Fake Social Media Profiles: A Growing Threat to UK National Security
A groundbreaking study conducted by the University of Portsmouth has revealed the alarming extent to which fake social media profiles, particularly on LinkedIn, are being used to orchestrate security breaches against professionals in the UK. The research, published in the Security Journal, highlights the vulnerability of individuals and organizations to economic espionage, the illicit practice of stealing confidential information for financial or malicious purposes. The study surveyed 2,000 professionals who utilize social media for career purposes, focusing on their awareness of and resilience against such threats. The findings underscore a pressing need for increased vigilance and proactive measures to counter this escalating cybersecurity risk.
The study’s findings paint a worrisome picture of the current cybersecurity landscape. A significant portion of UK professionals, approximately 22%, lack a clear understanding of what constitutes confidential information, while 17% underestimate the importance of protecting trade secrets. With an estimated 12.8 million professionals in the UK, this translates to a staggering 2.5 million individuals who may be unwittingly jeopardizing sensitive information. This lack of awareness makes them prime targets for hostile actors employing deceptive tactics.
The pervasiveness of fake social media profiles is particularly concerning. A staggering 80% of survey participants reported encountering suspicious or fake accounts, and 77% admitted to receiving connection requests from strangers. These fake profiles are often meticulously crafted to appear genuine, enabling malicious actors to build rapport and gain the trust of their targets. This insidious approach allows them to subtly extract confidential information or manipulate individuals into clicking on malicious links, potentially compromising entire organizations.
Professor Mark Button, the lead author of the study and Co-Director of the Center for Cybercrime and Economic Crime at the University of Portsmouth, emphasizes the widespread nature of this threat. "Espionage might sound like something that only happens to governments, but everyone is a potential target," he warns. "Once a hostile actor gets a link, they can build a relationship that creates the potential risk of serious harm." He stresses that platforms like LinkedIn, due to their professional nature and detailed user profiles, are particularly attractive to those seeking to exploit vulnerabilities. Even seemingly innocuous connections can be exploited, leading to devastating cyberattacks.
The study also reveals a concerning lack of confidence among professionals in identifying fake profiles. More than half of the respondents expressed uncertainty in their ability to spot these deceptive accounts, making them easy prey for malicious actors. However, the research did offer a glimmer of hope, indicating that individuals who prioritize connecting with like-minded individuals are less susceptible to accepting connection requests from suspicious profiles, thereby reducing their risk.
The research emphasizes the urgent need for comprehensive employee training, particularly for those with access to sensitive data. It also calls upon security agencies to enhance their efforts in educating the public about the risks associated with fake social media profiles. Furthermore, the study advocates for stricter regulations to compel social media companies to take more decisive action against these fraudulent accounts. The current self-policing approach, the study argues, is demonstrably ineffective, leaving a quarter of UK professionals ill-prepared to navigate the increasingly complex cybersecurity landscape.
Professor Button underscores the crucial role of both training and platform accountability. "Training is essential, and tech companies must take more responsibility for stopping fake accounts," he asserts. "With all the technology available today, platforms should be doing more to detect fake accounts, but many still prioritize user numbers over user safety." This sentiment is echoed by the sheer volume of fake profiles reported – LinkedIn’s 2025 Digital Services Act Transparency Report highlighted over 156,000 reported fake profiles, a testament to the scale of the problem. This reinforces previous reports from MI5, the UK’s Security Service, which revealed that over 20,000 individuals in the UK were targeted on LinkedIn by fake recruiters linked to the Chinese government, highlighting the serious national security implications of this issue. The research serves as a wake-up call, urging individuals, organizations, and social media platforms to take proactive steps to mitigate the risks posed by fake social media profiles and safeguard sensitive information in the digital age. A multi-pronged approach, encompassing education, enhanced security measures, and greater platform accountability, is crucial to combating this evolving threat and protecting the UK’s national security interests.