Doxxing Extortion Scam
A scammer threatens to publish a victim's private personal information — home address, workplace, phone number, family details — unless a ransom is paid or demands are met.
Last reviewed: 11 June 2026
What this scam is
Doxxing extortion combines two harmful acts: the aggregation and threatened or actual publication of someone's private identifying information, and the use of that threat to coerce compliance. The word 'doxxing' derives from 'dropping documents' — releasing identifying records about a person without their consent.
The personal information used may come from public social media profiles, data-breach dumps, people-search websites, voter rolls, or aggregated from multiple mundane-seeming sources. The perpetrator may invest very little effort and yet assemble a dossier that feels terrifyingly comprehensive to the victim. This tactic is used in harassment campaigns, targeted attacks on public figures, and financially motivated extortion against ordinary individuals.
How it works
The perpetrator identifies a target and spends minutes to hours aggregating publicly available information from social media, professional networks, and data-aggregator sites.
They then contact the victim with a sample of the gathered data to establish credibility, accompanied by a demand. The threat is typically to post the information in a public forum, to contact the victim's employer with damaging claims, or to send physical mail to the victim's home to demonstrate they know the address.
If the victim complies, the scammer may go silent temporarily but almost always returns with additional demands. If the victim does not comply, the scammer may publish a portion of the information to demonstrate they are serious before escalating.
Why this scam works
Home addresses are particularly frightening because they bridge the online world to the physical one. The fear that a stranger could appear at one's home is visceral and not irrational, making this form of threat especially effective.
The victim often feels responsible for protecting family members who may not even be aware of the situation, which compounds pressure to pay. The relative ease with which personal data can be assembled from public sources means the perpetrator's 'research' often looks more extensive than it actually was.
A typical pattern
The victim receives a message — typically via social media, email, or a gaming platform — from someone who claims to have gathered their real name, home address, employer, and details about family members. The scammer may paste back some genuine-looking detail (often assembled from public sources or social media) to demonstrate they have done their research. They then demand money, online gaming currency, favours, or that the victim perform an action in exchange for keeping the information private. In some cases the scammer has published a first tranche of information on a paste site or forum to show intent and increase pressure. Victims who pay usually receive further demands within days.
Common red flags
- Message opens with recitation of your personal details such as address, employer, or family members' names
- Demand follows immediately after the information is displayed
- Scammer references a paste site or forum where information has been or will be posted
- Claims to have contacted or be prepared to contact your employer, neighbours, or family
- Artificial deadline with escalating consequences if not met
- Second demand arrives shortly after the first demand is met
- Uses information that could be assembled from your own public social media
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
"I know you live at [ADDRESS] and work at [COMPANY]. Pay me [AMOUNT] in Bitcoin or I post everything to [FORUM] and your neighbours will know exactly who you are."
"I have compiled everything about you and your family. Your kids go to [SCHOOL]. This stays between us if you send [AMOUNT] in the next 12 hours."
"I already posted your details on [SITE]. Pay [AMOUNT] and I will delete the post and never contact you again."
Common variations
- Gaming-community doxxing: targeting players in competitive games who expressed opinions or beat the scammer
- Political or ideological harassment doxxing: victims targeted because of publicly stated opinions
- Business-owner targeting: home address or personal details threatened to be sent to customers or negative forums
- Family-member doxxing: scammer threatens to send information to or about the victim's relatives
- Dark-web listing threat: scammer claims to have listed victim's information for sale as proof of threat
How to verify before you act
Assess what information the scammer actually has. Paste their claims into a search engine to see which public sources it could have come from. Many dossiers consist entirely of information visible on the victim's own social media or professional profiles.
Check known data-aggregator websites to see your own public footprint. If the scammer's information matches what is already publicly indexable, their special access was simply a browser search.
Payment methods used
- Cryptocurrency
- Bank/wire transfer
- Gift cards
- Money transfer services
- Payment apps to 'friends & family'
Who is usually targeted
- Online gamers, streamers, and content creators
- People with public social media profiles containing location information
- Small-business owners with registered addresses
- Activists or people who have publicly expressed opinions
- Anyone who has been involved in an online dispute
What to do immediately
- Do not pay — compliance invites further escalation
- Preserve all messages from the scammer as evidence
- Report the account to the platform where contact was made
- Report to your national cybercrime or fraud reporting body
- If information has been posted publicly, report it to the hosting platform for removal
- Alert family members whose names or information have been mentioned
- Consider contacting your local police if you have reason to believe there is physical risk
How to prevent it
- Audit your own public digital footprint — Google your name, address, and phone number and request removal from data-aggregator sites
- Keep social media accounts private and avoid posting location-specific information
- Use a PO box or virtual address for any public-facing business or community activity
- Separate your online personas from your real identity where possible
- Enable strong privacy settings on professional networking profiles
- Tell family members to keep your shared details private on their own social profiles
Evidence to preserve
- Full screenshots of all messages with timestamps
- URLs of any paste sites or forums where information was published
- Profile information of the account making the threat
- Any payment demands with wallet addresses
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
Is it worth paying to get the posted information taken down?
No. Once information is posted online, payment to the original poster does not remove copies that others may have taken, and the poster is incentivised to demand more. Focus instead on reporting the post to the platform for removal and to law enforcement.
Can I get my information removed from data-aggregator websites?
Yes. Most people-search and data-aggregator websites have opt-out or removal request processes. Reducing your public footprint is good practice regardless of whether you are currently being targeted.
Is doxxing illegal?
Publishing private information with intent to harass or facilitate harm is treated as a criminal act in a growing number of jurisdictions. The specific offence may be framed as harassment, stalking, threatening behaviour, or cybercrime depending on the country. Report to police.