What to Do If You Are Being Doxxed

Your address just hit a forum. Your phone is ringing with unknown numbers. Your employer was tagged. You're being doxxed—and every minute matters. Here's exactly what to do, step by step, to minimize the damage and take back control.

The First Hour

Doxxing is designed to overwhelm you emotionally so you make bad decisions. Take a breath. Then move fast but deliberately.

1. Do not engage with the people harassing you. Don't reply. Don't defend yourself. Don't "correct the record." Any response is fuel.
2. Screenshot everything. The original doxx post, the username, the timestamp, the URL, any comments, any threats. Save to cloud storage and email it to yourself as a backup.
3. Copy the URL to a text file. If the post is deleted later, you'll need the link for reports.
4. Tell someone you trust. You should not navigate this alone.

Hour 1–6: Lock Down Everything

Change Your Passwords

Doxxers often have more than just your address. Assume your email and social accounts are compromised and rotate passwords on:

• Primary email
• Banking and financial accounts
• Social media
• Cloud storage
• Any account using the exposed password

Enable two-factor authentication (2FA) on every account. Use an authenticator app—not SMS—because doxxers can SIM-swap your phone number.

Freeze Your Credit

Contact Equifax, Experian, and TransUnion to place a freeze on your credit. This prevents identity thieves from opening accounts in your name. It's free and takes minutes online.

Alert Your Bank

Call your bank's fraud line. Tell them you've been doxxed and ask them to flag your account for enhanced monitoring. Consider changing account numbers if full financial details were leaked.

Hour 6–24: Report and Remove

Report the Post to the Platform

Every major platform prohibits doxxing. File reports with:

• Twitter/X: Report > Privacy > Someone posted private information
• Reddit: Report to mods first, then Reddit Legal at contact@reddit.com
• Facebook/Instagram: Report post > Harassment > Personal information shared
• Discord: Trust & Safety report via the official form
• 4chan/8kun: Post may need to age out; document instead

Follow up if the platform doesn't respond within 24 hours. Persistence pays off.

File Police Reports

Even if you think police won't act, a report creates a paper trail. You'll need it for restraining orders, civil suits, or insurance claims later. File with:

• Your local police department
• The FBI IC3 (ic3.gov)
• Your state Attorney General's consumer protection unit

Notify Your Employer (If Relevant)

If your employer's information was leaked, contact HR before the harassers do. A proactive heads-up protects your job and gives the company time to filter calls and emails.

Day 2–7: Remove the Source Information

The doxx post will eventually come down, but the underlying data broker listings that enabled it will still be there—ready for the next attack. Removing them is the most important long-term step.

PrivacyOn removes your information from 100+ data broker sites continuously, re-submitting when they relist you, and monitors the dark web for new leaks. After a doxx, it's the fastest way to close the loopholes that made you findable in the first place.

Week 2+: Rebuild Your Privacy Posture

Audit Social Media

• Switch all accounts to private
• Remove posts that reveal your location, employer, or routine
• Strip EXIF data from photos
• Unlink accounts from your real name

Consider Temporary Relocation

If you received credible physical threats, stay with family or friends for a week or two. Most doxxing mobs lose interest within days.

Change Your Phone Number

A new, unlisted number stops the harassment calls. Keep the old one active for 2–4 weeks to document the abuse as evidence, then retire it.

Get an Address Confidentiality Program

If doxxing was tied to domestic violence, stalking, or hate crime, many states offer ACPs that legally substitute your home address with a state-provided one on all public records.

Legal Options

• Restraining orders—against specific identified individuals
• Civil lawsuits—for damages, especially if you lost income
• DMCA takedowns—if doxxers used your photos
• Criminal complaints—stalking, harassment, making threats

Take Care of Yourself

Being doxxed is traumatic. Don't minimize what you've been through. Talk to a therapist. Take time off work if you can. Eat, sleep, and lean on the people who love you. The mob will move on. You will come out the other side—safer, stronger, and smarter about protecting yourself next time.