Highlighted wordsare glossary terms — tap one for a plain-language definition.
Online abuse can include repeated harassment, impersonation, DoxxingWhat it means: Publishing someone's private or identifying information without permission, often to threaten or harass them.Example: Someone posting your home address in a harassment thread.What to do: Lock down profiles, remove address details, and screenshot everything as evidence.Important: Report it to the platform and to police rather than engaging with the harasser.What does this mean?, cyberstalking, threats, Account takeoverWhat it means: When someone other than the owner gains control of an account, usually through a stolen or reused password, a phished code, or a SIM swap.Example: Friends receive money requests “from you,” and your email forwarding rules have changed on their own.What to do: From a trusted device, change the password, sign out all sessions, review recovery options, and turn on MFA.Important: Email is the master key — protect it first, because attackers reset everything else through it.What does this mean?, or technology used to monitor and control you. It is not your fault. You do not need to investigate the person yourself or respond publicly; your first job is to protect your safety and choose the next manageable step. [1, 2]
Recognize the pattern and check your safety
A single rude comment and a pattern of abuse are not the same. Repeated contact, fake profiles, exposure of private information, threats, location TrackingWhat it means: Collecting information about a person's online behavior across websites, apps, or devices.Example: Ads for a product following you from site to site.What to do: Turn on your browser's tracking protection and limit ad tracking on your phone.Important: The same profiles are also used to make scams feel personal and believable.What does this mean?, or knowledge someone should not have can signal escalation. The FTC warns that stalkerware can secretly reveal messages, photos, online activity, and location. If a device may be monitored, use a different device to seek help before changing or removing anything. [1, 2]
- For an immediate or specific threat, move to a safer place and contact local emergency services.
- Do not meet the person, retaliate, or announce a safety plan if doing so could increase danger.
- Use a safer device and account the abusive person has never accessed to contact support.
- Ask a trusted person or advocate to help you decide what to do next; you remain in control of the choices.
Preserve useful evidence without amplifying it
Before a post, account, or message disappears, keep a focused record. Save the full URL, username or profile address, date and time, the content and surrounding context, and any report or case number. Avoid reposting abusive content to explain what happened; that can increase its reach. A trusted person can document it for you if reviewing it is distressing. [6]
- Capture the full screen and URL, not only a cropped message.
- Keep a simple incident log showing dates, platforms, account names, and what changed.
- Save copies somewhere the abusive person cannot access.
- For suspected stalkerware, preserve safety first; removing it can alert the person who installed it. [2]
Report, block, and secure the doors
Use the platform's official abuse-reporting process, save its confirmation, then mute or block when that is safe. If someone took over your email or social account, use the provider's recovery process, change to a unique password, sign out other sessions, turn on strong Multifactor authenticationWhat it means: Using more than one type of authentication evidence before an account grants access.Example: Entering your password and then approving the login through an authenticator app.What to do: Turn it on first for your email, financial, social-media, and cloud accounts.Important: Never give an unexpected login code to someone who contacts you.What does this mean?, and correct recovery details. The FTC recommends these steps because a hijacked account can expose Personal informationWhat it means: Information that identifies or can be connected to a person.Example: Your full name together with your birthdate and home address.What to do: Share only the minimum a form actually requires.Important: Small details combined are enough for identity theft.What does this mean?, spread MalwareWhat it means: Software designed to damage, spy on, disrupt, or gain unauthorized access to a device.Example: A “free video player” download that quietly installs something else.What to do: Install apps only from official stores and keep automatic updates switched on.Important: Pop-ups warning that your device is infected are usually the scam itself.What does this mean?, impersonate you, or scam people you know. [3]
- Report the specific behavior — harassment, impersonation, private information, threats, or account compromise.
- Tell close contacts about a fake or stolen account through a different Trusted channelWhat it means: A communication method independently known to belong to the person or organization.Example: The number printed on the back of your bank card.What to do: Save official contacts and app logins before you ever need them.Important: Never use contact details supplied inside the suspicious message.What does this mean?.
- Review active sessions, recovery email and phone, forwarding rules, and connected apps.
- Do not send money or personal information to someone using pressure or threats. [4]
Choose the right official report
Different harms need different reports. Tell the platform about content or accounts that violate its rules. Report scam demands, financial loss, or impersonation used for fraud at ReportFraud.ftc.gov. If exposed information is used to open accounts, make charges, or otherwise steal your identity, use IdentityTheft.gov for an FTC identity theft report and a personal Recovery planWhat it means: A prepared set of actions for responding to account theft, scams, lost devices, or exposed information.Example: Written steps plus saved bank and platform support numbers.What to do: Write it now and keep a copy offline where you can reach it without your phone.Important: The first hour after a compromise matters most, so don't improvise it.What does this mean?. Direct or immediate safety threats belong with local emergency services, not the FTC. [4, 5]
- Contact your bank or payment provider immediately if money was sent or account details were exposed. [4]
- Check financial statements and credit reports for activity you do not recognize. [5]
- Keep confirmation numbers and add each report to your incident log.
- Use Hygi's abuse-support page to find confidential advocates and local services.
Why Hygi. recommends this — the guidance above follows these published sources:
Federal Trade Commission
Protecting Your Privacy Online(opens in a new tab)FTC privacy hub covering online abuse, harassment, personal-data exposure, and safer online practices.
Federal Trade Commission
Stalkerware: What To Know(opens in a new tab)Published May 10, 2021. Warning signs, safer-device planning, and support when technology may be tracking someone.
Federal Trade Commission
Email or Social Media Hacked? Here's What To Do(opens in a new tab)Published October 29, 2024. Account recovery, sign-out, password, multifactor, and recovery-information steps.
Federal Trade Commission
What To Do if You Were Scammed(opens in a new tab)Published July 2022. Financial recovery steps and reporting through ReportFraud.ftc.gov.
Federal Trade Commission
What To Know About Identity Theft(opens in a new tab)Identity-theft warning signs, protective steps, and recovery through IdentityTheft.gov.
Cyber Civil Rights Initiative
CCRI Safety Center(opens in a new tab)Victim-centered safety planning, documentation, reporting, and support for online abuse.
Brought to you by NorthBridge
Unfamiliar term? Open the Digital Safety Glossary