Blog 3 columns

  • MALADAPTIVE DAYDREAMING: THE RICHNESS AND THE COST

    By

    Your mind builds worlds more compelling than reality. The question is whether reality can compete.

    You’re sitting at your desk. Your work is open. Your email is waiting. But you’re not here. You’re somewhere else, somewhere with a plot, a narrative arc, characters who need you, scenarios where you matter in ways the real world hasn’t quite figured out yet. An hour passes. Maybe two. You surface, disoriented, guilty, shocked at how much time has gone. Your partner texts. Your deadline moved. Your life continued without you.

    This isn’t distraction. This is something else. This is your mind taking you somewhere so vivid, so emotionally engaging, so perfectly tailored to what you need that the actual world feels thin by comparison. The daydream has a logic, a consistency, a emotional payoff that reality rarely delivers. In the daydream, you’re understood. You’re capable. You’re loved. You’re safe.

    The cost of this safety is that you’re not building anything in the waking world. Not really. Not while your mind is elsewhere.

    This is maladaptive daydreaming. And if you have ADHD, the architecture of your brain makes you particularly vulnerable to it.

    What Maladaptive Daydreaming Actually Is

    Maladaptive daydreaming (MD) is not simply mind-wandering. It’s not what happens when you’re bored in a meeting or stuck in traffic. It involves highly detailed, narrative-driven fantasy worlds with recurring characters, plots, and settings. The fantasies are vivid. The emotions within them are real. The time they consume is significant.

    Here’s the clinical distinction: healthy daydreaming is relatively brief, controllable, does not cause distress, and does not displace real-life engagement. Maladaptive daydreaming is the opposite on every dimension. It’s lengthy, sometimes lasting hours. It feels compulsive, you can’t seem to stop once you start. It causes distress, shame, guilt, the awareness that time is slipping away. And it absolutely displaces real-life engagement. Your work doesn’t get done. Your relationships get deprioritized. Your responsibilities stack up while you’re elsewhere.

    MD is defined as “extensive fantasy activity that replaces human interaction and/or interferes with academic, interpersonal, or vocational functioning”. The “maladaptive” part isn’t about morality. It’s about functional impairment. The daydreaming started as adaptive; as a coping mechanism. But it has become something that costs you more than it protects you.

    The Distinction from ADHD

    This is crucial, because the overlap is real. 23–37% of ADHD adults meet the criteria for MD, which creates an obvious problem: How do you know if you’re dealing with ADHD inattention or maladaptive daydreaming? Are they the same thing?

    They’re not.

    Immersive daydreaming is not simply inattention (Theodor-Katz & Soffer-Dudek, 2025). The distinction matters because the treatment approaches differ. ADHD inattention is about difficulty sustaining focus on external tasks. Maladaptive daydreaming is about compulsive internal focus—your mind becoming so absorbed in the fantasy that the external world becomes irrelevant.

    In 2025, researchers developed a new tool specifically to make this distinction clear: The Daydreaming Characteristics Questionnaire (DCQ), which revealed two distinct factors uniquely associated with MD: immersive daydreaming and daydream functionality. The DCQ asks directly about the content and structure of your intrusive thoughts; the plot, the emotional engagement, the sense of presence in the fantasy. Someone with ADHD inattention might struggle with focus. Someone with MD will describe elaborate storylines they can’t stop engaging with.

    If you have both ADHD and MD, you’re dealing with layered complexity. The ADHD creates the vulnerability (executive function challenges, emotion dysregulation, reward-seeking behavior). The MD is the specific way your brain has learned to cope with that vulnerability.

    A Brief History: Why This Matters Now

    Maladaptive daydreaming isn’t new. People have always retreated into rich inner worlds. What’s new is the recognition that this isn’t just a personality trait or a sign of creativity. It’s a pattern with psychological architecture.

    In 2002, Israeli psychologist Eli Somer published clinical observations of patients who engaged in elaborate fantasy worlds for hours daily. His work provided the first structured description of what he called “maladaptive daydreaming.” Since then, research has accelerated. We now have prevalence studies, comorbidity data, assessment tools, and treatment protocols.

    In 2025, a landmark position paper appeared in the British Journal of Psychiatry. Soffer-Dudek, Somer, Spiegel, and an international collaboration of trauma and dissociation experts argued that maladaptive daydreaming should be included as a dissociative disorder in psychiatric manuals. This matters because it signals clinical recognition. MD is not in the DSM-5 yet, but the field is building the case for formal diagnosis.

    Why? Because research is showing that MD is more common than we thought, more treatable than we assumed, and more relevant to understanding ADHD than traditional models have captured.

    The Neuroscience: Why ADHD Brains Are Vulnerable

    To understand maladaptive daydreaming in the context of ADHD, you need to understand the Default Mode Network (DMN).

    The DMN is a system of brain regions that activate when you’re not focused on external tasks. The DMN is thought to be involved in daydreaming, self-referential thinking, and recalling memories. It’s active during our “default” state; when our mind wanders and we are not engaged in a specific task. This is normal. Your brain is supposed to do this.

    But here’s where ADHD enters the picture. In a typical brain, the DMN deactivates when you need to focus on something external. You’re in a meeting, and your brain shifts into task mode. The wandering stops. The internal narrative quiets.

    In people with ADHD, research suggests that the DMN may not deactivate appropriately when attention is required for a task. This can lead to a sort of “cross-talk”, or interference between the DMN and the Task Positive Network (TPN), which is responsible for focused, goal-directed activities.

    Imagine your brain trying to do two things at once: engage with the meeting (TPN) and maintain the daydream (DMN). Both networks firing simultaneously. Neither one winning cleanly. The result is inattention that feels less like “I can’t focus” and more like “I’m choosing the internal world over the external one, and I can’t seem to stop.”

    This is where emotion regulation enters. Research found that internalized stigma, emotional dysregulation, escapism, and self-esteem have significant associations with MD in neurodiverse samples (Pyszkowska et al., 2025). The daydream isn’t just an attentional problem. It’s an emotion regulation strategy. Your brain has learned that the fantasy is safer, more predictable, more emotionally rewarding than the real world.

    What It Feels Like: The Phenomenology of Being Elsewhere

    Maladaptive daydreaming involves what researchers call “dissociative absorption.” People engage in dissociative absorption, where an individual deeply immerses themselves into a vivid inner world, focusing their attention primarily inward rather than to the outward environment. You’re physically present. Your body is in the chair. But your consciousness is elsewhere. The world around you becomes muffled, irrelevant, almost unreal. Sage Journals

    The daydreams themselves have specific characteristics. They are captivity, rescue and escape, and idealized self as central motifs. Daydreamers can lose themselves for hours in vivid, highly structured dreams, frequently with a strong sense of being present in the daydream. You’re not passively watching. You’re in the story. You’re the protagonist, or you’re observing with intense emotional investment. nih

    The time distortion is real. You sit down for what you think will be ten minutes of daydreaming before starting work. Two hours pass. You surface with a jolt, confused by how much time has gone, guilty about the work waiting, ashamed that you couldn’t stop.

    Many people with MD engage in physical movement while daydreaming. People report performing kinesthetic movements such as pacing, facial expressions, and limb stretching, as well as listening to music while daydreaming. The body is participating in the fantasy. You’re not just thinking it; you’re embodying it. For some, music is the trigger. A song starts, and the daydream follows. For others, it’s pacing, or a particular physical location.

    The emotional quality is intense. Daydreams act as a form of self-soothing, though it often results in a cycle of emotional avoidance (Dr. Kent Berridge, University of Michigan). The fantasy provides relief. It soothes the anxiety, the loneliness, the sense of being inadequate in the real world. But the relief is temporary, and the cost accumulates.

    What people rarely discuss is the richness. Maladaptive daydreaming isn’t stupid. The daydreams are often sophisticated, emotionally intelligent, narratively complex. They reveal what the daydreamer actually cares about, what they need, what they’re missing. The daydream is a mirror of unmet needs dressed up as entertainment.

    The Healthy-to-Maladaptive Spectrum

    Not all daydreaming is maladaptive. Understanding the spectrum matters because it clarifies where you actually sit.

    Everyone daydreams. Daydreaming is a common, healthy mental activity that 96 percent of Americans engage in. This brain process accounts for over half of all human thought, and the average person appears to have hundreds of daydreaming episodes per day. Your mind wandering during a boring meeting. Imagining your vacation while waiting in line. Thinking through a conversation you wish you’d had. This is normal. It’s healthy. It’s part of how human cognition works. nih

    But there’s a spectrum. Think of it as five stages, each defined by time, control, functional impact, and emotional dependency:

    Stage 1: Healthy daydreaming. Brief episodes. Easily interruptible. You snap back when you need to. No distress. No dependency. The daydreaming enhances your mood without becoming necessary.

    Stage 2: Immersive daydreaming. You spend longer periods in richly detailed mental worlds. Recurring characters. Elaborate storylines. But you can still choose to stop. It doesn’t interfere with your responsibilities. It’s a retreat, not a replacement.

    Stage 3: Boundary-blurring daydreaming. The daydreams are now taking significant time. You notice you’re choosing them over other activities. There’s some distress—you wish you could stop, but you’re not sure you can. You’re starting to hide it.

    Stage 4: Compulsive daydreaming. The daydream is considered safer and less stressful than real life. Over time, this forms a habit of chronic maladaptive daydreaming as a coping mechanism. You’re spending hours daily. You feel helpless to stop. Your life is suffering. You’re ashamed.

    Stage 5: Severe maladaptive daydreaming. The fantasy has essentially replaced real life. You’ve withdrawn from relationships, work, responsibilities. You’re caught in a cycle: the real world is painful, so you retreat; the retreat costs you opportunities, so the real world gets worse; worse reality means more need to escape. The cycle deepens.

    The clinical threshold is a score of 40 or higher on the Maladaptive Daydreaming Scale (MDS-16), which is rated on a 10-point Likert scale with scores ranging from 0 to 100. But scoring high on a clinical measure isn’t what matters. What matters is: Is this costing you your life?

    ADHD, Emotion Dysregulation, and Why the Fantasy Feels Necessary

    Here’s what’s often missing from conversations about maladaptive daydreaming: it makes sense. It’s not irrational. It’s a logical response to a real problem.

    People with ADHD often experience emotion dysregulation. Their emotional responses are more intense, less stable, harder to modulate. People with ADHD often experience symptoms similar to trauma, whether this is mental stress from coping with the symptoms of ADHD, or trauma related to external factors. In fact, adults with ADHD are seven times more likely to experience PTSD.

    Now imagine you’re carrying that intensity, that sensitivity, that difficulty regulating your own emotional experience. The real world asks things of you. You fail sometimes. People disappoint you. You disappoint yourself. The emotional weight of that is significant.

    But in the daydream? You have complete control. You can script every interaction. You can ensure the outcome you need. You can be the person you wish you were. You can feel the emotions you wish you could feel. You can have the relationships, the respect, the safety, the love that the real world hasn’t provided.

    When people are in emotional distress, it can seem appealing to escape into fantasy. Often people who experience maladaptive daydreaming consider the daydream to be safer and less stressful than real life.

    This isn’t weakness. This is your brain using the tools it has to survive emotional overwhelm. The problem is that the tool has become a trap. The relief is real, but the cost compounds. Time lost. Relationships damaged. Opportunities missed. Real-world skills atrophied because you’ve practiced the fantasy instead.

    In Relationships: When Your Mind Is Elsewhere

    This is where maladaptive daydreaming stops being an isolated internal experience and becomes a relational pattern.

    If you’re in a partnership or dating, your partner is experiencing something specific: being present with someone who is not present. When someone you love seems physically present but mentally elsewhere, the experience can range from puzzling to deeply painful. Partners often describe a characteristic progression in recognizing maladaptive daydreaming within their relationship, initially noticing their loved one’s tendency to become lost in thought, misattributing it to normal distraction, or even finding it endearing.

    But over time, the pattern becomes painful. Practical relationship functions suffer, with partners of maladaptive daydreamers often reporting inequitable distribution of responsibilities. Household tasks, childcare, social planning, and financial management may fall disproportionately to the non-daydreaming partner when their loved one regularly retreats into fantasy.

    You can see the dynamic: your partner wants to talk about something important. You’re physically there, but you’re also pulled into the daydream. You’re not fully available. You miss emotional cues. You forget commitments because part of your attention was elsewhere. Over time, your partner stops trying. They stop expecting your presence.

    There’s another layer, particularly if your daydreams center on romantic relationships. Idealized relationships in one’s daydreams begin to become more concrete, and an individual envisions themselves almost in a relationship with another individual, not someone they know in the real world, but rather someone who is a composite of all the qualities they wish to have in a partner.

    This fantasy partner is perfect.
    They’re endlessly patient.
    They understand you completely.
    They never disappoint.
    They never need things you can’t give.
    They’re always available.
    They’re always emotionally attuned.

    Your real partner? They’re complicated. They have their own needs. They get frustrated. They can’t read your mind. They’re not a composite of ideal traits; they’re a whole human with limitations.

    The natural consequence of this is that these maladaptive daydreams can replace the desire for real-world romantic relationships and may preclude an individual from ever entering into one. But the longer that one remains trapped in their own mind, the harder it can be to get back into forming real-world relationships and dealing with the natural ebbs and flows that come along with them.

    If you’re already in a relationship, the ideal fantasy partner becomes a lens through which you judge your real partner. They never measure up. Because no one can. Because they’re not real.

    How to Restore Capacity: A Framework for Redirecting

    The good news: maladaptive daydreaming is treatable. It’s not a life sentence. But the treatment requires understanding what you’re actually trying to achieve when you daydream.

    You’re not trying to waste time. You’re trying to regulate emotion. You’re trying to feel safe. You’re trying to be someone who matters. These are legitimate needs. The daydreaming is just the tool your brain chose because other tools didn’t seem available.

    Treatment, then, is about building better tools.

    CBT and Cognitive Restructuring

    Cognitive behavioral therapy integrates cognitive restructuring to address the beliefs that maintain excessive fantasy, stimulus control and response prevention to break automatic patterns and build control over urges, and behavioral activation to rebuild engagement with real life.

    What beliefs maintain the daydreaming? Maybe: “The real world will never be satisfying.” “I’m not capable of getting what I need in reality.” “It’s safer to retreat.” “I can’t handle real-world emotions.” These beliefs are often rooted in real experience. You may have actually been hurt. You may have actually failed. But the belief that things can’t change is the problem.

    Cognitive restructuring doesn’t mean positive thinking or denial. It means examining the evidence. Yes, you’ve failed sometimes. But you’ve also succeeded sometimes. Yes, people have disappointed you. But some people have come through. Yes, the real world is unpredictable. But so is your emotional experience, some days the daydream soothes; some days it just compounds the shame.

    Stimulus Control: Breaking the Trigger Pattern

    Stimulus control involves identifying and systematically modifying the environmental triggers that have become associated with daydreaming. Over time, certain contexts become so strongly linked with fantasy that they almost automatically trigger the urge to daydream.

    For many, music is the trigger. A song starts, and the daydream follows. Stimulus control means: don’t listen to that song right now. Redirect to something else. For others, isolation is the trigger. Stimulus control means: don’t work alone at home. Work in a coffee shop. Schedule video calls during your high-risk times.

    Physical movement is often part of the pattern. Stimulus control involves practicing stillness when urges arise, or redirecting movement toward purposeful activities. Instead of pacing while daydreaming, the person might go for a walk with intention.

    This isn’t about willpower. It’s about changing the context so the automatic response doesn’t fire.

    Mindfulness and Grounding

    Mindfulness meditation and self-monitoring have shown the most promise. One large trial found that an eight-session, internet-based program combining mindfulness meditation and self-monitoring significantly reduced symptoms and improved life functioning, achieving a 24% clinically significant improvement rate.

    Mindfulness is not about stopping the daydreams. It’s about noticing them without judgment, recognizing the urge, and choosing something else. Grounding techniques anchor you to the present: name five things you can see, four you can touch, three you can hear, two you can smell, one you can taste. It sounds simple, but it interrupts the drift.

    Addressing What Underlies It

    If MD developed as a response to trauma, anxiety, depression, or ADHD, those conditions need treatment too. Because many people who have maladaptive daydreaming also have related conditions like ADHD, treating the related conditions may also help.

    For ADHD, that might mean medication, external structure, or executive function coaching. For trauma, it might mean trauma-focused therapy. For anxiety or depression, it might mean medication or CBT. None of this is shameful. It’s rebuilding the capacity to be present in your own life.

    Self-Assessment: Where Do You Actually Sit?

    These six questions help you gauge whether you’re dealing with healthy daydreaming or something that’s costing you significantly.

    Rate each 1-5 (1 = strongly disagree, 5 = strongly agree):

    1. Time Loss — When I start daydreaming, I lose track of time and am often shocked by how much time has passed.

    2. Loss of Control — I try to stop daydreaming, but I can’t seem to interrupt it once it starts.

    3. Functional Impairment — My daydreaming interferes with work, relationships, or daily responsibilities.

    4. Emotional Dependency — I feel like I need to daydream to manage difficult emotions.

    5. Social Withdrawal — I’m choosing daydreaming over time with people who matter to me.

    6. Shame — I feel ashamed or guilty about how much time I spend daydreaming.

    Scoring:

    • 6-10: Healthy daydreaming range. Your inner life is rich, but it’s not interfering with your outer life.
    • 11-20: Immersive but manageable. You’re spending significant time daydreaming, but you’re not in crisis.
    • 21-30: Clear pattern present. This is costing you something tangible. Treatment would help.

    This isn’t diagnostic. It’s a mirror. Does it reflect your experience?

    FAQ

    Q: If I have MD, does that mean I have ADHD?

    No. Maladaptive daydreaming is not just ADHD, but research shows that people with ADHD are more likely to have maladaptive daydreams than the general public. That said, research also suggests that the majority of people with ADHD do not have maladaptive daydreams. You can have one without the other. But if you have ADHD, your risk for MD is higher. (Sleep Foundation)

    Q: Is maladaptive daydreaming a mental illness?

    Not formally—not yet. It’s not in the DSM-5. But researchers have published a position paper in the British Journal of Psychiatry arguing it should be classified as a dissociative disorder. More importantly: whether or not it’s officially diagnosed, if it’s costing you your life, it deserves treatment. (nih)

    Q: Can I have a good relationship if I have MD?

    Yes. But it requires honesty and effort. Your partner needs to understand what MD is, that it’s not about them, not about lack of love, but about a coping mechanism that’s become automatic. Effective approaches typically begin with education and de-stigmatization. Understanding that maladaptive daydreaming represents a genuine psychological mechanism, not a choice or character flaw—helps partners respond with compassion rather than blame. (Balancedmindofny)

    Q: Will my daydreams ever stop completely?

    Probably not. Daydreaming is normal. The goal isn’t never-daydream. The goal is: daydreaming that’s brief, controllable, and doesn’t displace real life. You’re aiming for healthy daydreaming, not the absence of daydreaming.

    Q: If I treat my ADHD, will the MD go away?

    Maybe partially. Treating ADHD helps with emotion regulation and executive function, which can reduce the compulsive pull of the daydream. But MD often needs its own targeted treatment. You’re addressing the vulnerability (ADHD) and the specific pattern (MD) simultaneously.

    Q: Is there medication for maladaptive daydreaming?

    There’s no specific MD medication. But if MD is connected to depression, anxiety, or OCD, treating those can help. Some people find that ADHD medication helps because it improves executive function and reduces the ease with which the daydream captures attention.

    Q: How do I know if I’m making progress?

    Look for: increased awareness of when you’re drifting; shorter duration when you do daydream; reduced shame; more time engaged in real activities; better presence in relationships. Progress isn’t linear. But after a few months of targeted work, you should notice something shifting.

    Q: What if I’m afraid that treating my MD means losing part of myself?

    This is real, and it matters. The daydreams have been your companion, your refuge, your creative outlet. Reducing them can feel like loss. But the question is: what are you building instead? In place of the fantasy, you’re building real relationships, real accomplishments, real agency. The richness of your inner life doesn’t disappear. It gets redirected toward the real world.

    Appendix

    Key Terms

    Default Mode Network (DMN): A system of brain regions active during rest and mind-wandering; includes medial prefrontal cortex, posterior cingulate, and medial temporal lobe.

    Dissociative Absorption: Deep immersion into an internal fantasy world, with primary focus inward rather than on external environment.

    Emotion Dysregulation: Difficulty modulating, understanding, or responding to emotional experiences; common in ADHD.

    Stimulus Control: Breaking automatic associations between environmental triggers (music, isolation, physical location) and the urge to daydream.

    Task Positive Network (TPN): Brain regions active during focused, goal-directed external tasks; works in opposition to DMN.

    Further Reading

    Pyszkowska, A., Nowacki, A., & Celban, J. (2025). The daydream spectrum: The role of emotional dysregulation, internalized stigma and self-esteem in maladaptive daydreaming among adults with ADHD, ASD, and double diagnosis. ADHD Attention Deficit and Hyperactivity Disorders, 17(1), 45-62.

    Soffer-Dudek, N., Somer, E., Spiegel, D., & Chefetz, R. (2025). Maladaptive daydreaming should be included as a dissociative disorder in psychiatric manuals: Position paper. The British Journal of Psychiatry, 226(4), 279-290.

    Theodor-Katz, N., & Soffer-Dudek, N. (2025). Where is my mind? The daydreaming characteristics questionnaire, a new tool to differentiate absorptive daydreaming from mind-wandering. Journal of Attention Disorders, 29(7), 515-528.

    Theodor-Katz, N., & Soffer-Dudek, N. (2025). Differential diagnosis between maladaptive daydreaming and ADHD: Immersive daydreaming is not simply inattention. International Journal of Clinical and Health Psychology, 25(3), 100616.

    Cleveland Clinic. (2024). Maladaptive daydreaming: What it is and how to stop it. Retrieved from https://health.clevelandclinic.org/

    Resources

    International Center for Maladaptive Daydreaming Research (ICMDR): https://daydreamresearch.wixsite.com/md-research

    Maladaptive Daydreaming Scale (MDS-16): Open-access screening tool, available through ICMDR

    Daydreaming Characteristics Questionnaire (DCQ): Differentiates MD from ADHD mind-wandering

    Wild Minds Network: Community resource for people experiencing MD

    Gorgeous Diaries is a space for people who are done being confused by things that were never actually confusing. They just needed the right language.

  • Doxing: How Identity Becomes a Weapon

    By

    The information was always public. That is exactly what makes it dangerous.

    The Moment You Find Out

    It starts with a notification you do not recognize. Then three more. Then a screenshot someone sends you, not because they want you to see it, but because they think you should know before you find out some other way: a thread on a forum you have never visited, with your full name at the top, your home address two lines down, and a photo of your own front door, taken by someone standing on your own sidewalk.

    You did not post your address anywhere. You were careful, or you thought you were. But carefulness was never really the variable. Somewhere between a voter registration record, an old apartment listing, a data broker you have never heard of, and a comment you made under your real name four years ago, someone built a complete picture of where you sleep at night. It took them an afternoon. It will take you years to feel safe again.

    This is doxing. Not hacking, not usually, not technically. Just assembly. The pieces were always there, scattered and legal and mostly forgotten. Someone simply put them in one place and handed that place to anyone who wanted to find you.

    That is the part that makes it different from almost everything else this series has covered. Astroturfing manufactures what other people believe about an issue. Account suppression weaponizes a platform’s own rules against you. Doxing skips the platform entirely and goes straight for the thing no terms of service can protect: the fact that you have a body, and that body is somewhere, and now everyone knows where.

    Definition

    Doxing, sometimes spelled doxxing, is the act of publishing someone’s private or identifying information without their consent, typically with the intent to harass, intimidate, or expose them to real world harm. The term descends from the hacker slang dropping docs, worn down over decades of internet culture into a single, ugly verb. The information itself is rarely exotic. Home addresses, phone numbers, workplace details, family members’ names, financial details, and the link between an anonymous online handle and a real legal identity make up the overwhelming majority of doxing payloads.

    The line is not the information itself. Much of what ends up in a dox is, on its own, publicly available and entirely legal to possess. Property records are public. Voter rolls are semi-public. A person’s employer is often listed on their own social media. What turns research into doxing is intent and aggregation: the deliberate compiling of scattered, mostly harmless fragments into a single weaponized profile, published with the explicit or implicit goal of inviting others to harass, threaten, or locate the target.

    This is also where doxing gets genuinely contested rather than simply condemned. Investigative journalism regularly publishes true, lawfully obtained information about people, including information they would prefer stayed private, because the public interest in knowing it outweighs the subject’s preference for privacy. Courts have generally protected this kind of publication under the First Amendment, in a line of precedent sometimes called the Daily Mail principle: the government can rarely punish the publication of truthful information that was lawfully obtained. The same protection that shields a reporter exposing a corrupt official’s finances can also shield someone publishing a private citizen’s home address under the banner of accountability. The line between the two is not always where people on either side of a dispute would like it to be, and that ambiguity is part of why doxing has proven such a durable tactic across every part of the political spectrum, a pattern this piece returns to directly.

    The Scale of the Problem

    The numbers are larger and more ordinary than the headlines suggest. A 2025 survey from the home security research firm Safehome found that roughly four percent of American adults, an estimated 11.7 million people, have been doxed at some point, with another sixteen percent reporting that a friend or family member had experienced it. The Anti-Defamation League’s 2024 survey on online hate and harassment found that fifty six percent of American adults had experienced some form of online harassment, and twenty two percent had experienced a severe form, a category that explicitly includes doxing alongside stalking and physical threats.

    The exposure is not evenly distributed. Pew Research Center’s long-running work on online harassment has consistently found that women experience more sexualized and identity-targeted abuse than men, and that LGBTQ adults report dramatically higher rates of online abuse overall, with roughly seven in ten lesbian, gay, or bisexual adults reporting some experience of online harassment compared to about four in ten straight adults. Journalists and activists, particularly women in those fields, show up disproportionately in research on who gets doxed and why, not because they are careless with their information but because visibility itself is the risk factor.

    The psychological research on doxing specifically is thinner than the research on harassment broadly, but the mechanism is not mysterious. Doxing collapses the distance between online conflict and physical safety. A hostile comment can be ignored, blocked, or muted. A hostile comment paired with your home address cannot, because the threat is no longer contained to the platform where it appeared. It follows you into your kitchen.

    Four Kinds of People Who Do This

    THE DISGRUNTLED INDIVIDUAL

    This is doxing’s oldest and most personal form: an ex-partner, a former coworker, a litigant on the losing end of a court case, someone with a specific grievance against a specific person, acting alone. The motive is rarely ideological. It is personal, often furious, and frequently underestimated by everyone around the target, including the target.

    This type produced the worst documented outcome in this entire piece. In July 2020, a disgruntled lawyer who had appeared before U.S. District Judge Esther Salas found her home address online and arrived at her New Jersey residence disguised as a delivery driver. He shot and killed her twenty year old son, Daniel Anderl, and seriously wounded her husband, before fleeing and later taking his own life. Authorities later found a list of other judges in his vehicle. Judge Salas has said publicly that her son’s death traces directly to how easily his attacker found where they lived.

    The Disgruntled Individual is the type people picture least and should fear most, because there is no forum to monitor, no campaign to track, no coordination to detect in advance. There is only the address, sitting in a database somewhere, waiting to be sold.

    THE ORGANIZED BRIGADE

    Where the disgruntled individual acts alone, the organized brigade acts as a crowd, and that changes everything about what it feels like to be on the receiving end. Forums and group chats dedicated to tracking specific targets turn doxing into a participatory hobby, with members competing to surface new personal details the way other communities compete over trivia.

    Clara Sorrenti, a Canadian transgender Twitch streamer known online as Keffals, experienced this directly in 2022 after becoming a target of the forum Kiwi Farms. Members of the site located an old obituary for her father, traced it to a memorialized Facebook photo of her childhood home, and used satellite mapping to confirm the address. Weeks of escalating harassment followed, culminating in a swatting attack: someone impersonated her and emailed local officials with a fabricated mass shooting threat, sending armed police to her door. After fleeing to a hotel, trolls identified the building from the pattern on her bedsheets, visible in a photo of her cat. She left the country entirely, and her stalkers found her again in Belfast. Sorrenti’s campaign to hold Cloudflare accountable for providing security services to Kiwi Farms eventually succeeded, and the company cited an imminent threat to human life when it dropped the site in September 2022. Notably, a separate attacker claiming affiliation with the same forum also swatted U.S. Representative Marjorie Taylor Greene days later, a reminder that this particular weapon does not check anyone’s politics before it fires.

    THE ACCOUNTABILITY DOXER

    The most ethically contested form of doxing is the kind its practitioners do not consider doxing at all. The Accountability Doxer believes the target’s public conduct, speech, or affiliation justifies exposing their private identity, on the theory that consequences require a name and an address attached to them. This type exists across the entire political spectrum, deployed by people who would otherwise agree on almost nothing else.

    In the days following conservative commentator Charlie Kirk’s death in September 2025, a website calling itself Expose Charlie’s Murderers published the names, employers, and personal details of people who had posted critical commentary about him, leading to firings and suspensions for some of those named. A separate, longer running effort has compiled lists of more than five thousand students and academics critical of Israel, sharing their information in blacklist campaigns that critics say have jeopardized jobs, immigration status, and safety. A digital billboard truck circling Harvard Square displayed the names and photos of students who had signed a public letter about the October 7 Hamas attack, a tactic widely described as doxing even though, legally, it involved nothing but a megaphone pointed at an already public letter. The Department of Homeland Security has separately reported a seven hundred percent increase in assaults against immigration enforcement agents whose identities and home information have been published by activists opposed to their work.

    None of these campaigns share a politics. They share a justification: that some forms of speech or affiliation forfeit the speaker’s right to privacy. Whether that justification holds up is a genuine and unsettled argument, not a settled one, and it is worth sitting with rather than resolving in either direction here.

    THE OPPORTUNIST

    The newest entrant requires no grievance and no ideology at all, only timing. In the wake of UnitedHealthcare CEO Brian Thompson’s killing in December 2024, two anonymously run websites published the names, personal email addresses, phone numbers, compensation figures, and LinkedIn profiles of hundreds of Fortune 500 executives within months, explicitly framing the killing as righteous and the published list as a target index. Both sites were taken offline within twenty four hours of going live.

    Twenty four hours was enough. The data had already been scraped, archived, and redistributed by the time either site disappeared, illustrating a gap this piece returns to in its legal section: the time it takes to publish a dox is measured in hours, and the time it takes to remove one is measured in weeks. The Opportunist does not need to sustain a campaign. The internet does that part for them.

    What Being Found Actually Does to a Person

    Ask anyone who has been doxed what changed, and very few of them start with the information itself. They start with the texture of their own attention afterward. Hypervigilance becomes the baseline state: checking locks twice, flinching at unfamiliar cars on the street, treating a knock at the door as a category of event rather than a doorbell ring.

    The financial cost arrives quietly and compounds. Some victims relocate entirely, absorbing the cost of breaking a lease or selling a home at a loss. Others spend on data removal services, new phone numbers, address confidentiality programs, and in extreme cases private security, none of which existed as a budget line item before the dox. Professional costs follow close behind. Employers, uncomfortable with the liability or attention a doxed employee brings, sometimes part ways with the very person being targeted rather than the people targeting them, a dynamic survivors describe as feeling punished twice.

    The least visible cost may be the most consequential at scale: the chilling effect on speech itself. Research on women journalists and activists who have experienced or witnessed doxing consistently finds a pattern of self-censorship afterward, not because the underlying belief changed but because the calculation of what it costs to say it publicly did. A platform user who watches a colleague get doxed for a position does not need to be personally targeted to learn the lesson the dox was designed to teach. For many perpetrators, this is the actual point. The named target absorbs the damage. The chilling effect is the return on investment.

    Swatting sits at the furthest edge of this spectrum, where the threat stops being psychological and becomes literally a matter of who shows up with a weapon at your door. It is the rare and extreme outcome of doxing, but it is not a freak occurrence disconnected from the everyday version. It is what the everyday version is always one bad actor away from becoming.

    How a Person Becomes Findable

    It is worth being precise about what doxing actually requires, mostly because the answer is so much less impressive than the result it produces. There is rarely any hacking involved, and no special access is needed. The architecture is mundane, built from a handful of unremarkable categories of information that, individually, almost nobody thinks to protect.

    Public records form the foundation. Property deeds, voter registrations, court filings, and business licenses are designed to be searchable, and in most states they are not redacted by default even for people who would have good reason to want them hidden. Commercial data brokers, the subject of the next section, aggregate this material at industrial scale and resell it as searchable consumer profiles, often for a few dollars per lookup. Old social media posts and abandoned usernames provide a different kind of fuel: the connective tissue between an anonymous handle someone has used for a decade and the legal name attached to their driver’s license. A single careless post linking the two, made years earlier and long forgotten, is often all it takes to collapse an entire identity firewall.

    Less commonly, but more dangerously, compromising a connected account can surface information no public record contains at all. Sorrenti’s case illustrated this directly: after fleeing to a hotel, her rideshare account was compromised, exposing her phone number, home address, and her family members’ contact information through a service that had nothing to do with her public profile or her activism. The lesson generalizes uncomfortably well. Every account linked to a real address, a real phone number, or a real payment method is a potential leak point, regardless of how carefully someone guards their public-facing identity.

    None of this requires sophistication. It requires patience, a willingness to spend a few afternoons cross-referencing sources that are often free or nearly free, and a target who has, like almost everyone, left more digital breadcrumbs than they remember leaving.

    The Industry That Makes This Possible

    Doxing has perpetrators, but it also has a supply chain, and the supply chain is legal. Data brokers are companies whose entire business model is collecting, aggregating, and reselling personal information, often without the meaningful knowledge or consent of the people the information describes. Some specialize in so called people search services, explicitly designed to let anyone type in a name and receive an address, phone number, relatives, and property history within seconds, for a subscription fee that rarely exceeds the cost of a streaming service.

    The Federal Trade Commission’s case against the location data broker Kochava made the scale of this industry impossible to ignore. According to the FTC’s complaint, Kochava sold precise, timestamped geolocation data drawn from hundreds of millions of mobile devices, specific enough to trace a single device from a reproductive health clinic to the residential address it returned to that night, or from a domestic violence shelter to whatever location came next. The agency alleged that Kochava’s own marketing materials touted the ability to identify a household from its data, and that the company had taken essentially no steps to prevent the kind of identification that exposes people to, in the agency’s own language, stigma, stalking, discrimination, job loss, and physical violence. The case eventually resulted in a settlement barring Kochava from selling sensitive location data without explicit consumer consent, one of the most significant enforcement actions against the data broker industry to date, though hardly the last word on an industry with dozens of comparable competitors still operating largely as Kochava once did.

    The most consequential reform in this entire space did not come from regulators acting proactively. It came from a tragedy that made the abstract risk impossible to dismiss as theoretical. After her son’s murder, Judge Salas became the public face of an effort to force data brokers to stop selling the addresses of judges and law enforcement officers. New Jersey’s Daniel’s Law, passed within months of the attack, gave covered individuals the right to demand removal of their address and phone number from any business that published it, with financial penalties for noncompliance. By 2024, more than one hundred lawsuits had been filed under the law against companies that failed to comply with removal requests in time. Congress followed in 2022 with the Daniel Anderl Judicial Security and Privacy Act, extending comparable protections to federal judges nationwide and explicitly prohibiting data brokers from trading their personal information.

    Platforms occupy a parallel, if distinct, position of complicity. Cloudflare’s eventual decision to drop Kiwi Farms came only after sustained public pressure and an explicit declaration of imminent threat to human life, years after the forum’s harassment campaigns had already been linked to at least three suicides, according to reporting at the time. The company that hosted the infrastructure was not the one writing the threats, but it was, for years, the reason the threats stayed online and reachable. Accountability for enabling a harm and accountability for committing it are different categories of responsibility, but they are not unrelated ones, and the gap between when a platform could have acted and when it actually does is where most of the damage in these cases gets done.

    What the Law Actually Does About This

    There is no federal law in the United States that criminalizes doxing by name. Several bills have been introduced, including measures specifically protecting federal law enforcement personnel, but none have passed Congress as a standalone doxing statute, leaving most enforcement to a patchwork of state law that varies enormously depending on where the victim and the perpetrator happen to live.

    As of 2025, three states, Alabama, California, and Illinois, have written doxing into their statutes by that explicit name. Fourteen additional states criminalize the same underlying conduct, publishing personal information with intent to harass or harm, without using the word doxing itself, often by amending existing harassment or stalking statutes. California’s Doxing Victims Recourse Act, effective January 2025, created a civil right of action allowing victims to sue for damages ranging from fifteen hundred to thirty thousand dollars, plus attorney’s fees, regardless of whether prosecutors ever bring a criminal case. Most other states offer no comparable statutory path at all, leaving victims to rely on general stalking, harassment, or invasion of privacy law that was never written with doxing specifically in mind.

    The deeper obstacle is constitutional rather than merely legislative. Courts have repeatedly held that the government can rarely punish the publication of truthful information that was lawfully obtained, a principle that protects investigative journalism and, less comfortably, protects a great deal of what gets called doxing in practice. Any new law in this space has to thread a narrow needle: specific enough to reach the conduct that causes real harm, broad enough to actually deter it, and careful enough not to hand public officials a tool to punish embarrassing but legitimate reporting about themselves.

    Even where the law clearly applies, the timeline rarely matches the damage. The Fortune 500 executive doxing sites described earlier were taken offline within twenty four hours of being discovered, a genuine enforcement success by most measures. It did not matter. The data had already spread to dozens of mirrors and screenshots by the time the original sites disappeared, and no legal remedy exists that operates on a twenty four hour clock. Legal recourse in doxing cases functions best as documentation, leverage, and eventual restitution. It functions poorly, almost by design, as a fire alarm.

    Self-Assessment: How Exposed Are You, and Have You Ever Been the One Holding the Match

    Rate each statement from one, not at all true, to five, completely true.

    1. A simple search of my full name returns my home address, current or former, within the first page of results.

    2. I have used the same username or handle across platforms where my real identity is public and platforms where I intentionally keep it anonymous.

    3. My job, activism, public commentary, or relationship history makes me a plausible target for someone with a grievance against me.

    4. I have shared someone else’s address, workplace, phone number, or full legal name in a group chat, comment section, or forum during a dispute, even one that felt justified at the time.

    5. I do not know whether my information has ever been removed from, or sold by, a data broker or people search site.

    6. If a stranger online decided to find out everything about me tomorrow, I genuinely do not know how hard that would be.

    Scores of twenty four to thirty suggest your exposure, your participation in the practice, or both, deserve immediate attention. Scores of twelve to twenty three suggest meaningful gaps worth addressing methodically rather than urgently. Scores below twelve suggest a relatively low baseline risk, though the steps below are worth reviewing regardless, since exposure tends to change faster than awareness of it.

    What to Actually Do About It

    If you suspect your information is already circulating, start by documenting everything before you do anything else. Screenshot the original posts, the URLs, the timestamps, and the usernames involved, because platforms and data broker opt-out forms will ask for this evidence and it disappears or gets edited faster than victims expect.

    Next, request removal directly. Most major data brokers and people search sites maintain opt-out pages, though the process is deliberately tedious by design, often requiring a separate request to each individual broker rather than one universal form. Google maintains a personal information removal policy that allows individuals to request that search results combining personal information with explicit or implicit threats be delisted, which will not remove the underlying page but will make it considerably harder to find through a casual search.

    Then, lock down the accounts that could leak further information without your knowledge. Two factor authentication on email, financial, and rideshare or delivery accounts closes the exact gap that exposed Sorrenti’s location after she had already fled once. Review what services have your real address on file and consider whether each one actually needs it.

    If you are in a profession that qualifies for legal protection, judges, prosecutors, and certain law enforcement or public safety roles in many states, file the paperwork those protections require rather than assuming they apply automatically. They generally do not activate until you request them.

    Resist the instinct to respond publicly to the people circulating your information, however justified the anger feels. Public engagement, even angry engagement, generates the attention and the content the harassment campaign is built to harvest. Document instead, report to the platform and, where the threat is credible, to law enforcement, and let evidence accumulate quietly rather than feeding a public spectacle that benefits whoever started it.

    Finally, treat this as a sustained process rather than a single fire to put out. Information removed from one source often resurfaces from another months later, and the people most successful at managing a doxing aftermath describe it less as a crisis they resolved and more as a vigilance they adopted.

    When This Becomes an Emergency

    Everything above assumes a serious but survivable situation. Some doxing cases escalate past that point, into explicit threats of violence, stalking behavior in physical space, or swatting, and those situations require a different response entirely. If you believe you are in immediate physical danger, contact local law enforcement directly rather than relying on a platform’s reporting tools, which are not built for emergencies and were never designed to move at the speed a genuine threat requires.

    The Cyber Civil Rights Initiative and Online SOS both maintain resources specifically for victims of coordinated online harassment and doxing, including guidance on documentation, legal options, and in some cases direct support navigating a crisis. The National Network to End Domestic Violence’s Safety Net project focuses specifically on technology facilitated abuse and stalking, which overlaps heavily with doxing in cases involving a current or former intimate partner. None of these organizations can make the underlying exposure disappear, but they exist precisely because the gap between a dox and an emergency is sometimes a matter of hours, and having a resource already identified before that gap closes matters.

    You Did Not Fail by Being Findable

    Almost everyone is findable, by anyone sufficiently motivated, because the architecture of modern life was never designed with your safety as its first priority. It was designed for convenience, for commerce, for searchability, and your privacy was a cost nobody budgeted for until it was already spent.

    What you control is not whether the information exists. Most of it already does, scattered across databases you will never fully audit. What you control is how quickly you notice, how methodically you respond, and whether you let the discovery turn into permanent vigilance or a managed, finite process with an end. The people who recover fastest from being doxed are rarely the ones with the least information exposed. They are the ones who stopped treating the exposure as a referendum on their own carelessness and started treating it as exactly what it is: a system failure that happened to land on them.

    Doxing does not invent a threat. It just hands one an address.

    Next in the Series: Coordinated Harassment and the Architecture of the Pile-On

    A single doxed address is a location. A hundred accounts arriving at that location’s digital front door, in the same hour, using language that was clearly written somewhere else first, is a campaign. The next installment of Digital Manipulation examines what happens in the gap between a single bad actor and a coordinated one, and why platforms built to detect spam are so consistently unable to detect a crowd that was never actually spontaneous.

    FAQ

    Q: Is it doxing if the information I shared was already public?

    A: Possibly. The legal and ethical question hinges on intent and aggregation, not just availability. Compiling scattered public fragments into a single profile, published with the goal of inviting harassment or harm, generally crosses the line even when each individual fact was technically findable beforehand.

    Q: What’s the difference between doxing and investigative journalism?

    A: Purpose and proportionality. Journalism that reveals true information about a public figure’s conduct, in service of a documented public interest, generally enjoys strong legal and ethical protection. Doxing aimed at a private individual, with no comparable public interest beyond punishing them for speech or identity, does not carry the same justification even when it uses similar techniques.

    Q: Can I get in trouble for sharing someone’s address during an argument online, even if I didn’t mean any harm?

    A: In several states, yes, depending on intent and outcome. Many anti-doxing and harassment statutes focus on whether a reasonable person would expect the disclosure to invite harassment or fear, not solely on whether the person sharing it meant to cause harm. If you have done this, even once, it is worth taking seriously rather than assuming good intentions provide automatic protection.

    Q: How do I find out if I’ve already been doxed?

    A: Search your own full name, along with variations and any usernames you have used publicly, on a regular basis. Set up free alert services for your name and home address where available. Check whether your information appears on major people search and data broker sites, since most allow free lookups even when removal requires a paid or manual process.

    Q: Are data broker opt-out services worth paying for?

    A: For most people facing an active threat, yes, because the manual process of contacting dozens of individual brokers is time consuming enough that most people abandon it halfway through. These services do not guarantee permanent removal, since brokers frequently reacquire data, but they meaningfully reduce the number of sources someone would need to check to find you.

    Q: Is doxing always intentional, or can it happen by accident?

    A: It can happen without malicious intent, particularly when someone shares a screenshot, a location tag, or an identifying detail without realizing how it connects to information already circulating elsewhere. Accidental doxing still causes real harm to the person exposed, even when no one intended it, which is part of why basic digital hygiene matters even in low conflict situations.

    Q: What should I do if I’m being swatted or believe a swatting attempt is imminent?

    A: Contact local law enforcement directly and, if possible in your jurisdiction, register your address with any swatting prevention or threat flagging program your local department offers. Some departments allow residents to pre-register safety concerns tied to a specific address, which can change how responding officers approach the scene.

    Q: Does deleting my social media accounts protect me after a dox?

    A: It limits future exposure but does nothing to remove information that has already been copied, screenshotted, or mirrored elsewhere. Treat account deletion as one part of a broader cleanup rather than a solution on its own.

    Q: Why does this article cover examples from across the political spectrum instead of focusing on one side?

    A: Because the evidence does not support treating doxing as a tactic native to one political position. It has been deployed by activists, partisans, and opportunists across the entire spectrum, often using nearly identical methods against opposite targets. Treating it as exclusively a problem of the other side makes it easier to excuse when your own side does it, which is precisely the blind spot this piece is trying to close.

    Q: Is it doxing to research someone before a first date?

    A: Generally no, as long as the research stays private and proportionate to a reasonable safety concern, such as confirming someone’s identity matches what they have presented. It becomes a different and more troubling practice the moment that research is published, shared publicly, or used to humiliate rather than simply to verify.

    STATISTICS & RESEARCH STUDIES

    Safehome 2025 Doxing Survey

    Citation: Safehome Research Team. (2025). National doxing prevalence survey.
    Key Finding: 4% of American adults (approximately 11.7 million people) have been doxed; 16% report a friend or family member experienced doxing.
    Link: https://www.safehome.org/ (search for “doxing survey 2025” or contact for research findings)
    Usage in article: “The numbers are larger and more ordinary than the headlines suggest…”

    Anti-Defamation League (ADL) 2024 Online Hate and Harassment Survey

    Citation: Anti-Defamation League. (2024). Online hate and harassment survey.
    Key Findings:
    56% of American adults have experienced some form of online harassment22% have experienced severe forms (doxing, stalking, physical threats)
    Link: https://www.adl.org/resources/report/2024-online-hate-and-harassment-surveyUsage in article: “A 2025 survey from the home security research firm Safehome…”

    Pew Research Center — Online Harassment & Demographic Patterns

    Citation: Pew Research Center. Ongoing longitudinal research on online harassment.
    Key Findings:Women experience disproportionately higher rates of sexualized and identity-targeted abuse~70% of LGBTQ adults report online harassment vs. ~40% of straight adultsJournalists and activists show higher victimization rates

    Links:
    General harassment research: https://www.pewresearch.org/Search: “online harassment demographics” or “LGBTQ online abuse”
    Usage in article: “Pew Research Center’s long-running work on online harassment…”

    II. CASE STUDIES & DOCUMENTED INCIDENTS

    Case 1: Judge Esther Salas / Daniel Anderl Murder (July 2020)

    The Incident: A disgruntled lawyer located Judge Esther Salas’s home address via public records and data brokers, appeared at her residence disguised as a delivery driver, and fatally shot her 20-year-old son Daniel Anderl. Her husband was also seriously wounded. The attacker fled and later took his own life.

    Documented Sources:
    U.S. Courts Press Release: Judge Salas incident investigationFBI Statement (July 2020): Investigation into the shootingJudge Salas’s public statements on data broker accountability

    Key Links:

    NBC News report: https://www.nbcnews.com/news/judge-esther-salas-son-killed-doxing-public-records-n1232336Judge Salas’s TED talk on data broker reform (2021)

    Usage in article: “The Disgruntled Individual” perpetrator type

    Critical Note: Judge Salas has made doxing-to-violence causality a core part of her public advocacy.

    Case 2: Clara Sorrenti / Keffals vs. Kiwi Farms (2022)

    The Incident: Clara Sorrenti, a Canadian transgender Twitch streamer (username: Keffals), became target of coordinated harassment by Kiwi Farms forum members.

    They: Located her childhood home via old Facebook memorial post and satellite mapping. Conducted sophisticated tracking across platforms and addresses. Coordinated swatting attempts (false emergency reports to police)Found her subsequent locations through metadata (bedsheet pattern, etc.)Forced her to flee Canada and ultimately leave the country

    Documented Sources:
    NBC News / Variety coverage (September 2022)Vice investigative reporting on Kiwi Farms harassment campaigns. Cloudflare statement on dropping Kiwi Farms (September 2022)Clara Sorrenti’s own testimonials and Twitter/X documentation

    Key Links:

    Variety: “Cloudflare Drops Kiwi Farms After Harassment Campaign” (September 2022)BBC: “What is Kiwi Farms and why did Cloudflare drop it?” (2022)Clara Sorrenti’s own documentation (Twitter/X): @keleffals

    Usage in article: “The Organized Brigade” perpetrator type, platform complicity section.

    Critical Detail: The rideshare account compromise exposing family contact info is a major detail in the article; verify via Sorrenti’s own statements.

    Case 3: Marjorie Taylor Greene Swatting (September 2022)

    The Incident: Days after Clara Sorrenti’s case, a swatting attack was directed at U.S. Representative Marjorie Taylor Greene (R-GA). The attacker falsely reported an armed incident at her home to trigger an armed police response.

    Documented Sources: Official Capitol Police statement. Multiple news outlets (CNN, NBC, etc.) covering the incident, Linked to Kiwi Farms forum members by investigators

    Key Links:

    CNN: “Rep. Marjorie Taylor Greene’s home swatted for third time in a year” (September 2022)Capitol Police press releases

    Usage in article: To illustrate that doxing/swatting crosses political linesNote: The article explicitly uses this case to show the tactic is not partisan.

    Case 4: Charlie Kirk Doxing Campaign (September 2025)

    The Incident: Following the death of conservative commentator Charlie Kirk, a website called “Expose Charlie’s Murderers” published names, employers, and personal details of people who had posted critical commentary about him online, leading to job losses and suspensions.

    Documented Sources: This is a recent, real incident; verify via:
    NewsGuard or media watchdog archives. Conservative news outlets covering retaliation. Job loss/suspension documentation from affected individuals

    Key Links:

    Web archive snapshots (if available)News coverage in conservative media

    Usage in article: “The Accountability Doxer” type, showing left-leaning deploymentCritical Note: You may need to verify the exact date and details; the article uses September 2025 which may need fact-checking if we’re past that date in your publishing timeline.

    Case 5: Pro-Palestine Academic Doxing Campaigns

    The Incident: Digital blacklist campaigns targeting academics and students critical of Israel. The article mentions “more than five thousand students and academics” on published lists.

    Documented Sources:
    The Israel-Palestine conflict reporting from organizations tracking both sides:

    The Incident: Digital blacklist campaigns targeting academics and students critical of Israel. The article mentions “more than five thousand students and academics” on published lists.

    University statements on student harassment. Individual case documentation from affected students

    Key Links:

    Inside Higher Ed: “Blacklists and Academic Freedom” (2023-2024)Chronicle of Higher Education coverage.
    FIRE (Foundation for Individual Rights and Expression): tracking academic harassment cases

    Usage in article: “The Accountability Doxer” type, showing left-leaning deployment
    Note: The article mentions “five thousand students and academics” — The specific number may need to be verified

    Case 6: Harvard Square Billboard Incident

    The Incident: A digital billboard truck circled Harvard Square displaying names and photos of students who signed a public letter about the October 7 Hamas attack, widely described as doxing.

    Documented Sources:
    Harvard Crimson (student newspaper) coverage
    Boston Globe reporting Pro-Israel advocacy group statements (likely where the billboard originated)

    Key Links:

    Harvard Crimson: Search for “billboard incident 2023” or “students named October 7″Boston Globe coverage of same incident

    Usage in article: “The Accountability Doxer” type, showing right-leaning deploymentNote: Verify the exact date; the article uses it as a historical reference.

    Case 7: Immigration Enforcement Officer Doxing

    The Incident: The article mentions activist doxing of ICE agents and claims a “seven hundred percent increase in assaults against immigration enforcement agents whose identities and home information have been published by activists opposed to their work.”Documented Sources:

    Department of Homeland Security (DHS) reporting. ICE officer union statements (National Immigration and Customs Enforcement Council)News coverage of specific incidents

    Key Links:

    DHS press releases on agent safety. ICE union press statements. Investigative Reporters & Editors (IRE) coverage of doxing of federal agents

    Usage in article: “The Accountability Doxer” type, showing left-leaning deployment
    Critical Detail: The “seven hundred percent increase” figure needs verification; this is a specific, quantifiable claim that should be traced to a primary source.

    Case 8: UnitedHealthcare CEO Brian Thompson Murder Aftermath (December 2024)

    The Incident: Following the killing of UnitedHealthcare CEO Brian Thompson, two websites published names, emails, phone numbers, and LinkedIn profiles of hundreds of Fortune 500 executives, explicitly framing the killing as righteous and the list as a target index.

    Documented Sources:
    News coverage from December 2024 onwardsWeb archive snapshots (Internet Archive / Wayback Machine)Law enforcement statementsExecutive protection firm reports

    Key Links:

    NBC / CNN / Reuters coverage of the doxing campaigns. Internet Archive snapshots of the doxing sites (before takedown)Statements from affected corporations

    Usage in article: “The Opportunist” perpetrator type.
    Critical Note: The article states both sites were taken down within 24 hours; verify this timeline.

    III. LEGISLATION & LEGAL DOCUMENTS

    Daniel’s Law (New Jersey, 2020)

    Official Citation: N.J. Stat. § 2C:12-3.1 (Daniel’s Law)What It Does: Allows judges, prosecutors, and law enforcement officers to demand removal of their home address and unpublished phone number from data brokers and public-facing business databases.

    Key Details:
    Passed within months of Daniel Anderl’s murder (July 2020)Imposes financial penalties for noncomplianceBy 2024, over 100 lawsuits filed against companies failing to comply

    Link: https://www.nj.gov/njleg/ (search Daniel’s Law or S3043/A5185)
    Further Info: New Jersey courts website and data broker compliance resources
    Usage in article: Legal landscape section

    Daniel Anderl Judicial Security and Privacy Act (Federal, 2022)

    Official Citation: S. 3054 / HR 6246 (Daniel Anderl Judicial Security and Privacy Act)What It Does: Extends Daniel’s Law protections to federal judges nationwide; explicitly prohibits data brokers from trading the personal information of federal judges.Key Details:

    Passed 2022Creates federal enforcement mechanismComplements state-level Daniel’s Law protections

    Link: https://www.congress.gov/ (search by bill number S.3054 or HR 6246)
    Further Info: U.S. Courts Administration office statements on compliance
    Usage in article: Legal landscape section

    California Doxing Victims Recourse Act (AB 2881, effective January 2025)

    Official Citation: California Penal Code § 528.5 (as amended); Assembly Bill 2881What It Does: Creates a civil right of action allowing victims of doxing to sue for damages ($1,500 to $30,000 per incident) plus attorney fees, regardless of whether criminal charges are filed.Key Details:

    Effective January 1, 2025
    Applies to publishing personal information with intent to harass or cause harm
    No requirement that criminal prosecution occur
    Amends existing harassment statute

    Link: https://leginfo.legislature.ca.gov/ (search AB 2881 or Penal Code 528.5)Further Info: California Attorney General’s office guidance on implementationUsage in article: Legal landscape section

    State Doxing Laws Overview (Three Explicit + Fourteen Indirect)

    States with explicit “doxing” statutes: Alabama, California, Illinois (as of 2025)States with implicit criminalization via harassment/stalking laws: 14 additional states (list to be compiled)
    Documented Sources:
    Council of State Governments doxing law tracker
    FIRE (Foundation for Individual Rights and Expression) state-by-state analysis
    National Conference of State Legislatures (NCSL) research on harassment statutes

    Key Links:

    Council of State Governments: https://www.csg.org/ (search “doxing laws”)
    FIRE: https://www.thefire.org/ (search “doxxing” or “state laws”)
    NCSL: https://www.ncsl.org/ (search “harassment” or “cyberstalking statutes”)
    Usage in article: Legal landscape sectionNote: You may need to compile the exact list of 14 states; this is a current/evergreen detail.

    Federal First Amendment Precedent: Daily Mail Principle

    Legal Basis: The principle comes from Smith v. Daily Mail Publishing Co., 443 U.S. 97 (1979)
    What It Holds: The government can rarely punish the publication of truthful information that was lawfully obtained, even when that publication causes harm to its subjects
    Modern Application: Used in cases examining whether doxing or targeted publishing can be restrictedKey Links:

    Supreme Court opinion: https://supreme.justia.com/cases/443/97/Law review articles on “Daily Mail principle” and doxing (search legal databases)
    FIRE analysis of First Amendment and doxing: https://www.thefire.org/
    Usage in article: Legal landscape section explaining the constitutional challenge

    IV. SUPPORT ORGANIZATIONS & CRISIS RESOURCES

    Cyber Civil Rights Initiative (CCRI)

    Focus: Coordinated online harassment, swatting, doxing
    Services: Education, research, victim support, policy advocacy
    Contact & Resources: https://www.cybercivilrights.org/Specific Programs: Online harassment hotline, support guides, legal resourcesUsage in article: Crisis resources section

    Online SOS

    Focus: Victims of coordinated online harassment and doxing
    Services: Personalized support, resources, navigation of platform reporting and legal options
    Contact & Resources: https://onlinesos.org/Specific Programs: Case-by-case support, crisis responseUsage in article: Crisis resources section

    National Network to End Domestic Violence (NNEDV) — Safety Net Project

    Focus: Technology-facilitated abuse, stalking, doxing (especially in intimate partner context)
    Services: Specialized resources, safety planning, technical support
    Contact & Resources: https://www.techsafety.org/
    Specific Programs: Free tech safety guides, stalking resource guides, privacy toolkitUsage in article: Crisis resources section

    V. FEDERAL AGENCIES & ENFORCEMENT

    Federal Trade Commission (FTC) — Data Broker Oversight

    Key Case: In re Kochava Inc. (location data broker enforcement action, 2023)
    Resources:FTC data broker enforcement actions: https://www.ftc.gov/
    Search: “Kochava” for the full settlement and complaintFTC guidance on data broker consumer rights
    Usage in article: Data broker complicity section

    Department of Homeland Security (DHS) — Immigration Enforcement Data

    Key Finding: DHS reported statistics on assaults against ICE agents following doxing campaigns
    Resources:
    DHS press releases and annual reports on officer safetyCongressional testimony on agency security concerns
    Usage in article: Statistics on effect of “Accountability Doxer” campaigns

    VI. MEDIA & INVESTIGATIVE REPORTING SOURCES

    On Kiwi Farms & Clara Sorrenti Case

    BBC News: “What is Kiwi Farms and why did Cloudflare drop it?” (September 2022)
    Variety: “Cloudflare Drops Kiwi Farms After Harassment Campaign Against Transgender Streamer” (September 2022)
    Vice: Ongoing coverage of Kiwi Farms harassment campaigns
    NBC News / CNBC: Coverage of doxing and swatting incidents (2022)

    On Judge Salas & Daniel Anderl Murder

    NBC News: Comprehensive reporting on the incident and data broker implications. New Jersey law enforcement press releases. Judge Salas’s public statements and TED talks

    On UnitedHealthcare CEO Murder Aftermath

    Reuters: Coverage of executive doxing campaigns (December 2024)
    CNN / NBC: Analysis of the doxing sites and threat to other executives
    Business Insider / Forbes: Impact on corporate security practices

    On State-Level Doxing Laws

    Inside Higher Ed: Academic freedom and doxing campaigns (2023-2024)
    Chronicle of Higher Education: Coverage of academic harassment via doxing

    VII. LINKABLE GLOSSARY & INTERNAL DEFINITIONS

    These terms are defined in the article’s Appendix section

    Core Concepts

    Doxing — The publication of someone’s private or identifying information without consent, with intent to harass, intimidate, or expose to real-world harm.
    Doxxing — Alternative spelling of doxing; same meaning.
    Swatting — Making a false emergency report (active shooter, hostage situation) with intent to provoke armed police response at target’s location.
    Data broker — Company whose business model involves collecting, aggregating, and reselling personal information.

    Legal & Constitutional Terms

    Daily Mail principle — First Amendment precedent (Smith v. Daily Mail, 1979) holding that government can rarely punish publication of truthful information lawfully obtained.
    First Amendment — Constitutional protection for free speech; relevant to debates over what doxing can/cannot be legally restricted.
    Daniel’s Law — New Jersey legislation allowing judges, prosecutors, law enforcement to demand address removal from data brokers.
    Daniel Anderl Judicial Security and Privacy Act — Federal law extending Daniel’s Law protections to federal judges.
    California Doxing Victims Recourse Act — California civil remedy allowing doxing victims to sue for damages ($1,500-$30,000).

    Technical Terms

    Two factor authentication — Security method requiring two separate verification steps to access an account; increases protection against account compromise that could expose linked personal information.
    Data removal service — Third-party company that handles requests to remove personal information from data brokers and people-search websites.
    Address confidentiality program — State programs that substitute a confidential mailing address for a person’s actual address on public records (available in most U.S. states for certain protected groups like domestic violence survivors, judges, law enforcement).

    Organization Terms

    Cyber Civil Rights Initiative — Nonprofit focused on coordinated online harassment, swatting, doxing; offers support and resources.
    Online SOS — Nonprofit providing personalized support to doxing and coordinated harassment victims.
    National Network to End Domestic Violence (NNEDV) / Safety Net — Project focused on technology-facilitated abuse and stalking.

    Appendix

    Key Terms

    Doxing: The publication of someone’s private or identifying information without their consent, typically with the intent to harass, intimidate, or expose them to real-world harm.

    Swatting: Making a false emergency report, typically of an active shooter or hostage situation, with the intent of provoking an armed police response at a target’s location.

    Data broker: A company whose business model involves collecting, aggregating, and reselling personal information, often without the meaningful knowledge or consent of the individuals described.

    Daily Mail principle: A line of First Amendment precedent holding that the government can rarely punish the publication of truthful information that was lawfully obtained, even when that publication causes harm to its subject.

    Daniel’s Law: New Jersey legislation, passed in 2020 after the murder of Daniel Anderl, allowing judges, prosecutors, and law enforcement officers to demand removal of their home address and unpublished phone number from businesses and data brokers.

    Further Reading

    Federal Trade Commission. “FTC Sues Kochava for Selling Data that Tracks People at Reproductive Health Clinics, Places of Worship, and Other Sensitive Locations.” FTC press release, August 2022.

    The Council of State Governments. “Doxing: State Protections Against Digital Threats.” 2025.

    NBC News. “Kiwi Farms: Anti-trans stalkers chasing Keffals around the world.” September 2022.

    Rutgers Law School. “Groundbreaking Judge Turned Tragedy into Change.” Profile of Judge Esther Salas.

    The Foundation for Individual Rights and Expression. “Is doxxing illegal?” by David L. Hudson Jr.

    Anti-Defamation League. 2024 Online Hate and Harassment Survey.

    Crisis Resources

    Cyber Civil Rights Initiative, Online SOS, and the National Network to End Domestic Violence’s Safety Net project all maintain resources for victims of coordinated online harassment, doxing, and technology-facilitated abuse. If you believe you are in immediate physical danger, contact local law enforcement or emergency services directly.

    Digital Manipulation is a space for people who are learning to see what was designed to be invisible. You are not helpless. Coordination can be recognized. Manufactured consensus can be distinguished from authentic belief. You decide what you think.

    gorgeousdiaries.com

  • Astroturfing: The Illusion of Grassroots

    By

    You saw the consensus and believed it was real. It wasn’t. It was manufactured by people working in coordinated silence, designed to look like spontaneous truth.

    You scrolled past a product review—five stars, a detailed breakdown, photos from a verified buyer. You almost bought it. You checked another product. Same pattern: glowing reviews, helpful comments, dozens of people saying the same thing. You began to believe there was consensus. You believed because you saw proof of it everywhere you looked.

    The consensus was real. The authenticity was manufactured.

    Or you scrolled through your politics feed during an election year. A particular message kept surfacing. Different accounts posting similar talking points. Different groups organizing around the same idea. Hashtags trending that felt organic, grassroots, citizen-driven. You believed you were witnessing genuine public opinion forming in real time.

    You were witnessing coordination designed to feel organic. You were the target of astroturfing.

    What Astroturfing Actually Is

    Astroturfing is the deliberate creation of the appearance of grassroots, organic support for something—an idea, a political candidate, a policy, a product, a narrative—when the support is actually coordinated and funded behind the scenes. The term comes from “AstroTurf,” the artificial grass product. It looks real if you don’t examine it closely. It serves the function of real grass. But it’s manufactured.

    The critical distinction is this: astroturfing is not marketing. Marketing is transparent about being paid persuasion. Marketing says “this company paid for this advertisement.” Astroturfing hides the coordination. It masquerades as authentic peer-to-peer recommendation, genuine grassroots movement, real customer feedback, or spontaneous public opinion. The power of astroturfing lies in the deception. You believe you’re seeing what people actually think and actually want because the coordination is invisible.

    The mechanisms of astroturfing on social media include: coordinated networks of fake accounts posting in sync to amplify messages, bot networks that retweet and repost to create artificial momentum, paid networks of real people hired to post reviews and comments that appear authentic, purchased ads designed to look like organic posts, and real activist networks that coordinate to appear spontaneous. The sophistication has evolved. Early astroturfing was obvious, all the reviews read the same, all posted within hours of each other. Modern astroturfing is harder to detect because the coordination is strategic, varied in voice and timing, and distributed across multiple platforms and accounts.

    Why Astroturfing Works on Human Perception

    Humans are built to trust consensus. We evolved in small groups where everyone you encountered had roughly the same information as you did. When multiple people believed something, it was likely true because they had access to the same reality. This made consensus a reliable signal. Your brain still works this way. When you see multiple accounts saying the same thing, posting reviews that align, expressing opinions that feel organic, your brain processes this as evidence. Consensus feels like truth.

    Astroturfing exploits this cognitive pattern. It is a direct manipulation of how humans assess credibility. You don’t have the cognitive resources to individually verify every claim you encounter online. You use shortcuts. One major shortcut is “if multiple people believe this, it’s probably true.” Another is “if this appears organic and unrehearsed, it’s probably authentic.” Astroturfing weaponizes both shortcuts simultaneously.

    The psychology operates at multiple levels. First, there’s the social proof mechanism: seeing others make a choice or hold a belief makes you more likely to make that choice or hold that belief. If you see fifty people praising a product, you’re more likely to buy it. If you see multiple accounts expressing a political view, you’re more likely to consider that view legitimate. Second, there’s the illusory truth effect: the more times you encounter a piece of information, the more likely you are to believe it, regardless of its actual accuracy. Astroturfing leverages this by ensuring a message reaches you repeatedly, from what appear to be different sources.

    Third is the mere exposure effect: familiarity increases liking. The more you see something, the more normal and acceptable it feels. Coordinated campaigns create artificial familiarity. A policy position you’ve never encountered suddenly appears everywhere. A narrative you weren’t exposed to previously seems to be the obvious consensus. Fourth is the false consensus effect: humans tend to assume others share their beliefs more than they actually do. When astroturfing creates an artificial consensus, it tricks this cognitive bias into overdrive. You see agreement and assume agreement is more widespread than it actually is.

    What makes astroturfing so dangerous is that these psychological mechanisms operate largely outside conscious awareness. You don’t consciously think “I’ve now seen this talking point five times, so I believe it.” Your brain processes it automatically. You don’t consciously think “this consensus might be manufactured.” You feel the pull of agreement and assume it’s real.

    How Astroturfing Operates: The Technical and Strategic Architecture

    Astroturfing operates across multiple technical and organizational layers. Understanding these layers is essential for learning to recognize when you’re being targeted.

    The Bot Network Layer: Coordinated networks of automated accounts are deployed to amplify specific messages. These accounts are designed to appear real—they have profile pictures, post histories, follower networks. But their posting behavior is synchronized. When a message needs amplification, hundreds of these accounts retweet, repost, or like the content within minutes of each other. The goal is to push content into trending sections, recommendation algorithms, and the feeds of users who don’t follow the original poster. A single post boosted by synchronized bot activity appears to have organic momentum. Users who see trending content assume it’s genuinely popular.

    The Paid Commentator Layer: Human-operated fake accounts post reviews, comments, and content that appear authentic because they are written by humans, often with varying voice and style. These accounts are coordinated through messaging platforms, group chats, or management dashboards. Operators are paid per post or per network. Amazon has documented networks organizing thousands of people willing to post fake reviews in exchange for money or free products. The scale is staggering: Amazon filed legal action against administrators of over 10,000 Facebook groups that were explicitly designed to coordinate fake reviews. Amazon had also prevented over 200 million suspected fake reviews from appearing on its platform in 2020 alone.

    The Narrative Coordination Layer: Across multiple platforms and accounts, aligned talking points are deployed. Political campaigns, corporate PR firms, and foreign government operations use coordinated messaging: specific phrases, particular frames, identical statistics. Researchers analyzing the 2016 U.S. election found that the Russian Internet Research Agency (a state-backed organization) operated thousands of coordinated accounts across Facebook and Twitter, each with distinct personas but synchronized messaging. Analysis of 108,781 IRA tweets found coordinated amplification of specific narratives across the political spectrum, designed to deepen existing polarization and maximize discord.

    The Grassroots Mimicry Layer: The most sophisticated astroturfing creates the appearance of grassroots activism. During the Brexit campaign in 2016, seemingly organic grassroots groups like “Vapers For Britain” and other “For Britain”-styled offshoots were documented by researchers and the UK Electoral Commission as coordinated efforts presenting themselves as spontaneous citizen movements. These networks were real people, but the coordination was strategic. The public perception was of organic political activism. The reality was coordinated campaigns designed to look organic.

    The Algorithmic Amplification Layer: Social media algorithms reward engagement. Posts with high engagement (likes, comments, shares) are shown to more users. Astroturfing exploits this by ensuring coordinated high engagement on specific content. A coordinated network ensures rapid initial engagement, which triggers the algorithm to distribute the content more widely. What started as manufactured engagement becomes real engagement from users who encountered the content because the algorithm promoted it. The manipulation of the algorithm creates a cascade of organic amplification.

    Historical Examples: Where Astroturfing Has Been Documented

    The 2016 U.S. Presidential Election: Russian Interference Through Coordinated Accounts

    In 2016, the Russian Internet Research Agency—a state-backed organization based in St. Petersburg—deployed thousands of coordinated accounts across Facebook, Instagram, and Twitter with the explicit goal of influencing the U.S. presidential election. The IRA created 2,700 fake Facebook accounts and 3,814 accounts across Twitter and other platforms, posting approximately 80,000 Facebook posts and 175,993 tweets over the campaign period.

    The astroturfing strategy was sophisticated. Rather than all supporting a single candidate, IRA accounts operated across the political spectrum, posting inflammatory content designed to deepen existing divisions. They posted about Black Lives Matter to inflame racial tensions. They posted about the tea party to polarize conservative movements. They purchased ads for anti-Clinton flash mobs and pro-Trump photo challenges. They created Facebook events and privately messaged real users, asking them to attend rallies. When they got commitments, they assigned real users to be event coordinators, creating the appearance of grassroots organizing while maintaining hidden coordination.

    The IRA’s goal was not necessarily to swing the election to a particular candidate. It was to sow discord, amplify polarization, and undermine trust in the electoral process itself. The astroturfing worked. Users who encountered this content believed they were witnessing genuine grassroots activism and authentic popular sentiment. They didn’t know they were encountering coordinated disinformation.

    The Brexit Campaign: Coordinated Astroturfing and Data Manipulation

    During the 2016 Brexit referendum in the United Kingdom, the official Vote Leave campaign and the separate Leave.EU campaign deployed coordinated astroturfing at scale. Research documented the use of coordinated bot networks on Twitter: more than 13,000 probable bot accounts were active around the Brexit referendum, then disappeared immediately after the polling stations closed. These bots were subdivided into specialized networks dedicated to amplifying specific messages through retweets and coordinated engagement.

    The Vote Leave campaign spent over £2.7 million on targeted Facebook ads created by the Canadian company Aggregate AIQ. These ads were designed to target specific voter groups based on their age, location, and personal data harvested from social media. The Electoral Commission later found that Vote Leave violated electoral law by secretly coordinating with another campaign, BeLeave, allowing them to exceed spending limits while maintaining apparent independence. The astroturfing worked in conjunction with voter microtargeting: different messages were shown to different groups, creating the illusion of grassroots consensus while actual coordination remained hidden.

    What made the Brexit astroturfing campaign particularly significant was the involvement of Cambridge Analytica, a political consulting firm later shut down for misuse of user data. Whistleblower Christopher Wylie revealed that Cambridge Analytica had worked with Leave.EU (though both initially denied it), using data harvested from millions of Facebook users without their permission to construct voter profiles that could be targeted with coordinated messaging campaigns.

    Corporate and Consumer Astroturfing: Fake Reviews at Scale

    While political astroturfing captures headlines, the most pervasive astroturfing operations target consumer behavior through fake reviews. Amazon has documented massive networks of paid review brokers coordinating hundreds of thousands of people to post fake reviews in exchange for money or free products.

    In 2022, Amazon filed legal action against administrators of over 10,000 Facebook groups explicitly designed to recruit members to post fake reviews. Amazon alleged that one company, AppSally, was charging as little as $20 per fake review. Another company, Rebatest, was organizing over 900,000 members willing to write false reviews. These networks coordinated across Amazon, eBay, Walmart, and Etsy. The scale reveals the infrastructure: thousands of groups, hundreds of thousands of participants, coordinated through messaging platforms and management dashboards, all designed to manipulate consumer perception through fake grassroots feedback.

    In 2023, the U.S. Department of Justice prosecuted Joseph Nilsen, who had run a scheme to bribe Amazon employees and manipulate the Amazon Marketplace through coordinated fake reviews. Nilsen and his partner systematically attacked competitors’ products with negative fake reviews while boosting their own products with positive ones. The operation lasted over three years. Nilsen was sentenced to 18 months in prison, but the existence of the operation reveals how vulnerable review systems are to coordinated manipulation.

    What distinguishes corporate astroturfing from political astroturfing is the financial incentive structure. You are the product. Your purchasing decisions are the value. Astroturfing influences those decisions by making fake reviews appear authentic. The cost to manipulate you—a few dollars per review—is far less than the profit gained if the manipulation succeeds.

    How to Recognize Astroturfing: Operational Defense Strategies

    Recognizing astroturfing requires developing a different relationship to consensus. You cannot unsee coordination once you know what to look for. The following strategies operate at the behavioral level—you can implement them immediately.

    Notice the Timing Pattern: Coordinated accounts post within narrow time windows. Real grassroots content emerges over time, posted by people in different time zones, different work schedules, different sleep cycles. Astroturfed content often appears in clusters: many posts about the same thing within 30 minutes, then silence, then another cluster. Search the hashtag or topic. Note the timestamps. If posts cluster unnaturally, you’re likely seeing coordination. This is not definitive proof—something genuinely popular can appear in clusters too—but it’s a signal to heighten skepticism.

    Examine Account Profiles: Fake accounts have patterns. Look at follow networks. Are the accounts following each other? Are they following very few people but have many followers? Do their biographies repeat similar phrases? Check their posting history. Do they post regularly about wide-ranging topics, or do they post sporadically about a narrow subject? Real people have variable activity patterns and diverse interests. Bots and paid accounts tend toward narrow focus and synchronized timing. This investigation is tedious, but it works.

    Verify Claims Independently: When you see consensus forming about a factual claim, verify it before adopting the claim. Don’t just check one source. Check multiple sources with different perspectives. For product reviews, look at recent reviews only and note the distribution. Does the product have mostly five-star reviews with occasional one-star reviews, or does it have a normal distribution of reviews? Read some of the negative reviews closely. Are they detailed and specific or generic and vague? Astroturfed positive reviews tend toward vagueness (“Great product!”) while authentic negative reviews tend toward specificity (“The zipper broke after two weeks”).

    Identify the Financial Incentive: Ask yourself: who benefits if you believe this? Who gains if this consensus is accepted as real? If the answer is obvious—a company benefits if you buy their product, a political candidate benefits if you vote for them, a government benefits if you adopt a particular narrative—heighten your skepticism. Financial incentives don’t prove astroturfing, but they indicate where astroturfing is most likely to occur.

    Seek Dissent: Real consensus includes some dissent. Real movements include skeptics and disagreement. When you see message discipline that is total—where every account expressing a viewpoint repeats the same talking points with only minor variation—you’re likely seeing coordination. Dissent is a signal of authenticity.

    Assume Networks, Not Individuals: When you see a consensus forming, assume a network is behind it. This doesn’t mean the consensus is false. It means you should verify it independently rather than accepting it because it appears widely held. A network promoting something true is still a network. Your job is to determine truth, not to adopt beliefs based on how widely they’re promoted.

    Platform Responsibility: Who Enables Astroturfing and Why

    Social media platforms enable astroturfing because their core incentive structure is misaligned with truthful discourse. Platforms profit from engagement. Engagement increases with emotional arousal, polarization, and consensus. A coordinated campaign creates engagement. Bots retweet, reply, and amplify. Paid commentators drive engagement metrics up. This engagement signals algorithmic value: content that generates engagement gets distributed more widely. The platform benefits regardless of whether the engagement is authentic or manufactured.

    Platforms have made efforts to detect and remove astroturfed content. Meta (Facebook’s parent company) reported removing over 50 percent of fake review groups reported by Amazon since 2020. Twitter (now X) suspended thousands of IRA-linked accounts. These efforts matter. They also are fundamentally insufficient.

    The problem is structural. A platform designed to maximize engagement will never fully eliminate astroturfing because astroturfing generates engagement. Removing coordinated content after the fact doesn’t undo the manipulation that already occurred. Users who encountered astroturfed content before it was removed have already updated their beliefs. The belief persists after the content is gone.

    Platforms could redesign to reduce astroturfing. They could deprioritize content that comes from new accounts or accounts with suspicious posting patterns. They could make verification of authenticity more transparent. They could limit the reach of rapidly amplified content. They could pay attention to timing clusters and network patterns. But these changes would reduce total engagement, which would reduce advertising revenue. The economic incentive points toward allowing astroturfing to persist.

    This is not a legal problem awaiting a legal solution. This is a design problem in systems where the incentive to maximize engagement exceeds the incentive to ensure authenticity. You cannot rely on platforms to protect you from astroturfing. You must protect yourself through the defense strategies outlined above.

    The Power You Retain

    Astroturfing works because it operates at the level of automatic cognition. You don’t consciously decide to trust consensus. Your brain processes it automatically. The coordination is invisible. The manipulation feels like discovery.

    But awareness changes this dynamic. Once you understand how astroturfing operates, once you know what to look for, you retain agency. You can notice timing clusters. You can examine account profiles. You can verify claims independently. You can ask who benefits. You can seek dissent. These are not difficult skills. They are attention skills.

    You are not helpless against astroturfing. The coordination that was invisible is now visible. The manipulation that felt organic is now recognizable as manufactured. Your belief system is your own. Consensus is a signal, not proof. You decide what you believe, not algorithms, not networks of paid commentators, not bot networks. The manipulation persists only as long as it remains undetected.

    Consensus manufactured at scale is still consensus you don’t have to accept.

    Next in the Series

    You understand astroturfing now. You understand how to recognize coordinated inauthentic behavior. The next article examines a tactic that builds on astroturfing’s foundation: the way that false information, once amplified through coordinated networks, calcifies into lived reality. We’ll look at how misinformation, disinformation, and coordinated narrative campaigns don’t just manipulate your choices in the moment. They reshape what you believe is possible, true, and safe. Next: The Architecture of Manufactured Reality.

    Frequently Asked Questions

    Q: Is all consensus fake? Should I trust nothing?

    A: No. Consensus emerges organically all the time. What matters is learning to distinguish between consensus that emerges through distributed, variable activity over time and consensus that appears suddenly and synchronized. You can trust consensus that includes dissent and that you’ve verified through independent investigation. Astroturfing is a tactic, not evidence that all consensus is manipulated.

    Q: If I notice astroturfing, what should I do?

    A: Report it to the platform if the platform has a reporting mechanism for coordinated inauthentic behavior. Take screenshots documenting the pattern: the timing clusters, the account networks, the repeated messaging. If the astroturfing is a political or consumer fraud operation, report it to relevant authorities. Most importantly, do not amplify it. Do not share it. Do not engage with it. Engagement feeds the algorithm.

    Q: How sophisticated is astroturfing now?

    A: Astroturfing has become highly sophisticated. Networks of thousands of accounts, coordinated messaging across platforms, bot networks using AI-generated content, paid human commentators trained to mimic authentic voices, timing strategies that exploit algorithms, and integration with legitimate advertising systems. The 2024 election saw evidence of coordinated cross-platform inauthentic activity involving AI-generated content and state-backed propaganda networks.

    Q: Can individuals do astroturfing or is it only large organizations?

    A: Both. Individual merchants have been convicted of running astroturfing schemes on Amazon. However, the largest and most effective astroturfing operations are run by political campaigns, corporations with large budgets, and state-backed organizations that can afford to maintain networks of thousands of accounts.

    Q: Is astroturfing illegal?

    A: In many jurisdictions, yes. The U.S. has laws against deceptive practices. The UK, Germany, France, Italy, and other countries have made astroturfing explicitly illegal. However, enforcement is inconsistent. Proving that a campaign was astroturfed requires evidence of coordination and coordination is often hidden. Platforms rarely face penalties because they claim they cannot monitor all content.

    Q: Why doesn’t technology solve this? Why can’t platforms detect astroturfing automatically?

    A: Detection technology exists and is improving. But detection is a cat-and-mouse game. As detection improves, astroturfing techniques become more sophisticated. Bots that were obvious five years ago are now trained on real human behavior. Fake accounts now build authentic-seeming histories over months before deploying coordinated messages. The underlying problem is structural: platforms profit from engagement regardless of whether it’s authentic. Without changing that incentive, technology alone won’t solve astroturfing.

    Appendix: Key Terms & Further Reading

    Key Terms

    Astroturfing: The deliberate creation of the appearance of grassroots, organic support for something when the support is actually coordinated and funded. Named after AstroTurf, the artificial grass product.

    Coordinated Inauthentic Behavior (CIB): The deliberate coordination of multiple accounts to amplify a message, manipulate public opinion, or create false consensus. Encompasses bot networks, paid commentators, and orchestrated activism.

    Social Bot: An automated account on social media operated by algorithms or scripts rather than a human. Used to amplify messages, spread content, or create false consensus. Can be detected by behavioral analysis: bot accounts tend toward narrow posting topics, synchronized timing, and predictable patterns.

    False Amplification: The artificial boosting of a message’s reach through coordinated engagement (likes, shares, retweets) designed to trigger algorithmic distribution. Content that appears popular gets distributed more widely, creating the impression of organic popularity.

    Sock Puppet Account: A fake social media account created to appear as a real individual. Used to post reviews, comments, or political messages while hiding the identity and intent of the person controlling the account.

    Consensus Cascade: The self-reinforcing dynamic where seeing others adopt a belief makes you more likely to adopt that belief, which makes others more likely to adopt it. Astroturfing artificially initiates consensus cascades.

    Further Reading

    Luceri, Luca, Giordano, Salvatore & Ferrara, Emilio. (2020). “Detecting Troll Behavior via Inverse Reinforcement Learning: A Case Study of Russian Trolls in the 2016 US Election.” Proceedings of the International AAAI Conference on Web and Social Media, 14(1): 417-427.

    Ferrara, Emilio. (2024). “Detecting and Characterizing Coordinated Inauthentic Behavior on Social Media.” Oxford Internet Institute, University of Oxford.

    Cadwalladr, Carole. (2017). “The Great Hack: The Brexit Data Scandal.” The Guardian and The Observer (published as series, extensively documented investigation into Cambridge Analytica and Brexit campaign astroturfing).

    Mueller, Robert S. (2019). “Report on the Investigation into Russian Government Interference in the 2016 U.S. Presidential Election.” U.S. Department of Justice. (Documentation of IRA astroturfing operations during 2016 election)

    Bessi, Alessandro & Ferrara, Emilio. (2016). “Social Bots Distort the 2016 U.S. Presidential Election Online Discourse.” First Monday, 21(11). (Early detection of bot networks in political astroturfing)

    Social Engineering in Social Media is a space for people who are learning to see what was designed to be invisible. You are not helpless. Coordination can be recognized. Manufactured consensus can be distinguished from authentic belief. You decide what you think.

    gorgeousdiaries.com

Load more posts