What strangers can learn from your political donation

Search your name in the Federal Election Commission's contribution database or on a campaign finance site such as OpenSecrets.org. If you have given enough to trigger federal disclosure requirements, you may be surprised by how much information can be connected to your donation. Depending on the record, that can include your name, mailing address, employer, occupation, donation amount and the political committee that received your money.

This is not a data breach. It is part of federal campaign finance disclosure law. And once information about you is public, it can potentially be combined with personal details found elsewhere online. Here's what your political donation can reveal, how that information can be used and what you can do to reduce the rest of your exposure.

Join us for a free CyberGuy LIVE class.

Kurt "CyberGuy" Knutsson shares practical ways to stay safer, smarter and more confident with technology. Explore classes on stopping spam, phone security, financial protection and using AI to get better healthcare. Each class is free, easy to follow and comes with a free printable checklist.

See the classes and register at CyberGuyLive.com.

DEM FUNDRAISING GIANT MAKES DAMNING ADMISSION AS GOP PROBES FOREIGN DONATION ALLEGATIONS

Federal campaigns generally must itemize an individual's contributions once that person's contributions exceed $200 in the aggregate during the applicable election cycle. For PACs and party committees, the reporting period can be based on the calendar year.

An itemized federal contribution can include:

One contribution may not seem revealing on its own. The privacy concern grows when those details can be connected with information already available through people-search sites, public records and data brokers.

Pay particular attention to your employer and occupation. A people-search profile may already include addresses and relatives, while a campaign finance record can add another verified detail about where you work or what you do. Want to see how much of your personal information is already exposed online? Use the free data exposure scanner at CyberGuy.com to check.

A campaign finance record alone provides only part of the picture. Other public sources and people-search sites may reveal much more. Sites such as Spokeo, Whitepages and BeenVerified can contain address histories, possible relatives, phone numbers, email addresses and property information. When information from several sources lines up, someone researching you may be able to build a much more detailed profile. Here is how those pieces can connect.

Names are rarely unique. An address, employer or occupation can help distinguish you from another person with the same name. That makes publicly available information useful for confirming that someone has found the right person.

Once someone has your name and location, people-search services may make it easier to identify possible relatives. Your political donation record does not normally list your family members. However, information found elsewhere can connect your identity with a spouse, adult child, parent or other relative. That can create opportunities for impersonation scams and highly personalized phishing attempts.

HOW HURRICANE CHARITY SCAMS TARGET YOU BEFORE STORMS HIT

Knowing where you work gives a scammer another detail that can make an email, text or phone call feel legitimate. A phishing message that mentions your actual employer or professional role can be more convincing than a generic message because it contains information you recognize. That is why limiting the amount of personal information available across the web can reduce what criminals have to work with.

Scammers frequently imitate legitimate organizations, charities and fundraising groups. The FTC warns that fraudulent fundraisers may use familiar-sounding names, pressure people to act quickly or falsely claim someone donated before. There is also an important legal protection around federal campaign finance data. Information copied or obtained from FEC reports about individual contributors cannot legally be sold or used to solicit political or charitable contributions or for commercial purposes. Criminals do not always follow the law, of course. Still, you should be suspicious of any unexpected fundraising request that seems unusually familiar with your personal history.

Using an online fundraising platform does not automatically make a federal contribution private. For earmarked federal contributions exceeding $200, reporting requirements can include the contributor's name, mailing address, employer, occupation, date and amount.

State campaign finance rules are different. Disclosure thresholds and the information made public vary by state, so a contribution that is not itemized under federal rules could still be subject to separate state reporting requirements.

This is an important limitation to understand. A data removal service generally cannot erase legally required government records such as federal campaign finance filings. That means an FEC filing is not something a removal service can simply delete. What these services can address is the personal information surrounding that public record.

Your campaign finance record might identify your name, mailing address, employer and occupation. Meanwhile, data brokers may have phone numbers, email addresses, relatives, previous addresses and other personal information. Removing those additional profiles can make it harder for someone to connect separate pieces of information about you into one detailed profile.

Some data removal services automatically send opt-out requests to data brokers and continue checking for information that may reappear. Others also offer custom removal requests for websites where your personal information is exposed. However, legal and technical restrictions still apply, especially when the information comes from government records or other sources that are required to remain public.

You can also submit removal requests yourself. The process takes more time, but reducing the amount of personal information spread across people-search sites and data brokers can make it harder for strangers or scammers to build a detailed profile about you. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.

Here are several steps I would take to see what information about you is already exposed.

Start by searching your name through the FEC's campaign finance records and OpenSecrets.org. Look closely at what information is associated with your contributions. Do not assume every result belongs to you, especially if you have a common name.

THE SECRET LIST THAT TELLS SCAMMERS YOU'RE AN EASY TARGET

For federal candidate committees, individual contributions generally become itemized once your aggregate contributions exceed $200 during an election cycle. PAC and party committee reporting rules can use a calendar-year threshold instead. Also remember that some committees voluntarily disclose contributions below the amount they are required to itemize.

State disclosure laws vary significantly. Your state may use a different reporting threshold or disclose different information than the federal system, so check the campaign finance database maintained by your state election authority.

Do not assume a message is legitimate because it mentions a candidate, organization or contribution you recognize. Instead of clicking a link in an unexpected email or text, visit the organization's official website independently. Also be wary of anyone pressuring you to donate immediately or asking you to pay through gift cards, wire transfers or cryptocurrency.

You may not be able to remove a legally required campaign finance filing, but you can reduce the additional information available about you through data brokers and people-search sites. You can submit opt-out requests yourself or use a data removal service to handle many of those requests for you. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.

I think the surprising part here is how much information can become connected to something as simple as making a political contribution. Federal disclosure rules can make your name, mailing address, employer, occupation and contribution history publicly available once you cross the reporting threshold. You cannot erase a legally required FEC filing with a data removal service, but you can reduce the other information surrounding it. I would search my own name, see what is visible and then work on removing the people-search and data broker profiles that make it easier for strangers or scammers to fill in the rest of the picture.

How much personal information do you think should become public when someone makes a political contribution? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Copyright 2026 CyberGuy.com. All rights reserved.

The best defense against high-tech AI scams is low-tech skepticism, expert warns

As artificial intelligence rapidly evolves to make financial scams hyperrealistic, cybersecurity experts warn that the best defense isn't sophisticated detection software.

It's good old-fashioned human skepticism.

While adversarial states like China and Russia leverage AI on a global scale, average Americans are most frequently targeted by cybercriminals looking to exploit personal vulnerabilities for a quick payout, according to cybersecurity expert Morgan Wright.

"Let's go back to around 1860, when Edgar Allan Poe wrote, ‘Believe nothing that you hear and only one half that you see,’" Wright told Fox News Digital. "That advice is as good now as it was 160 years ago."

AI VOICE SCAMS CAN CLONE YOUR FAMILY’S VOICE

AI technology has allowed bad actors to automate and scale personalized fraud schemes against everyday citizens. Generative tools eliminate language barriers, draft convincing phishing texts and generate hyperrealistic voice and video clones.

By capturing just a few seconds of audio — often scraped from social media — fraudsters can convincingly replicate the voice of a family member. Wright pointed to the case of Deborah Del Mastro, a California mother who lost thousands of dollars after scammers used AI to clone her daughter’s voice to stage a terrifying kidnapping hoax.

THE FAMILY GROUP CHAT IS A GOLDMINE FOR SCAMMERS

"It's my daughter's voice," Del Mastro recalled during an interview on The CyberGuy Report podcast. "And she's having a panic attack."

Convinced her daughter was in immediate danger, Del Mastro transferred more than $5,000 to the scammers before realizing she had been swindled.

FRAUD EXPERT WARNS AI IS HELPING CRIMINALS OUTPACE THE GOVERNMENT: 'DON'T HAVE THE RIGHT TOOLS'

"When you can fool a mother, that's how good these things are getting," Wright said of the voice-cloning technology. "What they do is use manipulation, influence and deceit. The more urgent I can make it sound, the more you're going to lower your guard and take action."

CLICK HERE FOR MORE U.S. NEWS

Wright, who has trained federal, state and local law enforcement in behavioral analysis, interviewing and interrogation — including teams at the FBI and the National Security Agency — emphasized that every scam relies on basic psychological triggers.

His primary advice for anyone on the receiving end of a suspicious call or message is to pause before reacting.

"We're not storming the beaches at Normandy; you're not going to get arrested," Wright said. "No law enforcement agency sends you an unsolicited text saying you're about to get arrested."

While AI platforms roll out updated security features, scammers continuously find ways around them, making software-based detection a constant moving target.

"We hear about all the different models from xAI, Anthropic, OpenAI and Gemini. They change models constantly," Wright said. 

"So, when the model changes, how effective is [detection software]? We don't know because this stuff is moving so fast. What you see today will be drastically different tomorrow."

Your phone says it's updated. Check other settings, too

Most of us have done it. A software update pops up when we're busy, so we swipe it away and figure we'll deal with it later. Then later turns into tomorrow, and suddenly that update has been sitting there much longer than we planned. There's another wrinkle. Even when your phone appears to be running the latest software, there may be another security update or protection worth checking.

Apple, Google and Samsung all have ways to get security fixes onto your phone between larger software releases. However, they handle those protections differently. If you use an iPhone running iOS 27, a Google Pixel running Android 17 or a Samsung Galaxy running the latest software available for your model, there are a few places I would check right now.

Join us for a free CyberGuy LIVE class.

Kurt "CyberGuy" Knutsson shares practical ways to stay safer, smarter and more confident with technology. Explore classes on stopping spam, phone security, financial protection and using AI to get better healthcare. Each class is free, easy to follow and comes with a free printable checklist.

See the classes and register at CyberGuyLive.com

TURN ON LOST-PHONE SETTINGS BEFORE YOU NEED THEM

Apple has a feature called Background Security Improvements that can deliver certain security protections without waiting for another complete iOS update. Apple says these lightweight releases can protect Safari, WebKit and other system libraries. That gives Apple another way to address certain vulnerabilities between larger software releases. iOS 27 is Apple's latest public iPhone software, so make sure your compatible iPhone is running it before checking the security setting below.

If your iPhone says iOS 27 and no newer update appears, you're current at the time you check.

Once your iPhone is updated:

Your iPhone can then automatically install eligible Background Security Improvements as Apple releases them. These smaller protections do not replace regular iOS updates. You should still install full updates because they can contain additional security patches, bug fixes and broader changes throughout the operating system.

HOW TO FIND COMPROMISED PASSWORDS ON IPHONE AND ANDROID

Samsung Galaxy phones run Android, but Samsung adds its One UI software on top. Because of that, Galaxy owners often see different menus than Pixel owners. As of today, One UI 9 is Samsung's latest interface. Samsung began its U.S. rollout on Sept. 16 with the Galaxy S26 Ultra, S26+ and S26 after One UI 9 debuted on its newest foldable phones. However, you should not assume that every Galaxy phone eligible for One UI 9 has received it yet. Samsung rolls updates out by device, carrier and region. Whether your Galaxy has One UI 9 already or is still waiting for it, you can check directly from Settings.

On a current Galaxy phone:

Depending on your Galaxy model or carrier, Samsung says you may instead see Download and install, System updates or Check for software updates. If an update appears, follow the on-screen instructions to install it. You can also check which version your phone is running by going to:

That screen shows details about the software currently installed on your Galaxy.

Galaxy phones also use Google's underlying system services, so there is one more update worth checking.

If you have a Samsung Galaxy, you may be running the latest Samsung software available for your phone and still have a separate Google Play system update waiting to install.

Pixel owners will not find Apple's Background Security Improvements setting. Google handles the job differently. As of today, supported Pixel phones are running Android 17. Google began rolling out its September 2026 Pixel software update on Sept. 15, while the October 2026 Android Security Bulletin was published Oct. 5. Pixel phones receive regular Android software updates that can include security fixes. They also receive Google Play system updates, which let Google update certain parts of Android separately from a complete operating system release. That means Pixel owners should check two areas rather than assuming one update screen tells the whole story.

On a Pixel running Android 17:

Google says supported Pixel devices running Android 17 are receiving the September 2026 software update in phases. Your exact availability can depend on the device and carrier. Pixel phones can also install downloaded Android updates in the background. However, you may need to restart the phone before the update becomes active.

You should check this separately:

If an update is available, follow the prompts to install it. The Google Play system update can be easy to overlook because the name sounds like an update for the Play Store. It actually helps Google update underlying parts of Android and its system services.

I'm a fan of automatic updates because they remove one more thing you have to remember. Still, I wouldn't turn them on and completely forget about them. An update might need your phone to restart before the protection becomes active. Your device may also be waiting for Wi-Fi, sufficient battery power or the next stage of a phased rollout. That's why I like checking the update screens every so often. If you see an update waiting, finish it. A downloaded security fix cannot fully protect you if your phone still needs a restart before activating it.

Your phone can keep working long after the manufacturer stops supporting it. That's where things can get tricky. If a phone no longer receives security updates, newly discovered vulnerabilities may remain unpatched. That can leave an otherwise usable device exposed to security problems that newer phones have already fixed. Apple supports iPhones with software and security updates for years, but older models eventually stop receiving the newest iOS releases. If you're wondering whether your current iPhone has reached that point, check out our guide on whether it's time to upgrade to a new iPhone at CyberGuy.com.

Google currently provides seven years of operating system and security updates for Pixel 8 and newer phones, measured from when each device first became available in the U.S. Samsung also provides extended software support for many newer Galaxy devices, although the support period depends on the model. If your iPhone, Pixel or Samsung Galaxy no longer receives security updates, that should become part of the decision about when it's time to replace it. If you're thinking about upgrading your Pixel or Samsung Galaxy, take a look at our Top Android phones of 2026 for our current picks at cyberguy.com .

Updates close known security holes, but criminals have plenty of other ways to go after your phone. Phishing texts can trick you into handing over passwords. Fake websites can imitate Apple, Google or a financial institution. Malicious apps can also create problems if you install software from an untrusted source.

That's why I would combine current software with a strong device passcode, biometric protection and the theft-protection features available on your phone. I would also use a password manager to create and store strong, unique passwords for your accounts. Strong antivirus software can add another layer by helping detect malicious links, risky downloads and other threats before they cause trouble. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.

I like security protections that can do some of the work for me. I'm not going to spend every morning checking whether Apple patched WebKit or whether Google released another system update, and I don't expect you to either. Still, seeing "up to date" on one screen does not always mean you've checked every security layer your phone uses. On my iPhone, I'd look at Background Security Improvements and Software Update. If you're carrying a Pixel, check both the Android update and Google Play system update. Galaxy owners should check Samsung's software update and Google's system update too. Then finish the job when your phone asks for a restart. That extra minute could be what finally activates the protection you thought was already there.

Have you ever checked your phone's update screen and found a security update waiting that you didn't know about? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Copyright 2026 CyberGuy.com. All rights reserved.