Screenshot the Facebook post privately, then report it from the post menu using privacy or bullying and harassment, whichever matches the caption and threats. Do not repost the leak, argue in comments, or send duplicate reports from several accounts. If there are threats, make a police report. Facebook reviews only what is on its platform, not copies elsewhere.
Summary
Screenshot the post privately before you report, because posters often edit or delete during review.
Do not repost the doxxing content to warn friends; each share puts your details in front of new people.
Report from the post menu using privacy or bullying categories, not spam or duplicate reports from many accounts.
Facebook can usually act only on your own private details, or a child you represent, not on behalf of a friend.
Threats alongside the post belong with police as well as with Facebook.
Nobody outside Meta can promise the post will come down.
Someone posted your home address, phone number or workplace on Facebook, sometimes with a caption telling people to contact you. The urge is to share the screenshot everywhere so friends know, and to confront the poster in the comments.
That urge spreads the same private details to a bigger audience than the original post reached. The safer sequence is document quietly, report once with the right category, secure your accounts, then decide whether police need to be involved.
This guide covers what counts as doxxing under Meta's rules, the evidence order, the report steps, and the reactions that make resolution harder.
Last checked: 9 November 2026. Menu labels change between app versions, so read each screen on the day you report.
Save screenshots and the post URL in private first. Open the post, choose Report, and pick privacy when your contact details or home location were shared without consent, or bullying and harassment when the post targets you with threats or shame. Do not repost the content, reply publicly, or file the same report from multiple accounts. Check Support Inbox for the outcome. If there are threats, contact police as well as Facebook.
Meta's Bullying and Harassment policy lists threats to release or sharing of private phone numbers, home addresses, email addresses or medical records as actionable when aimed at private individuals. Facebook's privacy help page covers photos and videos that expose private information.
Posting your name alone, or a photo from a public event, may not qualify. Posting your name plus your flat number usually does. Facebook reviews against named policies, not against how frightened you feel.
Facebook's reporting steps apply to posts in feeds, profiles and many groups: open the post menu, choose Report post, and follow the prompts. Pick privacy when the harm is exposure of details, and harassment when the post is built to target you.
If the same details appear in Messenger, report the conversation from inside the chat. Report each post URL separately if several posts leak your data.
Report the exact post inside the group, and report the group itself if members encourage others to use your leaked details. Group admins may remove the post locally without telling Facebook, so keep your own copies before admins delete evidence you still need for Support Inbox or police.
Facebook can act on content on Facebook. If the same address was posted on a forum, a Telegram channel or a paste site, you need separate reports on those services. Facebook cannot remove what it does not host.
Friends cannot usually report your private details on your behalf unless they are your authorised representative. The report should come from you when possible.
Change passwords on accounts linked to the leaked email or phone if you reused them. Review Facebook privacy settings so future posts do not expose location or contact fields. Tell family not to forward the doxxing screenshot, since family group chats are a common second leak path.
Block the poster after you screenshot their content. Blocking does not remove the post, but it limits further contact while Support Inbox updates arrive.
Malaysia treats certain online harassment seriously, and doxxing posts that include threats are a police matter as well as a platform report. CyberSecurity Malaysia's Cyber999 service accepts incident reports for guidance.
Do not pay anyone who claims they can delete the post instantly for a fee.
Do not share Facebook login codes with someone offering to report for you.
Do not post the leaker's private details in revenge; that creates a second policy problem.
Do not join the group that doxxed you under a fake name to spy; it complicates later police work.
Do not assume police involvement forces Facebook to speed up; the queues stay separate.
If money was demanded to take the post down, treat it as extortion and keep records for law enforcement. Our content removal service page explains how AwareXone helps only through honest platform routes when DIY steps stall.
A single doxxing post is often one careful report and a police call if needed. SocialSafe by AwareXone helps when the leak spans groups and Pages, when reports keep failing for category reasons, or when you need an organised evidence pack before anything is resubmitted. We never ask for passwords. Read how we work.