hide your address, workplace and family details, and think twice before check-ins at home, school or work. Do not answer personal questions from strangers, and verify an account before engaging with it.
Harden your accounts. Use unique passwords with a manager and two-factor authentication in your messengers, so a single leaked login does not open the rest of your identity.
Hide your IP on untrusted networks. Your IP address is another location signal — it points to your city and provider. A no-logs VPN replaces your real IP with the address of a VPN server, so an IP lookup points to the server rather than your home, and the network you are on cannot log which sites you visit. An honest limit: a VPN does not remove metadata already baked into a photo you posted, and it will not un-share an address you typed into a bio — it reduces one signal, your IP and traffic exposure, alongside the habits above. LiMP VPN is a no-logs service for iOS and Android — see the plans, and follow more privacy news on our blog.
Sources
Based on reporting by Kommersant and Anti-Malware.ru, which independently covered the Interior Ministry's 3 August 2026 advisory, with additional detail on photo metadata from SecurityLab.ru.