Doxxing, the act of publicly revealing someone's private personal information without their consent, has become one of the most common forms of online harassment. Victims can face threats, harassment, swatting attacks, and real-world danger when their home address, phone number, workplace, or family members' identities are exposed. While you cannot control other people's behavior, you can make it significantly harder for anyone to find and publish your personal information.

What Doxxing Is and Why It Happens

The term "doxxing" (sometimes spelled "doxing") comes from "dropping documents" and originally referred to hackers revealing the real identity behind an anonymous online handle. Today, it broadly means publishing someone's personal information, typically their real name, home address, phone number, employer, or family details, with the intent to intimidate, harass, or enable others to target them.

Doxxing happens for many reasons. Online disagreements escalate when one party decides to "punish" the other by exposing their identity. Political activists and journalists are doxxed to silence them or subject them to threats. Gaming disputes, relationship breakdowns, and workplace conflicts all generate doxxing attacks. Anyone with an online presence is a potential target, and the barrier to entry for attackers is disturbingly low.

How Attackers Find Your Information

A skilled doxxer can piece together a surprising amount of personal information from publicly available sources. Understanding their methods helps you close the gaps they exploit:

  • Username tracking is the starting point. If you use the same username across multiple platforms, an attacker can find all your accounts using tools like Namechk or Sherlock. Each account reveals additional details: a gaming profile shows your time zone, a LinkedIn profile reveals your employer, and a Facebook profile might show your hometown.
  • People search sites like Spokeo, WhitePages, and BeenVerified aggregate public records and data broker information. Searching a name plus a city often reveals home addresses, phone numbers, relatives, and past addresses.
  • Domain registration records through WHOIS lookups can reveal the name, address, and phone number of anyone who registered a website without using privacy protection.
  • Social media analysis provides location clues through geotagged photos, check-ins, background details in images, and information shared in posts and comments.
  • Public records including property ownership, voter registration, court records, and business filings are accessible online in many jurisdictions.
  • Data breaches expose email addresses, passwords, and sometimes physical addresses and phone numbers that can be used to identify and locate someone.

Separating Your Online Identities

The most effective defense against doxxing is ensuring that your online identities cannot be easily linked to each other or to your real-world identity. This requires deliberate compartmentalization:

  1. Use different usernames for different contexts. Your professional identity, personal social media, anonymous forums, and gaming should each use completely different handles with no overlap or pattern.
  2. Create separate email addresses for each identity. Use your real name email for professional purposes only. Create pseudonymous email accounts for forums, social media, and anything public-facing. Use an email aliasing service to generate unique addresses for every service.
  3. Avoid cross-linking accounts. Never mention one account from another. Do not share the same photo across identities. Do not discuss the same personal details or use the same distinctive writing style.
  4. Use a VPN to prevent IP-based location tracking. Some forums and services log and display user IP addresses, which can be geolocated to your approximate area.

Removing Your Personal Information from the Web

Proactively removing your information from public databases significantly reduces your doxxing risk. Work through this checklist:

  • Opt out of people search sites. Prioritize the major ones: Spokeo, WhitePages, BeenVerified, Intelius, PeopleFinder, TruePeopleSearch, FastPeopleSearch, and Radaris. Each has its own opt-out procedure that usually involves finding your listing and submitting a removal request.
  • Enable WHOIS privacy on any domain names you own. Most registrars offer this for free or a small fee, replacing your personal information with the registrar's contact details.
  • Remove your address from public records where possible. Some states allow you to restrict access to voter registration information. Consider using a PO Box or mail forwarding service for any registrations that become public.
  • Review and lock down social media profiles. Set everything to private. Remove your phone number, email address, and location from visible profile fields. Disable the ability for others to tag you in photos without approval.
  • Google yourself regularly and request removal of results that display sensitive personal information through Google's removal request form.

Protecting Your Physical Address

Your home address is the single most dangerous piece of information to have exposed. Swatting attacks, physical threats, and unwanted visitors are real consequences of address exposure. Take concrete steps to keep it private:

  • Use a PO Box or virtual mailbox for all non-essential mail and as your address for online purchases, subscriptions, and account registrations.
  • Register your vehicle through an LLC or trust in states that allow it, keeping your name off public vehicle registration databases.
  • Be careful with delivery services. Food delivery and package delivery apps can leak your address. Use a workplace address or pickup point when possible.
  • Remove your address from data broker sites as a priority. These sites are the first place doxxers look.

What to Do If You Are Doxxed

If your information is published, act quickly. Document everything with screenshots including timestamps and URLs. Report the doxxing to the platform where it was posted, as most platforms prohibit sharing personal information. If the information appears on a website, contact the hosting provider to request removal. File a police report, especially if threats accompany the doxxing, as many jurisdictions now have laws against doxxing. Alert your employer, family, and close contacts so they are not caught off guard. Consider temporarily increasing your physical security by varying your routines and ensuring your home is secure.

Prevention is far easier than recovery. The time you invest in removing your personal information and separating your online identities is an investment in your safety and peace of mind.

Share this article