Doxxing & Swatting
How personal information published online can be weaponised against children — from doxxing in gaming and social communities through to swatting hoax-emergency calls that put a family in the path of armed police.
Doxxing & Swatting is the malicious publishing of someone's private details online, sometimes followed by a false emergency call to send armed police to their home.
What is this?
Doxxing is when someone deliberately publishes private information about a person — full name, home address, school, parents' workplace, phone numbers — so others can harass, intimidate, or physically reach them. Swatting is the most dangerous escalation: a hoax 999 call reporting a fake violent incident at the victim's address, designed to bring an armed police response to their door. Both have moved from adult internet subcultures into children's lives via gaming, Discord servers, and creator communities. Police forces in England and Wales now take swatting-style hoax calls seriously and have prosecuted offenders under public-nuisance and Communications Act offences.
How it works
Doxxers piece information together from small leaks — a school crest in a photo background, a gamertag reused on a public profile, a parent's tagged workplace, a Strava run leaving home, a delivery address typed into a livestream chat. Once a 'dox' is published, others copy it onto pastebins, Telegram channels, or gaming forums, and the harassment can continue long after the original post is removed. Swatting weaponises that address: an anonymous call to 999 or a non-emergency line falsely reports a hostage, weapon, or bomb at the victim's home, hoping for an armed police response.
Warning signs
In your child's behaviour
- • Sudden spike in hostile messages, prank calls, or unknown deliveries to the family address
- • Withdrawing from a specific game, server, or platform after a falling-out
- • Anxiety about answering the door or about police vehicles in the street
- • Mentioning that 'someone said they know where I live' or 'they have my real name'
On their device
- • Screenshots, threats, or pastebin links being shared in the child's DMs or group chats
- • Account take-over attempts — password reset emails the child did not request
- • New followers or join-requests from accounts with no posts, created the same day
Prevention steps
Separate real identity from gaming identity
Use a gamertag that does not reuse the child's real first name, school, town, or birth year. Keep that gamertag off any account that carries the real name (email, school portal, Instagram).
Lock down the address footprint
Turn off location tags on social and fitness apps. Do not livestream from rooms that show the house number, school uniform, or street name. Review old posts for the same.
Plan for the worst-case call
If you have reason to believe the family has been targeted for swatting, you can contact your local police non-emergency line on 101 in advance to log the risk, so any 999 call to your address is treated with appropriate context.
Use the ICO and platform takedown routes
Personal information published without consent can often be removed under UK GDPR / Data Protection Act 2018. Report to the platform first, then to the ICO on 0303 123 1113 if the platform does not act.
What to do if it happens
- 1If a hoax call brings police to your home, follow officers' instructions calmly — they will not know yet that the call was false. Once safe, ask for the incident number and tell them you suspect swatting.
- 2Save screenshots of the original dox post, the platform, the time, and any usernames before content is deleted.
- 3Report to the platform, to CEOP if the target is a child, and to the police on 101 (or 999 if there is an immediate threat). Action Fraud (0300 123 2040) handles related cyber-harassment.
- 4Speak to the school — doxxing often spills into the classroom and the designated safeguarding lead can manage the school side.
Related topics
If you need to report this
In immediate danger: call 999. For non-emergency police matters, call 101.
Concerned about a child but it's not an emergency? NSPCC helpline 0808 800 5000. Childline for young people 0800 1111.
This is practical educational content to support families. For case-specific concerns about a child's safety, contact the NSPCC helpline on 0808 800 5000 or your local safeguarding team.
Myths & facts
Myth: It's just information that was already public, so nothing can be done about it.
Fact: Compiling someone's name, address, school, or family details from scattered sources and publishing them to enable harassment can amount to an offence under the Protection from Harassment Act 1997 or the Malicious Communications Act 1988, even where each individual fragment could be found somewhere online. Publishing someone's personal data this way can also be challenged through the ICO under UK GDPR, whatever its original source.
Myth: My child's gamertag isn't their real name, so they're anonymous and safe from doxxing.
Fact: CEOP's Thinkuknow advises against building a gamertag or profile around a real name, birthday, or home town, and against making an in-game avatar look like the child, precisely because a reused username is usually how doxxers link a gaming identity back to a real one. A single gamertag reused on a public profile, alongside a tagged location or a face shown in a stream, is often enough to work backwards to a real identity.
Myth: Swatting is an American problem - it doesn't happen here.
Fact: It happens in the UK too. West Midlands Police secured a conviction against a man behind scores of hoax 999 calls that triggered armed police responses and wasted large amounts of emergency resources; he was jailed for intentionally causing a public nuisance. UK police forces and the CPS treat hoax emergency calls that draw an armed response as a serious criminal matter, not a prank.
Age by age
- 11-13
At this age, children are starting to build their own gaming and social profiles, often without realising how a reused username, a tagged school, or a background detail in a photo can be pieced together. Help them choose a gamertag that doesn't include their real name, birth year, school, or town, and check privacy and location settings together on any app or game they use. Explain simply that keeping their gaming identity separate from their real one is a normal safety habit, not a punishment.
- 14-16
Teenagers this age often livestream, share more of their daily life, and have larger, less-known friend groups where a falling-out can turn into someone publishing their details. Talk through what to do if someone says they 'know where you live', including saving evidence, not engaging, and telling you straight away rather than trying to handle it alone. Review old posts and streams together for details such as house numbers, school uniforms, or regular routines that could give the address away.
- 17-plus
Older teenagers may be managing larger online followings, competitive gaming teams, or content creation where disputes are more public and the stakes of a doxxing attempt are higher. Make sure they know the reporting routes available to them directly, including the platform, the ICO for a data-protection removal request, and the police on 101, and that a hoax call to your address is always treated as genuine by responding officers regardless of who caused it. Encourage them to keep their address and daily routine off any public-facing account, even ones tied to a following or career.
Frequently Asked Questions
Related Resources
Sources
Was this page helpful?
Explore more
Stay informed on this topic
Get practical child safety updates in your inbox. No spam.