Short answer: in the first hour, do not reply, do not pay and do not delete anything. Screenshot everything with the usernames, links and times visible. Report the post or message on the platform where it appeared, block the person, and lock down your personal social media. If anyone threatens you, asks for money or turns up near where you live, contact the police. Then, over the following days, work through the privacy hardening below so the trail they followed is closed. Being doxxed is frightening, but it is survivable, and creators who act calmly and quickly usually contain it.
This guide is for the moment someone writes "I know who you are" or posts your name next to your page. If what has happened is that your content has been shared elsewhere, the leak response guide covers that side.
What doxxing is, and what it usually looks like
Doxxing is publishing or threatening to publish someone's private, identifying information: a legal name, a home town, an address, a workplace, family members. For creators it usually arrives in one of a few ways:
- A DM from a subscriber saying he knows your real name, often with a screenshot of your personal Instagram or Facebook as proof
- A comment or post on Reddit linking your creator account to your real identity, sometimes in a subreddit where you promote
- A threat with a demand: pay, send content, or meet up, or he tells your employer, family or followers
- Someone you know in real life recognising you and telling other people
The first two are the most common. The third is extortion and should go to the police. In every case, the steps for the first hour are the same.
The first hour
1. Do not reply
Anything you say can be screenshotted, posted and used to confirm what he suspects. Do not deny it, confirm it, argue, plead or bargain. A doxxer who gets a reaction has been rewarded; one who gets silence has nothing to work with.
2. Do not pay or send anything
If there is a demand for money or content, paying does not end it. It tells him you can be made to pay again. Creators who pay usually report that the demands continue.
3. Save the evidence
Before you block or report, take screenshots that show:
- The full message, post or comment
- The username and profile of the person who sent or posted it
- The link to the post or profile, written down or visible in the screenshot
- The date and time
Save them somewhere private that is not your phone's main camera roll, such as a locked folder or a secure cloud folder. If the post is later removed, these are your proof for the platform, the police or a lawyer.
4. Report it where it happened
| Where | What to report it as | Notes |
|---|---|---|
| OnlyFans DMs | Use the report option on the fan's message or profile | OnlyFans' Acceptable Use Policy lists doxxing and stalking as prohibited abuse or harassment |
| Report the post or comment for sharing personal information or harassment | Report the user's profile too, and message the subreddit's moderators with the link | |
| Instagram, X, TikTok | Use the platform's report option for private information or harassment | Each platform has its own route, usually under harassment or privacy |
| Search engines | Request removal of results that show your personal contact details | Google offers a request form for results containing personal information such as your home address or phone number |
Report even if you think nothing will happen. A report creates a record, and repeat offenders get removed.
5. Block, then lock down
Once the evidence is saved and the report is in, block the person on every platform he has contacted you on. Then, straight away:
- Set your personal social media to private. Instagram, Facebook, TikTok, anything under your real name.
- Remove or hide tagged photos and any posts that show where you live, work or study.
- Check who can find you by phone number or email in each app's privacy settings and turn it off.
- Change your OnlyFans password and check two-step verification is on. Do the same for your main email account.
6. Decide about the police
Contact the police if there is a threat of any kind, a demand for money or content, a threat to share intimate images, contact with your family or employer, or any sign he knows where you live. Threats, blackmail and harassment are crimes in many countries whatever your job is. Bring your screenshots.
If intimate images are being threatened, StopNCII lets you create a digital fingerprint of your images without uploading them, so participating platforms can block them. In the UK, the Revenge Porn Helpline supports adults dealing with intimate image abuse, and in the US the Cyber Civil Rights Initiative runs a helpline for victims of image abuse.
7. Tell one person you trust
You do not have to manage this alone. One friend, partner or fellow creator who knows what is happening can help you think straight, check the evidence is saved, and keep an eye on things you cannot bear to look at.
The days after: how they found you, and how to close it
Most doxxing is not hacking. It is someone patiently joining dots you did not know were visible. Work through the usual routes:
| How creators get found | How to close it |
|---|---|
| Face match from a personal account | Keep personal accounts private and do not reuse photos between personal and creator accounts. Face search tools can match photos across the web |
| The same username, email or phone number on both identities | Use a separate email, phone number and usernames for everything creator-related |
| Reddit post history | Use a dedicated Reddit account for promotion only, with nothing about your town, job, school or real life |
| Details in the background of content | Check for post, packaging, uniforms, distinctive views from windows, mirrors and reflections, local landmarks |
| Location data in photos | Turn off location for your camera and strip location data before posting anywhere |
| Tattoos, birthmarks and distinctive jewellery | Cover or crop them in promotional content if anonymity matters to you |
| Public records and people-search sites | Where your country allows it, opt out of public registers and request removal from people-search and data broker sites |
| Mutual followers | Do not follow your creator account from your personal one, or vice versa, and do not let the apps suggest one to the other's contacts |
If you want to work under a fully separate identity, running OnlyFans without showing your face goes through the setup in detail.
Getting ahead of it
Some creators find that the threat loses most of its power once the people who matter already know. That is a personal decision, and there is no right answer. If you have thought about telling family or a partner, a doxxing attempt is sometimes the push to do it on your own terms rather than his. If you would rather keep the two lives separate, everything in the table above makes that much more achievable.
It also helps to have a plan written down before you need it: where your screenshots go, who you call, which accounts you lock first. Five minutes now saves a lot of panic later.
Frequently asked questions
Is doxxing illegal? It depends on what is shared and how, and on where you live. Threats, blackmail, harassment and stalking are crimes in many countries, and sharing intimate images without consent is illegal in many places. Doxxing on its own may not always be a crime, but it breaks the rules of every major platform. Save the evidence and ask the police where you live.
Will OnlyFans help if a fan doxxes me? OnlyFans' Acceptable Use Policy lists doxxing and stalking as prohibited, so report the fan's account. Its terms also say it is not liable for other users disclosing your identity, so do not rely on the platform alone: block, lock down and go to the police if there is a threat.
Should I reply to someone who says they know my real name? No. Any reply can confirm what he suspects or show him that pressure works. Save the evidence, report and block.
Should I pay someone who threatens to reveal my identity? No. Paying rarely ends it and often leads to more demands. Keep the messages and report the threat to the police.
How do people find an OnlyFans creator's real name? Usually by matching faces, usernames, email addresses or phone numbers across platforms, by reading Reddit post history, or from details in the background of photos and videos. Separate accounts for everything creator-related close most of these routes.
Can I get my name removed from Google? You can ask. Google lets you request removal of search results that show personal contact information such as your home address or phone number, and you can ask the site hosting the information to take it down.
Where Naughtii fits
A lot of privacy is about not saying too much in a long, friendly conversation. Naughtii drafts your OnlyFans DM replies in your own voice with your limits built in, and its privacy rules are part of the product, not a setting: drafts do not give out your real name, location or personal details, however a fan asks. It works from a Chrome extension in your own browser or a screenshot on your iPhone, never asks for your OnlyFans password, and has no send button of its own: you read every draft and send it yourself. The first month is free.
The bottom line
When someone finds your real name, the first hour matters most. Do not reply or pay. Save the evidence, report it on the platform, block, and lock down your personal accounts. Go to the police if there is any threat, demand or sign he knows where you live. Then close the trail: separate emails, numbers and usernames, private personal accounts, and content that gives nothing away. Plenty of creators have been through this and carried on building their business.
This article reflects general safety practice, OnlyFans' Acceptable Use Policy (last updated September 2025) and creators' reported experience as of 4 November 2026. It is not legal advice, and laws on harassment, extortion and image abuse vary by country. If you are in immediate danger, contact your local emergency services. Naughtii is an independent product and is not affiliated with OnlyFans or with any platform or organisation mentioned in this article.