dig-through-data-brokers

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Dig through data brokers

深挖数据经纪商

People-search sites resell a blend of public records, marketing data, and self-reported data. They are fast, cheap lead generators and terrible evidence. The one rule that matters: a broker record is a lead, never a fact. Confirm every field you intend to use against the primary source the broker got it from — and if you cannot identify that primary source, do not use the field.
人员搜索网站转售由公共记录、营销数据和用户自行提供的数据混合而成的信息。它们是快速、廉价的线索生成器,却是不佳的证据来源。 唯一重要的规则是:经纪商记录只是线索,绝不是事实。 对于准备使用的每个字段,都应向经纪商获取该信息的原始来源进行核实;如果无法确定原始来源,就不要使用该字段。

What these services actually are

这些服务实际上是什么

Three input streams, blended and sold:
  • Public records — property deeds, court filings, business registrations, voter files where public, professional licences, bankruptcy, marriage and divorce. Authoritative at origin; the broker's copy is a stale transcription.
  • Marketing and commercial data — warranty cards, loyalty programmes, subscriptions, credit-header data, online forms, ad exchanges. Never verified, often inferred, frequently household-level rather than person-level.
  • Self-reported and scraped — profiles, résumés, forum posts, and whatever the broker's own users typed in.
They also buy from each other, constantly. That is the most important structural fact about the category: one wrong record propagates across every brand, and cross-checking five brokers gives you five copies of one error wearing five hats. Apparent corroboration across brokers is worth close to nothing.
三类输入流经过混合后出售:
  • 公共记录——房产契约、法院文件、企业登记、公开的选民档案、职业执照、破产、婚姻和离婚记录。其原始来源具有权威性;经纪商保存的副本则可能是过时的转录。
  • 营销和商业数据——保修卡、忠诚度计划、订阅信息、征信头部数据、在线表单、广告交易平台数据。这些数据从未经过验证,通常是推断得出的,而且往往针对家庭住户而非具体个人。
  • 自行提供及抓取的数据——个人资料、简历、论坛帖子,以及经纪商用户自行输入的任何内容。
这些平台还在不断相互购买数据。这是这一类别最重要的结构特征:一个错误记录会传播到所有品牌,而交叉核对五家经纪商,得到的只是同一个错误换上了五顶帽子。不同经纪商之间看似相互印证,实际上几乎毫无价值。

Why the data is wrong

数据为何会出错

  • Address history is append-only in practice. Brokers add addresses and rarely retire them, so a "current address" is often several moves old.
  • Household merging. Two people at one address, or two people with the same name in one metro area, get fused into one profile. Same-name relatives — father and son, cousins named for the same grandparent — merge constantly.
  • Relatives are inferred, not recorded. "Relatives" and "associates" lists are usually address-co-occurrence: former roommates, landlords, and the previous occupant show up as family.
  • Age is derived. Often from a birth year in a credit header or a voter file, and often off by a year or displayed as a band.
  • Phone data ages fastest. Number portability and prepaid churn mean carrier and line-type attributions decay quickly — see
    whose-number-is-this
    .
  • Corrections do not propagate. Getting one broker to fix a record does not fix the upstream source or the six downstream buyers.
  • 地址历史实际上只会追加。 经纪商不断添加地址,却很少将其淘汰,因此所谓“当前地址”往往已经是搬过好几次之后的旧地址。
  • 家庭住户合并。 同一地址上的两个人,或同一都市区域内同名的两个人,都会被合并为一个档案。同名亲属——父亲与儿子、沿用同一祖辈名字的堂表亲——也经常被合并。
  • 亲属关系是推断出来的,并非实际记录。 “亲属”和“关联人”列表通常基于地址共同出现情况:前室友、房东和之前的住户都会被列为家庭成员。
  • 年龄是推导得出的。 通常来自征信头部数据或选民档案中的出生年份,而且可能相差一岁,或仅以年龄段显示。
  • 电话号码数据最快过时。 号码携转和预付费用户高频更换,意味着运营商及线路类型归属会迅速衰减——参见
    whose-number-is-this
    。
  • 更正不会向下游传播。 让一家经纪商修正记录,并不会修正上游来源或下游的六个数据购买方。

Triage: what to reach for first

分流:优先使用什么

What you holdBetter than a brokerUse a broker for
Name + cityLocal property and court records, voter file where publicGenerating a candidate address list to check against those records
Phone numberCarrier/line-type lookup via
whose-number-is-this
Reverse lookup to a candidate name, then confirm elsewhere
Email address
what-an-email-reveals
Reverse lookup to a candidate name
Name + need for relativesObituaries — far more accurate and they state the relationshipA first-pass household cluster to test against the obituary
Name + need for employmentProfessional networks, licensing boards, corporate registriesNothing. Broker employment data is the worst field they sell
Name + need for assetsProperty registry, court judgments,
who-really-owns-it
Nothing usable
Your own name (self-audit)Nothing — brokers are the targetEnumerating your exposure before opting out
The honest summary: brokers are for turning a name into candidate selectors when you have nothing else, and for auditing your own footprint. For every claim you intend to publish or rely on, go to the primary record.
你掌握的信息比经纪商更好的选择经纪商的适用场景
姓名 + 城市当地房产和法院记录;可公开时使用选民档案生成候选地址列表,再与这些记录核对
电话号码通过
whose-number-is-this
查询运营商或线路类型
反查候选姓名,再到其他来源确认
电子邮件地址
what-an-email-reveals
反查候选姓名
姓名 + 需要查找亲属讣告——准确得多,而且会注明关系首轮筛选家庭或住址群组,再与讣告核对
姓名 + 需要查询就业信息职业社交网络、执照颁发机构、公司注册登记没有。经纪商的就业数据是其提供的质量最差的字段
姓名 + 需要查询资产房产登记、法院判决、
who-really-owns-it
没有可用数据
你自己的姓名(自我审计)没有——经纪商本身就是目标在选择退出前盘点自身信息暴露情况
坦率地说,经纪商适合在别无选择时把姓名转化为候选筛选条件,也适合审计自己的信息足迹。对于任何准备发布或依赖的说法,都应查阅原始记录。

Method

方法

  1. Anchor first. Do not run a bare name. Carry the disambiguating anchor from
    find-anyone
    into every search, and treat any result that fails the anchor test as a different person.
  2. Search a small number of brokers deliberately, not all of them. Pick ones with different upstream sources rather than different brands.
  3. Extract selectors, not conclusions. You want candidate addresses, phones, emails, middle names, age bands, and associated names. Each is a lead to test.
  4. Confirm each against a primary source. Address → property or court record. Age → voter file, licensing record, or a document with a date of birth. Employment → the employer or a register. Relatives → an obituary or civil-registration index.
  5. Record which fields you confirmed and which you dropped. A broker field that survived confirmation is now cited to the primary source, not to the broker.
  6. Pivot the confirmed selectors into the technique skills in the table below.
Primary-source catalogue by jurisdiction and record type, with access and legal notes: reference/source-catalogue.md.
  1. 先锚定。 不要只输入姓名进行搜索。进行每次搜索时,都应带上
    find-anyone
    中获得的消歧锚点,并将任何未通过锚点测试的结果视为另一个人。
  2. 有选择地查询少量经纪商,而不是逐一查询所有平台。选择上游来源不同的平台,而不是仅仅选择品牌不同的平台。
  3. 提取筛选线索,而不是结论。 你需要的是候选地址、电话号码、电子邮箱、中间名、年龄段和关联姓名。每项信息都只是需要验证的线索。
  4. 逐项向原始来源核实。 地址 → 房产或法院记录。年龄 → 选民档案、执照记录或载有出生日期的文件。就业信息 → 雇主或登记机构。亲属 → 讣告或民事登记索引。
  5. 记录哪些字段已确认,哪些已舍弃。 经核实后保留下来的经纪商字段,应引用原始来源,而不能继续引用经纪商。
  6. 将已确认的筛选线索转入下表所列的技术 skill。
按司法管辖区和记录类型整理的原始来源目录,以及访问和法律注意事项:reference/source-catalogue.md。

The free-tier bait pattern

免费套餐的诱饵模式

The business model is a teaser. Expect: a result page confirming a match exists with characters masked; counts ("8 phone numbers, 12 addresses") designed to imply depth; padding with public data the broker did not pay for; a progress animation implying live searching that is actually a checkout funnel; a "report" that arrives as an auto-renewing subscription with an awkward cancellation path; and results for names that do not exist, because the funnel runs regardless.
Never treat a teaser count as evidence, and assume any paid tier bills until you actively stop it. Some brokers do offer genuine investigator or business tiers with contractual use restrictions — a different product, with obligations you agree to when you sign.
这类平台的商业模式就是先用诱饵吸引你。可能出现的情况包括:结果页面确认存在匹配项,但部分字符被遮挡;显示数量(如“8 个电话号码、12 个地址”),以营造数据丰富的印象;用经纪商并未付费购买的公共数据填充内容;用进度动画暗示正在实时搜索,实际上却是在引导结账;所谓“报告”最终以自动续订订阅的形式送达,而且取消流程十分别扭;即使姓名并不存在,也会显示结果,因为漏斗无论怎样都会继续运行。
绝不要把诱饵数量当作证据,并应假定任何付费套餐都会持续扣费,直至主动停止。有些经纪商确实提供调查人员或企业套餐,并附有合同使用限制——这是另一种产品,你签署协议时也会承担相应义务。

FCRA and the rule that actually binds you (US)

FCRA 与真正约束你的规则(美国)

In the US there is a legal line between two things that look identical:
  • A consumer reporting agency is regulated under the Fair Credit Reporting Act. It must maintain accuracy procedures, give consumers access and dispute rights, and only furnish reports for permissible purposes.
  • A data broker / people-search site is not a CRA, disclaims FCRA compliance in its terms, and has none of those obligations.
The rule: you must not use non-FCRA broker data to make decisions about employment, tenancy, credit, or insurance. That includes screening a job applicant, vetting a tenant, or checking a contractor you are about to hire. If the decision is one FCRA covers, you must go through a regulated CRA and follow its process, including notice and adverse-action requirements. The broker's own terms will say this; it is not decoration, and both the broker and the user have been the subject of enforcement over it. This is the single most common way otherwise-legitimate investigators create real liability.
Related US restrictions worth knowing: motor vehicle and driver records are restricted to enumerated purposes under the Driver's Privacy Protection Act, and some states restrict voter-file use to electoral purposes.
在美国,两种外观相似的事物之间存在一条法律分界线:
  • 消费者报告机构受《公平信用报告法》(FCRA)监管。它必须建立准确性程序,赋予消费者访问和提出异议的权利,并且只能为允许用途提供报告。
  • 数据经纪商或人员搜索网站并不是消费者报告机构。其服务条款会否认遵守 FCRA,也不承担上述任何义务。
规则是:不得使用不受 FCRA 约束的经纪商数据来作出有关雇佣、租赁、信用或保险的决定。 这包括筛选求职者、审查租户,以及核查即将聘用的承包商。如果某项决定属于 FCRA 管辖范围,就必须通过受监管的消费者报告机构进行,并遵循其流程,包括通知和不利决定要求。经纪商自己的服务条款中也会写明这一点;这并非装饰性条款,而且经纪商和使用者都曾因此受到执法处理。这是原本合法的调查人员造成重大法律责任的最常见方式。
美国还有几项值得了解的相关限制:机动车和驾驶员记录仅可用于《驾驶员隐私保护法》列明的特定目的;某些州还限制选民档案仅可用于选举相关目的。

GDPR and the UK/EU position

GDPR 以及英国和欧盟的立场

The US-style people-search market barely exists in Europe, and what does exists on much thinner data. Durable reasons: aggregating and publishing personal data needs a lawful basis, and "we bought it" is not one; transparency obligations require telling the data subject you hold their data, which is fatal to a scraped aggregation business; special-category data is stricter again; and subjects have access, rectification, erasure, and objection rights that are cheap to exercise and expensive to service. Electoral registers, land registries, and court records are correspondingly more restricted than their US equivalents.
If you are in scope of GDPR, your case file is processing too. You need a lawful basis, a retention limit, and a defensible answer if the subject asks what you hold. Legitimate interests is available but requires a documented balancing test.
美国式人员搜索市场在欧洲几乎不存在,即便存在,其数据也少得多。其长期存在的结构性原因包括:聚合和发布个人数据需要合法依据,而“我们买来的”并不构成合法依据;透明度义务要求告知数据主体你持有其数据,这对依赖抓取数据的聚合业务是致命的;特殊类别数据受到更严格的限制;数据主体享有访问、更正、删除和反对处理的权利,而这些权利行使成本低、提供相应服务的成本却很高。因此,选举登记册、土地登记和法院记录受到的限制也比美国同类记录更严格。
如果你属于 GDPR 的适用范围,你的案件档案同样属于处理活动。你需要具备合法依据、设定保存期限,并准备好在数据主体询问你持有哪些信息时给出有依据的回答。可以使用合法利益这一依据,但必须完成有记录的利益衡量测试。

Self-defense: audit and remove your own exposure

自我防御:审计并清除自身的信息暴露

The most valuable use of this skill for most people. Run yourself through the major brokers, record every profile URL, then work each opt-out. What to know:
  • Opt-outs are per-broker, deliberately tedious, and usually require finding your own profile URL first. Some require email confirmation; some require identity documents, which is its own risk.
  • Removals lapse. Brokers re-ingest from upstream, so a removed profile reappears after a refresh cycle. It is recurring maintenance, not a one-time job.
  • Paid removal services automate the tedium across many brokers; they cannot reach brokers with no opt-out, and they do not touch the public records underneath.
  • Jurisdiction helps. California created a broker registration requirement and a statutory deletion mechanism intended to let a resident request deletion across registered brokers at once; Vermont maintains a broker registry. Statutory rights are more durable than per-site forms — use them.
  • The upstream source is the real fix: address confidentiality programmes for at-risk people, opting out of the UK open electoral register, and holding property through an entity are structural rather than cosmetic.
这是这个 skill 对大多数人而言最有价值的用途。逐一在主要经纪商平台搜索自己,记录每个个人资料 URL,然后完成每项退出操作。需要了解以下事项:
  • 退出操作按经纪商分别执行,过程刻意繁琐,而且通常需要先找到自己的个人资料 URL。有些平台要求通过电子邮件确认;有些要求提交身份证件,这本身也会带来风险。
  • 删除不会永久有效。经纪商会重新从上游摄取数据,因此已删除的个人资料可能在一次刷新周期后再次出现。这是需要持续维护的 recurring maintenance,而不是一次性任务。
  • 付费删除服务可以自动处理多个经纪商平台上繁琐的退出流程;但它们无法联系完全不提供退出选项的平台,也不会删除底层的公共记录。
  • 司法管辖区能够提供帮助。加利福尼亚州要求数据经纪商登记,并设置了法定删除机制,使居民能够一次性请求从已登记的经纪商处删除信息;佛蒙特州则维护数据经纪商注册名录。法定权利比逐站填写表单更持久——应优先使用这些权利。
  • 真正的修复方法是处理上游来源:面向高风险人士的地址保密计划、退出英国公开选举名册,以及通过实体持有房产,都属于结构性措施,而非表面调整。

Searching yourself leaves a trace

搜索自己也会留下痕迹

Assume every search you run is logged, sold, and potentially visible.
  • Broker searches are logged against your account, IP, and payment identity, and the search itself is data the broker can sell.
  • Some professional and social platforms notify a subject that you viewed their profile, or surface you via contact-graph inference — uploading a contact list is how investigators most often get made.
  • Some paid and investigator tiers notify the subject or generate a record accessible to them; credit-header products can leave an inquiry trail.
  • Searching your own name from your own account creates the strongest possible association between you and your identifiers.
Use
investigate-without-getting-made
before touching any of this on a sensitive matter. Minimum: a separate browser profile, no account reuse, and never the case's real contact details in a signup form.
应假定你执行的每次搜索都会被记录、出售,并且可能被他人看到。
  • 经纪商会将搜索记录与你的账户、IP 地址和支付身份关联起来,而搜索行为本身就是经纪商可以出售的数据。
  • 某些专业和社交平台会通知数据主体你查看了其个人资料,或者通过联系人关系图推断出你的身份——上传联系人列表是调查人员最常被暴露的方式。
  • 某些付费套餐和调查人员套餐会通知数据主体,或生成可供数据主体访问的记录;征信头部数据产品还可能留下查询痕迹。
  • 使用自己的账户搜索自己的姓名,会在你与你的身份标识之间形成最强有力的关联。
在处理敏感事项之前,先使用
investigate-without-getting-made
。最低要求包括:使用独立的浏览器配置文件、不重复使用账户,并且绝不在注册表单中填写真实案件联系方式。

Where this goes wrong

容易出错的地方

  • Confidence from repetition. Five brokers, one upstream vendor, one error.
  • Merged people presented as one. The profile looks coherent because the merge is invisible; two address clusters in unconnected regions is the tell.
  • Deceased subjects. Records persist and sometimes merge with a same-name living relative — a specific and damaging failure.
  • Recency illusion. "Last updated" reflects when the broker refreshed its copy, not when the underlying fact was true.
  • Coverage collapses outside the US. Thin to nonexistent elsewhere; absence of a result for a non-US subject means nothing at all.
  • Under-representation of the mobile and the young. People who rent, move often, are recent immigrants, or have never held property or a landline are systematically thin in these datasets. Sparse results are a sampling artefact.
  • Suppressed subjects. People who have opted out, or who are enrolled in an address confidentiality programme, produce a clean result that is not evidence of anything.
  • 因重复出现而产生信心。 五家经纪商、一个上游供应商、一个错误。
  • 把被合并的人呈现为一个人。 档案之所以看起来连贯,是因为合并痕迹不可见;两个互不关联地区出现地址群组就是明显的警示信号。
  • 已故对象。 记录会持续存在,有时还会与同名的在世亲属合并——这是一种具体且危害严重的错误。
  • 近期性错觉。 “最后更新”反映的是经纪商刷新副本的时间,而不是底层事实成立的时间。
  • 美国以外的数据覆盖几乎坍缩。 其他地区的数据极其稀少,甚至根本不存在;非美国对象没有搜索结果,完全不能说明任何问题。
  • 移动用户和年轻人被低度代表。 租房者、经常搬家者、新近移民,或从未持有房产及固定电话的人,在这些数据集中系统性缺位。稀疏结果只是采样偏差。
  • 被屏蔽的对象。 已选择退出或加入地址保密计划的人会产生“干净”的结果,但这不能证明任何事情。

Confidence grading

置信度分级

  • Confirmed — the field is corroborated by a primary record (deed, court filing, licence, registration) that names your subject and matches your anchor. Cite the primary record; the broker drops out of the chain entirely.
  • Probable — corroborated by one independent non-broker source, with the anchor matching and no conflicting record.
  • Unconfirmed — appears only on brokers, however many. Report as a lead with the anchor basis stated.
  • Rejected — fails the anchor test, or conflicts with a primary record. Keep it in the file assigned to a different candidate.
Never grade a claim higher because more brokers agree.
  • 已确认——字段得到原始记录(契约、法院文件、执照、登记)的佐证,且记录明确指向目标对象并符合锚点条件。应引用原始记录;经纪商完全退出证据链。
  • 可能——得到一个独立的非经纪商来源佐证,锚点匹配且没有冲突记录。
  • 未确认——仅出现在经纪商平台上,无论有多少家平台均属此类。应将其作为线索报告,并说明锚点依据。
  • 已排除——未通过锚点测试,或与原始记录冲突。应保留在档案中,但归入另一位候选对象。
绝不能因为更多经纪商表示认同,就提高某项说法的置信度。

Worked example

实例

Skip trace on a judgment debtor: name plus a last-known city.
  1. Two brokers return a profile with four addresses across two states, an age of 47, and six "relatives".
  2. Anchor test: the debtor's known employer city matches only two of the four addresses. The other two go to a candidate B file.
  3. County recorder for the matching county shows a deed in the subject's name at address 2, sold three years ago. Address 2 is confirmed as historical, not current — the broker showed it as current.
  4. Dead end: a "relative" with a distinctive surname turns out, via the obituary of the actual relative, to be a prior occupant of address 2. Dropped.
  5. Address 1 has no property record. The utility of the broker here was narrowing four addresses to one with a real document behind it; everything else was noise.
  6. Confirmed selectors — one prior address, one middle initial from the deed — go to the court file for the current service address.
对判决债务人进行 skip tracing:姓名加上最后已知城市。
  1. 两家经纪商返回一份档案,其中包含两个州的四个地址、47 岁的年龄,以及六名“亲属”。
  2. 锚点测试:债务人的已知雇主所在城市只与四个地址中的两个匹配。另外两个归入候选对象 B 的档案。
  3. 匹配县的县登记官记录显示,地址 2 有一份以目标对象名义登记的房产契约,三年前已售出。地址 2 被确认为历史地址,而非当前地址——经纪商却将其显示为当前地址。
  4. 死胡同:一名具有独特姓氏的“亲属”,经真正的亲属讣告核实,实际是地址 2 的前任住户。将其舍弃。
  5. 地址 1 没有房产记录。经纪商在这里的作用,是将四个地址缩小到唯一一个背后存在真实文件的地址;其余信息都是噪声。
  6. 已确认的筛选线索——一个历史地址,以及从房产契约中取得的一个中间名首字母——被转入法院档案,用于查找当前送达地址。

Pivots

后续转换

Selector producedFeed into
Candidate name from a reverse lookup
find-anyone
Email address
what-an-email-reveals
Phone number
whose-number-is-this
Username or screen name
hunt-a-handle
Employer or business name
x-ray-a-company
,
who-really-owns-it
Address tied to a company
who-really-owns-it
Removed or changed broker profile
read-deleted-pages
Relatives and associates cluster
graph-the-network
Your own exposure inventory
what-leaked-about-you
产出的筛选线索输入到
反查得到的候选姓名
find-anyone
电子邮件地址
what-an-email-reveals
电话号码
whose-number-is-this
用户名或昵称
hunt-a-handle
雇主或企业名称
x-ray-a-company
、
who-really-owns-it
与公司关联的地址
who-really-owns-it
已删除或发生变更的经纪商档案
read-deleted-pages
亲属及关联人群组
graph-the-network
自身信息暴露清单
what-leaked-about-you

Legal and ToS notes

法律及服务条款注意事项

Scraping these sites breaches their terms and most deploy active anti-automation; the business tiers exist precisely to sell you the API instead. Bulk collection of personal data has its own exposure under computer-misuse and data-protection law depending on where you and the data sit. Do not use non-FCRA data for FCRA-covered decisions. Do not use broker data to locate a person who has taken steps to be unlocatable unless you have a documented lawful basis — a court order, a skip-trace mandate, an active investigation — and read ../../ETHICS.md before you start. This category is the raw material of doxxing and stalking, and the same lookup is legitimate or criminal depending entirely on the objective you wrote down at the start.
抓取这些网站会违反其服务条款,而且大多数网站都部署了主动反自动化措施;企业套餐的存在正是为了向你销售 API。批量收集个人数据本身也可能触发计算机滥用和数据保护方面的法律风险,具体取决于你所在的位置及数据所在位置。不得将不受 FCRA 约束的数据用于 FCRA 管辖的决定。除非具备有记录的合法依据——法院命令、skip trace 授权或正在进行的调查——否则不得使用经纪商数据定位已经采取措施避免被找到的人;开始前应阅读 ../../ETHICS.md。这一类别是 doxxing 和跟踪骚扰行为的原材料;同一种查询究竟是合法还是犯罪,完全取决于你在开始时写下的目标。