Screenshot the WhatsApp post privately, then report it from the post menu using privacy or bullying and harassment, whichever matches the caption and threats. Do not repost the leak, argue in comments, or send duplicate reports from several accounts. If there are threats, make a police report. WhatsApp reviews only what is on its platform, not copies elsewhere.
Summary
Screenshot the post privately before you report, because posters often edit or delete during review.
Do not repost the doxxing content to warn friends; each share puts your details in front of new people.
Report from the post menu using privacy or bullying categories, not spam or duplicate reports from many accounts.
WhatsApp can usually act only on your own private details, or a child you represent, not on behalf of a friend.
Threats alongside the post belong with police as well as with WhatsApp.
Nobody outside WhatsApp can promise the post will come down.
Someone posted your home address, phone number or workplace on WhatsApp, sometimes with a caption telling people to contact you. The urge is to share the screenshot everywhere so friends know, and to confront the poster in the comments.
That urge spreads the same private details to a bigger audience than the original post reached. The safer sequence is document quietly, report once with the right category, secure your accounts, then decide whether police need to be involved.
This guide covers what counts as doxxing under WhatsApp's rules, the evidence order, the report steps, and the reactions that make resolution harder.
Last checked: 9 November 2026. Menu labels change between app versions, so read each screen on the day you report.
Save screenshots and the message or Status screenshot in private first. Use the in-app Report menu on the message or Status for harassment when captions or comments target you, and file a in-app report with the closest safety reason when your address, phone or other private details appear in the upload and you are uniquely identifiable. Do not repost the video, reply publicly, or file duplicate reports from multiple accounts. Signed in users may see community outcomes in no public outcome inbox. If there are threats, contact police as well as WhatsApp.
WhatsApp's harassment policy covers sustained abuse and threats. The privacy guidelines cover sharing contact information or location without consent when you are uniquely identifiable in the upload.
Posting your name alone, or a photo from a public event, may not qualify. Posting your name plus your flat number usually does. WhatsApp reviews against named policies, not against how frightened you feel.
WhatsApp's reporting help applies under the video player: open the three dot menu, choose Report, and follow the prompts. Pick harassment when the video targets you, and use the in-app report with the closest safety reason form when private details about you appear in the footage.
If several uploads repeat the same leak, capture each message or Status screenshot separately. Comments that repost your phone number can be reported from the comment menu as well.
Report the exact post inside the group, and report the group itself if members encourage others to use your leaked details. Group admins may remove the post locally without telling WhatsApp, so keep your own copies before admins delete evidence you still need for Support Inbox or police.
WhatsApp can act on content on WhatsApp. If the same address was posted on a forum, a Telegram channel or a paste site, you need separate reports on those services. WhatsApp cannot remove what it does not host.
Friends cannot usually report your private details on your behalf unless they are your authorised representative. The report should come from you when possible.
Change passwords on accounts linked to the leaked email or phone if you reused them. Review WhatsApp privacy settings so future posts do not expose location or contact fields. Tell family not to forward the doxxing screenshot, since family group chats are a common second leak path.
Block the poster after you screenshot their content. Blocking does not remove the post, but it limits further contact while Support Inbox updates arrive.
Malaysia treats certain online harassment seriously, and doxxing posts that include threats are a police matter as well as a platform report. CyberSecurity Malaysia's Cyber999 service accepts incident reports for guidance.
Do not pay anyone who claims they can delete the post instantly for a fee.
Do not share WhatsApp login codes with someone offering to report for you.
Do not post the leaker's private details in revenge; that creates a second policy problem.
Do not join the group that doxxed you under a fake name to spy; it complicates later police work.
Do not assume police involvement forces WhatsApp to speed up; the queues stay separate.
If money was demanded to take the post down, treat it as extortion and keep records for law enforcement. Our content removal service page explains how AwareXone helps only through honest platform routes when DIY steps stall.
A single doxxing post is often one careful report and a police call if needed. SocialSafe by AwareXone helps when the leak spans groups and Pages, when reports keep failing for category reasons, or when you need an organised evidence pack before anything is resubmitted. We never ask for passwords. Read how we work.