You’ve probably heard the term doxxing in the news or on social media — but do you actually know what it means and how easily it could happen to you?
Doxxing (sometimes spelled “doxing”) is when someone publicly reveals your private personal information online — your home address, phone number, real name, employer, family members — usually with malicious intent. It’s a form of online harassment that can lead to real-world consequences including threats, stalking, swatting, and worse.
And here’s the scary part: most of the information used in doxxing attacks comes from data broker sites that anyone can access for free.
Think you’re safe? Run a free Optery scan to see how much of your personal information is publicly available right now on data broker sites. If a doxxer can find it, so can anyone else.
How Does Doxxing Work?
A doxxing attack typically starts with one piece of information about you — a username, email address, phone number, or even just your real name. From there, the doxxer uses freely available tools to uncover everything else:
People search sites. Whitepages, Spokeo, BeenVerified, and TruePeopleSearch let anyone search a name or phone number and instantly find home addresses, family members, email addresses, and more. This is the #1 tool doxxers use — and it’s completely legal and free.
Social media. Your Facebook, Instagram, LinkedIn, and Twitter profiles can reveal your location, employer, daily routine, friends, family, and photos — especially if your privacy settings aren’t locked down.
Username searches. If you use the same username across multiple platforms, a doxxer can link your accounts together. A gaming username connected to a forum profile connected to a social media account creates a trail straight to your real identity.
Public records. Property records, voter registration, court filings, and business registrations are all publicly accessible and link your name to your address.
Data breaches. Leaked databases from hacked companies often contain your email, password, phone number, and address. These databases are traded freely on the internet.
The entire process can take a skilled doxxer just minutes. And the information they find gets posted publicly — on forums, social media, or messaging platforms — where it can’t easily be taken back.
Who Gets Doxxed?
You don’t have to be famous or controversial to become a doxxing victim. While public figures, journalists, and online personalities face the highest risk, regular people get doxxed too:
Online gamers. Competitive gaming communities are one of the most common sources of doxxing. A heated match or online argument can escalate to someone publishing your real name and address.
Social media users. Posting an opinion that goes viral — even unintentionally — can attract people who want to punish you by exposing your personal details.
Dating app users. Someone you matched with or rejected can use your phone number or first name to find your home address through people search sites.
Professionals. Doctors, lawyers, teachers, law enforcement, and anyone in a public-facing role can be targeted by unhappy clients, students, or members of the public.
Domestic violence survivors. Abusers use data broker sites to locate people who are trying to stay hidden. Having your address publicly listed on people search sites is a direct safety threat.
Anyone who disagrees with someone online. In the worst cases, a simple comment or post is enough to trigger a doxxing attack from someone who takes offense.
The Real-World Consequences of Doxxing
Doxxing isn’t just an online annoyance — it creates real, sometimes dangerous consequences:
Swatting. Doxxers sometimes call in fake emergency reports to your address, sending armed police to your home. Swatting has resulted in innocent people being injured and killed.
Stalking and harassment. Once your address is public, people can show up at your home, send threatening packages, or harass your family members.
Job loss. Doxxers often contact victims’ employers with real or fabricated accusations, leading to suspension or termination.
Ongoing harassment campaigns. Once your information is posted publicly, it can be shared and reshared indefinitely. The harassment can continue for months or years.
Emotional and psychological damage. Living with the knowledge that strangers know where you live and can target you at any time takes a serious toll on mental health.
How to Protect Yourself from Doxxing
The best defense against doxxing is making your personal information as hard to find as possible. Here’s how:
Step 1: Remove Your Data from People Search Sites
This is the single most important step. People search sites are the primary tool doxxers use to find your home address, phone number, and family members. If your data isn’t on these sites, doxxers have to work much harder.
Run a free Optery scan to see which data broker sites have your information listed. Then either remove yourself manually from each site or use an automated service:
Optery — Our top recommendation. Free scan to see your exposure. Paid plans ($39-$249/year) automate removal from 350+ data broker sites with continuous monitoring. The best protection against doxxing available.
Incogni — Best budget option. Covers 180+ data brokers for just $6.49/month billed annually. Read our full Incogni review →
We have individual removal guides for the biggest people search sites: Spokeo, Whitepages, BeenVerified, and TruePeopleSearch.
Step 2: Lock Down Your Social Media
Social media is the second-biggest source of information for doxxers. Tighten everything:
Set all profiles to private. Facebook, Instagram, Twitter/X — switch everything to friends-only or private.
Remove personal details. Delete your phone number, email, home city, employer, and school from your bios and about sections.
Don’t share your location. Turn off location tagging on posts and photos. Don’t post about where you are in real time.
Use different usernames. Don’t use the same username across platforms — it creates a trail that links your accounts together.
Step 3: Separate Your Online Identity from Your Real Identity
Use a VPN to hide your IP address, which can reveal your approximate location.
Use a secondary email for online accounts, forums, and gaming — don’t use the email tied to your real name.
Use a secondary phone number (Google Voice is free) for anything online. Keep your real number private.
Use aliases for non-essential accounts. You don’t need to use your real name on gaming platforms, forums, or social media.
Step 4: Freeze Your Credit
In case a doxxer attempts identity theft with your exposed information, freeze your credit with all three bureaus. It’s free, takes 10 minutes, and prevents anyone from opening accounts in your name.
Step 5: Set Up Ongoing Monitoring
Doxxing prevention isn’t a one-time task. Data brokers continuously re-list your information, and new breaches happen regularly. Set up:
Google Alerts for your full name, phone number, username, and email address — you’ll be notified if new content appears with your information.
Continuous data broker monitoring through Optery or Incogni — they automatically catch and remove re-listings so your data stays off these sites permanently.
What to Do If You’ve Been Doxxed
If your personal information has already been published in a doxxing attack:
Document everything. Screenshot every instance of your information being shared — you may need this for law enforcement or legal action.
Report to the platform. Report the doxxing content to whatever platform it was posted on. Most major platforms have policies against posting private information.
Contact law enforcement. Doxxing is illegal in many states and jurisdictions. File a police report, especially if you’re receiving threats or fear for your safety.
Remove your data from broker sites immediately. Use Optery or Incogni to remove your information from data broker sites as quickly as possible — this limits the damage by cutting off easy access to your details.
Alert your employer and family. Let them know what’s happening so they’re prepared if the doxxer contacts them.
Freeze your credit immediately to prevent identity theft using your exposed information.
Protect Yourself Before It Happens
Doxxing is one of those threats that feels distant until it happens to you. But the information doxxers use is sitting on data broker sites right now, freely available to anyone.
Don’t wait until it’s too late:
- Run a free Optery scan — see exactly how exposed your personal information is right now
- Remove your data from people search sites using our guides or an automated service
- Lock down your social media and separate your online identity from your real one
- Freeze your credit as an extra layer of protection
The best time to protect yourself from doxxing is before it happens. Start now.
Frequently Asked Questions
Is doxxing illegal?
It depends on your jurisdiction. Many states have laws against doxxing, especially when it’s done with intent to harass or intimidate. Even where specific anti-doxxing laws don’t exist, the resulting harassment, threats, and stalking are illegal. If you’ve been doxxed, contact law enforcement.
How do doxxers find my address?
Primarily through data broker and people search sites like Whitepages, Spokeo, and TruePeopleSearch. These sites let anyone find your address from your phone number or name in seconds.
Can I prevent doxxing completely?
You can’t eliminate all risk, but you can dramatically reduce it by removing your data from people search sites, locking down social media, using aliases online, and separating your real identity from your online presence. Start with a free Optery scan to see how exposed you are.
What’s the difference between doxxing and a data breach?
A data breach is when a company’s database is hacked, exposing user data. Doxxing is when someone deliberately publishes your personal information to harass you. Data from breaches can be used in doxxing attacks, but they’re different things.
What is swatting?
Swatting is when a doxxer calls in a fake emergency (like a hostage situation) to your home address, causing armed police to respond. It’s extremely dangerous and has resulted in deaths. Removing your address from public databases is one of the best defenses.
How do I remove my information from the internet to prevent doxxing?
Start by removing yourself from data broker sites — either manually or through automated services like Optery or Incogni. Full guide: How to Remove Your Personal Information from the Internet.
This post contains affiliate links. If you purchase through our links, we may earn a commission at no extra cost to you. See our affiliate disclosure for details.