Doxxing in Australia: When Posting Someone’s Personal Details Becomes a Serious Criminal Offence
It used to be dismissed as internet drama. A screenshot here, a phone number there, perhaps a workplace or suburb posted into a Facebook group or Telegram chat. But doxxing is no longer something the law can shrug off as mere online nastiness. In Australia, publishing another person’s personal details online in a menacing or harassing way can now amount to a serious criminal offence.
That matters because many people still misunderstand what doxxing actually is. Some assume it only applies when a home address is posted with an obvious threat attached. The law is broader than that. If someone uses the internet or another carriage service to publish another person’s personal data in a way that reasonable people would regard as menacing or harassing, the conduct may trigger Commonwealth criminal liability. If you have already read our article on what counts as online harassment and social media offences in NSW, this is the more specific and more targeted end of the same problem: online abuse becoming structured, deliberate, and legally dangerous.
What is doxxing?
In plain English, doxxing usually means exposing or distributing someone’s personal information online without consent in a way that places them at risk, invites harassment, or encourages others to target them.
That personal information can include:
- a full name
- a mobile number
- a home address
- a workplace
- a school
- an email address
- a photo
- a social media handle
- other identifying details that make a person locatable or vulnerable
The legal significance of doxxing is not only that the information is published. It is that the publication is weaponised. A name plus a suburb. A photo plus a workplace. A screenshot plus a phone number. What looks trivial in fragments can become threatening when assembled and distributed to an online crowd.
This is where many people get the law wrong. They focus only on whether the information was “already public.” But information can still become dangerous when it is repackaged and targeted in a menacing or harassing way.
Is doxxing a criminal offence in Australia?
Yes, it can be.
Commonwealth law now specifically addresses doxxing. The recent reforms inserted new offences into the Criminal Code Act 1995 (Cth) aimed at the publication or distribution of personal data using a carriage service in circumstances that reasonable people would regard as menacing or harassing.
That development reflects a clear shift in how digital abuse is understood. The law is no longer treating online exposure as merely an unpleasant side effect of internet culture. In the right circumstances, it is now recognised as a deliberate means of intimidation.
This also sits alongside the broader carriage service issues discussed in our article on using a carriage service to menace, harass or cause offence. Doxxing is not separate from that legal framework. It is one of the most obvious examples of it.
The new Commonwealth doxxing offences
The key provisions are section 474.17C and section 474.17D of the Criminal Code Act 1995 (Cth).
In broad terms, these offences apply where a person uses a carriage service to publish or distribute personal data in a way that reasonable people would regard as menacing or harassing. The aggravated version applies where the conduct is directed at members of a group because of protected characteristics such as race, religion, sex, sexual orientation, gender identity, disability, nationality or ethnic origin.
These are serious offences with substantial maximum penalties. That alone should tell readers that Parliament does not regard doxxing as harmless online mischief.
The older section 474.17 carriage service offence also remains relevant. That broader offence concerns using a carriage service in a way that reasonable persons would regard as menacing, harassing, or offensive. In some cases, the same factual situation may raise both the general carriage service offence and the more specific doxxing provisions.
Readers may also find our article on can you be charged for what you say online? useful here. The answer is often yes, and doxxing is a particularly stark example of why.
How doxxing overlaps with online harassment and stalking
Doxxing rarely exists in isolation. It often forms part of a wider pattern of digital hostility.
A person may first receive abusive messages. Then fake accounts appear. Then personal details are posted. Then strangers start contacting the workplace or turning up in real life. That is why doxxing often overlaps with broader online harassment, intimidation, and stalking issues.
Our article on the rise of digital stalking in NSW is relevant because doxxing is often part of the same pattern: obsessive contact, monitoring, control, and targeted fear delivered through digital means.
There is also a strong overlap with image-based abuse. If the conduct involves the publication of personal details alongside intimate content, or the threat of distributing that material, the issues become even more serious. Readers may wish to compare this with our article on deepfake pornography and criminal law in NSW, which shows how digital abuse can now involve not just genuine images, but manipulated or synthetic content as well.
Can doxxing also involve NSW offences?
Yes. Not every doxxing matter will be dealt with solely under Commonwealth law.
Depending on the facts, NSW offences may also arise. If the conduct forms part of stalking, intimidation, or a wider personal violence pattern, state law may be relevant. If intimate material is involved, NSW image-based abuse offences may also come into play.
This is why it is often a mistake to think of doxxing as one neat, self-contained charge. In practice, it may overlap with carriage service offences, stalking-type conduct, intimidation, image-based abuse, or even AVO-related issues depending on the relationship between the parties and the surrounding facts.
That is also why readers may find our article on AVOs and social media breaches useful. In some circumstances, online publication or indirect targeting through social media may have consequences far beyond the original post.
What should victims do?
Victims often face the same immediate problem: the content is online, the threat feels real, and the audience may already be spreading it.
The first step is usually preservation of evidence. That means keeping screenshots, URLs, usernames, timestamps, and any associated messages or comments. If the material includes an address, workplace, school, children’s details, or intimate content, the urgency increases.
The next step may involve reporting the material through the relevant platform, considering a complaint to eSafety where appropriate, and speaking to police if there is any immediate risk or pattern of intimidation.
This is not the time for wishful thinking. “It is probably nothing” is often the sentence people say just before it becomes something.
What should you do if you are accused?
If you are accused of doxxing, do not assume the matter is merely a reputational dispute or social media argument.
Do not keep reposting the material “for context.” Do not continue messaging the complainant to justify what happened. Do not assume the fact that the information was publicly available automatically protects you. The legal issue is often not just the data itself, but how it was used, why it was targeted, and whether the overall conduct was menacing or harassing.
Digital evidence can be particularly powerful in these matters. Screenshots, account records, metadata, reposts, and comment trails may all become relevant. Readers concerned about digital investigation powers may also want to review our article on when police can search your phone in NSW.
Free speech, public information, and the limits of online exposure
There is an obvious tension here. Some people worry that doxxing laws risk catching legitimate criticism, reporting, or public-interest speech. That concern should not be dismissed lightly. Any law touching communication must be approached carefully.
But the critical point is this: the law is not aimed at ordinary disagreement or criticism as such. It is aimed at using a carriage service to publish personal data in a way that reasonable people would regard as menacing or harassing.
That qualifier matters. It is the difference between public discussion and digital vigilantism.
Readers may also see the overlap with our article on hate speech or free speech: the legal limits of online expression in NSW. Speech is a serious legal value, but not every method of targeting another person online is protected merely because words were involved.
The broader point is simple. Doxxing is not just online gossip with better search functions. It is often the deliberate packaging of personal data for intimidation, humiliation, or harassment.
And that raises the real question for 2026: when someone posts another person’s details online, are they participating in public discourse, or are they simply handing intimidation over to the crowd?
Have you been accused of doxxing? Call National Criminal Lawyers now on 1800-CRIM-LAW for advice and assistance.
