Safety Guide
I've Been Doxxed. What Do I Do?
If you're in immediate danger, call 911.
This guide addresses the steps after immediate safety is secured.
Being doxxed is genuinely frightening. The instinct is to panic, but what you do in the first few hours matters. Here's what to prioritize.
Immediate Steps (First 24 Hours)
Don't engage with the harassers
FIRSTResponding to or arguing with people participating in the doxxing campaign typically makes things worse. It signals that you're watching, can escalate the situation, and gives them more to work with. Silence is usually the right move in the immediate term.
Screenshot and document everything
URGENTBefore anything is taken down, screenshot every post, thread, or platform where your information appeared. Include timestamps. This documentation is essential for law enforcement reports, platform abuse claims, and potential legal action.
Tell someone you trust
URGENTDon't handle this alone. Tell a trusted friend, family member, or colleague what's happening. Have someone who knows the situation and can help monitor, provide support, or act on your behalf if needed.
Alert anyone whose info was also published
URGENTIf family members' addresses, phone numbers, or information was published, contact them immediately. They need to know what's happening and to be vigilant about their safety.
Lock down your accounts
SAME DAYSet all social media profiles to private immediately. Review who follows you. Remove your phone number from social media profiles. Enable two-factor authentication on all accounts. Change passwords on email and key accounts.
Report to Platforms
File reports on every platform where your information was posted. Be specific: what was shared, where it appeared, and how it violates their policies.
File a Police Report
Even if local police can't do much immediately, file a report. It creates an official record you'll need for future legal action, platform escalations, and civil protection orders. It also documents:
- • Future legal action against the doxxer
- • Platform abuse escalations (many require a police report number)
- • Civil orders of protection
- • Documenting an ongoing harassment pattern
Doxxing with intent to harass is criminal in many states. Cyberstalking laws, state harassment statutes, and federal interstate stalking laws may all apply. An attorney who handles cyber harassment cases can tell you which gives you the strongest position.
Resources:
- • Cyber Civil Rights Initiative: cybercivilrights.org — crisis helpline and legal resources
- • Crash Override Network: Resources for targets of online harassment
- • FBI IC3: ic3.gov — report cybercrime federally
- • StopHarassment.org: Legal aid resources by state
Remove the Data Broker Sources
Doxxers typically pull information from people-search and data broker sites. Removing your profiles there cuts off the feed — they can't refresh your address or find new family member information if it's not there to find. Even after the initial doxxing, this limits ongoing damage.
Removing yourself from data broker sites is especially important for people in high-risk categories (content creators, journalists, activists, domestic violence survivors). It should happen before you're doxxed if possible—but it's still valuable after.
Request Google Removal
Google has a removal tool specifically for personal information shared without consent. Submit requests for each URL where your information appears. They move quickly on doxxing cases, especially when there's a physical safety risk.
Consider a Temporary Address Change
If your home address is out there and the threat feels credible, take it seriously. Options include:
- • Staying with a friend or family member temporarily while the situation resolves
- • Contacting a local domestic violence shelter for advice (they have protocols for exactly this type of situation, regardless of whether domestic violence is involved)
- • Notifying neighbors and building management to be alert for suspicious activity
- • Informing your employer's security team if your workplace was also published
Long-Term: Harden Your Privacy
Once the immediate situation is under control, work through the longer-term steps:
Remove from all data broker sites
Ongoing, use a monitoring service
Use a P.O. box for all correspondence
Prevents address re-appearing in public records
Audit and lock social media privacy
Remove phone/address from all profiles
Use a username that can't be traced back
Separate handles for different communities
Remove old forum posts and accounts
JustDeleteMe.com helps with account deletion
Register domain privately
Use WHOIS privacy on any personal domains