Decide who reviews unsolicited brand messages and how the athlete verifies opportunities. Disable unnecessary location sharing and avoid posting routines that reveal where the athlete lives, trains or travels.
Use unique passwords, a password manager and multi-factor authentication. Recovery email addresses and phone numbers should remain current and controlled by the athlete.
Create a response plan for account compromise, impersonation, harassment or unauthorized image use. Serious threats or emergencies should be directed to appropriate authorities or crisis services.
