The hidden danger behind everyday reviews

Leaving a quick comment about a restaurant, hotel or online shop feels harmless. You help other shoppers and give the business a boost. What most people don’t realize is that those short texts can betray more than taste preferences – they can expose the very people you trust.

From Yelp data to a startling discovery

A research team from the University of Texas examined public Yelp data from 4,299 users in Louisiana and Pennsylvania. Because Yelp makes both reviews and contact lists visible, the scientists could first predict who was likely connected based solely on review behaviour, then compare those predictions with the actual friend lists.

The outcome was eye‑opening. Using only patterns in the reviews, the algorithm correctly identified almost half of the real social ties. When the acceptable error margin was widened to 20 %, the detection rate climbed to 63 % of genuine connections. In other words, a simple set of public comments can reconstruct a substantial portion of a user’s private network.

Why review length matters

One of the strongest signals turned out to be the length of the written feedback. Friends tend to mirror each other’s style: if one habitually writes long, detailed reviews, the other often follows suit, or they may adopt a complementary pattern where one writes extensively while the other keeps it brief. These synchronized habits act like behavioural fingerprints, allowing a malicious actor to map who is likely linked to whom.

Turning social clues into spear‑phishing gold

Once a scammer has inferred a victim’s circle, they can craft spear‑phishing messages that appear to come from a trusted friend. Because the recipient sees a familiar name, the likelihood of clicking a malicious link or divulging credentials spikes dramatically. The study highlighted the financial upside: a campaign of 500 phishing attempts could yield a 109 % return, while scaling to 10,000 attempts could push the profit margin beyond 1,000 %.

Current privacy safeguards fall short

Existing regulations such as the EU’s General Data Protection Regulation (GDPR) do not specifically address this indirect leakage. Platforms are not required to hide friend lists, yet the behavioural data they expose can still betray relationships. Adding “noise” – random variations in displayed data – is one proposed mitigation, but it remains an emerging concept.

What you can do today

Being aware is the first line of defence. Vary the length and tone of your reviews, avoid posting them from the same account you use for personal messaging, and consider limiting the visibility of your activity on review sites. When you receive an unexpected message that claims to be from a friend, verify it through a separate channel before responding.

Understanding that even innocuous online actions can be weaponised helps you protect not only yourself but also the people in your network.

Source: https://scientias.nl/jouw-online-reviews-helpen-scammers-om-je-vrienden-te-vinden/