top of page

DOXING

What is doxing?

Doxing, which comes from the term “dropping docs” or “dropping documents”, is the intentional online exposure of an individual’s identity, private information or personal details without their consent.

​

Doxing may take any of the following forms:

  • Publicising identities of previously anonymous individuals

  • Revealing specific information that makes an individual contactable, locatable, or susceptible to being digitally breached

  • Revealing sensitive information that damages someone’s reputation or credibility

​

Information used to dox an individual may be obtained through legitimate means, such as research of a target’s online presence and public records or social engineering, or illegitimate means such as digital trespassing.

​

If you would like to learn more about doxing, go to www.esafety.gov.au/industry/tech-trends-and-challenges/doxing.

How can I protect myself from being doxed?

If you are concerned about being doxed, there are things you can do to reduce the risk and potential impact of being doxed. These methods focus on managing your digital footprint and having effective cyber security measures in place.

Research Yourself

You may want to start by seeing what is on the internet about you.

We live our lives online these days and even if you barely use the internet, it is likely you still have some sort of online presence.

You can get a basic idea of what is out there by opening an incognito browser and researching yourself and/or your business. There are many different websites that display varying types of information, such as someone’s place of employment or email address.

Be Aware of What You Share

In addition to seeing what is out there, you may want to consider how much personal information you share online.

It is impractical to withdraw completely from the internet, and you shouldn’t have to. You just need to be aware of what you share, where you share it, and who you share it with.

You can further protect the information you choose to share by being mindful of who you are connected with, and reviewing and strengthening your privacy settings on social media.

Be aware of sharing:

  • Photos of your children on your profiles including your WhatsApp profile picture, which, depending on your WhatsApp privacy settings which you can change, can be viewed by anyone who has your phone number.

  • Photos in front of your place of work, your residence and your vehicle.

  • Your phone number.

  • Your date of birth.

​

You should also be aware that, depending on your privacy settings, users may be able to see when you view their posts on Instagram, Facebook, and TikTok.

Protect Your Accounts

Good cyber security practices are also important to reduce the risk of unauthorised access to your accounts.

This may include:

  • Using strong passwords and not reusing them for multiple logins.

  • Changing your passwords regularly.

  • Setting up multifactorial authentication on your accounts.

I have been doxed, what can I do?

If you are at risk of immediate harm, call Triple Zero (000), then call CSG Victoria (1300 000 274).

Report to the Regulator

In Australia, the eSafety Commissioner is the regulatory body responsible for online safety. They have a series of schemes and practices for supporting victims of doxing. If you believe you have been doxed, you should report it to the eSafety Commissioner by going to www.esafety.gov.au/report and following the instructions.

Keep Records

eSafety also recommends that you collect and preserve evidence of the doxing. This can help demonstrate what occurred, and may be required if the incident is escalated.

Use Mechanisms Available within the Social Media Platform

eSafety recommends that you report the doxed material to the social media platform where it was posted.

If you are receiving any unwanted calls, texts or emails, you can block those individuals on the platforms they are contacting you.

You can get further information on how to do both by going to www.esafety.gov.au/key-issues/esafety-guide.

Platforms also offer a range of privacy settings that you can configure to best suit your needs. Depending on the platform, you may be able to restrict who can find you, who can contact you, and who can post on your page.

Seek Further Support or Assistance

In addition to reporting to eSafety, you may choose to report the doxing to Victoria Police, and seek further support from them.

You should also report it to CSG Victoria via JEAP, or by calling 1300 000 274.

Lastly, you may also choose to seek out legal advice and/or consult with a mental health professional or support service. For information on psychological support available within the community, visit www.jccm.org.au/psychological-support.

I am worried about my safety at home and at work, what should I do?

If you are at risk of immediate harm, call Triple Zero (000), then call CSG Victoria (1300 000 274).

If you receive direct threats to your or your family’s physical safety or, call Triple Zero (000), then call CSG Victoria (1300 000 274).

If your residential address or place of work has been made public as part of a doxing campaign, there are things you can do for you, your family’s, and your employees’ personal safety:

  • Be aware of any suspicious individuals loitering outside your residence. Before you enter and exit your house, your work or your vehicle, take a moment to consider your surroundings.

  • Be aware of any unusual packages, boxes, or devices being delivered to your residence or business. Do not accept unexpected packages, or any package that appears to have been tampered with. Brief your family and staff to do the same.

  • Brief your staff on the possibility of phone, email or online threats made to you or your business.

  • Advise staff on how to deal with suspicious phone calls:

    • Never give out any personal information about yourself, your family or your business.

    • Write down the phone number the call was made from.

    • Report to CSG immediately on 1300 000 274 or via the JEAP App.

  • Park in a secured area if possible.

  • Have your name removed from any reserved parking area.

bottom of page