What to do if you've been doxxed: a step-by-step response plan (2026)
At a glance
- Urgency urgent
- Category threat response
- Key action Assess physical safety first; if threats reference your home/family or you fear violence, call 911.
- Last verified 2026-06-21
Immediate steps
- Assess physical safety first; if threats reference your home/family or you fear violence, call 911.
- Document everything before it disappears (see the evidence section below).
- Report the doxxing content to the platform(s) hosting it and request removal.
- Lock down accounts: change passwords, enable two-factor authentication (prefer an authenticator app over SMS).
- Tell trusted people and, if relevant, your employer/school so they aren't socially engineered.
- Submit a removal request to Google for the doxxing URLs.
Evidence preservation
Take full-screen screenshots that capture the URL, username, date, and time. Save the web addresses (URLs) of each post. Do not delete the harmful posts or your own accounts before documenting — you may need the evidence for platforms and law enforcement. Keep a dated log of each incident.
Where to report
| Entity | Contact | What to report |
|---|---|---|
| Hosting platform (X, Meta, TikTok, Reddit, etc.) | Each platform's report/abuse tool | The specific posts publishing your private info; request removal under their privacy/doxxing policy |
| Google Search | https://support.google.com/websearch/answer/9673730 and the 'Results about you' hub at goo.gle/resultsaboutyou | URLs exposing your contact info, or doxxing content with threats |
| FBI IC3 | https://www.ic3.gov | Doxxing accompanied by threats, stalking, or extortion |
| Local police | Non-emergency line; 911 if in danger | Threats, harassment, and to create a paper trail / case number |
Removal actions
- Report each doxxing post to the platform and cite their doxxing/private-information policy.
- Use Google's 'Remove my private info' form and 'Results about you' hub to remove search results exposing your address, phone, email, or government IDs.
- Opt out of the people-search sites and data brokers that likely supplied your address/phone (see remove yourself from people search sites).
- If outdated content lingers in search after the source is removed, use Google's refresh/outdated-content tool.
Prevention and follow-up
- Run a personal privacy audit and remove yourself from people-search/data-broker sites.
- Freeze your credit at all three bureaus and place a fraud alert.
- Set up Google 'Results about you' monitoring for your name, phone, address, and email.
- If you fear a swatting hoax, see our swatting guide for proactive 911-registration options.
Legal context
There is no single comprehensive federal anti-doxxing statute, but several federal laws can apply: 18 U.S.C. 119 (publishing 'restricted personal information' about certain covered persons with intent to threaten/harm) and the federal stalking statute 18 U.S.C. 2261A can reach doxxing tied to threats or a course of conduct causing fear or substantial emotional distress. Many states have anti-doxxing and cyber-harassment laws, and some (e.g., California, Illinois) provide civil remedies. This is general information, not legal advice.
Key mistakes to avoid
- Engaging with or retaliating against the doxxer — it often escalates the attack.
- Deleting the evidence before documenting it.
- Assuming deleting your social account removes your address — brokered data persists.
- Ignoring physical-safety planning while focusing only on takedowns.
How Delist helps
Doxxing can begin with data brokers and people-search sites that expose an address, phone number, or relatives. Removing eligible listings reduces the information available from those sources. Delist files supported broker removals and checks again for exposed records.
Find out what personal data is exposed about you online.
Run a free scan →Frequently asked questions
Is this illegal?
There is no single comprehensive federal anti-doxxing statute, but several federal laws can apply: 18 U.S.C. 119 (publishing 'restricted personal information' about certain covered persons with intent to threaten/harm) and the federal stalking statute 18 U.S.C.
How do I prevent this from happening again?
Run a personal privacy audit and remove yourself from people-search/data-broker sites. Freeze your credit at all three bureaus and place a fraud alert.
Should I contact the police?
If you are in immediate danger or receiving threats, yes — call 911 or your local non-emergency line to create a report. A police report creates a paper trail that platforms and legal processes may require.
Can Delist help with this?
Delist can find exposed broker listings, file supported removal requests, and check again for records that remain or reappear. It does not remove an active threat or replace platform reports, law enforcement, or safety planning.
Sources
This guide provides general information for informational purposes only and is not a substitute for professional legal, medical, or safety advice. If you are in danger, contact emergency services immediately.