I've Been Doxxed. What Do I Do?

Being doxxed is genuinely frightening. The instinct is to panic, but what you do in the first few hours matters. Here's what to prioritize.

Immediate Steps (First 24 Hours)

1. Don't engage with the harassers (FIRST)

Responding to or arguing with people participating in the doxxing campaign typically makes things worse. It signals that you're watching, can escalate the situation, and gives them more to work with. Silence is usually the right move in the immediate term.

2. Screenshot and document everything (URGENT)

Before anything is taken down, screenshot every post, thread, or platform where your information appeared. Include timestamps. This documentation is essential for law enforcement reports, platform abuse claims, and potential legal action.

3. Tell someone you trust (URGENT)

Don't handle this alone. Tell a trusted friend, family member, or colleague what's happening. Have someone who knows the situation and can help monitor, provide support, or act on your behalf if needed.

4. Alert anyone whose info was also published (URGENT)

If family members' addresses, phone numbers, or information was published, contact them immediately. They need to know what's happening and to be vigilant about their safety.

5. Lock down your accounts (SAME DAY)

Set all social media profiles to private immediately. Review who follows you. Remove your phone number from social media profiles. Enable two-factor authentication on all accounts. Change passwords on email and key accounts.

Report to Platforms

File reports on every platform where your information was posted. Be specific: what was shared, where it appeared, and how it violates their policies.

• Reddit: Report under "Personal and confidential information" — covers address, phone, and non-public info
• Twitter/X: Use "Report" → "It's abusive or harmful" → "Sharing private information"
• Discord: Report the server if doxxing channel exists; report individual messages for privacy violations
• Facebook/Instagram: Report posts for "Sharing private information" or "Harassment"
• 4chan/8chan: Use official abuse email; success rates are low but documentation matters for legal action
• YouTube: Report videos for "Privacy violation" if your image or info is used without consent
• Pastebin: Submit abuse report via their contact page; they typically respond within 24–48 hours

File a Police Report

Even if local police can't do much immediately, file a report. It creates an official record you'll need for future legal action, platform escalations, and civil protection orders. It also documents:

• Future legal action against the doxxer
• Platform abuse escalations (many require a police report number)
• Civil orders of protection
• Documenting an ongoing harassment pattern

Doxxing with intent to harass is criminal in many states. Cyberstalking laws, state harassment statutes, and federal interstate stalking laws may all apply. An attorney who handles cyber harassment cases can tell you which gives you the strongest position.

Remove the Data Broker Sources

Doxxers typically pull information from people-search and data broker sites. Removing your profiles there cuts off the feed — they can't refresh your address or find new family member information if it's not there to find. Even after the initial doxxing, this limits ongoing damage.

Removing yourself from data broker sites is especially important for people in high-risk categories (content creators, journalists, activists, domestic violence survivors). It should happen before you're doxxed if possible — but it's still valuable after.

Request Google Removal

Google has a removal tool specifically for personal information shared without consent. Submit requests for each URL where your information appears. They move quickly on doxxing cases, especially when there's a physical safety risk.

Consider a Temporary Address Change

If your home address is out there and the threat feels credible, take it seriously. Options include:

• Staying with a friend or family member temporarily while the situation resolves
• Contacting a local domestic violence shelter for advice (they have protocols for exactly this type of situation, regardless of whether domestic violence is involved)
• Notifying neighbors and building management to be alert for suspicious activity
• Informing your employer's security team if your workplace was also published

Long-Term: Harden Your Privacy

Once the immediate situation is under control, work through the longer-term steps:

• Remove from all data broker sites — ongoing, use a monitoring service
• Use a P.O. box for all correspondence — prevents address re-appearing in public records
• Audit and lock social media privacy — remove phone/address from all profiles
• Use a username that can't be traced back — separate handles for different communities
• Remove old forum posts and accounts — JustDeleteMe.com helps with account deletion
• Register domain privately — use WHOIS privacy on any personal domains