Doxxing means publishing someone's private information, such as their real name, address, workplace or phone number, without permission. In a community, it can happen through a heated argument, a grudge or a deliberate attack. The harm can be serious and real, reaching far beyond the screen, so it is among the most urgent problems a moderator can face. Speed, calm and care for the person targeted make the difference. This guide explains how to respond and how to lower the risk before it happens.
Treat it as urgent
Doxxing is never a normal moderation case to leave in the queue. Put it at the top of your urgency list and make sure every moderator knows that. Every minute the information stays visible, more people can copy it. Build a rule into your triage system so reports mentioning personal details trigger an immediate alert, as described in how to build a moderation queue workflow that scales.
Remove the content immediately
The first action is to take down the post, comment or image containing the information. Do not wait to investigate or discuss. If your tools allow, remove it from edit history and cached views too, and check whether it appeared elsewhere in the community, such as in replies, quotes or direct messages. Screenshots by members may exist, so ask people politely to delete any copies they made.
Preserve a record
Before or right after removal, save a private record: what was posted, who posted it, when and where. This evidence is important for any later action, whether a ban, a report to a platform or contact with authorities. Keep it secure and share it only with those who need it. A habit of clear records, described in how to keep a moderation log that protects you, makes this easier.
Restrict the person who posted
Act on the account that shared the information. Suspend or ban them according to your rules, and consider that deliberate doxxing usually warrants permanent removal. If it appears accidental, such as someone sharing details thoughtlessly, you may choose a lesser response, but still enforce a clear consequence. Prevent them from messaging others in the meantime.
Support the person targeted
The target deserves attention and respect. Reach out privately, tell them what happened and what you have done, and ask what help they need. Do not pressure them or promise what you cannot deliver. Offer practical suggestions, such as changing privacy settings, reviewing what else is public about them and reporting the matter to relevant platforms or authorities if they choose. Be patient and listen, as in how to handle harassment in your online community.
Stop the spread
Information can travel through reposts, screenshots and other platforms. Lock related threads, watch for copies and be ready to remove them. Ask members not to repeat or speculate. If the leak has spread beyond your community, report it to the platforms where it appears; most have specific processes for personal information. Stay calm and avoid public fights that draw more attention.
Communicate carefully
Tell members what happened in general terms, without repeating the information or naming the target. A short note can say that personal information was shared, it has been removed, the account has been dealt with and members should report any further instances. Remind everyone that sharing private details is never allowed. The communication style in how to moderate during a crisis or raid applies here too.
Know when to escalate
If the information leads to threats, stalking or danger, urge the person to contact local authorities and support them in doing so. Do not investigate or confront the offender yourself, and do not promise outcomes. Keep your evidence ready in case authorities request it. When there are legal elements, the guidance in how to handle legal takedown requests as a community owner may also be useful.
Prevent it in advance
Clear rules help. State in your code of conduct that sharing private information, including guessing identities, is forbidden. Encourage members to protect their own details, and think carefully about what your platform shows by default. A privacy-conscious design, as discussed in privacy-first communities: why it matters more every year, lowers the risk. Train moderators on what to do, and run through the steps before an incident.
Learn and follow up
After an incident, hold a short review. How did it spread? Which tool or rule was missing? Update your procedures and thank those who helped. Check in again with the person targeted after a few days. Showing that you take privacy seriously strengthens trust for everyone.
The bottom line
When personal information is exposed, act fast: remove it, keep a record, restrict the offender, support the target and stop the spread. Communicate calmly, escalate when safety is at risk and prevent the next incident through clear rules and privacy-minded design. Members need to know their safety comes first.
Frequently asked questions
What counts as doxxing?
Sharing private details such as a real name, address, workplace or phone number without consent, including guessing someone's identity.
Should I ban someone who doxxes?
Usually yes, permanently, especially if the act was deliberate. Accidental cases may warrant a lesser step with a clear warning.
Can I contact the police for the member?
Encourage the member to do so and support them with evidence. They decide whether to report.
How do I stop screenshots from spreading?
Ask members to delete copies, watch for reposts and report the information to any platform where it appears.
Loading comments…