# How to Report Doxxing on Instagram Without Making It Worse > Someone posted your address or number on Instagram. The report steps that help, and the common reactions that spread it further instead. - URL: https://www.awarexone.com/research/how-to-report-doxxing-on-instagram-without-making-it-worse - Author: Md Shariar Shanaz Shuvon, Founder & CEO, AwareXone - Published: 2026-11-09 - Topics: Instagram, Content removal, Malaysia - Related service: Social media content removal: https://www.awarexone.com/social-media-recovery/social-media-content-removal ## Short answer Screenshot the post privately first, then report it using the category closest to privacy or harassment. Do not repost it to warn others, argue with the poster, or send duplicate reports. If there are threats, also make a police report. Instagram can only act on your own private details, not a copy posted elsewhere. ## Summary - Instagram bans posting private details such as your address, phone number, email or ID numbers, and you can report it from the post or profile. - Screenshot the post first, in private, before you report it, because the record disappears if the post is deleted or edited. - Do not repost the doxxing content to warn people, confront the poster in the comments, or fire off duplicate reports. All three usually make things worse. - Instagram can only act on information about you, or someone you are authorised to represent, and it cannot remove a copy posted somewhere else. - If the post comes with threats, treat it as a police matter in Malaysia as well as a platform report. - No one, including AwareXone, can promise a doxxing post comes down. The platform decides. Someone has posted your home address, phone number or full legal name on Instagram, often with a caption that tells people to go and find you. The instinct is to act fast: screenshot it, share it everywhere so people know, and tell the poster exactly what you think of them in the comments. That instinct is understandable and it usually backfires. Reposting the doxxing content to warn people spreads the private details to a wider audience than the original post ever reached. Arguing with the poster can prompt them to post more, or to delete the evidence before you have captured it. The safer order is: document privately, report through the right category, lock down your own accounts, then decide whether this also needs the police. This guide covers what Instagram's rules actually say about private information, the report steps that work, the reactions that make a doxxing case harder to resolve, and when Malaysia's police or MCMC become part of the picture. Last checked: 9 November 2026. ## Quick Answer Screenshot the post privately before you do anything else, because it can be edited or deleted. Then report it from the three dots on the post or the profile, choosing the category closest to privacy or harassment rather than "I just don't like it". Do not repost it anywhere, do not reply to the poster, and do not send the same report from several accounts: Instagram's own guidance says reports are reviewed individually, and duplicate reports do not speed anything up. If the post includes threats or a demand, that is a police matter in Malaysia as well as a platform report. Instagram can act on your own private information, or a child you are responsible for, but it cannot remove a copy that exists somewhere else. ## What Counts as Doxxing on Instagram? Instagram's [Exposed Private Information](https://help.instagram.com/122717417885747) page defines private and confidential information as including, but not limited to, credit card details, national identity numbers, a private address or location, and non-public phone numbers or email addresses. Posting that information is a violation of Instagram's Terms of Use. What does not automatically qualify: your name alone, a photo of your face, your workplace if you have stated it publicly yourself, or general criticism that does not disclose contact details or location. Instagram's own wording is careful here: "though you may believe certain information is private, not all content of this type is in violation of our terms." A post that says someone is a bad business owner is not doxxing. A post that adds their home address to that claim usually is. ## Document Before You Report 1. Take a full-screen screenshot of the post, including the username and the date, before you touch the report button. 2. Screenshot the caption and any comments that repeat the private information or add threats. 3. Note the exact URL of the post. Instagram's privacy process works from the specific link, not a general profile page. 4. Save it somewhere other than the phone you are using, in case you need it again later. 5. Only then report the post. > Warning: **Do this quietly.** Document in private. Commenting back, quote-posting the content to your own Stories, or telling the poster you are about to report them gives them time to screenshot-proof it, repost under a new account, or escalate before the report is reviewed. ## How Do You Report Doxxing on Instagram? Open the post or the profile, tap the three dots, then tap Report. Instagram's [report categories](https://help.instagram.com/192435014247952) do not list "doxxing" by name, so pick the one that actually matches the harm: bullying or unwanted contact if the private details came with harassment, or violence, hate or exploitation if there is a direct threat alongside the information. Instagram's own guidance on [reporting harassment and bullying](https://help.instagram.com/547601325292351) confirms that an account or post set up to target a specific person can be reported that way. Your report is anonymous. Instagram's privacy page states plainly that the account reported will not see who reported them, with the one exception of intellectual property reports, which do not apply here. ## What Can Instagram Actually Do About It? Instagram's own limits matter more than most people expect. Its Exposed Private Information guidance says Instagram can act only when the reported information is about the person reporting it, or someone they are authorised to represent, such as a parent reporting for a child under 13. A friend reporting on your behalf without that authorisation is usually refused. It also cannot remove information that exists outside Instagram or Threads. If the same address has been posted on a forum, a different platform or a public records site, Instagram's removal only ever covers its own post. That is a separate report, sometimes to a different company entirely. ## Mistakes That Make a Doxxing Case Worse - Reposting the content to "warn people": every repost, including your own Story, puts the private information in front of a new audience and makes it harder for anyone to contain. - Replying in the comments: arguing gives the poster a reason to keep the post up, screenshot your reaction, or add more detail out of spite. - Filing the same report from several accounts: it does not move you up a queue, and a pattern of duplicate reports can itself look like abuse of the reporting system. - Posting the doxxer's own details in return: this is a second doxxing incident, not a defence, and can create legal exposure for you as well. - Deleting your own account or posts before you have screenshots: you lose the evidence you would need for a stronger report or a police report later. - Messaging the poster's followers to pressure them: this usually spreads the story, and the original information, further. - Paying anyone who contacts you first offering guaranteed removal: that is a common follow-on scam aimed at people who are already distressed. ## When Does This Need the Police as Well as a Report? A platform report and a police report answer different questions. Instagram decides whether a post stays up. Malaysian authorities decide whether a crime has occurred. Report to the police when the doxxing comes with a threat, a demand for money, or repeated targeting rather than one post. - If anyone is demanding payment tied to the exposure, contact your bank and call the National Scam Response Centre on 997 as soon as you can, so it can look at blocking any transfer. - [CyberSecurity Malaysia's Cyber999](https://www.cybersecurity.my/portal-main/services/cyber999-overview) is the national point of contact for reporting the incident and can help escalate the abuse report, though it does not remove content itself. - If the platform leaves clearly private information up after a proper report, [MCMC's complaint channel](https://www.mcmc.gov.my/en/make-a-complaint/make-a-complaint) is the next step, with your report reference and screenshots attached. > Warning: **Never share a code or password.** Nobody legitimate, including Instagram staff, a lawyer or AwareXone, will ever ask you to hand over a password, a one-time code or a backup code to help remove a post. Anyone who asks is not helping you. ## How Long Does a Privacy Report Usually Take? Instagram does not publish a fixed turnaround time for a privacy or harassment report. What it does confirm, in its reporting pages, is that most reports go through an initial review and that the reporter gets an update in Support Requests. If a post stays up after a report you believe was accurate, our guide to [what happens after you report someone](https://www.awarexone.com/research/what-happens-when-you-report-someone-on-instagram) covers the review process and the request-a-review option in more depth. ## Decluttering: What to Do With Your Own Account Meanwhile - Switch your account to private if it is not already, so new followers cannot see your posts while this is unresolved. - Turn on two-factor authentication, since a doxxing incident is often paired with an attempt to take over the account. - Restrict or block the account that posted it, after you have screenshots. - Tell a close contact what is happening, especially if the post includes your address, so someone else knows the situation. ## When a Case Review Makes Sense Most single-post doxxing cases are resolved with one accurate report and a bit of patience. A case review is worth considering when the information keeps reappearing under new accounts, several platforms are involved at once, or the evidence needs organising before it goes to the police or MCMC. SocialSafe by AwareXone reviews the case first, helps pick the category that matches what actually happened, and prepares the report through Instagram's own forms. We never ask for your password or a login code, and only Instagram decides whether a post comes down. Read [how we work](https://www.awarexone.com/trust) for the rest of it. ## Frequently Asked Questions ### What counts as doxxing on Instagram? Posting someone's private address, phone number, email, national ID number or payment details without consent. A name or photo alone usually does not qualify; adding contact or location details usually does. ### Will the person I report find out it was me? No. Instagram's reporting pages say reports are anonymous, with the one exception of intellectual property claims, which do not apply to a privacy report. ### Should I repost the doxxing content to warn my followers? No. Reposting puts the private information in front of a new audience and works against the report you have just filed. Warn people privately instead, without repeating the details. ### Can Instagram remove my address if it was also posted on another website? No. Instagram's own guidance says it can only remove content on Instagram or Threads, not a copy that exists on a different platform. ### Does sending several reports from different accounts speed things up? No, and it can look like misuse of the reporting system. One accurate report with clear evidence is more useful than several duplicate ones. ### What if the person doxxing me is also making threats? Report the post to Instagram and make a police report in parallel. Threats are a criminal matter that a platform report does not address on its own. ## Official sources - [Instagram Help Center: Exposed Private Information](https://help.instagram.com/122717417885747) - [Instagram Help Center: Report a post or profile on Instagram](https://help.instagram.com/192435014247952) - [Instagram Help Center: Reporting harassment or bullying on Instagram](https://help.instagram.com/547601325292351) - [Malaysian government: NSRC 997 hotline](https://www.malaysia.gov.my/en/categories/safety-and-community/cybersecurity/nsrc-997-hotline) - [CyberSecurity Malaysia: Cyber999 overview](https://www.cybersecurity.my/portal-main/services/cyber999-overview) - [MCMC: Make a complaint](https://www.mcmc.gov.my/en/make-a-complaint/make-a-complaint) --- AwareXone is an independent provider serving clients worldwide, not affiliated with any platform. The platform makes the final decision on every account. AwareXone never asks for passwords, OTP codes, backup codes or session cookies.