Doxxing means publishing someone's private identifying information — home address, phone number, school, workplace, family members' names — usually to invite harassment. There is no single federal anti-doxxing law, and whether a specific incident is a crime depends on state law and on what accompanied the posting. What is more useful than the legal classification is knowing the order of operations, because the first hours matter most.
First: document, then report, then remove
The instinct is to get the post taken down immediately, but a deleted post is also deleted evidence. Screenshot first — the post, the account, the URL, the timestamp, and any replies — and only then report it to the platform. Every major platform prohibits posting private information and has a specific report category for it.
Then tell an adult, and if there is any threat attached, contact law enforcement with the documentation already in hand. A threat of violence changes the situation from a platform-policy problem into a criminal one, and that distinction is what determines who can actually act.
Then: close the doors that are still open
Doxxing is often followed by attempts to get into accounts, because the same personal details that were posted are frequently the answers to security questions. Change passwords on the important accounts, turn on two-factor authentication, and check whether any account recovery details are now public — a birthday and a childhood street name posted together are exactly what a recovery flow asks for.
Much of the underlying information often came from data brokers rather than from anyone who knew you, which our article on data brokers covers, including the opt-out routes that exist in some states. Locking down account privacy settings after an incident is worth doing even though it does not undo the posting.
If it came from someone at school
When the person responsible is a classmate, this is simultaneously a platform problem and a school problem, and the school route often moves faster. Our articles on cyberbullying and on what happens after you report bullying cover how a school's anti-bullying policy applies to off-campus conduct with a genuine connection to school life, which posting a classmate's address generally has.
Report it to the school in writing as well as to the platform. The two processes run independently, and the school's does not wait for the platform's.
Remember this
- Screenshot everything before reporting — a removed post is also removed evidence.
- There's no single federal anti-doxxing law; whether it's a crime depends on state law and what accompanied the post.
- A threat attached to it changes it into a criminal matter — contact law enforcement with your documentation.
- Secure accounts immediately, since posted personal details are often the answers to recovery questions.
Sources
This article provides general educational information, not individualized legal advice. KidsKnowRights is not a law firm, and reading this article does not create an attorney-client relationship. Laws vary by state, age, and circumstances, and they change over time. For advice about a real situation, talk with a licensed attorney or a legal aid organization.