AUGUST 7 — “I know where you live.”

“Here is your parents’ phone number.”

Once dismissed as empty internet threats or dark digital memes, these chilling statements are becoming a terrifying reality for many. Doxxing — the unauthorised harvesting and public release of private data such as names, home addresses, and family details — has mutated. No longer just a tool for petty online drama, it has become a weapon for “digital execution”.

While high-profile public figures have long been targets, doxxing is increasingly aimed at ordinary individuals across the globe. Today, this digital epidemic is ruining lives, fracturing mental health, and, in Malaysia, leading to national tragedy.

From online justice to digital hunting

Derived from the early hacker phrase “dropping documents”, doxxing originally emerged as a fringe tactic used to expose anonymous misconduct. However, the ethical lines have long since vanished. Today, doxxing has evolved into an organised, often monetised instrument of cyber-harassment.

The psychological toll on its victims is immense, as seen in several high-profile international cases. In 2023, the American content creator known as “Corpse Husband” — famous for his deep voice and deliberately faceless persona — suffered malicious leaks of his alleged identity. Despite platforms removing the content, the indelible nature of digital footprints forced him to retreat from the public eye due to severe psychological distress.

Furthermore, doxxing has proven to be a criminal enterprise. In China, the virtual idol group A-SOUL became the target of systematic doxxing when perpetrators leaked the highly sensitive household registrations and family data of the “behind-the-scenes” performers via Telegram. Setting a landmark precedent for criminalising the act, two lead offenders were sentenced to 18 months in prison in 2024.

The Esha tragedy and Malaysia’s wake-up call

In Malaysia, the devastating consequences of doxxing reached the highest levels of government in 2024, following the tragic suicide of TikTok creator Rajeswary Appahu, known to her followers as Esha. After exposing mercury-tainted cosmetics online, Esha was subjected to a relentless, organised campaign of doxxing and severe physical threats.

The public’s grief quickly turned to outrage following the initial legal outcome. One of the perpetrators was fined a mere RM100 under existing, outdated laws. To many, the penalty for contributing to a young woman’s death cost no more than a casual meal.

This stark disparity between the severity of the crime and the leniency of the punishment catalysed a legislative revolution in Malaysia. The urgency was undeniable; recent statistics revealed Malaysia ranked second in Asia for cyberbullying, recording over 8,300 complaints in just the first 11 months of 2023.

Alarmingly, the barrier to entering this digital black market is remarkably low. On encrypted social platforms, comprehensive personal dossiers — complete with bank records and precise home GPS coordinates — can be purchased for just a few hundred ringgit.

Whether it stems from a toxic fandom dispute or a mundane online disagreement, ordinary citizens can find themselves at the center of a targeted harassment storm overnight. For many victims, the resulting trauma requires serious clinical intervention for depression and anxiety.

Striking back with Malaysia’s new legal shield

To curb this rising tide of digital violence, the Malaysian government has comprehensively overhauled its legal framework to protect internet users and hold platforms accountable.

Strict criminalisation is at the forefront of this effort. Under the Penal Code (Amendment) Act 2024, the newly introduced Section 507E explicitly makes it a crime to disseminate private information with the intent to harass or intimidate. Offenders now face up to three years in prison alongside heavy fines.

In addition to criminal penalties, the government is enforcing platform accountability. Taking effect in 2025, major social media platforms operating in Malaysia with over 8 million users will be required to apply for an operating license. Under a stringent new Code of Conduct, these tech giants are mandated to remove harmful content within 12 to 24 hours of a report.

Finally, authorities are actively exploring preventative measures, including stricter identity verification and potential age restrictions prohibiting those under 16 from using social media. These steps aim to prevent vulnerable minors from becoming either victims or perpetrators.

Beyond the screen and refusing to be an accomplice

The true horror of doxxing lies in its absolute irreversibility. Once private information is unleashed onto the internet, it is instantly duplicated, screenshot, and cached indefinitely.

While cyberviolence often masks itself under the guise of “righteous exposure” or online justice, it entirely bypasses the rule of law. It is crucial for the public to recognise that online violence breaks the boundaries of the screen. In the digital age, every click, every share, and every malicious search has the potential to be the final straw that breaks a life.

* The authors are from the Department of Science and Technology Studies, Faculty of Science, Universiti Malaya and can be reached via ista.ajib@um.edu.my 

** This is the personal opinion of the writer or publication and does not necessarily represent the views of Malay Mail.