“Which 90s cartoon character are you?” “What does your first car and street name say about you?” These playful social media quizzes feel harmless, even fun to share. But some are quietly built to harvest the very details that protect your accounts. Our GetMyPassword team explains how online quiz data-harvesting scams work and how to keep your information safe.
How the scam works
A “fun” quiz or viral post asks you to reveal small personal facts — your first pet, the street you grew up on, your mother’s maiden name, your first car, your favorite teacher. Notice anything? Those are classic security question answers. By packaging them as entertainment, a scammer collects the keys to your account recovery without you realizing it. Other versions ask you to log in or grant an app permission to “see your results,” handing over access or data in the process.
Why it is so effective
The quiz format disarms you. It feels social and lighthearted, your friends are doing it, and each answer seems trivial on its own. But assembled together, those trivia answers can be enough to reset a password or pass an identity check. Some quizzes also feed broad data harvesting — building profiles for targeted scams — or trick you into approving an app that can post as you or read your information. The fun is real; so is the data collection behind it.
Red flags to watch for
- Questions that mirror security questions — first pet, street, school, mother’s maiden name.
- A demand to log in or connect an app just to view your “results.”
- Requests for surprisingly specific personal details for a casual quiz.
- Unknown sources — quizzes from pages or apps you do not recognize.
- Encouragement to share widely, spreading the harvest further.
A quiz that asks for your first pet and the street you grew up on is not curious about you — it is collecting the answers that reset your passwords. The fun is the wrapping; your data is the gift inside.
How to protect yourself
Do not answer quiz questions that match your security questions, and never log in or grant app permissions just to see results. Better still, make the harvest worthless: treat security questions like passwords — give them random, made-up answers no quiz could guess, and store those answers in a password manager. Then lock your accounts with a unique password from our password generator and two-factor authentication, so even leaked trivia cannot unlock anything.
Frequently asked questions
How do quiz scams steal my information?
They disguise security-question answers — first pet, street, school, mother’s maiden name — as fun quiz questions, collecting the details needed to reset passwords. Some also make you log in or connect an app to “see results,” handing over access or data.
Are social media quizzes dangerous?
Many are harmless, but some are built to harvest personal data or trick you into granting app permissions. Be cautious with any quiz that asks for security-question style details or requires you to log in to view results.
How do I make my security questions safe?
Treat them like passwords: use random, made-up answers no quiz or search could guess, and store them in a password manager. Combined with a unique password and two-factor authentication, leaked trivia then cannot unlock your accounts.