How to Report Private Information Posted About You on X (Twitter)

December 2, 2026 · Privacy

If someone posted your private information on X, such as your home address, personal phone number, ID numbers, or financial details, report it under X's private information policy. Use the report option on the post itself, or file through X's private information report form. X can require the post to be removed and lock or suspend the account that posted it.

The policy is narrower than many people assume, though. Your name, workplace, age, and rumors about you are generally not covered. Knowing what's covered before you report makes the report much more likely to work.

What X counts as private information

Per X's private information policy, users can't share the following without permission:

The policy also prohibits threatening to expose someone's private information, offering or asking for a bounty to post it, and demanding payment in exchange for not posting it.

Home address or physical location information, including GPS coordinates or other identifying details about private locations.
Identity documents, such as government IDs or Social Security numbers.
Non-public personal phone numbers, email addresses, or passwords.
Financial account information, such as bank account or credit card details.
Private health information, such as medical records or biometric data.
The identity of an anonymous user, such as their name or media showing them.

What X does not count as private

This list decides many reports. X's policy says the following are generally not violations:

That last point has an important exception. X says it may act on a posted home address even when it's publicly available, because of the potential for physical harm. If your address is in the post, report it even if it's also on a property records site.

Names, birthdates, and ages.
Places of education or employment.
Business locations, where publicly available.
Descriptions of physical appearance.
Gossip, rumors, accusations, and allegations.
Screenshots of messages, unless they contain private information like a phone number.
Information you shared publicly yourself, or that's already publicly available elsewhere and is shared in a non-abusive way.

Who can report

Private information: Anyone can report it when it's been shared in a clearly abusive way. Otherwise, X says it may need to hear from the owner of the information, or an authorized representative such as a lawyer, before acting. File the report yourself when you can.

Photos or videos of you: X has a separate right-to-privacy rule for media of private individuals shared without consent. It requires a first-person report from the person shown, or an authorized representative like a parent, guardian, or lawyer. X says this rule doesn't apply to public figures or to media that's newsworthy or in the public interest.

Step-by-step: filing the report

Screenshot the post, the account's profile, and any replies that repeat your information. Copy the URL of every post. On X, open the post and use Share > Copy link. If the information was reposted or quoted, collect those URLs too.

Before you file

Option 1, from the post: Open the post, select the more (three-dot) menu, choose Report post, and pick the category that covers private information. X's reporting overview lists the in-app flows.

Option 2, the dedicated form: X's reporting page links to a private information report form, which works well when several posts are involved or you want to report as the owner of the information. The form includes a box confirming the report concerns your own private information, or information of someone you're authorized to represent. You can list multiple post URLs.

For the account itself: If the account exists mainly to post other people's private information, report the profile too. Open the profile, select the overflow menu, then Report. X's policy says accounts whose sole purpose is posting others' private information can be suspended.

What happens after you report

X says it acknowledges properly submitted reports within 24 hours. Reports are typically resolved within a few days, but some can take up to 30 days. Possible outcomes listed in the policy include requiring the post to be removed and putting the account in read-only mode for a time, with suspension for repeat violations.

X's reporting page also notes that you may be asked to allow X to share parts of your report with third parties, which can include the account you reported. Keep that in mind when deciding what to include.

If the post includes intimate images

Intimate images shared without consent fall under a separate X policy and under federal law. The TAKE IT DOWN Act requires covered platforms to remove these images, and known identical copies, within 48 hours of a valid request, whether the images are real or AI-generated. The FTC began enforcing that requirement on May 19, 2026, and accepts complaints when platforms don't act. This is general information, not legal advice.

Protect yourself while the report is pending

If your address or location is exposed and you feel unsafe, contact local police. A report on X doesn't replace that.
Tighten your own accounts: turn on two-factor authentication and consider protecting your posts temporarily.
Check whether the same information came from a people-search site. Doxxers often copy addresses and phone numbers from data broker listings, so removing those listings cuts off the source. See our personal information removal page.
Search your name on Google. If the post or a copy is indexed, Google's personal information removal policy lets you request removal of results containing things like your home address, phone number, and ID numbers.

When the report fails

If X decides the post doesn't violate the policy, it's usually because the information falls on the "not private" list: your employer, your name, or allegations about you. Re-reporting the same post under the same category rarely changes the outcome. Consider instead whether a different rule fits, like harassment or abusive behavior if the post is part of a targeted campaign. You can also focus on keeping the content out of search results, where most people would actually find it.

When outside help makes sense

One post with your phone number is usually a quick self-serve report. Outside help may be useful when your information keeps resurfacing across accounts and sites, when it's being fed by data broker listings you can't keep up with, or when X posts about you rank for your name. Our overview of removing results from Google Search is a good next read.

Want this handled for you? See our personal information removal service.