How personal information published online can be weaponised against children — from doxxing in gaming and social communities through to swatting hoax-emergency calls that put a family in the path of armed police.
Doxxing is when someone deliberately publishes private information about a person — full name, home address, school, parents' workplace, phone numbers — so others can harass, intimidate, or physically reach them. Swatting is the most dangerous escalation: a hoax 999 call reporting a fake violent incident at the victim's address, designed to bring an armed police response to their door. Both have moved from adult internet subcultures into children's lives via gaming, Discord servers, and creator communities. Police forces in England and Wales now take swatting-style hoax calls seriously and have prosecuted offenders under public-nuisance and Communications Act offences.
Doxxers piece information together from small leaks — a school crest in a photo background, a gamertag reused on a public profile, a parent's tagged workplace, a Strava run leaving home, a delivery address typed into a livestream chat. Once a 'dox' is published, others copy it onto pastebins, Telegram channels, or gaming forums, and the harassment can continue long after the original post is removed. Swatting weaponises that address: an anonymous call to 999 or a non-emergency line falsely reports a hostage, weapon, or bomb at the victim's home, hoping for an armed police response.
1. Separate real identity from gaming identity
Use a gamertag that does not reuse the child's real first name, school, town, or birth year. Keep that gamertag off any account that carries the real name (email, school portal, Instagram).
2. Lock down the address footprint
Turn off location tags on social and fitness apps. Do not livestream from rooms that show the house number, school uniform, or street name. Review old posts for the same.
3. Plan for the worst-case call
If you have reason to believe the family has been targeted for swatting, you can contact your local police non-emergency line on 101 in advance to log the risk, so any 999 call to your address is treated with appropriate context.
4. Use the ICO and platform takedown routes
Personal information published without consent can often be removed under UK GDPR / Data Protection Act 2018. Report to the platform first, then to the ICO on 0303 123 1113 if the platform does not act.
Last reviewed: 2026-06-14