Immediate Steps After Being Doxxed
Screenshot and document everything — before it's deleted
Before reporting anything to a platform, screenshot all posts containing your information: the posts themselves, the URL, the account that posted it, the date and time visible, and any accompanying threatening messages. Use a full-page screenshot tool or your browser's print-to-PDF function to capture the complete context. Save to cloud storage immediately. Once a platform removes a post, that evidence may be gone — preserve it first.
Don't engage with the people posting
Responding — even to defend yourself — gives attention and may escalate. Your goal is to document and report through official channels, not to argue. Block accounts after screenshotting them. Don't ask anyone to take it down directly — that interaction often ends up screenshotted and used against you.
Report to each platform using their privacy violation policy
Every major platform has a doxxing/privacy violation policy:
Twitter/X: Report → Privacy violation → Sharing personal information
Facebook/Instagram: Report → Privacy and personal information
Reddit: Report → Involves personal information (doxxing)
TikTok: Report → Privacy and personal information
YouTube: Report → Privacy violation
Provide your documentation. If your home address is posted, prioritize this report as urgent — most platforms have expedited review for physical safety risks.
Contact law enforcement — especially if there are threats
File a police report even if there are no explicit threats — this establishes a record. If there are threats accompanying your doxxed information, call police immediately and tell them the nature of the threat. For threats that include your address or location: take this seriously, notify neighbors, consider temporary relocation if you have somewhere to go. If the doxxing has an internet/online component and involves threats, also file with the FBI Internet Crime Complaint Center at ic3.gov.
Alert people who might be contacted or targeted
If your employer, family members, or friends are named or their information is included, warn them. Doxxing campaigns often extend to contact employers, family, and anyone associated with the target. A brief heads-up — "I'm dealing with an online harassment situation, someone may contact you using my name" — allows them to be prepared without giving the harassers more information.
Freeze your credit as a precaution
Doxxing frequently precedes identity theft — especially when the target is being harassed by an organized group. Freeze your credit at all five bureaus as a precaution: Equifax (1-800-349-9960), Experian (1-888-397-3742), TransUnion (1-888-909-8872), Innovis (1-800-540-2505), and ChexSystems (1-800-428-9623). A freeze is free, reversible, and blocks new account openings in your name.
Swatting: The Most Dangerous Extension of Doxxing
Longer-Term: Reducing Your Information Exposure
- Remove yourself from data broker sites: Spokeo, BeenVerified, Whitepages, Intelius, and others. Use opt-out tools or services like DeleteMe. See our Social Media Privacy guide for the process.
- Request a free credit monitoring freeze — your credit report contains your home address, which may be a source for future doxxers
- Consider a PO box or mail forwarding service for any future public-facing activities where you'd otherwise use your home address
- Review your voter registration — many states allow you to redact your home address from public voter rolls if you're a victim of stalking or harassment. Contact your county elections office.
- In many states, victims of domestic violence, stalking, and sexual assault can participate in address confidentiality programs — contact your state's AG office to inquire
Frequently Asked Questions
Can I sue someone who doxxed me?
Yes — civil legal action is possible under several theories: invasion of privacy, intentional infliction of emotional distress, and in some states, specific online harassment or doxxing statutes. The viability of a lawsuit depends on identifying the defendant (anonymous accounts are a barrier), documenting your damages (lost income, medical/therapy costs, cost of security measures), and finding an attorney willing to take the case. Consult a civil litigation or privacy attorney. Some attorneys take harassment cases on contingency if the damages are significant.
The doxxing post included my workplace, not my home. Is that less serious?
Not necessarily. Contact to employers is a common harassment tactic — calls, emails, or false complaints intended to get someone fired. Warn your employer's HR department. Keep your own documented record of the situation. If harassment directed at your employer rises to the level of intentional interference with your employment, that may be an additional civil claim.
I want to find out who doxxed me. How?
Identifying anonymous posters requires a legal process: a subpoena to the platform requiring them to disclose IP addresses and account information. This requires an attorney and, in most cases, an active lawsuit. Law enforcement also has the ability to subpoena platform data, which is another reason to file a police report even without immediate threats. Attempting to identify the person yourself through hacking or unauthorized means creates legal liability for you.