Notice: WeChat is no longer provided as a public contact method due to significant security and privacy concerns, documented below.
Summary
After multiple documented incidents, I consider WeChat an unsuitable platform for communication. This page lists the specific issues that led to this decision.
Documented Incidents
Data exposure
Personal data exposed via Telegram social-engineering databases
- WeChat user data frequently appears in “social engineering databases” (社工庫) on Telegram.
- Attackers can dox people (開盒) using a WeChat ID to obtain real names and ID numbers, home addresses, phone numbers, and associated accounts.
Data breach
Shanghai Suishenma (隨申碼) health-code leak
- A massive data breach exposed millions of Shanghai residents.
- WeChat integration allowed health data to be correlated with personal identities.
- It demonstrated a systemic weakness in WeChat-integrated government systems.
Privacy
Unauthorized hardware access on Android
- Documented cases of WeChat accessing the camera without user consent.
- Microphone activation in background processes.
- Continuous location tracking even when location services are disabled.
- Network traffic analysis shows data sent to undisclosed servers.
Censorship
Content manipulation and surveillance
- Automatic deletion of WeChat Official Account articles (公眾號文章).
- Real-time monitoring of Moments (朋友圈) with retroactive content removal.
- Account suspension without an appeal process.
- Keyword filtering that affects private conversations.
- Image recognition for “sensitive” content.
Security research has also revealed:
- Mini-programs lacking proper sandboxing
- Voice message analysis and transcription without consent
- Cross-app data sharing with other Tencent products
How to Reach Me Instead
If You Still Use WeChat
- Disable location services completely.
- Revoke camera and microphone permissions.
- Use a separate phone number for everything else.
- Never share sensitive information via WeChat.
- Regularly audit and delete your chat history.
- Consider migrating to another platform entirely.