If you are in immediate danger: Call 911. If someone has published your home address and you believe there’s a physical threat, law enforcement can help with safety planning.

Stalking & harassment: Call the National Domestic Violence Hotline at 1-800-799-7233 or the Cyber Civil Rights Initiative crisis helpline at 844-878-2274.

Crisis support: Call or text 988 (Suicide & Crisis Lifeline) if you’re in emotional distress. You are not overreacting. What’s happening to you is real.

The TLDR

Doxxing (sometimes spelled “doxing”) is when someone publishes your private information online — your home address, phone number, workplace, real name, family members’ identities — with the intent to harass, intimidate, or cause harm. It’s not just an inconvenience. People have lost jobs, been forced to move, developed PTSD, and in cases involving swatting, people have died. If your information has been published: you are not overreacting. This is a recognized form of abuse, and in many jurisdictions it’s a crime. There are concrete steps you can take right now to protect yourself.

Before We Go Any Further

If you’re reading this because it’s happening to you, here’s what you need to know:

You did not cause this. It doesn’t matter if you posted something controversial, won an argument online, played a video game, or did absolutely nothing. No one deserves to have their safety threatened. The person who doxxed you made a deliberate choice to weaponize your information. That’s on them.

You are not overreacting. When someone publishes your home address, it’s rational to be afraid. When strangers are sending threats to your phone, it’s rational to feel unsafe. When your family members are being contacted, it’s rational to feel violated. Anyone telling you to “just ignore it” doesn’t understand the threat.

You can get through this. It feels overwhelming right now. It may feel like your entire life is exposed and there’s no way to put it back. That’s not true. The steps in this article will help you regain control. It takes time, but people recover from this.

What Doxxing Actually Is

The term comes from “dropping docs” — releasing documents about someone. It started in 1990s hacker culture as a way to expose rival hackers’ real identities. It’s since become a mainstream harassment tactic used across every platform and community.

Doxxing involves collecting someone’s personal information from various sources and publishing it — usually on social media, forums, paste sites, or messaging platforms — along with an implicit or explicit call for others to use that information against you.

What typically gets published:

The goal is not just exposure. The goal is fear. The doxxer wants you to know that they can reach you — and that anyone else who sees the information can too.

How Your Information Gets Collected

Most doxxing doesn’t require hacking. The information is already out there. The doxxer’s job is aggregation — pulling together pieces from different sources until they have a complete picture.

The OSINT Pipeline

Open Source Intelligence (OSINT) is the practice of gathering information from publicly available sources. Security researchers and journalists use it legitimately. Doxxers use the same techniques maliciously.

Social media mining:

Data broker lookups:

Public records:

Data breaches:

The key insight: No single source reveals everything. Doxxing is about connecting dots across sources. Your Instagram username links to your Twitter, which links to your LinkedIn, which confirms your employer, which leads to your state’s voter registration, which confirms your home address. Each step is trivial. The aggregation is devastating.

When Doxxing Becomes Physical — Swatting

Swatting is the most dangerous escalation of doxxing. The attacker calls 911 (or the local equivalent) and reports a violent emergency at the victim’s home address — an active shooter, a hostage situation, a bomb threat. Armed police respond to what they believe is a life-threatening situation.

People have died from swatting. In 2017, Andrew Finch was shot and killed by police in Wichita, Kansas, after a swatting call over a $1.50 Call of Duty bet. He wasn’t involved in the dispute. The caller gave the wrong address. Finch opened his front door and was killed.

Swatting is not a prank. It’s attempted murder by proxy.

The attacker uses your doxxed address to summon armed responders who believe they’re entering a violent situation. They’re trained to respond with force. The victim — who has no idea what’s happening — opens their door to tactical officers pointing weapons at them.

Who gets swatted:

If you’ve been swatted:

The Emotional Impact

Doxxing doesn’t end when the post gets taken down. The psychological effects persist.

What victims commonly experience:

These are normal responses to an abnormal situation. You are not weak for experiencing them. You are having a rational response to having your safety violated.

If you recognize these patterns in yourself: Consider talking to a mental health professional, particularly one experienced with online harassment or trauma. Organizations like the Cyber Civil Rights Initiative can connect you with appropriate support.

What to Do Right Now

If you’ve been doxxed, here are the immediate steps — in order of priority.

1. Assess the threat level

Is the information that was published enough to locate you physically? If your home address is exposed and you’re receiving threats, the threat is physical and you should contact local law enforcement. If it’s your email and username, the threat is primarily online harassment.

2. Document everything

Before anything gets deleted, screenshot everything:

Save these screenshots somewhere secure — not just on your phone. Email them to yourself. Save to cloud storage. You’ll need them for law enforcement reports, platform reports, and potentially legal action.

3. Report to platforms

Every major platform has policies against doxxing. Report the posts for:

Platforms are inconsistent in their response times. Report on every platform where the information appears. If the information is on a paste site or forum with no reporting mechanism, you may need to contact the hosting provider directly.

4. Contact law enforcement

File a police report. Doxxing is illegal in many states and under various federal statutes:

File with the FBI IC3 as well, especially if the harassment is interstate or involves organized groups.

5. Lock down your accounts

6. Contact data brokers

Start removal requests with the major data brokers that are exposing your information. This is tedious but critical:

7. Address physical safety

If your home address is exposed:

Reducing Your Exposure Going Forward

You can’t make yourself invisible, but you can make aggregation significantly harder.

Usernames: Don’t reuse usernames across platforms. An anonymous Reddit account linked to a public Instagram defeats the purpose of both.

Photos: Be mindful of what’s in the background. Street signs, house numbers, license plates, workplace logos, and school names all contribute to location identification.

Location data: Turn off geotagging on photos. Don’t check in at your home. Be cautious about sharing real-time location.

Public records: Use a PO Box or registered agent for any public filings (business, domain registration). Some states allow address confidentiality programs for harassment victims.

Social media: Audit your old posts. A comment from 2018 mentioning your apartment complex is still findable. Most platforms have tools to bulk-review or delete old posts.

Data brokers: Opt out regularly — many re-list you after 6–12 months. Consider a monitoring service that handles ongoing removal.

Recovery Is Not Linear

Some days will feel normal. Some days a notification on your phone will make your heart race. Some days you’ll feel angry. Some days you’ll feel exhausted. All of this is part of the process.

The harassment usually peaks and then fades as the doxxer and the mob lose interest. Most doxxing situations become manageable within weeks to months — but the emotional recovery can take longer, and that’s okay.

You don’t have to handle this alone. Tell someone you trust. Talk to a professional. Reach out to organizations that specialize in this. The people who weaponized your information want you to feel isolated. Don’t let them win.

Resources