Doxxing. What to do in the first hour.
Doxxing is publishing someone's private information — real name, school, address, family details — to enable harassment. Children get doxxed over gaming disputes, fandom arguments, and ordinary teenage fallings-out, and the escalation from online to physical can be fast.
How a child actually gets doxxed
Rarely a hack. Almost always aggregation of things your child posted themselves:
- A school name or logo in a photo, a bio, or a uniform on camera
- A username reused across platforms, letting someone connect a gaming handle to a real-name account
- Photo backgrounds — house numbers, street signs, a view from a window, a local landmark
- Location metadata in photos shared as files rather than through an app
- Live location features — Snap Map, Find My, game "playing now" status
- A sports team, dance school, or club named publicly, which narrows a location to a street
- A friend's public post that tags them somewhere
Individually, none of these is much. Compiled, they're an address.
If it's happening right now
1. Screenshot everything before it's deleted — posts, usernames, timestamps, the full thread. 2. Report to the platform using the personal-information or doxxing category, which most platforms prioritise. 3. Do not engage. Any response feeds it. 4. Lock every account to private and change passwords. 5. If there's any threat of physical harm, or your address has been posted, call the police. Give them the screenshots and get a report number. Swatting — a false emergency call to your address — is a real follow-on risk and police knowing the context in advance matters.
The next 24 hours
- Take every account private, on every platform, including old ones your child had forgotten.
- Change usernames if the handle is what links their accounts together.
- Turn off location sharing everywhere — Snap Map ghost mode, Find My, Instagram location tags, game status.
- Tell the school. If the school is named in the doxx, they need to know for the child's physical safety at pickup and during the day.
- Alert close family whose accounts might be used to reach your child.
- Consider a temporary break from the platform where it started — not as punishment, as distance.
Reduce the surface before it matters
Defenras blocks the doxxing and harassment forums where compiled information gets shared and coordinated.
Get Defenras free →Reducing the surface beforehand
Worth doing as a one-hour audit whether or not anything has happened:
- Different usernames for gaming and for real-name social accounts. Cross-platform handle reuse is the number one linking mechanism.
- No school in the bio. Also no school uniform in profile pictures, and no school-logo backgrounds on streams.
- Check photo backgrounds before posting — house number, street sign, distinctive view, car registration.
- Location services off for the camera app.
- Accounts private by default.
- Search your child's name and usernames yourself, once, and see what's already public.
- Ask relatives to stop tagging your child's location in family photos.
Why it happens to children
The triggers are usually trivial from an adult perspective: winning an argument in a game, a fandom disagreement, a falling-out in a group chat, being the target of a pile-on that escalated. Occasionally it's coordinated harassment from a community your child annoyed.
The seriousness of the response rarely matches the triviality of the trigger, and that's the part worth explaining to your child — not to frighten them, but because it makes the precautions make sense rather than feeling arbitrary.
Children who get doxxed frequently blame themselves for having posted the photo, used the username, named the school. Two things are true simultaneously: the precautions are worth taking, and being targeted is not their fault. Say the second part first, and say it clearly. Getting the order wrong turns a security lesson into a message about deserving what happened.
Frequently asked questions
Is doxxing illegal?
It depends on jurisdiction and on what accompanies it. Publishing information alongside threats, harassment, or intent to intimidate is criminal in most places, and doxxing a minor is treated more seriously.
Can I get the information taken down?
Platform reports under the personal-information category are usually the fastest route and are prioritised. Information that spreads to forums outside major platforms is much harder to remove.
What is swatting?
A false emergency call designed to send armed police to a target's address. It's a documented follow-on to doxxing and has caused deaths. If your address has been posted, telling local police in advance is a genuine safety measure.
How do I know if my child has been doxxed?
Signs include sudden anxiety about going out, unexpected calls or deliveries, strangers referencing details they shouldn't know, or your child abruptly abandoning an account.
Defenras blocks all of this — without collecting your child's data.
One app, every device, every browser. Adult content, gambling, vaping, scams, malware, social media — all blocked. PIN-locked. Free version available, no credit card.