With more people turning to online personal training to achieve fitness goals, cybersecurity firm Kaspersky has warned users to stay alert to growing digital risks.

The rise of virtual coaching, driven by social media platforms such as Instagram and TikTok, has created new opportunities for trainers to reach global audiences. The global online fitness market is forecast to expand at a compound annual growth rate of 29.6 per cent until 2033.

But the trend has also opened up risks around data privacy, according to Kaspersky. Many online training programmes involve sharing sensitive information such as health data, progress photos and payment details, often through informal channels like social media messaging without formal agreements.

Data misuse risks

Kaspersky highlighted three main concerns for users of online personal training services: exposure to insecure third-party tools, misuse of progress photos and impersonation of trainers.

Fitness professionals often rely on third-party platforms for scheduling, payments and communication. If these services lack strong encryption or suffer breaches, client data could be exposed, the company warned.

Progress photos, commonly used to track results, also carry risks if shared without clear agreements. Images stored or transmitted insecurely could be leaked online, misused for identity theft or targeted by malicious actors.

Meanwhile, trainers who build large followings on platforms like Instagram risk having their accounts compromised. If hacked, cybercriminals can impersonate trainers, sending followers fraudulent messages requesting payments or personal information.

“Like you warm up before a workout, you should protect your data before logging in,” said Anna Larkina, Privacy Expert at Kaspersky. “Virtual coaching can still be a powerful tool — as long as you stay aware of the potential pitfalls and take steps to safeguard your privacy.”

Sports tie-up

As part of its push to raise awareness of cybersecurity in sport, Kaspersky has partnered with the Mumbai Indians cricket team for the 2025 season.

A spokesperson for the Indian Premier League franchise said the team depends on apps and devices to track performance and stay connected. “We know the value of online tools, but also the importance of protecting the personal data shared through them. That’s why our partnership with Kaspersky is so important — together, we can help ensure that every sports journey is both inspiring and secure,” the spokesperson said.

Staying safe online

Kaspersky advised users to take basic precautions when engaging with online personal trainers. These include verifying trainers’ credentials, avoiding suspicious links, checking websites for secure HTTPS connections, and limiting the sharing of sensitive data such as progress photos.

The firm also recommended using cybersecurity solutions such as Kaspersky Premium to protect devices from malware, phishing and fraudulent payment sites.

What’s next

As virtual fitness continues to grow, experts say both trainers and clients will need to be more vigilant about cybersecurity practices. Kaspersky’s partnership with Mumbai Indians is expected to include joint campaigns promoting cyber awareness and digital safety among sports fans.