In immediate danger? Call 000

Scam alert: Tax-time ATO and myGov impersonation texts are surging. The ATO never sends login links by text. See the current wave

Your digital footprint: a plain-English tour

6 min readReviewed October 2026 · Internet Safety Australia Editorial Team

In short

  1. Your footprint = what you post + what others post about you + what data brokers sell.
  2. Google yourself, check your social profiles logged out, and search data-breach lists.
  3. Shrink it: private accounts, old account deletion, fewer public details.

Your digital footprint is everything about you that can be found online: the obvious stuff you post, the stuff others post about you, and the invisible layer — data breaches, data brokers, public records, old accounts you forgot. Scammers read footprints for a living. Here’s how to read yours first.

The three layers

  • Active footprint: what you deliberately share — posts, photos, comments, reviews, profiles.
  • Passive footprint: what’s collected about you — location data, browsing tracking, app analytics, loyalty programs.
  • Inherited footprint: what’s leaked or published without your say — data breaches, tagged photos, mentions, public registers, data-broker listings.

The 10-minute footprint check

  1. Search yourself

    In a private browser window, search your full name, name + suburb, name + workplace, and your main usernames. Page one is what a scammer sees in thirty seconds.

  2. View your profiles as a stranger

    Log out or use “view as” features. Note what’s public: employer, family names, birthday, photos that reveal your street or routine.

  3. Check the breach lists

    haveibeenpwned.com shows which known breaches include your email. Each one is a list someone, somewhere, is using.

  4. Dig up old accounts

    Search your email inboxes for “welcome to” and “verify your account”. Every dormant account is stored personal data waiting for that service’s breach.

Shrinking it (without going off-grid)

  • Switch social accounts to private and prune public posts (our 20-minute lockdown guide walks through it)
  • Delete accounts you no longer use — each deletion deletes a future breach
  • Remove your birthdate, phone and address from public profiles
  • Ask friends and family before they post photos of you or your kids — and return the courtesy
  • Opt out of data-broker and people-search listings where they offer it
  • Use different usernames for public forums vs identifiable accounts

For parents: your child’s footprint started before they could type

Tagged photos, school newsletters, sports results — kids accumulate public histories early. Worth a family rule: no full names + school + photo combinations in public posts, and a conversation with teens about what their future selves (and employers) will find.

Common questions

Where to report this

Report to OAIC

Privacy complaints and data breaches involving your personal information held by organisations or agencies.

1300 363 992

Go to OAIC (leaves our site — official service)

Official sources for this guide

Reviewed October 2026 by Internet Safety Australia Editorial Team. Internet Safety Australia is independent and not a government website.