Doxxing Defense
Doxxing is the involuntary linking of a pseudonymous identity to a real one. On Bitcointalk it can come from disgruntled trade counterparties, doxxers-for-hire, or curious researchers. Once an identity is doxxed, the link is permanent — the internet doesn't forget. The defense is upstream.
How identity gets linked
The doxxer's playbook is incremental:
- Collect every public post you've ever made
- Note small leaks: city mentions, employer references, native-language slip-ups, time-zone patterns
- Cross-reference with other platforms (Twitter, GitHub, Reddit) where you might use the same username
- Use stylometry to confirm authorship
- Aggregate until enough context narrows to one real person
You don't need to make a big mistake. You need to never make the small one they were waiting for.
What gets you doxxed
Do
- +Pre-decide what you will + won't share publicly — write it down
- +Use different usernames per platform (never the same handle across crypto forum + Twitter + GitHub)
- +Strip metadata from EVERY image you post
- +Use a separate browser profile + IP for forum activity
Don't
- −Mention your city, employer, school, family members, age, or native language
- −Post photos with identifiable backgrounds (windows, landmarks, reflections, mirrors)
- −Reuse usernames across crypto + non-crypto identities
- −Mention real-world events you attended in identifying detail
Same-username trap
If your forum username is also your Twitter handle, your GitHub, your Steam, your Reddit, etc. — doxxing is effectively done already. Most veterans use completely different usernames for forum vs. social vs. dev identities.
Time-zone leakage
You post 95% in the hours 09:00–22:00 UTC+8. That narrows you to ~25 countries. Add a few language slips (Indonesian "ya", Tagalog "po") and you're in 1-2. Add an employer mention and you're a single person.
Defenses:
- Post across different time bands than you naturally would
- If your identity is sensitive, schedule posts to a different time window
- Don't react to "current events" in real time if the event is local to you
What to do if doxxed
- Don't argue with the doxxer — that only confirms the link
- Don't delete your forum account — that doesn't unpublish the dox
- Stop posting personal context — limit further leakage going forward
- Consider a clean break + new pseudonymous identity if you must continue
- Document threats in case of escalation — keep evidence private
The legal angle
Doxxing per se is rarely illegal. Doxxing combined with harassment, threats, or use of stolen personal data sometimes is. If you're being doxxed by someone who is also threatening you, document everything + consult local counsel — don't try to handle it solely with online tools.