Technique

Doxing

Also known as: Doxxing, Dropping Docs, Document Dropping, PII Exposure, Public Exposure Attack, Information Weaponization

EXPLOITATION

Publicly releasing someone's private information (real name, home address, phone number, employer, family details) to enable harassment, intimidation, or physical-world attacks like swatting.

Common attack flows

How it fits in a scam

This technique shows up duringEXPLOITATION

Before

After

Defense

How to defend against this

How to spot it

  • Strangers contacting you with knowledge of private details you haven't shared publicly
  • Finding compilations of your personal info posted on forums or paste sites or social media
  • Sudden surge of harassment or threats or unwanted contact from multiple sources
  • Google Alerts triggering on your name or address or phone number appearing on new sites
  • Friends or family reporting they received messages about your personal info
  • Seeing your photo or address or employer shared in hostile online communities
  • Receiving threats that reference your physical location or daily routines
  • Discovering you've been placed on public watchlists or target lists
  • Receiving unsolicited deliveries (food packages subscriptions) you didn't order

Tools you can use

Steps you can take

Seen in the wild

Where we’ve seen it

Commonly targets

Further reading