Fraudsters are exploiting enterprise chat apps like Teams and Webex to trick Chinese victims into transferring large sums of money, fueling a wave of complaints.
You post an opinion about a contentious issue on social media. Within hours, strangers have shared your home address, your employer’s phone number, and photos of your children’s school. Your inbox floods with threats. Someone calls your workplace demanding that you be fired. A crowd shows up outside your house. What started as online speech has become a safety crisis that follows you everywhere. You’ve been doxed.
If you’re looking for real answers about how to prevent doxxing before it happens or how to respond if you’re already facing harassment, this guide provides actionable strategies to lock down your digital footprint and protect your personal information.
Key Takeaways
Protect yourself from doxxing by reducing exposed data on social media, data broker sites, and public records
Secure your accounts with strong passwords, multi-factor authentication, and privacy-focused security tools like a VPN or antivirus protection
Platform-specific strategies help prevent doxxing on Discord, Twitter, and other high-risk spaces
If you’ve been doxxed, act immediately to document everything, remove content, and involve authorities when threats escalate
What Is Doxing?
Doxxing (sometimes spelled doxing) is the act of publicly exposing someone’s personal information online without their consent. Doxxing is often intended to harass, intimidate, or cause real‑world harm. This information can include a home address, phone number, workplace, family details, or other identifying data.
For a foundational understanding of what doxxing is, why it’s escalating, real‑world examples, and how the law treats doxxing, see our full guide on what is doxxing.
How Do People Get Doxxed?
Your digital footprint is a jigsaw puzzle spread across the internet, with each piece alone being harmless: a tagged photo here, a WHOIS domain record there, a mention of your hometown in an old forum post. Doxers piece together these fragments using open-source intelligence techniques like reverse image searches, username lookups, and metadata analysis.
Much of the information used in doxing also comes from data brokers, which aggregate public records and purchased data sets. Plus, there are information leaks from data breaches: billions of stolen email addresses, passwords, and personal details circulating on dark web forums.
That data can be cross-referenced with your online purchases, domain registrations, avatars, usernames, and even your writing style. Then there’s what you share and what others share about you on social media. In effect, you are leaving a trail of breadcrumbs every time you interact online.
Taken together, all these pieces create a detailed profile that doxers weaponize. Once they have your information, they post it on social media, anonymous forums, or dedicated harassment sites along with inflammatory language urging others to contact you.
Campaigns are coordinated across platforms, escalating from online harassment to email and text message threats, and sometimes physical confrontations or swatting attempts that put you in immediate danger.
How to Protect Yourself From Doxing
You shouldn’t have to make yourself invisible online, but you can significantly reduce the information available to potential doxers and make yourself a harder target. Here’s what to do:
Lock Down Your Social Media Accounts
Starting with your social media accounts, go through your privacy settings on every platform you use and maximize protection:
Immediate actions:
Set all accounts to private or restrict visibility to friends/followers only
Hide your friend lists, location data, and tagged photos from public view
Remove personal details like phone numbers, email addresses, birth dates, and hometown from your profile
Disable location services and strip metadata from photos before posting
Turn off check-ins and location tagging features
Audit Your Digital History:
Search your own name and review what appears publicly
Delete or edit old posts that mention your home address, children’s schools, or exact workplace
Ask family and friends not to tag you in posts that reveal your location or personal details
Review and untag yourself from photos that expose identifying information
Platform-Specific Settings:
Facebook: Restrict who can see your friends list, past posts, and profile information; disable facial recognition; review tags before they appear on your profile
Instagram: Make your account private, disable activity status, restrict comments, and carefully review follower requests before accepting
Twitter/X: Protect your tweets, disable photo tagging, hide sensitive content behind warnings, and enable two-factor authentication on a separate device
Discord: Use a unique username not tied to other accounts, disable DMs from non-friends, never share your Discord tag publicly, and avoid voice chat in public servers where your voice can be recorded
Remove Your Data from People-Finder Data Broker Sites
Data brokers are companies that mine the internet and public records for financial and credit reports, social media accounts, and more. They then sell that data to advertisers, companies, or individuals who may use it to doxx you.
You might be surprised by how much sensitive information is available to anyone who wants it. Data brokers often have contact information including real names, current and former addresses, birth dates, phone numbers, social media profiles, political affiliations, and other information most consider private.
There are two ways you can remove your personal information from data brokers or people-finder sites: manually or with an automated solution
The Manual Approach:
While you can remove your private information from many data broker sites, they tend to make the process tedious and frustrating. You’ll need to:
Identify which sites have your information (search for yourself on sites like Whitepages, Spokeo, BeenVerified, PeopleFinder)
Submit individual opt-out requests to each site
Follow unique removal processes for each broker (some require email verification, others need physical mail)
Re-check periodically as your information may reappear
The Automated Solution:
McAfee Personal Data Cleanup makes this process dramatically easier. Enter your name, date of birth, and home address, and we’ll scan it across high-risk data broker sites and help you remove it automatically.
If you plan to employ other automated data broker removal services, verify that they are reputable before handling over your information.
Secure WHOIS Records and Domain Privacy
If you own a website, your WHOIS record publicly lists your name, address, phone number, and email unless you take action. Use WHOIS privacy protection (also called domain privacy) through your registrar to replace your personal details with the registrar’s contact information, keeping your personal data out of public domain records. Most registrars offer this service for free or a nominal fee.
Fortify Your Account Security
Anyone who gains access to your email or social media accounts through phishing or a data breach could expose your private conversations, documents, and personal details. Protect yourself with robust security measures:
Use Strong, Unique Passwords:
Use passwords with at least 12-16 characters. Avoid personal information like pet names, birthdates, or family members
Change passwords immediately if a service you use reports a data breach
Use Multi-Factor Authentication (MFA):
Enable MFA on all critical accounts (email, social media, banking, work accounts)
Use app-based authenticators (Google Authenticator, Authy) rather than SMS when possible
Store backup codes in a secure location separate from your primary device
Be Vigilant against Phishing:
Be suspicious of unexpected emails, texts, or messages requesting login credentials
Always verify the sender before clicking links or providing information
Check URLs carefully. Phishing sites often use slight misspellings
Never enter credentials on a site you reached via a link in an email
Secure Your Document Storage
Keep sensitive documents, such as tax records, passport scans, and financial statements, out of easily searchable email folders or cloud storage that might be compromised. If you store them digitally, use encrypted storage with strong access controls.
Use Privacy and Security Tools
No single tool can prevent all doxing, but layered protection makes a big difference.
Identity Monitoring Services:
Consider using identity monitoring services that alert you when your personal information appears in new data breaches, on the dark web, or elsewhere it shouldn’t be. Early detection will allow you to act before the information is weaponized.
Comprehensive security suite:
A comprehensive security suite such as McAfee+ helps protect your devices from phishing attacks, malicious websites, and malware that could compromise your accounts.
Virtual Private Network (VPN):
When browsing on public Wi-Fi networks, your data is at greater risk of being intercepted. A virtual private network gives you an additional layer of protection by hiding your IP address and browsing activities when you’re on an unsecured network.
Encrypted Messaging:
For sensitive conversations, use end-to-end encrypted messaging apps like Signal or WhatsApp rather than standard SMS or unencrypted email.
Educate Your Family, Friends, and Colleagues
You might take every precaution, but if your partner posts a photo of your new house with the address or your colleague tags you in a work event with the location, your efforts are undermined.
Have honest conversations:
Explain why you’re cautious about personal information online
Share specific examples of what information should stay private
Encourage those close to you to adopt similar privacy practices
Set Family Guidelines:
For the digitally active, younger adults and teens in your family who may not fully understand the risks of oversharing, set family guidelines about what can be posted publicly and what should remain offline.
Workplace Training:
If you work in education, government, or a high-visibility field, suggest brief safety training sessions for staff to recognize and respond to doxing threats.
What to Do if You’ve Already Been Doxxed
If your information is already out there and you’re facing harassment, here’s how to respond quickly and effectively.
1. Assess the immediate situation
If you’re receiving threats, someone is showing up at your home with the intent to harm, or you believe you’re at risk of swatting, contact local law enforcement immediately. Your physical safety comes first.
2. Document Everything Thoroughly
Create comprehensive evidence:
Take screenshots of every post, message, and webpage that shares your information or threatens you.
Take note of URLs, usernames, timestamps, and platform names
Save original messages and emails. Don’t just screenshot; save the actual files.
Record any phone calls if legally permitted in your jurisdiction
Keep a detailed timeline of events
These pieces of evidence are essential for pursuing legal action, getting content removed from platforms, and demonstrating the severity of the harassment to law enforcement.
3. Get Your Content Removed
Platform Reporting:
Use the reporting tools on every platform where your private information has been illegally shared. Platforms can be slow to act, but be persistent and keep submitting reports and escalating through support channels. Clearly cite violations of the platform’s terms of service (most prohibit doxxing), and invoke your legal right to have your personal details removed.
Remove Data from Website Operators:
If your personal information appears on websites or forums, contact the site administrators directly and request removal. Many will comply, especially if the information was posted without your consent.
Remove Data from Search Results:
Google offers a removal request process for certain types of content:
Consider involving authorities in cases involving:
Explicit threats of violence
Stalking (repeated, unwanted contact that causes fear)
Swatting attempts
Targeted campaigns that severely disrupt your life
Hacking or unauthorized access to your accounts
Prepare for law enforcement:
Bring all your documentation (screenshots, timelines, messages)
Be prepared to explain what doxxing is and how it’s affecting you
If local police aren’t responsive, reach out to specialized cybercrime units at the state or federal level
Consider consulting a lawyer familiar with online harassment cases who can advocate on your behalf
5. Seek Support and Expert Guidance
Don’t face this alone. Seek support from your family, trusted friends, and professionals. Crisis communications organizations or reputation management professionals should be able to offer guidance or connect you with legal resources.
Platform-Specific Protection: Discord, X (Twitter), and Beyond
Different platforms present unique doxxing risks. Here’s how to protect yourself on high-risk spaces:
How to Avoid Getting Doxxed on Discord
Discord’s voice chat and community-focused structure create specific vulnerabilities:
Account Security:
Use a unique username not connected to other social media accounts or your real name
Enable two-factor authentication
Never share your email address, phone number, or Discord tag publicly
Use Discord’s privacy settings to limit who can DM you (friends only)
Voice Chat Precautions:
Be aware that voice chat can be recorded without your knowledge in public servers
Avoid discussing personal details, location information, or identifiable stories
Consider using voice modulation software for high-risk conversations
Server Safety:
Only join servers from trusted communities
Be cautious about clicking links in Discord (they can lead to IP-grabbing sites)
Report suspicious users immediately to server moderators
How to Prevent Doxxing on Twitter
Twitter’s public nature and engagement-driven algorithm make it a prime target for harassment campaigns:
Profile Protection:
Protect your tweets (make account private) if you’re at high risk
Remove location information from your profile and tweets
Don’t use your full legal name as your display name
Disable photo tagging to prevent being tagged in revealing photos
Engagement Strategies:
Be cautious about what you share publicly, especially during controversial discussions
Don’t share photos that reveal your location, workplace, or home
Block aggressive users immediately—don’t engage
Report coordinated harassment to Twitter’s support team
Advanced Privacy:
Use a separate email address for your Twitter account that doesn’t contain your real name
Turn on login verification (two-factor authentication)
Regularly review connected apps and revoke access to any you don’t recognize or use
How to Avoid Getting Doxxed as a Creator or Public Profile (TikTok, YouTube, Twitch)
Creators and public‑facing accounts face unique risks because content, schedules, and personal details are often shared at scale:
Account & Identity Separation:
Use creator accounts that are completely separate from personal email addresses and phone numbers
Never link personal social media accounts in public bios or “about” sections
Use business contact emails that don’t contain your real name
Enable two‑factor authentication on all creator platforms and connected email accounts
Content & Filming Precautions:
Be mindful of what appears in the background of photos and videos (windows, street signs, landmarks)
Avoid showing mail, packages, or documents with identifying information
Delay posting content shot in real‑time to prevent location tracking
Disable automatic location tagging and metadata whenever possible
Livestream & Interaction Safety:
Avoid sharing schedules, routines, or future travel plans publicly
Use chat moderation tools and trusted moderators during live streams
Immediately ban users who ask probing personal questions
Be cautious with donation messages or alerts that may reveal personal information
Take Control of Your Digital Footprint Today
Doxxing has become an escalating threat in our increasingly connected digital world. But you’re not powerless. By taking proactive steps to reduce your exposed data, secure your accounts, and understand how to respond if targeted, you significantly reduce your risk and increase your ability to protect yourself and your loved ones.
Start with the basics: tighten your social media settings, remove your information from data broker sites, and secure your accounts with strong passwords and multi-factor authentication. Consider installing identity monitoring services, security software, and privacy features to detect threats early and give you time to respond. McAfee+ can help you stay one step ahead of anyone trying to weaponize your information.
If you’ve been doxxed, document everything, report to platforms persistently, and involve law enforcement when threats escalate. You don’t have to face this alone; support resources and professionals are available to help you through the process.
Rank One, whose board includes a former CIA deputy director and a former FBI science chief, supplied face recognition to Meta for internal development of its smart glasses app.
A WIRED investigation found dozens of “nudified” deepfake images and videos on Grok's website, including nonconsensual depictions of celebrities and at least one prominent US politician.
The code WIRED identified is gone from the latest version of Meta AI, the companion app for the company’s smart glasses. Meta won’t say why or whether it’s coming back.
Code reviewed by WIRED uncovered an unreleased face-recognition system embedded in Meta’s smart glasses platform. It’s designed to identify people via biometric data stored on users’ phones.
Four people suing Elon Musk's AI firm under pseudonyms due to the risks of being identified may face a difficult choice: Reveal your real names, or drop the lawsuit.
To stop children from bypassing its age checks, Meta is revamping its age-verification tools with an AI system that analyzes images and videos for “visual cues,” such as height and bone structure.
A lawsuit from the Consumer Federation of America accuses Meta of misleading consumers about its efforts to combat scams advertisements on its platforms.
Available for free to any company that wants to use it, the “completely anonymous” app puts the pressure on porn sites and social media platforms to start blocking access by minors.
More than 70 organizations, including the ACLU, EPIC, and Fight for the Future, say the AI smart glasses feature would endanger abuse victims, immigrants, and LGBTQ+ people.
The business social networking site is a vast, publicly accessible database of corporate information. Don’t believe everyone on the site is who they say they are.
From LinkedIn to X, GitHub to Instagram, there are plenty of opportunities to share work-related information. But posting could also get your company into trouble.
Login
