Doxxing is a form of cyberbullying that involves researching and publicly revealing private or identifying information about a person without their consent. The intent is usually to harass, expose, intimidate, or cause financial harm to a targeted individual.
The word “doxxing” (also spelled “doxing”) is derived from the term “dropping dox,” or “documents”.
How is doxxing different from phishing?
The core difference between doxxing and phishing is what is weaponized; scams exploit trust while doxxing exploits visibility.
Phishing is about deception, i.e. tricking someone into handing over money, credentials, or access, by impersonating something trustworthy. In contrast, doxxing is more about exposing individuals. While doxxing can refer to revealing fraudulently obtained information, it can also refer to aggregating legally public information and exposing the information to people who want to cause harm.
Phishing can also use a non-targeted strategy, in which hackers cast a massive digital net in the hopes that random people will fall prey, while doxxing can feel, and sometimes intentionally is, more targeted and personal.
How does it work?
Nearly everyone has data about themselves on the internet with varying levels of security. Doxers may search both legal (social media, public databases) and fraudulent (phishing) sources for information. Methods can include:
If you or someone you know thinks they are being doxed, take the following steps:
- Reduce Exposure: If you believe you are being targeted, temporarily deactivate or delete accounts to reduce exposure and request the removal of false, abusive, or threatening content.
- Document what happened: Use screenshots or download webpages and take the time to write out what happened. This information can help you keep track of what information was shared, as well as help the authorities address the attack.
- Report it: If the attack involves threats or if the information was gleaned in a potentially illegal manner, contact your local police service. You can also report the incident to the Canadian Anti-Fraud Centre or, if you're a UBC community member, Community Safety.
- Protect financial accounts: Immediately contact your credit card company or bank to prevent financial information from being used to steal from you.
- Secure your accounts: Bolster your privacy settings and change passwords for all your accounts, especially those containing information that could be used.
- Get support: Reach out to someone you trust for assistance and emotional support. If needed, UBC students, faculty, and staff can also access support through Counselling Services or the Employee/Family Assistance Program.