I was wondering, since people give their phone numbers to strangers, for whatever reason, could it be possible if that person, who has only your phone number and maybe a first name to somehow do some sort of idenity theft? Or what could actually happen if they know only your phone number and first name, other than prank calling?
If you gave Facebook that number, someone could use it to find your Facebook user name. People tend to use their full name as a Facebook user name - also because Facebook wants so:
The name you use should be the name your friends call you in everyday life and that our acceptable identification forms would show.
As such, a phone number may be enough to get your full name, which could be partially confirmed by an attacker who also knows your name.
At that point, the attacker would know your full name and phone number.
What can the attacker do? It depends.
If you're worried about online fraud - setting up a fake account with your name - it's a real threat.
Financial frauds - those involving money - are usually more difficult, since they often require additional data (SSN, credit card number,...) and resources (forged documents, cloned credit cards, and so on).
As usual, you should think about what you're dealing with.
- How many people know your phone number and first name?
- Do you think you can trust them? I'm not talking about "saving-your-life" trust. A plain "not-doing-evil" trust is enough.
- Does any website, including social networks, know your phone number and first name?
- Do you think you can trust them, at least to not directly sell your data to scammers and criminals?
- Did something happen that could make you the target of an attack by resourceful people (say, criminals)? Consider revenge and other factors.
- Consider how would a fake account affect your digital presence, both from a personal and a professional standpoint. If you are a representative of a well-known company, for example, a fake account could be more dangerous than if you were, say, a waiter.
- Do your bank and credit card companies have well-defined policies, requiring identification, for using your bank and credit card accounts?
I dont think that they could go away and perform identity theft with no further information but they could use it to get some more information about you like A.Darwin said but there is also the attack vector of phoning you and asking you for more info, they know your name which will give them slightly more chance to convince you that they are who they say they are.
why not see how easy you are to find with your phone number, put it into google, you will get a few results saying "this is a phone number" but you shouldn't get anything that gives any more info than that. There are private lists of personal details out there but you would need to spend money to find out if you are in them as there isnt a phone version of https://haveibeenpwned.com/
As a privacy consultant; with a last name and general location of where the person lived, I have been able to identify individuals, where they live and lived in the past, email addresses, phone numbers, Facebook and every other social media account and even their spouses name, and where and when they were married as well as place of employment. It all depends upon how much of yourself already exists publicly on the internet and how much time someone is willing to spend searching...and if you would specifically be a target. The amount of time it could take with that little info is not worth it to choose someone at random.