Online harassment makes time feel broken. Ten messages can arrive before you have finished reading the first one, and the platform may ask you to choose a neat report category while your body is already in emergency mode. That is a design failure, not a personal weakness.
The order below is a triage sequence: safety, capture, secure, block, report, support. You do not have to do all of this. Do what is possible today, preferably with another person beside you or taking over the screen for a while.
This article gives general safety information for a Germany/EU context. It is not legal advice for your specific case.
1. Safety: check whether this is only online
Start with the least technical question: could the person reach you, your home, your workplace, your school, or someone close to you?
Treat the situation as urgent if there are threats of physical violence, sexual violence, stalking, suicide coercion, extortion, publication of private information, or instructions for others to find you offline. Also treat it as urgent if the harasser names your address, workplace, commute, child care, appointment, or a place you regularly visit.
If there is immediate danger, call emergency services. In Germany, 110 reaches police and 112 reaches fire and medical emergency services. If violence against women is part of the situation and you need confidential support, the Hilfetelefon Gewalt gegen Frauen at 116 016 is an approved national support line. If you are not in immediate danger but feel overwhelmed or at risk of harming yourself, Telefonseelsorge can be reached at 0800 111 0 111 or 0800 111 0 222.
If the risk is not immediate, reduce the number of people who can be reached through you. Tell one trusted person what is happening. Consider whether your workplace reception, housemates, school office, or event organizers need a short warning: “Someone is harassing me online and may try to contact me through you. Please do not confirm my location or share my contact details.”
If this is racist online hate, the community context, hate-speech reporting choices, and specialist counselling questions are handled more fully by Equal Voices Initiative. If the harm is outing, doxxing, or threats tied to LGBTQ+ visibility, Queer Safety & Belonging Network owns that safety map. If the person targeted is a young person and adults are involved, Digital Dignity Lab has a separate youth-focused guide so adults do not seize control in ways that create more risk.
2. Capture: save enough before you block
Should you block before saving evidence? If you are in immediate danger, shaking, panicking, or at risk of replying in a way that could expose you further, block or mute first. Your safety is not less important than a perfect screenshot.
If you can safely capture first, save the material before it disappears. Platforms are very good at making harm feel temporary: stories expire, accounts rename themselves, messages can be deleted, and moderation queues may erase context while keeping no useful copy for you.
For a first pass, capture:
- The abusive message, post, profile, image, or comment.
- The username, display name, profile picture, account link, and any visible account ID.
- The date and time on your device.
- The surrounding thread or conversation that shows context.
- The URL in the browser address bar, if there is one.
- Any threat, demand, private information, or instruction to others.
Do not spend an hour building a perfect archive while abuse keeps hitting you. Take screenshots, record the links in a note, and move on to securing access. If you later need stronger evidence, Digital Dignity Lab’s evidence guide explains screenshots, exports, timestamps, secure storage, and chain of custody in detail.
If the content includes intimate images, private documents, medical information, or other extremely sensitive material, think before saving it on a shared phone or synced photo library. A screenshot that automatically backs up to a family cloud account can spread the exposure. If possible, store sensitive evidence in a locked folder, encrypted drive, or account only you control, or ask a trusted adviser to help you preserve it safely.
3. Secure: protect your accounts before the pile-on spreads
Harassment often comes with probing. Someone may try password resets, impersonation, message requests, or attempts to get friends to reveal information. Platform design keeps pushing “engagement”; your job is to interrupt access.
Change the password on the account being targeted if you suspect anyone else may know it, if you reused it elsewhere, or if there are signs of login attempts. Use a long, unique password. If you use a password manager, let it generate one. If not, a long passphrase is usually stronger than a short complicated word.
Turn on two-factor authentication, ideally with an authenticator app or hardware key rather than SMS where the platform allows it. SMS is still better than no second factor, but phone numbers can be targeted through SIM swap attempts or social engineering.
Check:
- Recovery email and phone number.
- Logged-in devices and active sessions.
- Connected apps and third-party permissions.
- Public profile fields, old usernames, and visible contact details.
- Whether location tags, workplace details, school information, or family links are public.
If you manage a page, group, campaign account, or organizational profile, add a second trusted administrator before you remove suspicious access. Many organizations discover too late that one volunteer’s compromised account was the only route into a public page. Organizations should also check who can publish, who can see messages, and where notifications are sent.
4. Block or restrict: reduce contact without negotiating
Blocking is not defeat. Muting, restricting, filtering words, limiting replies, and closing direct messages are safety tools. They are also a refusal to provide free attention to a person or group using the platform’s notification system as a delivery mechanism.
Choose the control that fits the risk:
- Mute when you need evidence to continue arriving but do not want notifications.
- Restrict when a platform lets you hide a person’s comments from others without alerting them immediately.
- Block when continued access is harming you or creating risk.
- Limit replies or comments when the abuse is coming through a public post.
- Make an account private temporarily if the account is personal and the cost of visibility is too high right now.
You are not required to debate, educate, warn, or give one final answer. Direct replies can create more screenshots for the harasser, confirm that they reached you, or pull you into a rhythm set by someone who is trying to exhaust you.
If friends want to defend you publicly, give them a boundary. Helpful support might be reporting, saving links, checking in, or posting one calm correction. A chaotic comment fight may increase visibility and bring new accounts into the abuse.
5. Report: use platform systems, but do not confuse them with care
Reporting can be useful. It can remove content, suspend accounts, create a record, and sometimes slow coordinated harassment. It can also be insulting: tiny boxes, wrong categories, automated refusals, and appeals that pretend context is an optional extra. If a platform’s report form feels badly designed for what happened, that is because many are.
Before reporting, keep your own copy of the evidence if you can. Some platforms remove reported content without giving you a usable record. Then choose the closest category: harassment, threats, impersonation, hate, non-consensual intimate content, private information, spam, or account compromise.
In the report text, be brief and concrete:
- “This account is sending repeated threats.”
- “This post includes my private address.”
- “This message is encouraging others to contact my employer.”
- “This account is using my name and photo without consent.”
If the platform allows attachments, include screenshots. If it allows only one category, pick the one tied to the most urgent harm. You can submit separate reports for separate pieces of content.
Under GDPR, you may have rights connected to your personal data, including access to data a platform holds about you and erasure of unlawful or unnecessary processing. In practice, those routes can be slow and formal. They can matter later, especially where private data is being exposed, but they are not a substitute for immediate safety steps.
Police or criminal-law routes may be relevant where there are threats, stalking, extortion, non-consensual intimate images, identity misuse, or serious hate content. You do not need to decide that alone tonight. A victim support service, anti-discrimination counselling service, women’s support service, or legal advice service can help you decide whether and how to use that route.
6. Support: hand parts of the task to other people
Harassment isolates by making every notification feel like something only you can understand. Break that pattern early.
Ask one person to sit with you. Ask another to collect screenshots. Ask someone else to monitor public comments for a fixed time. If you are part of an organization, ask a colleague to take over inbox duty or admin controls. If you are a public-facing worker, activist, journalist, student representative, creator, or community organizer, you may need a short internal plan: who checks threats, who responds publicly, who contacts venues or employers, and who tells you only what you need to know.
Use a simple message:
“I am being harassed online. I do not need advice about leaving the platform. I need help saving evidence, tightening privacy settings, and not handling this alone.”
If sleep, food, medication, child care, or work are already being affected, treat that as real harm. Online abuse is not imaginary because the delivery system is digital. A counselling service, Hausarzt practice, psychosocial advice center, victim support service, union representative, Betriebsrat, student advice service, or trusted community organization may be relevant depending on your situation.
For the next day, make the plan smaller than the problem:
- One account secured.
- One evidence folder started.
- One trusted person informed.
- One platform report sent.
- One block or restriction applied.
- One support contact identified.
That is enough for a first layer. The systems that allowed the harassment to arrive so easily will not be fixed by your perfect response. You are building enough safety and record-keeping to keep choices open. You do not have to do all of this; do what is possible today.
