FRONTLINEPRIVACY
Playbook · Doxxing

I'm being doxxed right now

For first responders and public-facing professionals — sworn officers, firefighters, nurses, judges, federal agents. A doxx is actively spreading — multiple posts, multiple platforms, multiple amplifiers. The action checklist for the next 60 minutes.

When a doxx is actively spreading, takedowns cannot keep up with shares. The priority shifts to physical safety, family notification, and stopping the underlying data source. Work in parallel — every minute of delay is more reach.

First 15 minutes

  1. Get the family to a known room.

    Pick the interior room farthest from the street. Kids, spouse, dog. Phone with you. Door locked. Treat the doxx as a precursor to a visit, not just a post.

  2. Archive the primary posts on web.archive.org.

    Open archive.org/web, paste each post URL, hit "Save Page Now." Do this before filing any takedowns — the moment a takedown lands, the original disappears and so does your evidence. Archive first, takedown second.

  3. Screen-record the live ones.

    TikTok lives, Twitter Spaces, Instagram lives, Discord voice rooms. These do not archive. Record your screen and the audio. Save to a local drive, not just the cloud.

  4. Notify your chain of command.

    Supervisor, watch commander, or threat-assessment liaison — whoever runs threat response on your side. Send them the archive URLs and a one-line summary. They will want to flag dispatch or agency security and may have an institution-side response that needs to start now.

Next 60 minutes

  1. Mass-file platform takedowns in parallel.

    One person on X takedowns, one on TikTok, one on Instagram, one on Reddit. If you are alone, batch by platform — file all the X reports first, then all the TikTok reports. Each filing needs its own URL and report.

  2. Notify household members at other addresses.

    Spouse at work. Kids at school. Parents across town. Adult siblings. The doxx may include their information too, or may target a relative's address as the next attempt.

  3. Monitor for amplifiers.

    Search your name, address, handle, and the original poster's handle every 15 minutes for the first hour. Amplifier accounts pile on quickly. Archive each one as you find it, then file.

  4. Lock down your own social presence.

    Set personal accounts to private. Hide following lists. Remove any post that shows the house exterior, kids' school, or your vehicle. Two-minute job per account, but it cuts off the secondary feed.

Today

  1. File a formal police report.

    Doxxing is criminal in many states under harassment, stalking, or specific protection statutes for officers, judges, and other public officials. Bring the archive URLs — that is the evidence that survives takedowns.

  2. Get a dispatch flag on your address.

    A "watch for swatting" entry that requires confirmation before any SWAT-level deployment. Doxxes commonly precede swatting attempts. Confirm the entry is logged and ask for the CAD reference number.

  3. Tell the kids' school and the spouse's workplace.

    Brief them and ask them to flag unfamiliar pickups, visitors, or callers. People who post addresses often try the workplace next.

This week

  1. Run a free scan on the household.

    See the free scan. The result shows which broker pages currently list your address — almost certainly where the doxx pulled from. Same scan for spouse and parents.

  2. Start the broker cleanup.

    Either DIY across the major brokers or have us run continuous coverage. The posts are the symptom; the broker pages are the source. Close the source and the next person searching cannot find you.

  3. For NJ residents, file Daniel's Law demands.

    See Daniel's Law. $1,000 per violation in statutory damages if a broker fails to remove within ten business days.

If it escalates

  1. Loop in the FBI field office for any explicit violence.

    If the doxx includes specific threats — a named time, weapon, or "someone should go to" language — the local field office handles interstate threats against public-facing personnel. Bring the archives and the report numbers. Do not wait for local to refer up.

  2. Move temporary while the wave runs.

    A hotel for the first 72-96 hours covers the highest-risk window. Doxxing waves usually peak in the first three days and decay fast after that. Some departments and agencies cover the cost. Use the protocol if it exists. If yours doesn't, eat the cost — it's worth it.

How we prevent it next time

  1. Continuous broker cleanup.

    A one-time opt-out is a delay, not a fix. Most brokers re-list within 3-6 months. We re-check every two weeks across 200+ broker sites and re-file the same day you reappear.

  2. Sweep the household.

    Brokers list you alongside spouse, parents, and adult kids on the same page. Closing one address closes the others. The next doxx that finds a relative is the same risk to you.

  3. Recurring confirmation, not a one-time setup.

    Every quarter, re-run the scan and confirm the address pages are still empty. Brokers reappear silently — the only way to know is to check.

For continuous broker cleanup that prevents the next attempt, run a free scan.