Pressfront / Trace / Got doxxed? Be safe, save it, report it, lock it down.

Help guide · Updated October 2026

Got doxxed? Be safe, save it, report it, lock it down.

Doxxing means someone posted your private details, like your address or phone, to point a crowd at you. Here is the first hour, in order.

The short answer

  1. Are you safe? If there are threats or your address is out, call the police. Ask them to note your address in case of a fake emergency call.
  2. Save every post before it gets reported away. Screenshot with username, date and link.
  3. Report it as "private information." The big platforms ban posting home addresses and phone numbers.
  4. Lock your accounts. New passwords, two-factor login, accounts private.
  5. Warn your people. Family, roommates and work, so they do not answer strange calls.
  6. Pull your details off search. Google Results about you, then people-search sites.

Report it, platform by platform

Where the buttons are
X
Report each post. Pick "private information" for doxxing, "abuse and harassment" for the rest. Settings, Privacy, Protect your posts locks your account while it burns.
Instagram
Turn on Limits to hide comments and DMs from people who do not follow you or only just followed. Use Restrict on the worst accounts. Report from the post menu.
TikTok
Set the account to private, turn comments to friends only or filter keywords, then report videos and comments from the share menu.
Facebook
Report from the post menu. Review who can see your posts and your friend list in privacy settings.
Reddit
Report the post or comment for harassment or personal information. Message the subreddit moderators too, they often act faster.
Google
Use Results about you to ask Google to drop pages showing your phone, address or email from search. The page stays up, it just stops showing in Google.

Free help, no strings

  • Right To Be (righttobe.org), formerly Hollaback!, runs HeartMob, where trained volunteers send support and help you report and document.
  • PEN America Online Harassment Field Manual (onlineharassmentfieldmanual.pen.org), free step by step guides for writers and anyone else.
  • Cyber Civil Rights Initiative helpline 844-878-2274, 24/7, if intimate images of you are shared or threatened (US).
  • FBI tips at tips.fbi.gov or IC3 (ic3.gov) for online threats or extortion.

If you think you are in danger right now, call 911 (or your local emergency number) first. Everything else can wait.

The private-account rule. We never log in, follow anyone, request access to a locked account, or use scraped private data. A private account is invisible to us and stays that way. So what you see below is the earliest public appearance we could verify, never a proven origin. If a story started in a group chat, a DM or a locked profile, the first public post is the node we can see, and we say so rather than dressing it up as the source.

Run one yourself: Trace a story. How the sweep and the confidence number are built: the methodology card.

The fake emergency call risk

Some doxxers call police with a fake emergency at the target’s address. It is called swatting. Calling your local police non-emergency line early, so they know, is a sensible step.

Lock down checklist

  • Change your email password first. It resets everything else.
  • Turn on two-factor login with an app, not text, where you can.
  • Ask your phone carrier for a port-out PIN, so nobody can move your number.
  • Make social accounts private and remove your workplace and city from bios.

Getting your details off the web

Google Results about you asks Google to stop showing pages with your phone, address or email. The page itself stays up. People-search sites each have their own opt-out form. Paid removal services do this for you, if it is worth it to you.

Where Trace fits, honestly

Later, you may want to know where the post first appeared and which accounts spread it. Trace shows the earliest public post we can verify and the biggest spreaders, and you can keep it as an evidence pack for a platform, lawyer or police report.

Trace never unmasks anyone, never reads private accounts or DMs, and cannot take anything down. It only shows what is public and says what it could not see.

Straight answers

Is doxxing illegal?

It depends on where you live and what was done with the information. Threats, stalking and harassment are crimes in many places. A lawyer or the police can tell you what applies to you.

Will reporting get the posts taken down?

Often, because the big platforms ban posting someone's home address or phone number. Nothing is promised, and copies can spread, so save evidence before you report.

Can Trace find out who doxxed me?

No. Trace never tries to unmask a person. It shows the earliest public post we can verify and which public accounts spread it, and you decide what to do with that.

Should I move or change my number?

Only you can judge that. Start with the steps above and talk to the police if you feel unsafe. Free groups like Right To Be can help you think it through.

See where it started.

Earliest public post, who spread it, and an evidence pack you can keep.

Trace a story →

Honest fine print. Trace reports the earliest public appearance we could verify inside the window we searched, which is not the same thing as a proven origin. We only read public posts and public metrics, so deleted posts, screenshots laundered out of private accounts, and anything that started in a DM or a locked group are invisible to us, and every result names the sources that came back empty. Confidence is a number we publish together with the gaps behind it, never on its own. Trace describes what has already happened and how fast it is moving right now; it does not predict what will go viral, and no honest tool does.