―𓏲⋆ scarification ࣪𖤐.ᐟ

1: Prepping / necessities

Aged accounts that ARE NOT BLANK. You don’t need to have posts, but if you do make sure they’re spaced out. Use a believable pfp, follow a bunch of random people. Some will follow back, making the account look legit. These don’t need to be years and years old, but a few months at the least is good!

A decent VPN.

If you’re really dedicated, a separate device.

A notebook. Physical or digital. I have real notebooks and I also use an app called Obsidian! Notion works too, but imo it’s not as good.

Basic OSINT knowledge is good, but not mandatory!

2: Getting basic info (Images = embedded metadata)

There’s a lot you can do with a phone number, a discord account, or an instagram account.

If you aren’t really talking to this person and you don’t have any of these, utilize your aged account. What do you know about them? If you’ve met them on tumblr, you probably can learn enough to know exactly what they want in any social interaction haha. If not, don’t worry! People aren’t that difficult to read, so become whoever you need to be on this separate account in order to befriend them. This part is especially easy if they’re lonely and desperate.

Give it around two weeks (depending on how trusting they are) before pushing for more information or using any grabbers. I highly recommend continuing the “normal friendship” path first and getting as many socials of theirs as you possibly can.

ASK FOR PHOTOS. The more photos, the better. Some platforms strip location/GPS metadata, but for the most part the original EXIF should be there! I use exiftool (GUIs are useful too), it’s free. Once you have photos it’s not hard to get GPS coordinates, timestamps, device info, etc!

If it’s not working for you, lie and say you can’t see the image they’re trying to send. Suggest that they send the image as a document/attachment to “fix” this.

IPgrabbing is useful for lots of things, but not for getting their location. It might be wildly inaccurate. Just avoid it lol

3: Random

Voice changers can be very realistic when tweaked.

Keep track of EVERYTHING. Write EVERYTHING down. You never know what small piece of info might connect some dots!

Once you’ve guessed one password, you usually already have most of the others (if not all)

Google dorks + public records are your friends.