What Is Doxxing and How Can You Protect Yourself?

What Is Doxxing?

Doxxing (also spelled "doxing") is the act of researching and publicly publishing private or personal information about an individual online — typically their home address, phone number, workplace, or family members — with the intent to enable harassment, stalking, threats, or real-world harm. The term derives from "dropping documents" (dox).

Doxxing has become an increasingly common form of online harassment, affecting private individuals, public figures, journalists, activists, and anyone who becomes a target of online mobs or personal vendettas. The information used in doxxing attacks is often sourced directly from data broker websites, where personal details are freely searchable by anyone.

How Does Doxxing Work?

Doxxers typically gather personal information from data broker sites (Spokeo, WhitePages, BeenVerified), social media profiles, public records, and other online sources. They then publish this information — usually a home address, phone number, and workplace — on social media, forums, or dedicated harassment sites to direct others to target the victim.

The process of doxxing someone has become alarmingly easy due to the proliferation of data broker websites. A determined individual can find a person's home address, phone number, family members' names, and workplace in minutes using free people-search sites. This information is then used to:

• Post the victim's home address publicly to invite physical confrontation
• Flood the victim's phone with calls and texts
• Contact the victim's employer with false accusations
• Send threatening messages to the victim's family members
• "Swat" the victim — making false emergency calls to send police to their home
• Enable physical stalking and surveillance

Where Do Doxxers Get Personal Information?

The primary source of information used in doxxing attacks is data broker and people-search websites, which aggregate personal information from public records and make it freely searchable. Other sources include social media profiles, LinkedIn, domain registration records (WHOIS), and leaked data from previous breaches.

How Can You Protect Yourself from Doxxing?

The most effective doxxing protection is removing your personal information from data broker sites, which are the primary source of doxxing information. Additional measures include using a P.O. box for public registrations, enabling strong privacy settings on social media, using a VPN, and using a dedicated email address for public-facing accounts.

Step 1: Remove Your Data from Data Broker Sites

Data broker sites are the single most important source of doxxing information. Removing your home address, phone number, and family member details from sites like Spokeo, WhitePages, BeenVerified, and Intelius eliminates the easiest path for doxxers to find your personal information. A service like RemoveMe handles this automatically across 115+ sites for $10/month.

Step 2: Audit and Lock Down Social Media

Review the privacy settings on all social media accounts. Remove your home address, phone number, and date of birth from public profiles. Consider making your accounts private or limiting visibility to people you know. Be cautious about posting photos that reveal your location, home, or daily routine.

Step 3: Use a P.O. Box for Public Registrations

When registering for services, entering contests, or making purchases that require an address, use a P.O. box or a mail forwarding service rather than your home address. This prevents your home address from appearing in the public records that data brokers harvest.

Step 4: Protect Your Domain Registrations

If you own any websites or domains, ensure WHOIS privacy protection is enabled on your domain registrations. Without this protection, your name, address, and email are publicly listed in the WHOIS database and easily searchable.

Step 5: Use a VPN

A VPN (Virtual Private Network) masks your IP address, preventing doxxers from using your IP to identify your approximate location or internet service provider. This is particularly important if you participate in online communities or gaming where your IP address might be exposed.

What Should You Do If You Have Been Doxxed?

If you have been doxxed: document all evidence with screenshots, report to the platform where your information was posted, file a police report, contact the FBI's IC3 (ic3.gov), notify your employer and family, and use a data removal service to remove your information from data broker sites immediately.

Being doxxed is a serious situation that requires immediate action. The steps to take include:

1. Document everything: Take screenshots of all posts containing your personal information before they are deleted.
2. Report to platforms: Use the reporting tools on the platform where your information was posted to request removal.
3. File a police report: Even if the doxxing does not yet involve direct threats, a police report creates an official record.
4. Contact the FBI: File a complaint at ic3.gov if the doxxing involves threats or crosses state lines.
5. Alert your employer and family: Warn people who might be contacted or targeted as part of the harassment campaign.
6. Remove your data from data brokers: Use RemoveMe or a similar service to remove your information from the data broker sites that doxxers use as their primary research tool.

Frequently Asked Questions About Doxxing

Sources and References

• FBI Internet Crime Complaint Center (IC3): ic3.gov
• National Domestic Violence Hotline: thehotline.org
• Cyber Civil Rights Initiative: cybercivilrights.org
• Electronic Frontier Foundation: Surveillance Self-Defense Guide