Doxxing Response: What To Do in 48 Hours
A crisis-response checklist for doxxing incidents, focused on evidence, platform escalation, and personal safety actions.
In This Article
Hour 1: preserve evidence and secure accounts
Save links and screenshots first, then rotate passwords and enforce MFA on key accounts.
Hours 1-6: reduce immediate exposure
Remove or lock publicly visible personal details where possible and notify close contacts not to trust suspicious outreach.
Hours 6-24: report with structured documentation
Use platform reporting channels with concise evidence. Keep one incident file with all report IDs.
Hours 24-48: escalate where necessary
If threats or extortion are involved, escalate through legal or safety channels with clean evidence logs.
Avoid common mistakes
Do not argue publicly before evidence capture, and do not post sensitive personal context while trying to defend yourself.
Quick FAQ
Should I delete all social accounts immediately?
Usually no. Secure first, reduce exposure, and then decide account-by-account based on risk.
When should law enforcement be contacted?
Immediately for credible physical threats, extortion, or targeted stalking behavior.