Low riskSocial Media Scams

Social Media Quiz Scam

This scam uses fun-looking quizzes and 'which X are you' posts to collect answers that double as security-question information, such as your first pet or the street you grew up on, which can later be used to guess passwords or account recovery answers.

Quick verdict

Risk level
Low risk
Scam type
Data harvesting scam
Main red flag
A playful quiz asks for details that match common security questions, like your first pet or birth town.
What to do first
Avoid answering, and treat these details as private information you would not share publicly.

What this scam usually looks like

This scam uses fun-looking quizzes and 'which X are you' posts to collect answers that double as security-question information, such as your first pet or the street you grew up on, which can later be used to guess passwords or account recovery answers.

Example message pattern

Example pattern — not a real report
Example pattern: 'Your stage name is your first pet's name plus the street you grew up on! Comment yours below and tag three friends to play along!'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

Red flags to watch for

  • A quiz asks for your first pet, mother's maiden name, first car, or childhood street
  • 'Generate your name' posts that combine personal facts into a fun result
  • Requests to comment your answers publicly or tag friends to spread the post
  • The same details quizzes ask for are commonly used as account security questions
  • The post is shared widely with no clear author or purpose beyond collecting answers

What to do

  • Avoid answering the quiz, especially in public comments
  • Delete any past comments where you shared these personal details
  • Review the security questions on your important accounts and update weak ones
  • Consider switching to stronger recovery options like an authenticator app

If you already clicked or replied

  • If a quiz link asked you to log in, do not enter your password and close the page
  • Change the password for any account where you may have entered your login
  • Update security questions that match answers you shared publicly
  • Watch your accounts for password reset emails or login alerts you did not request

What not to do

  • Do not post answers to common security questions in public comments
  • Do not grant a quiz app access to your full profile or friends list
  • Do not reuse the same security answers across multiple accounts

Similar scams

Medium risk Social Media

Fake Giveaway Scam

This scam tells you that you won a prize or giveaway, then asks for a fee, your login, or personal details to 'claim' it.
High risk Social Media

Instagram Verification Scam

This scam offers a blue verification badge or warns your account is at risk, then links to a fake login page that steals your password.
High risk Text Message

Two-Factor Code Text Scam

In this scam a fraudster triggers a genuine two-factor or one-time code to your phone, then poses as support staff or a contact to pressure you into reading it back so they can take over your account.

Frequently asked questions

How can a harmless quiz be a security risk?
Many quizzes ask for the same facts used as account security questions. Sharing them publicly can give someone enough information to guess your answers and attempt account recovery.
I already answered one of these. What should I do?
Delete the comment if you can, then review and change any account security questions that use that information. Switching to an authenticator app adds extra protection.
Are quiz apps that ask to connect to my profile safe?
Be cautious. Apps requesting broad access to your profile, posts, or friends list can collect more data than needed, so only connect apps you trust and review your app permissions regularly.
Why do scammers want this information?
Personal details like a first pet or childhood street are often used to reset passwords or bypass security questions, so collecting them at scale can help attackers target accounts.

Last reviewed: June 2026

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.