Someone Posted My Private Chat Screenshots: What to Do

Someone has taken screenshots of your private WhatsApp chat or your Instagram DMs and posted them on Facebook, TikTok or in a group, and the chat has gone "tular". You want it taken down, and you want to know if what they did is even allowed.

The short answer: report the post on the platform where it appears, and pick the reason that matches what the screenshot actually does. A conversation being private is rarely enough on its own. A screenshot that shows your phone number, address or IC number, or is posted to shame or harass you, has a much better chance.

This guide explains how platforms decide, how to report on Meta, TikTok and YouTube, what to do if the screenshots reach websites or Google, and when Malaysian law comes in. It is general information, not legal advice.

Last checked: 5 October 2026.

#Can You Get Leaked Chat Screenshots Taken Down?

Often, yes, but not because the chat was private. Platforms remove a chat screenshot when it breaks a specific rule: it exposes personal information such as a phone number, home address, ID number or bank details; it is used to degrade, shame or harass a private person; it was taken from a hacked account; or it is intimate. Report it on those grounds, with evidence. If a screenshot is simply embarrassing and contains nothing in those categories, the platform will usually leave it up, and only a court can order otherwise.

#Urgent First: Intimate Content, Threats or Blackmail

If the screenshots include intimate images, or someone is threatening to post more unless you pay or do something, this is not an ordinary privacy report. Do not pay and do not negotiate. Save the messages, report the account, and make a police report at the nearest police station.

Our guide to intimate images posted without consent covers StopNCII, Google's intimate imagery request and the police. If someone is demanding money, read our guide to sextortion on social media in Malaysia first. If you are in danger right now, contact the police before anything else.

#What Is in the Screenshot Decides What Happens

Platforms judge the content of the post, not how hurt you feel about it. Find the line in the screenshot that crosses a rule, then use the table to match it to a policy.

#Save the Evidence Before You Report

Posts get deleted or edited once reported, and you may need proof later for MCMC or the police. Do this before you report or block anyone.

• The full link to every post, story, video or group where the screenshots appear.
• The username and profile link of each account that posted or reshared them.
• A screenshot of each post with the date, time and URL or account name visible.
• The comments that tag you, mock you or repeat your personal details.
• Any direct messages or threats you received, with the sender and date.
• Your own private copy of the original conversation, in case the posted version was edited.
• Every report reference number and platform reply, with the date.

Keep everything in one folder with a short timeline. If your address or number was posted with threats, our guide to doxxing posts that share your address covers that case.

#How to Report on Facebook, Instagram and Threads

Meta's quickest route is the "Report" option on the post itself, which Facebook's page on photos that violate your privacy recommends first. Menu wording varies by app version and language, so choose the option closest to privacy, personal information, or bullying and harassment.

Meta's privacy violations standard says it removes content that shares personal contact information of others without consent, national identification numbers, private residential addresses, financial details with security codes, medical information from records, and information that comes from a hacked source. Instagram's page on exposed private information lists credit card details, national identity numbers, private addresses, non-public phone numbers and non-public email addresses as private information.

If the problem is shaming rather than personal details, Meta's bullying and harassment policy gives private individuals stronger protection than public figures. It removes content meant to degrade or shame a private person, including claims about their sexual activity, and for private adults it also covers claims about romantic involvement. For several of those categories, Meta says the person targeted has to report it themselves, so a friend's report may not be enough.

1. Report the post with the reason that matches what the screenshot shows.
2. If the screenshot shows your photo or a video of you, Instagram also has a privacy report form. Instagram says it removes unauthorised posts where relevant privacy laws in your country require it.
3. Report the account as well if it exists only to target you.
4. Write down the report confirmation, then block or restrict the account.

#How to Report on TikTok

Use the "Report" option on the video or comment, and for privacy problems also TikTok's privacy report form. TikTok's privacy and security guidelines say it does not allow content with personal information that could lead to stalking, identity theft, fraud or other harm.

The same guidelines say TikTok may also remove moderate risk personal information shared without consent if it puts someone at risk of psychological harm, but that it generally needs more context to do so. That is where a chat screenshot often sits, so use the free text box to explain who you are, that you did not consent, and the harm it is causing, in two or three plain sentences.

TikTok's safety and civility guidelines ban harassment and bullying, including when it is done in retaliation, and allow more critical commentary about public figures than private ones. Some lower severity content may only be kept off the For You feed rather than removed.

#How to Report on YouTube

If the screenshots appear in a YouTube video or comment, use YouTube's privacy complaint process. YouTube asks you to make sure you are uniquely identifiable in the content before you file, so point to the exact timestamp where your name, number or photo appears. If the video is harassment, report it through the normal report option as well.

#If the Screenshots Spread to Websites or Google Search

Google cannot delete a page from someone else's website, but it can remove certain results from Google Search. Its page on removing private info from Google Search lists what qualifies.

• Your address, phone number or email.
• Confidential government ID numbers, including a resident ID card number.
• Your bank account or credit card number, and pictures of your signature or ID.
• Private records such as medical records, and confidential usernames and passwords.
• Doxxing: your personal info shown with threats or calls for others to harass you, or a large amount of aggregated personal info with no legitimate purpose.

You must give the exact URLs, and Google asks for screenshots to help it find the content. Google says it may keep newsworthy content, that removal can be full or partial, and that the page may still be reachable through links or other search engines. To get the page itself removed, contact the website owner. If the site later takes it down, Google lets you ask it to refresh the outdated result.

#When Malaysian Law Applies

This section is general information, not legal advice. Malaysian law focuses on what a post does, such as threatening, harassing or exposing someone, rather than on the fact that a chat was private. Whether a particular post is an offence is for the police and the courts to decide.

• Penal Code: the government's announcement of the Penal Code (Amendment) Act 2025 says new sections 507B to 507G, in force since 11 July 2025, cover threatening, abusive or insulting communications meant to cause distress or fear, and that sharing personal information without consent (doxxing) can carry up to three years in prison.
• Online Safety Act 2025: MCMC's page for the Act says it has been in force since 1 January 2026. MCMC's online safety page lists harassment or abusive content that threatens, intimidates or causes distress or alarm as reportable.
• Reporting to MCMC: section 24 of the Act lets you report harmful content to MCMC whether or not you have already reported it to the platform, and also covers content outside licensed platforms. MCMC's make a complaint page links its consumer complaint portal at aduan.mcmc.gov.my.
• Police: make a report at a police station if there are threats, blackmail, doxxing or intimate content. Bring your evidence folder and timeline.
• Defamation: if the screenshots were edited, cropped to mislead or posted with false claims that damage your reputation, that is a civil matter. Speak to a lawyer, who can advise on a demand letter or a court order.

For a fuller picture of the offences and how MCMC handles reports, see our guide to online harassment and the Online Safety Act.

#Damage Control While You Wait

• Do not reply in the comments or argue with sharers. Replies push the post to more people and give the poster new material.
• Instagram suggests asking the poster directly to remove private information. Only do this if you feel safe, keep it to one short, calm message in writing, and skip it entirely if they are harassing you.
• Make your own accounts private for now, remove tags, and limit who can comment on or message you.
• If your phone number is exposed, expect calls and messages from strangers and possibly scammers. Do not share codes with anyone who contacts you.
• Ask friends not to reshare the post, even to defend you.
• If the chats were taken from your account, change your password, log out of other sessions and turn on two-factor authentication.

#Mistakes and Scams to Avoid

• Reporting under a reason that does not fit, or asking friends to mass report. A report under the wrong reason is easier to reject, and a pile of reports does not make lawful content break the rules.
• Posting the screenshots yourself to explain your side. That creates another copy that needs removing.
• Paying a "hacker" who offers to break into the poster's account or delete the chats. Accessing someone else's account without permission is a crime, and many of these offers are simply scams.
• Giving anyone your password, a login code or backup codes, whoever they say they are.

#When a Case Review Makes Sense

You can do every step above yourself, for free, and those official routes are the ones that remove content. Where SocialSafe by AwareXone can help is when the screenshots are spread across several platforms and groups, when your reports keep coming back rejected, or when the chats were taken from a hacked account that needs securing. We review the case first, prepare rights-based reports through official channels only, and tell you honestly when a post is unlikely to come down. The platform or a court decides. Our content removal page explains what we handle, and our Trust Center sets out what we never ask for.

#Frequently Asked Questions