Doxxing
Doxxing is the act of researching and publishing someone's private information — home address, workplace, phone number, family details — usually to intimidate, harass, or enable further attacks. Unlike hacking, it often doesn't require breaking into anything; a lot of doxxing is built from information people already posted publicly, cross-referenced across multiple sites.
Where the information comes from
- Public social media posts and old, forgotten accounts
- Data broker sites that aggregate public records for a fee
- Leaked or breached databases sold or shared online
- Metadata embedded in photos, such as location tags
- Domain registration records for personal websites
How it connects to other scams
Doxxed information rarely stays isolated. Once an address or phone number is public, it can feed social engineering attacks, SIM-swap attempts, or targeted phishing that references real personal details to seem more credible. That combination — real facts plus a convincing pretext — is what makes a follow-up scam much harder to spot than a generic one.
Reducing your exposure
- Search your own name periodically to see what's publicly indexed
- Request removal from major data broker sites, which often have opt-out forms
- Review privacy settings on social accounts, including old or dormant ones
- Strip location metadata from photos before posting them publicly
- Use a separate email and phone number for public-facing accounts where possible
If you've already been doxxed
Document everything with screenshots before content is taken down, since platforms often require evidence to act on a report. Report the post to the platform under harassment or privacy policies, and if there's an explicit threat involved, that's a matter for local law enforcement rather than something to handle alone. A password and account security review is also worthwhile, since doxxing incidents sometimes coincide with account takeover attempts.
Frequently asked questions
Is doxxing illegal?
Laws vary by jurisdiction and by what was published, but many doxxing cases overlap with harassment, stalking, or privacy laws, especially when the intent is clearly to intimidate.
Can a security scanner prevent doxxing?
Not directly — doxxing is a research and publishing problem, not a malware infection. Antivirus tools help with the malware or credential-theft side that sometimes follows a doxxing incident.
How do I know if my information is already exposed?
Searching your own name and phone number, checking data broker opt-out sites for existing listings, and monitoring breach-notification services are the most practical starting points.
Malware-Bytes.net is an independent information resource about malware protection for Windows. We are not Malwarebytes, and this site is not the official Malwarebytes website or support channel. Malwarebytes is a trademark of Malwarebytes Inc.