“I have nothing to hide” assumes the world is fair, rules never change, and your data will never be used against you.
History—and current events—prove otherwise.
This page documents real incidents where lack of privacy caused tangible harm. Every one of them happened to real people.
Physical Security Threats
Bitcoin and Cryptocurrency Holders
When you publicly hold valuable assets, you become a target.
The documented attacks are sobering:
Jameson Lopp’s Physical Bitcoin Attacks repository documents hundreds of physical attacks against cryptocurrency holders, including:
- Home invasions targeting known crypto holders
- Kidnappings with ransom demanded in Bitcoin
- "$5 wrench attacks" — physical coercion to extract private keys
- Murders during robbery attempts
Selected incidents:
| Date | Location | What Happened |
|---|---|---|
| Feb 2015 | New York, USA | Bitcoin trader robbed of $12,000 at gunpoint |
| Mar 2017 | Dubai, UAE | 3 Indian Bitcoin traders kidnapped by men posing as police, robbed of 25 BTC |
| Feb 2019 | Drouwenerveen, Netherlands | Bitcoin trader tortured with a drill in front of his daughter |
| May 2019 | Oslo, Norway | Bitcoin millionaire escapes an armed home invader |
| Jun 2019 | Jaipur, India | Crypto traders abducted and tortured, 80 BTC ransom demanded |
| Feb 2022 | Pune, India | 8 people, including a police officer, arrested for kidnapping a man to extort Bitcoin |
| Aug 2025 | Oslo, Norway | Family tied up in their home and threatened until they handed over crypto |
The pattern: Attackers identify targets through:
- Social media posts showing wealth
- Public blockchain analysis
- Conference attendance
- LinkedIn profiles mentioning crypto
- Dating apps where people mention crypto
The lesson: Financial privacy is about not becoming a target.
Executive and Celebrity Targeting
High-profile individuals face similar risks when their information leaks:
- Home addresses sold by data brokers
- Travel schedules exposed through metadata
- Family members identified and targeted
- Physical security compromised by digital trails
Financial Control & Debanking
Canadian Trucker Convoy (2022)
When Canadian truckers protested COVID mandates in February 2022, the government invoked the Emergencies Act and:
- Froze bank accounts of protesters and supporters
- Blacklisted donors who gave as little as $20
- Seized funds from crowdfunding platforms
- Threatened financial institutions into compliance
Key facts:
- Over 200 bank accounts frozen without court orders
- Donors to legal protests had accounts locked
- No criminal charges required—mere association was enough
- Banks complied without legal proceedings
One donor’s story: A woman who donated $50 to a legal protest before it was declared illegal had her bank account frozen. She was a supporter exercising what she believed was free speech.
The precedent: Your government can cut off your access to your own money for political reasons, without charging you with a crime.
Operation Choke Point (USA)
Between 2013-2017, the U.S. Department of Justice pressured banks to close accounts of legal but “high-risk” businesses:
- Gun dealers (legal businesses)
- Payday lenders
- Coin dealers
- Adult entertainment
- Tobacco sales
Banks were told these industries posed “reputational risk.” No laws were broken by the businesses—they were simply deemed undesirable.
Result: Legal businesses lost access to banking without due process.
PayPal, Stripe, and Platform Debanking
Tech payment platforms regularly cut off users for:
- Political speech (varies by platform politics)
- Legal cannabis businesses
- Cryptocurrency businesses
- Adult content creators
- Journalists covering controversial topics
You get no explanation and no appeal.
When your financial life depends on private companies that can cut you off arbitrarily, privacy and alternatives matter.
Social Credit Systems
China’s Social Credit System
China has no single national social credit score, despite the popular story. It runs several linked systems that track people and restrict them.
Draws on:
- Court judgments and unpaid debts
- Business, tax and regulatory records
- Local records in pilot cities, some of which ran their own points systems
Punishes:
- Ignoring court orders, mostly over unpaid debts (the court blacklist)
- Jaywalking, in some cities (facial-recognition cameras)
Consequences of being blacklisted:
- Banned from flights and high-speed trains
- Children kept out of expensive private schools
- Barred from luxury hotels
- Restricted from certain jobs
- Publicly listed as “untrustworthy”
By 2019: Chinese authorities reported that the court blacklist had blocked plane-ticket purchases about 27 million times and high-speed rail tickets about 6 million times. Those are counts of blocked purchases, so one person can appear many times. The list covers people who ignored court orders, mostly over unpaid debts.
The warning: Private companies score people too; Alibaba’s Sesame Credit rates its own customers. Every data point collected about you can become a scoring input. What’s collected for “convenience” today becomes a control mechanism tomorrow.
Emerging Western Equivalents
While not as centralized, Western countries are building similar systems:
- Insurance scoring based on purchasing data
- Employment screening using social media
- Rental applications checking online presence
- Credit scoring incorporating non-financial data
- Government “risk scores” for travelers
The infrastructure exists. The political will is the only thing preventing full implementation.
Corporate Surveillance & Price Discrimination
Dynamic Pricing (Delta, Airlines, Retail)
Companies use your data to charge you more:
Delta Airlines is rolling out AI-driven “personalized” pricing that critics call surveillance pricing (under U.S. Senate and state-AG scrutiny as of 2025; Delta denies pricing on individuals’ personal data). Reporting and testing suggest prices can vary by signals like:
- Browsing history
- Device type
- Location
- Previous purchases
- Logged-in status
The practice is widespread:
- Hotels charge more when you search from expensive devices
- An Uber researcher noted riders with low phone batteries were more willing to accept surge pricing — though Uber denies using battery level in its algorithm, and the claim remains unverified
- Amazon changes prices millions of times per day based on user profiles
- Insurance companies price based on purchasing habits
How they know:
- Cookies track your searches across sites
- Device fingerprinting identifies you without cookies
- Data brokers sell purchase history
- Location data reveals income level
The result: Surveillance capitalism means the more they know about you, the more they can extract from you.
Data Broker Profiles
Companies you’ve never heard of know everything about you:
What they collect:
- Every purchase you make
- Every website you visit
- Your location history
- Your health conditions (from purchases)
- Your political views (from browsing)
- Your relationships (from communications metadata)
- Your financial status (from spending patterns)
Who buys this data:
- Advertisers
- Insurance companies
- Employers
- Landlords
- Political campaigns
- Law enforcement (without warrants)
- Stalkers (through data broker access)
Real incident: A data broker marketed a list of “rape victims” to advertisers. Another sold lists of people with specific medical conditions. Another sold location data that tracked people visiting abortion clinics.
Government Overreach
Mass Surveillance Programs
NSA PRISM (revealed 2013):
- Collected emails, chats, and files from major tech companies
- No individual warrants required
- Operated in secret for years
- Affected millions of innocent people
NSA metadata collection:
- Collected phone records of all Americans
- “Just metadata” revealed intimate details:
- Who you call at 2 AM
- How long you talk to your therapist
- Which AA meeting you attend
- Who your doctor is
The insight: Metadata alone reveals relationships, habits, health conditions, and vulnerabilities. Content isn’t necessary for surveillance to be invasive.
Authoritarian Use of Data
Data collected in democracies can be used by future authoritarian governments:
Historical examples:
- Netherlands’ detailed census data helped Nazis identify Jews during WWII
- Census data was used to intern Japanese-Americans in the US
- East German Stasi used phone records for political persecution
Current examples:
- China uses facial recognition to track Uyghurs
- Iran uses social media to identify protesters
- Russia uses cell phone data to track dissidents
The risk: Data collected today persists. Governments change. What’s “nothing to hide” under one regime becomes evidence under another.
Warrant Exceptions and Data Purchases
Law enforcement increasingly bypasses warrant requirements:
- Purchasing location data from brokers instead of getting warrants
- Geofence warrants that identify everyone in an area
- Third-party doctrine — data you give companies isn’t “yours”
- Parallel construction — using surveillance to find leads, then hiding the source
Real case: Fog Data Science sold police access to location histories from about 250 million phones (AP and EFF, 2022).
Identity Theft & Data Breaches
The Endless Breach Cycle
Your data has already been stolen. Multiple times.
Major breaches exposing sensitive data:
| Year | Company | Records Exposed | What Was Stolen |
|---|---|---|---|
| 2013 | Yahoo | 3 billion | Names, emails, passwords, security questions |
| 2017 | Equifax | 147 million | SSN, birth dates, addresses, driver’s licenses |
| 2019 | Capital One | 100 million | SSN, bank account numbers, credit scores |
| 2021 | 533 million | Phone numbers, emails, locations, bios | |
| 2023 | MOVEit | 60+ million | Varied — multiple organizations compromised |
| 2024 | Change Healthcare | 100+ million | Medical records, SSN, insurance data |
The reality: If you’ve used the internet, your data has been breached. Check your exposure.
KYC Data as Attack Vector
“Know Your Customer” verification creates targets:
What KYC collects:
- Government ID photos
- Selfies with ID
- Proof of address
- Social Security Numbers
- Bank account information
What criminals do with it:
- SIM swap attacks (steal your phone number)
- Bank account takeovers
- Synthetic identity creation
- Targeted phishing with your real data
- Physical attacks (they know where you live)
The irony: KYC, meant to prevent fraud, creates the perfect dataset for fraud.
What You Can Do
Privacy protection isn’t about having something to hide. It’s about:
- Not becoming a target for criminals
- Maintaining financial autonomy
- Protecting yourself from future political changes
- Preventing price discrimination
- Keeping intimate details intimate
- Maintaining the presumption of innocence
Start Here
- Week 1: Why Privacy Matters — Understand your personal threat model
- Privacy 101 Course — 12-week practical guide
- Resources — Tools and further reading
Quick Wins
- Use a password manager (Week 4)
- Switch to encrypted messaging (Week 6)
- Use email aliases for signups (Week 5)
- Enable 2FA on important accounts (Week 10)
- Use a VPN for general browsing (Week 7)
Further Reading
Physical Security
- Physical Bitcoin Attacks Repository — Documented incidents
Financial Privacy
- No KYC Only — Non-KYC Bitcoin guide
- Privacy First Steps — Practical starting points
Surveillance & Rights
News & Updates
Every example here is documented, and the harms are real. Protecting your privacy is ordinary prudence.