“I have nothing to hide” assumes the world is fair, rules never change, and your data will never be used against you.

History—and current events—prove otherwise.

This page documents real incidents where lack of privacy caused tangible harm. Every one of them happened to real people.


Physical Security Threats

Bitcoin and Cryptocurrency Holders

When you publicly hold valuable assets, you become a target.

The documented attacks are sobering:

Jameson Lopp’s Physical Bitcoin Attacks repository documents hundreds of physical attacks against cryptocurrency holders, including:

  • Home invasions targeting known crypto holders
  • Kidnappings with ransom demanded in Bitcoin
  • "$5 wrench attacks" — physical coercion to extract private keys
  • Murders during robbery attempts

Selected incidents:

DateLocationWhat Happened
Feb 2015New York, USABitcoin trader robbed of $12,000 at gunpoint
Mar 2017Dubai, UAE3 Indian Bitcoin traders kidnapped by men posing as police, robbed of 25 BTC
Feb 2019Drouwenerveen, NetherlandsBitcoin trader tortured with a drill in front of his daughter
May 2019Oslo, NorwayBitcoin millionaire escapes an armed home invader
Jun 2019Jaipur, IndiaCrypto traders abducted and tortured, 80 BTC ransom demanded
Feb 2022Pune, India8 people, including a police officer, arrested for kidnapping a man to extort Bitcoin
Aug 2025Oslo, NorwayFamily tied up in their home and threatened until they handed over crypto

The pattern: Attackers identify targets through:

  • Social media posts showing wealth
  • Public blockchain analysis
  • Conference attendance
  • LinkedIn profiles mentioning crypto
  • Dating apps where people mention crypto

The lesson: Financial privacy is about not becoming a target.

Executive and Celebrity Targeting

High-profile individuals face similar risks when their information leaks:

  • Home addresses sold by data brokers
  • Travel schedules exposed through metadata
  • Family members identified and targeted
  • Physical security compromised by digital trails

Financial Control & Debanking

Canadian Trucker Convoy (2022)

When Canadian truckers protested COVID mandates in February 2022, the government invoked the Emergencies Act and:

  • Froze bank accounts of protesters and supporters
  • Blacklisted donors who gave as little as $20
  • Seized funds from crowdfunding platforms
  • Threatened financial institutions into compliance

Key facts:

  • Over 200 bank accounts frozen without court orders
  • Donors to legal protests had accounts locked
  • No criminal charges required—mere association was enough
  • Banks complied without legal proceedings

One donor’s story: A woman who donated $50 to a legal protest before it was declared illegal had her bank account frozen. She was a supporter exercising what she believed was free speech.

The precedent: Your government can cut off your access to your own money for political reasons, without charging you with a crime.

Operation Choke Point (USA)

Between 2013-2017, the U.S. Department of Justice pressured banks to close accounts of legal but “high-risk” businesses:

  • Gun dealers (legal businesses)
  • Payday lenders
  • Coin dealers
  • Adult entertainment
  • Tobacco sales

Banks were told these industries posed “reputational risk.” No laws were broken by the businesses—they were simply deemed undesirable.

Result: Legal businesses lost access to banking without due process.

PayPal, Stripe, and Platform Debanking

Tech payment platforms regularly cut off users for:

  • Political speech (varies by platform politics)
  • Legal cannabis businesses
  • Cryptocurrency businesses
  • Adult content creators
  • Journalists covering controversial topics

You get no explanation and no appeal.

When your financial life depends on private companies that can cut you off arbitrarily, privacy and alternatives matter.


Social Credit Systems

China’s Social Credit System

China has no single national social credit score, despite the popular story. It runs several linked systems that track people and restrict them.

Draws on:

  • Court judgments and unpaid debts
  • Business, tax and regulatory records
  • Local records in pilot cities, some of which ran their own points systems

Punishes:

  • Ignoring court orders, mostly over unpaid debts (the court blacklist)
  • Jaywalking, in some cities (facial-recognition cameras)

Consequences of being blacklisted:

  • Banned from flights and high-speed trains
  • Children kept out of expensive private schools
  • Barred from luxury hotels
  • Restricted from certain jobs
  • Publicly listed as “untrustworthy”

By 2019: Chinese authorities reported that the court blacklist had blocked plane-ticket purchases about 27 million times and high-speed rail tickets about 6 million times. Those are counts of blocked purchases, so one person can appear many times. The list covers people who ignored court orders, mostly over unpaid debts.

The warning: Private companies score people too; Alibaba’s Sesame Credit rates its own customers. Every data point collected about you can become a scoring input. What’s collected for “convenience” today becomes a control mechanism tomorrow.

Emerging Western Equivalents

While not as centralized, Western countries are building similar systems:

  • Insurance scoring based on purchasing data
  • Employment screening using social media
  • Rental applications checking online presence
  • Credit scoring incorporating non-financial data
  • Government “risk scores” for travelers

The infrastructure exists. The political will is the only thing preventing full implementation.


Corporate Surveillance & Price Discrimination

Dynamic Pricing (Delta, Airlines, Retail)

Companies use your data to charge you more:

Delta Airlines is rolling out AI-driven “personalized” pricing that critics call surveillance pricing (under U.S. Senate and state-AG scrutiny as of 2025; Delta denies pricing on individuals’ personal data). Reporting and testing suggest prices can vary by signals like:

  • Browsing history
  • Device type
  • Location
  • Previous purchases
  • Logged-in status

The practice is widespread:

  • Hotels charge more when you search from expensive devices
  • An Uber researcher noted riders with low phone batteries were more willing to accept surge pricing — though Uber denies using battery level in its algorithm, and the claim remains unverified
  • Amazon changes prices millions of times per day based on user profiles
  • Insurance companies price based on purchasing habits

How they know:

  • Cookies track your searches across sites
  • Device fingerprinting identifies you without cookies
  • Data brokers sell purchase history
  • Location data reveals income level

The result: Surveillance capitalism means the more they know about you, the more they can extract from you.

Data Broker Profiles

Companies you’ve never heard of know everything about you:

What they collect:

  • Every purchase you make
  • Every website you visit
  • Your location history
  • Your health conditions (from purchases)
  • Your political views (from browsing)
  • Your relationships (from communications metadata)
  • Your financial status (from spending patterns)

Who buys this data:

  • Advertisers
  • Insurance companies
  • Employers
  • Landlords
  • Political campaigns
  • Law enforcement (without warrants)
  • Stalkers (through data broker access)

Real incident: A data broker marketed a list of “rape victims” to advertisers. Another sold lists of people with specific medical conditions. Another sold location data that tracked people visiting abortion clinics.


Government Overreach

Mass Surveillance Programs

NSA PRISM (revealed 2013):

  • Collected emails, chats, and files from major tech companies
  • No individual warrants required
  • Operated in secret for years
  • Affected millions of innocent people

NSA metadata collection:

  • Collected phone records of all Americans
  • “Just metadata” revealed intimate details:
    • Who you call at 2 AM
    • How long you talk to your therapist
    • Which AA meeting you attend
    • Who your doctor is

The insight: Metadata alone reveals relationships, habits, health conditions, and vulnerabilities. Content isn’t necessary for surveillance to be invasive.

Authoritarian Use of Data

Data collected in democracies can be used by future authoritarian governments:

Historical examples:

  • Netherlands’ detailed census data helped Nazis identify Jews during WWII
  • Census data was used to intern Japanese-Americans in the US
  • East German Stasi used phone records for political persecution

Current examples:

  • China uses facial recognition to track Uyghurs
  • Iran uses social media to identify protesters
  • Russia uses cell phone data to track dissidents

The risk: Data collected today persists. Governments change. What’s “nothing to hide” under one regime becomes evidence under another.

Warrant Exceptions and Data Purchases

Law enforcement increasingly bypasses warrant requirements:

  • Purchasing location data from brokers instead of getting warrants
  • Geofence warrants that identify everyone in an area
  • Third-party doctrine — data you give companies isn’t “yours”
  • Parallel construction — using surveillance to find leads, then hiding the source

Real case: Fog Data Science sold police access to location histories from about 250 million phones (AP and EFF, 2022).


Identity Theft & Data Breaches

The Endless Breach Cycle

Your data has already been stolen. Multiple times.

Major breaches exposing sensitive data:

YearCompanyRecords ExposedWhat Was Stolen
2013Yahoo3 billionNames, emails, passwords, security questions
2017Equifax147 millionSSN, birth dates, addresses, driver’s licenses
2019Capital One100 millionSSN, bank account numbers, credit scores
2021Facebook533 millionPhone numbers, emails, locations, bios
2023MOVEit60+ millionVaried — multiple organizations compromised
2024Change Healthcare100+ millionMedical records, SSN, insurance data

The reality: If you’ve used the internet, your data has been breached. Check your exposure.

KYC Data as Attack Vector

“Know Your Customer” verification creates targets:

What KYC collects:

  • Government ID photos
  • Selfies with ID
  • Proof of address
  • Social Security Numbers
  • Bank account information

What criminals do with it:

  • SIM swap attacks (steal your phone number)
  • Bank account takeovers
  • Synthetic identity creation
  • Targeted phishing with your real data
  • Physical attacks (they know where you live)

The irony: KYC, meant to prevent fraud, creates the perfect dataset for fraud.


What You Can Do

Privacy protection isn’t about having something to hide. It’s about:

  • Not becoming a target for criminals
  • Maintaining financial autonomy
  • Protecting yourself from future political changes
  • Preventing price discrimination
  • Keeping intimate details intimate
  • Maintaining the presumption of innocence

Start Here

  1. Week 1: Why Privacy Matters — Understand your personal threat model
  2. Privacy 101 Course — 12-week practical guide
  3. Resources — Tools and further reading

Quick Wins

  • Use a password manager (Week 4)
  • Switch to encrypted messaging (Week 6)
  • Use email aliases for signups (Week 5)
  • Enable 2FA on important accounts (Week 10)
  • Use a VPN for general browsing (Week 7)

Further Reading

Physical Security

Financial Privacy

Surveillance & Rights

News & Updates


Every example here is documented, and the harms are real. Protecting your privacy is ordinary prudence.

← Back to Privacy 101