Learn

284 articlesCategory: All
Basics

How to Think About Identification Risk

Identification risk is not determined only by whether you wrote your real name.

Face photos, places someone routinely goes, posting times, writing style, occupation, family structure, old IDs, and file information. When these combine, they narrow the path toward identifying a person.

When thinking about anonymity, look not only at "is this personal information," but also at "how much does this narrow the candidates?"

Identification is not addition of information. It is narrowing.

Direct and Indirect Information

Information that connects to identity includes direct information and indirect information.

Direct information points closely to the person by itself, such as a real name, address, phone number, or face photo.

Indirect information is weak on its own, but becomes strong when combined.

TypeExample
Direct informationReal name, address, phone number, face photo, workplace
Indirect informationRegion, job type, posting time, hobbies, writing style, background

Indirect information is easy to overlook in anonymity.

Even if the person thinks it is an ordinary story, from the outside it becomes material for narrowing candidates.

Information That Narrows Candidates

In identification, "information that reduces candidates" is more important than "information that reveals everything at once."

When region, occupation, age range, daily schedule, specialized knowledge, and family structure overlap, the target becomes narrower.

InformationWhat it narrows
RegionResidential area, activity area
Job typeWorkplace candidates, specialty area
Posting timeDaily rhythm, time zone, work pattern
Family structureAge range, living environment
Specialized termsIndustry, department, experience

In anonymity, think about how much the candidate pool is reduced.

Narrowing Happens in Stages

Identification often proceeds in stages.

First the region becomes visible. Next the occupation becomes visible. Then posting time, family structure, specialized terms, and past accounts overlap. Finally, the candidates are reduced to a few people.

StageVisible informationChange in candidates
1Country or regionNarrowed to a broad range
2Occupation or schoolNarrowed to a related group
3Time and daily rhythmNarrowed to people with that routine
4Personal experiences and expertiseNarrowed to people who could know it
5Past posts and imagesMoves closer to a specific person

When you think through this flow, you can see why "there is no real name, so it is safe" is a weak judgment.

In anonymity, look at which stage of narrowing the current post can be used for.

Combinations Become Strong

Even if each piece of information is weak, it becomes strong when combined.

CombinationWhat becomes known
Region + job typeWorkplace candidates are narrowed
Face photo + old accountConnects to real names or past posts
Posting time + activity locationOn-site participation or routine places become visible
Writing style + past postsIt starts to look like the same writer
Family information + regionNarrowing can also happen through people other than the person

Do not look only at "this alone is fine." Look at "what can this combine with?"

Identification Can Happen Through Other People

Identification does not happen only through the person's own information.

Information about family, colleagues, friends, school, workplace, sources, or people seeking advice can narrow the path toward identifying the person.

Surrounding informationWhy it moves closer to the personCaution
Family structureAge range and routine places become visibleDo not involve family
Colleague's roleWorkplace or department becomes visibleInsiders may understand it
Friend's photoPlaces where you are together become visibleWatch for image reuse
Source's positionPeople who could have contact are narrowedConsider where to seek advice in high-risk situations
School or club activityA small group becomes visibleProtect minors and people involved

In anonymity, do not only hide your own name. Also check whether people around you become clues.

You may think you are anonymous, but people connected to you may become visible first.

Meaning Changes Depending on Who Looks

The same information changes meaning depending on who sees it.

Information that an ordinary reader does not understand may be clear to people at work, people at school, people in the area, or family members.

ObserverInformation that has meaning
People at workWork content, meetings, specialized terms, work hours
People at schoolEvents, uniforms, region, friendships
Family and friendsPhrases, life patterns, photo backgrounds
Local peopleShops, stations, scenery, events
AttackersPast posts, images, search results

In anonymity, do not ask "would nobody understand this?" Ask "what would a dangerous observer understand if they saw it?"

Think About Candidate Count Before Publishing

When thinking about identification risk, imagine the number of candidates.

How many people know this information? How many people in this region have this occupation? How many people participated in this event? If an insider read this text, how many people could it be narrowed to?

Question to checkMeaning
How many people know this experience?The fewer people know it, the more dangerous it is
Is this role held by only one person?The role identifies the person
Is this combination of region and occupation narrow?Candidates suddenly decrease
How many people were involved at this time?It can be checked against the timeline
Who remains when combined with past posts?Look at long-term correlation

If the candidates are reduced to a few people, that is a high risk.

Even without a real name, it cannot be called anonymous if people involved can say "that is this person."

Weight Changes by Situation

The weight of the same information changes by situation.

For a hobby comment, a broad region name may not be a major problem. On the other hand, in workplace trouble, a school consultation, whistleblowing, or source protection, the same region name can become a strong clue that narrows candidates.

Identification risk changes not only by the information itself, but also by who reads it, what they know, and how motivated they are to look.

Rewrite Toward Lower Risk

To lower identification risk, rewrite in a direction that increases candidates.

Broaden a region that is too specific. Change an exact date to "a certain period." Generalize a role. Replace specialized terms with explanatory wording. Do not give too much detail about the order of events.

Original informationLower-risk expressionReason
Workplace near XX StationA workplaceBroadens routine places
Meeting on June 12, 2026A meeting during a certain periodWeakens matching against records
Hiring managerA role involved in HRDoes not narrow to one person
Specific project nameA projectReduces clues for insiders
Family members' ages and numberHas familyDoes not involve people around you

This is different from lying.

It is the work of preserving the meaning readers need while lowering the precision that moves closer to the person and people involved.

Summary

Identification risk is not determined only by whether you wrote your real name.

Look at both direct information and indirect information.

Region, job type, posting time, family structure, writing style, and background become information that narrows candidates.

In addition, the meaning of information changes depending on who sees it.

When thinking about anonymity, it is important to check "what can this combine with?" and "who would find this meaningful?"

Also think about how many people the candidates are reduced to.

Checking anonymity is not the work of deleting names. It is the work of reducing information that can be used for narrowing.

Related tools

OSINT directory

OSINT Framework

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://osintframework.com/

Open external site

Related articles