Being doxxed right now? What to do first

The first hour: a checklist

  1. Get safe. For an emergency or a threat to life, call 911. Then report it to your local police FBI IC3 (29 Apr 2025).
  2. Do not engage. Replying can feed the attack. If you look at the forums, use Tor Browser and do not post EFF, Part II (31 Aug 2026).
  3. Write it down. Start an incident log now, before posts are deleted (template below) EFF, Part II (31 Aug 2026).
  4. Lock your number. Turn on your carrier's free SIM lock so nobody can move your number Verizon (read 16 Oct 2026) AT&T (read 16 Oct 2026) T-Mobile (read 16 Oct 2026).
  5. Lock your accounts. Turn on two-factor sign-in, make social accounts private, mute and block EFF, Part II (31 Aug 2026).
  6. Bring in people you trust. Split the work: one person logs, one watches, one handles reports EFF, Part II (31 Aug 2026).

Doxxing is sharing someone's personal details to harass or hurt them EFF, Part I (31 Aug 2026). Being targeted says nothing about what you did.

Who to contact for what. All services listed are free.

SituationWhere to goSource
Threat to life, or someone at your doorCall 911FBI IC3 (29 Apr 2025)
Threats, stalking or a swatting callLocal police; FBI at tips.fbi.gov or 1-800-CALL-FBI (225-5324); internet crime at ic3.govFBI IC3 update (read 16 Oct 2026)
A post with your details on a site or appThe site's own report button (choose private information or harassment if offered)Each platform's rules
Google results showing your address with threatsGoogle's personal-information removal request, or "Results about you"Google Search Help (read 16 Oct 2026)
Your phone numberYour carrier's SIM or account lockVerizon (read 16 Oct 2026) AT&T (read 16 Oct 2026) T-Mobile (read 16 Oct 2026)
Intimate images shared or threatenedSee our intimate-image removal guideFTC (13 Oct 2026)
Feeling overwhelmed or unsafe in yourselfCall or text 988, any time988 Lifeline (read 16 Oct 2026)

How do you document doxxing? Keep an incident log

Start the log before you report anything. Posts can vanish once they are reported or deleted. EFF puts it simply: "An incident log is a way to keep track of suspicious or harmful activity online" EFF, Part II (31 Aug 2026). It can help if police get involved later EFF, Part II (31 Aug 2026).

A spreadsheet or a notes file is enough. Use these columns:

ColumnWhat to write
Date and timeWhen you saw it, with your time zone
Site or appPlatform name and the full link (URL)
What happenedA short description: what was posted or sent
WhoUsername or description of the person, and anyone else involved
EvidenceScreenshot file name; note if the post was later deleted
Action takenReport filed, reference number, reply received

Keep everything, even the ugly parts. The FBI asks swatting victims to keep usernames, email addresses, websites, platform names, photos and videos FBI IC3 (29 Apr 2025). Save screenshots with the address bar visible. Do not crop out dates.

Let someone else hold the pen. Reading every post is draining. EFF suggests a trusted friend keep the log or watch the forums for you EFF, Part II (31 Aug 2026). In its words: "Knowing who you trust is as important as identifying threat actors" EFF, Part II (31 Aug 2026).

How do you report doxxing to platforms and Google?

Report each post on the site where it appears. Use the report button and pick the private-information or harassment option if there is one. Add the reference number to your log.

Ask Google to drop the results. Google's help page says: "Doxxing is when people share your private information to harm you" Google Search Help (read 16 Oct 2026). It may remove results that pair your contact details with threats or calls to harass you. It may also remove large collections of your details with no legitimate purpose Google Search Help (read 16 Oct 2026). You must list the exact URLs, and only those are reviewed Google Search Help (read 16 Oct 2026).

Use "Results about you" for the long tail. It finds results with your address, phone number or email, and can alert you to new ones Google Search Help (read 16 Oct 2026). Our Google removal guide walks through both forms.

Remember the limit. Removing a Google result does not delete the page. The post stays on the site until that site removes it.

Should you call the police, and what about swatting?

Call 911 for any immediate danger. For threats and other crimes, the FBI says to report to local police, and to the FBI at tips.fbi.gov or 1-800-CALL-FBI FBI IC3 (29 Apr 2025). An updated FBI alert also lists the IC3 complaint form at ic3.gov FBI IC3 update (read 16 Oct 2026).

Not everyone wants police involved. EFF acknowledges this plainly: "For many, talking to law enforcement will only make things worse" EFF, Part II (31 Aug 2026). That is your call to make.

Plan for swatting. Swatting is a hoax emergency call meant to send armed police to your door FBI IC3 (29 Apr 2025). EFF warns: "SWATing is a tactic often used in these types of coordinated attacks" EFF, Part II (31 Aug 2026). Attackers gather personal details from public sources and can spoof calls to look like they came from you FBI IC3 (29 Apr 2025).

  • Warn police in advance. EFF suggests you "contact law enforcement to let them know what you're dealing with" if swatting seems possible EFF, Part II (31 Aug 2026).
  • Talk it through at home. The FBI suggests planning with family or colleagues for police contact at your home or business FBI IC3 (29 Apr 2025).
  • If it happens: the FBI says to "stay calm, listen, and cooperate with responding law enforcement personnel" FBI IC3 update (read 16 Oct 2026). Keep every related name, number and recording afterwards FBI IC3 update (read 16 Oct 2026).
  • Secure smart-home devices. The FBI notes attackers may use hacked smart-home devices. Use unique passwords and multi-factor sign-in on them too FBI IC3 (29 Apr 2025).

How do you protect your phone number and accounts?

Carrier locks against SIM swaps and number transfers, from each carrier's own page (read 16 Oct 2026).

CarrierFeatureWhere to turn it on
VerizonSIM Protection: blocks any change that needs a new SIM. Free Verizon (read 16 Oct 2026)My Verizon app: Account, Edit Profile and Settings, Security, SIM Protection. Turning it off takes 15 minutes, and store staff cannot do it for you
AT&TWireless Account Lock: blocks SIM and eSIM changes, number changes and transfers to another carrier AT&T (read 16 Oct 2026)AT&T app: person icon, then Wireless account lock
T-MobileSIM Protection (free on postpaid), Port Out Protection, and an account PIN of 6 to 15 digits T-Mobile (read 16 Oct 2026)T-Life app: Manage, gear icon, Security. Port Out Protection is added per line under Manage add-ons

Why the phone number matters. A SIM swap moves your number to someone else's phone. Your text-message codes then go to them. EFF recommends PINs or passwords on your phone and bank accounts wherever offered EFF, Part II (31 Aug 2026). Our phone checklist lists the warning signs.

Switch to passkeys where you can. A passkey is a sign-in key stored on your phone, computer or security key, unlocked with your face, fingerprint or PIN FIDO Alliance (read 16 Oct 2026). The FIDO Alliance says the standard gives "phishing-resistant authentication" FIDO Alliance (read 16 Oct 2026). Text-message codes are weaker, because they follow your number. See our password security guide.

Distrust "support" messages. The FBI warns that attackers pose as platform support to get verification codes. They also send look-alike "new login" emails FBI IC3 (10 Aug 2026). Never share a code. Open the app yourself instead of tapping a link FBI IC3 (10 Aug 2026).

Make accounts private, or pause them. Set social accounts to private, mute words and block accounts EFF, Part II (31 Aug 2026). If an account keeps leaking information, consider shutting it down. Some apps let you deactivate and come back later EFF, Part II (31 Aug 2026).

Can you hide your home address? Address confidentiality programs

Many states let some people use a substitute address in state records. These are called Address Confidentiality Programs, or "Safe at Home" in some states EFF, Part I (31 Aug 2026). The National Association of Secretaries of State says at least 36 states run one NASS resolution (reauthorized 10 Jul 2022). Its resolution names victims of domestic violence, rape and human trafficking NASS resolution (reauthorized 10 Jul 2022).

Eligibility differs by state. Most programs serve victims of specific crimes, so being doxxed alone may not qualify. Ask your state's program directly.

Find your state's program. There is no federal directory. The Washington Secretary of State publishes a state-by-state list with each program's office, phone and website Washington Secretary of State list (2 May 2024). That list is dated 2 May 2024. It then marked six states as having no program: Alabama, Alaska, North Dakota, South Carolina, South Dakota and Wyoming Washington Secretary of State list (2 May 2024). Missouri's Secretary of State keeps a similar directory Missouri Secretary of State (read 16 Oct 2026). EFF links another list hosted on trynova.org NOVA list, linked by EFF. The lists differ slightly (Missouri's shows South Carolina's program as pending), so confirm with your state.

Voter and property records. Sites that mirror voter, property and business records often have opt-out forms. EFF notes: "Such sites often have forms where you can request your information be taken down" EFF, Part I (31 Aug 2026). The original government record stays, but casual lookups get harder EFF, Part I (31 Aug 2026).

How do you get your details off data brokers and people-search sites?

Doing it yourself works best, but takes time. EFF says: "The most effective way to get your information removed from their stores is to file requests manually" EFF, Part I (31 Aug 2026). It points to BADBOOL, Yael Grauer's free list of the worst brokers and how to opt out of each BADBOOL on GitHub.

What the testing found. Consumer Reports and Tall Poppy tested seven paid removal services with 32 volunteers Consumer Reports (8 Aug 2024). After four months, the services had removed 35% of listings. Manual opt-outs reached about 70% Consumer Reports and Tall Poppy report (Aug 2024). EasyOptOuts (65%) and Optery's top tier (68%) did best Consumer Reports and Tall Poppy report (Aug 2024). The sample was small and not representative Consumer Reports and Tall Poppy report (Aug 2024).

When a paid service still makes sense. EFF adds: "This process can be grueling and time-consuming, so it may be worth investing in a service that automates the process" EFF, Part I (31 Aug 2026). In a crisis, your time may be worth more.

How do you watch for new posts about you?

Set alerts, then step back. Google Alerts can email you when your name is newly indexed EFF, Part II (31 Aug 2026). For coordinated campaigns, EFF suggests Open Measures, while noting it may miss oblique references EFF, Part II (31 Aug 2026).

What Open Measures is. It describes itself as an independent, worker-led team tracking harmful online content across many social networks. It offers "a rate limited and free version" of its app, with paid plans by demo (its own description) Open Measures (read 16 Oct 2026).

Forums are the hard part. If someone must check hate forums, EFF suggests Tor Browser for privacy. Do not engage, and ideally let a friend do it EFF, Part II (31 Aug 2026). Rotate who watches. Nobody should read this alone for hours.

Search for your old accounts. Username tools such as WhatsMyName and Namechk find forgotten profiles. They are quick but not fully accurate EFF, Part I (31 Aug 2026). They also help spot impersonation EFF, Part I (31 Aug 2026).

How do you prevent doxxing before it happens?

  1. Check breaches. Look yourself up on Have I Been Pwned. If an email or phone number leaked, consider changing it EFF, Part I (31 Aug 2026).
  2. Close the easy sources. Opt out of people-search sites and record mirrors, as above EFF, Part I (31 Aug 2026).
  3. Tighten social media. Go private where you can, and delete accounts you no longer use EFF, Part I (31 Aug 2026).
  4. Mind photos and videos. The FBI warns that posted images can be exploited, and asks people to review their online presence FBI IC3 (29 Apr 2025).
  5. Add strong protection to your main account. EFF suggests Google's Advanced Protection Program if you expect attacks EFF, Part I (31 Aug 2026).
  6. Make a PACE plan. PACE stands for Primary, Alternate, Contingency and Emergency. EFF says: "Think of it like a panic button, a routine checklist of things to do if shit hits the fan" EFF, Part II (31 Aug 2026). Build it with people you trust EFF, Part II (31 Aug 2026).
  7. Use encrypted chat for your group. EFF suggests Signal for coordinating with your support team EFF, Part I (31 Aug 2026).

Investigators who work under their own name face the same risks. Our OSINT OpSec guide covers separating work identities.

Where can you get support?

Look after yourself, not only your accounts. EFF notes that being doxxed can be very dysregulating, meaning it throws your body and mind off balance. Its advice: "Do what you need to do, be it involving the help of friends, taking a break, or whatever else" EFF, Part II (31 Aug 2026).

Sources

Every source was read on 16 October 2026. Carrier menus change; check the carrier page if a step looks different. This page is general safety information, not legal advice.

  1. Daly Barnett, EFF — "Doxxing Safety Pt I: Prevention and Footprint Management" (31 Aug 2026, updated 3 Sep 2026)
  2. Daly Barnett, EFF — "Doxxing Safety Part II: Incident Response" (31 Aug 2026, updated 3 Sep 2026)
  3. FBI Internet Crime Complaint Center — "Threat Actors Use 'Swatting' to Target Victims Nationwide", I-042925-PSA (29 Apr 2025)
  4. FBI Internet Crime Complaint Center — update to I-042925-PSA on swatting (undated on page; read 16 Oct 2026)
  5. FBI Internet Crime Complaint Center — "Sexual Exploitation Actors Stealing and Leaking Explicit Content", I-081026-PSA (10 Aug 2026)
  6. Verizon — "SIM swapping" account security page (read 16 Oct 2026)
  7. AT&T — "Learn about Wireless Account Lock" (read 16 Oct 2026)
  8. T-Mobile — "Protect your T-Mobile account from fraud" (read 16 Oct 2026)
  9. FIDO Alliance — "Passkeys" (read 16 Oct 2026)
  10. National Association of Secretaries of State — resolution on state Address Confidentiality Programs (adopted Jul 2017, reauthorized 10 Jul 2022)
  11. Washington Secretary of State — "Address Confidentiality Programs by State" (updated 2 May 2024)
  12. Missouri Secretary of State, Safe at Home — "Address Confidentiality Programs by State" (undated; read 16 Oct 2026)
  13. US State Address Confidentiality Programs list, hosted by NOVA and linked by EFF (undated; read 16 Oct 2026)
  14. Yael Grauer — Big-Ass Data Broker Opt-Out List (BADBOOL), GitHub (read 16 Oct 2026)
  15. Yael Grauer, Consumer Reports — "Data Defense: Evaluating People-Search Site Removal Services" announcement (8 Aug 2024)
  16. Consumer Reports and Tall Poppy — "Data Defense: Evaluating People-Search Site Removal Services", full report PDF (Aug 2024)
  17. Open Measures — homepage (read 16 Oct 2026)
  18. Google Search Help — "Remove my private info from Google Search" (read 16 Oct 2026)
  19. 988 Suicide & Crisis Lifeline — homepage (read 16 Oct 2026)
  20. Cyber Civil Rights Initiative — Image Abuse Helpline (read 16 Oct 2026)
  21. FTC Consumer Alert — "How to avoid deceptive sextortion assistance services and find real help" (13 Oct 2026)

Frequently Asked Questions

Should I reply to the people doxxing me or try to find out who they are?

It is usually safer not to. Replies can feed the attack, and EFF advises not engaging with anyone on the forums. Leave identification to police if you report it. Your energy is better spent on the incident log, account locks and removal requests.

Do I have to delete my social media accounts?

Not necessarily. You can make accounts private, mute words and block attackers. If an account keeps exposing information or is the main target, shutting it down can help, and some apps let you deactivate temporarily and come back later.

What is a PACE plan?

PACE stands for Primary, Alternate, Contingency and Emergency. It is a short plan, made in advance with people you trust, for how you will communicate and where you will go if things escalate. EFF compares it to a panic button.

Can someone find my address from voter or property records?

Often, yes, because some sites republish voter, property and business records. Many of those sites have opt-out forms. The government record itself stays, but removing the copies makes casual lookups harder. Some states also offer an Address Confidentiality Program for eligible victims.

Someone says they are from my phone carrier or a platform and needs a code. Is it real?

Treat it as an attack. The FBI warns that criminals impersonate platform support to get verification codes and send fake new-login emails. Never share a code. Hang up, then contact the company through its own app or website.

Is a paid data-removal service worth it while I am being doxxed?

It can be, if you have no time or energy. Testing by Consumer Reports and Tall Poppy found manual opt-outs removed more listings than paid services on average. A service still saves hours, and the best ones scored much higher than the average.

Next step

Lock your phone number today. It takes two minutes in your carrier's app (table above) and stops the most damaging follow-up attack. Then start your opt-outs with our people-search removal guide.