What to Do If You've Been Doxxed

A calm, practical action plan for the first hours and days after being doxxed: lock down accounts, preserve evidence, get content removed, and stay safe.

By ·

General information, not legal advice. Novam Legal is not a law firm. For advice about your situation, talk to a licensed attorney.

Being doxxed — having your private information exposed to intimidate or harass you — is frightening, but the first hours are when clear, calm action matters most. Work through this list in order.

1. Preserve evidence before anything disappears

Screenshot everything: the posts, the URLs, the usernames, timestamps, and any threats. Save full-page captures and, where possible, the page URL and the account handle. This record is what makes platform reports, police reports, and any future legal action possible. Do this before you report, because content often gets deleted once you complain.

2. Lock down your accounts

Assume your passwords may be exposed. Change passwords on your email, financial, and social accounts, turn on two-factor authentication (prefer an authenticator app over SMS), and review active sessions and connected apps. Freeze your credit with the three bureaus if financial data was leaked.

3. Report to the platforms

Most major platforms explicitly prohibit sharing private information. Use their harassment or “private information” report flow and reference the exact posts. Doxxing that includes threats, a home address, or calls to harass usually violates the rules and can be removed quickly.

4. Get the underlying data removed

Doxxers often pull from people-search sites. Opt out of the major data brokers so the information is harder to re-share, and send removal requests to any site hosting the leaked details. Removing the source shrinks the harasser’s ammunition.

5. Consider law enforcement

If there are credible threats, a pattern of stalking, or the release of information intended to incite harm, file a police report and bring your evidence package. Doxxing tied to threats or NCII may be criminal depending on your jurisdiction. A documented report also strengthens any protective-order or civil case.

6. Protect yourself day-to-day

Tell trusted people what’s happening, tighten privacy settings, and be alert for follow-on scams and impersonation. If your home address was posted, notify anyone who shares your home and consider a temporary stay elsewhere if threats are specific.

Don’t engage the harasser

Responding usually escalates it and can compromise a future case. Document, report, remove, and route serious threats to law enforcement instead.

Doing this yourself is slow and the sites make it deliberately hard. Novam Legal can send the removal requests and takedown notices for you — and follow up until it’s gone. See plans and get started →

Get the next privacy guide by email

New removal and safety guides, plus a short welcome series. Start with the free privacy self-check checklist.

Email me new Novam Legal privacy guides and occasional product updates. Unsubscribe anytime. We’ll email you a link to confirm first. See our Privacy Policy.

About the author: George Edos

George Edos is the founder of Novam, where he builds privacy and AI software, including the tools behind Novam Legal's data-removal and takedown services. He writes these guides to help people find and remove their personal information online on their own, and to explain where a service can save time. He is not a lawyer, and nothing he writes is legal advice.

Important: Novam is not a law firm and does not give legal advice. Novam Legal sends privacy removal and takedown requests on your behalf and provides self-help information and document drafts. It is not a substitute for a licensed attorney; have an attorney review anything before you file it.