Doxxing under POHA — publishing personal information to harass

Updated for relaunch. This page is general information about Singapore harassment law for education and search. It is not legal advice, does not create a solicitor–client relationship, and is not a statement by any former operator of this domain. Laws and procedures change — speak with a qualified Singapore criminal lawyer about your situation.

What “doxxing” means in Singapore law

“Doxxing” is the everyday label for publishing someone’s personal details so others can identify, contact, shame, or target them. Under the Protection from Harassment Act 2014 (POHA), related conduct is framed through offences about publishing identity information with prohibited intent or knowledge — not through a single section titled “doxxing”.

Amendments that took effect from 1 January 2020 strengthened this area. Readers should always check the current Singapore Statutes Online text, because later amending Acts can adjust wording (including the mental-element and harm language in section 3).

Identity information — high-level definition

POHA uses “identity information” for information that identifies or purports to identify an individual — alone or together with other information. Public educational materials commonly list examples such as name, residential address, email, telephone number, NRIC or passport particulars, photograph or video of the person, and information about family, employment or education. The statutory definition is the authoritative source; lists in articles are orientation only.

Section 3 themes — publishing to cause harassment, alarm, distress or humiliation

A core criminal pathway discussed for doxxing-type facts is section 3 of POHA. In current SSO framing, an individual or entity must not, with intent to cause harassment, alarm, distress or humiliation to a target person, by any means — among other limbs — publish any identity information of the target person or a related person of the target person, and as a result cause the target person or any other person harassment, alarm, distress or humiliation.

Key educational points (not a full elements checklist for counsel):

• There is an intent theme directed at causing the prohibited emotional harm;
• The conduct includes publishing identity information (not only abusive words);
• Actual resulting harassment, alarm, distress or humiliation to the victim (who may be the target or another person, on the statute’s wording) is part of the offence framing;
• A reasonableness defence may be available in proceedings — fact-specific and for lawyer analysis.

Illustrations on SSO include scenarios such as posting photographs and a personal mobile number intending to facilitate unwanted contact — even where the target did not personally see the post but was harassed by strangers who did.

Section 5 themes — fear of violence or facilitating violence

Where publishing identity information is tied to fear of unlawful violence, or to facilitating unlawful violence, public materials discuss pathways under section 5 (including identity-information limbs introduced in the 2019 amendments). These themes are more serious in character than “mere embarrassment” posting. Exact subsection labels and fault elements belong on the charge sheet and current statute text.

Criminal report vs civil protection

Doxxing-type harm can be addressed through:

• Criminal — police report / investigation for POHA offences;
• Civil — protection orders, expedited protection orders, and related relief that may require removal of publications or restrain further harassment.

These tracks can run in parallel. For orientation on choosing tracks, see POHA protection orders — criminal vs civil and POHA criminal offences vs civil claims. Neighbouring fake-news / falsehood regimes are different — do not confuse POHA with POFMA-style online falsehood directions.

Practical notes for complainants

• Capture URLs, timestamps, screenshots, and share counts before content disappears.
• Report to the platform and consider police / POHA civil options — platform removal alone may not create a court record.
• If intimate images are mixed with identity details, also read privacy, harassment & image offences.

Practical notes for accused persons

• “Public interest vigilante posting” is not a free pass; intent and effect matter under POHA.
• Deleting a post after the fact does not automatically erase investigative exposure.
• Do not respond by doxxing the complainant — that can create fresh charges.
• If served with an EPO or PO requiring take-down, comply with the order’s terms once it takes effect after service — see expedited protection orders for respondents.

Workplace pile-ons and “vigilante” posting

Doxxing-type allegations often arise after a workplace grievance, a consumer dispute, a neighbour conflict, or a relationship breakdown. Posting a person’s NRIC fragment, home address, phone number, or workplace details with a call to “teach them a lesson” can engage identity-information offence themes even when the poster believes the target “deserved exposure”. Public-interest reporting and targeted pile-ons are not the same analysis — intent, content, and resulting harm under POHA still control.

Employers and community-page admins who amplify identity information should treat compliance as serious. Informal “name and shame” campaigns can create parallel civil EPO/PO exposure and criminal investigation risk. If intimate images are mixed into the post, also map intimate-image and privacy pathways — see non-consensual intimate images.

Evidence pack and common mistakes

• Preserve full URLs, archive copies, and share/repost chains before deletion;
• Note which account posted, which accounts amplified, and when;
• Do not retaliate by publishing the other party’s identity information;
• Do not edit screenshots in ways that strip timestamps needed later;
• If an EPO/PO already requires take-down, comply once the order is in effect after service.

For course-of-conduct stalking that overlaps with repeated identity posts, see stalking and harassment under POHA.

Frequently asked questions

Is sharing a news article with someone’s name always doxxing?

Not automatically. Offence analysis turns on intent, what identity information is published, and resulting harm under the statutory tests. Context such as legitimate reporting versus targeted pile-on matters — get advice on the facts.

Can companies or entities be liable?

POHA offence provisions commonly address individuals or entities. Corporate posting and community-page admins should take compliance seriously.

Does POHA replace defamation law?

No. Defamation and POHA are different frameworks. Some fact patterns may raise both; strategy is counsel’s work.

If I delete the post, is the risk gone?

Deletion does not automatically erase investigative exposure. Screenshots, shares, and platform logs may remain. Comply with any EPO/PO take-down terms once in effect.

Can I report doxxing and still seek a protection order?

Often yes — criminal and civil tracks can run in parallel. Coordinate evidence packs so they stay consistent. See choosing the POHA track.

If identity information about you has been published to harass you — or if you face a POHA investigation about a post — speak with a qualified Singapore criminal lawyer promptly.

Source note

High-level orientation to POHA identity-information offence themes as reflected on Singapore Statutes Online (including section 3 publishing limbs and related section 5 violence-linked themes) and public judiciary POHA guides. Body text is newly written for relaunch (RAG/SEO).