

A foreigner’s address, phone number, passport information or other personal data is published online in Turkey. Learn when doxxing may constitute a crime, how to preserve digital evidence, request content removal and file a criminal complaint.
Publishing a foreign national’s private information online without permission can create serious criminal, privacy and personal-data issues in Turkey. Common examples include posting a person’s home address, telephone number, passport details, residence information, workplace, private photographs, identity documents or other personal information on social media, messaging groups, forums or websites. The term “doxxing” is not itself the name of a separate offence under Turkish criminal legislation. Instead, the legal characterization depends on what information was obtained, how it was obtained, how it was disclosed, the accompanying statements and whether the publication forms part of threats, harassment, stalking or another offence. A foreign victim should preserve digital evidence immediately and evaluate both criminal and urgent content-removal remedies.
There is no single offence formally titled “doxxing.” However, the conduct may fall within several provisions of Turkish criminal and personal-data legislation depending on the facts.
The decisive issue is therefore not whether an act is called doxxing online, but exactly what the perpetrator obtained, disclosed or threatened to disclose.
Turkish criminal legislation protects personal data against unlawful recording, acquisition and disclosure. Publishing or transferring another person’s personal data without lawful justification can potentially result in criminal liability.
The specific offence must be determined according to the nature of the information and conduct.
Potentially relevant information may include a foreigner’s home address, telephone number, passport number, residence information, identity documents, photographs, workplace, financial information or other information connected with an identified or identifiable individual.
The legal analysis can differ depending on the type of data involved.
Publishing someone’s residential address can expose the victim to physical harassment, stalking or threats.
If the address is published together with hostile statements encouraging others to approach the victim, the criminal-law analysis may extend beyond unlawful disclosure of personal data.
Posting a private telephone number publicly without authorization can potentially raise personal-data issues.
If publication results in repeated unwanted calls, threats or harassment, additional offences may need to be investigated separately.
A photograph or copy of a passport can contain substantial identifying information.
If a foreigner’s passport image is published online, the victim should preserve evidence immediately and consider whether additional protective measures are necessary because the information could potentially be misused.
A residence permit card or related immigration information may contain personal details that should not simply be distributed publicly.
Foreign nationals should preserve screenshots showing exactly what was published rather than merely recording the account name.
The method used to obtain the information can create separate legal issues.
For example, information obtained through unauthorized access to an account, device or digital system may require investigation of additional cyber-related offences.
A post containing an address together with statements such as threats to attack, harm or find the foreign national should be assessed urgently.
The disclosure of personal information and the threatening communication may constitute separate criminal conduct.
Repeated publication of location information, monitoring, contacting relatives or repeatedly exposing private information may form part of a broader pattern of persistent harassment or stalking.
The entire course of conduct should therefore be documented rather than filing a complaint based only on the most recent post.
A person may threaten to publish private information unless the foreigner pays money, ends a relationship, withdraws a complaint or performs another act.
In such cases, the issue may involve blackmail or another offence in addition to personal-data violations.
Online material can be deleted within minutes.
Take screenshots showing the account, username, date, content and surrounding context. Preserve messages, photographs, profile information and available timestamps.
Where possible, evidence should show how the material appeared before deletion or modification.
Keep original screenshots and files. Excessive cropping or editing can make later verification more difficult.
If an edited copy is prepared for presentation, retain the original separately.
Where the content appears across several posts, comments or profile sections, a screen recording can help demonstrate context.
Again, preserve the original file.
If the person threatened publication before actually posting the information, those communications can be important evidence of intention and chronology.
Do not delete the conversation after taking a single screenshot.
Doxxing frequently extends across several platforms. Maintain a chronological evidence file containing emails, direct messages, group messages and public posts.
Yes. Foreign nationality does not prevent a person from seeking protection under Turkish criminal law where the relevant conduct falls within Turkish jurisdiction.
Depending on the circumstances, a complaint may be made to the competent prosecutor’s office or law-enforcement authorities.
The complaint should clearly describe who published the information, what information was disclosed, where it was published, when it occurred, how the victim learned of it and what additional conduct accompanied the disclosure.
Attach the available digital evidence systematically.
An anonymous username does not necessarily prevent investigation.
The complaint should preserve all available identifiers, including username, profile information, account links where preserved in evidence, communications and any information connecting the account with a particular person.
Direct confrontation can cause the perpetrator to delete evidence, create new accounts or escalate harassment.
Evidence preservation and legal strategy should generally come first.
Potentially. Deletion does not necessarily eliminate all evidence of the conduct.
Previously preserved screenshots, witness evidence, platform records and other digital information may remain relevant.
During a criminal investigation, authorities may seek digital information through legally available investigative procedures where the requirements are satisfied.
The victim should provide every known account identifier to assist the investigation.
Cross-border cases can be more complicated, particularly where the account holder, platform or relevant electronic records are abroad.
Jurisdiction, international cooperation and evidence-access issues should be evaluated according to the particular facts.
A foreign victim does not necessarily have to abandon legal remedies merely because they have temporarily left Turkey.
Representation through a Turkish lawyer may be possible depending on the procedural step and circumstances.
Criminal investigation and removal of online content are separate issues.
Depending on the nature of the publication and platform involved, urgent mechanisms concerning removal of content, protection of personality rights or personal data may need to be considered alongside the criminal complaint.
If a home address or passport image is spreading rapidly, waiting for the entire criminal investigation to finish may not adequately protect the victim.
Immediate removal and protective options should therefore be assessed separately.
Platform reporting mechanisms can sometimes remove harmful content more quickly than formal proceedings.
Preserve evidence before requesting deletion because successful removal may eliminate the easiest publicly accessible copy.
Because doxxing frequently involves processing or disclosure of personal data, Turkish personal-data legislation may provide additional remedies depending on who processed the information and under what circumstances.
Criminal, data-protection and civil remedies should not automatically be treated as mutually exclusive.
Unauthorized disclosure can potentially interfere with privacy and personality rights.
Depending on the circumstances and proven harm, civil remedies including compensation may also need to be evaluated.
Potentially. The availability and amount of compensation depend on the circumstances, nature of the violation, harm suffered and applicable civil-law requirements.
A criminal conviction should not simply be assumed to be the only possible basis for protecting personality rights.
If an employer publishes a foreign employee’s personal information, the case may involve employment and data-protection obligations in addition to criminal-law questions.
The employment relationship does not create unrestricted authority to disclose employee data publicly.
Former spouses or partners sometimes publish addresses, private photographs, telephone numbers or immigration information following separation.
The existence of a previous relationship does not automatically authorize public disclosure of personal information.
Commercial disagreements do not justify exposing an opposing party’s private information.
If a customer, supplier or former business partner publishes personal data to pressure a foreign manager, both criminal and commercial consequences should be evaluated.
Foreign diplomatic or consular personnel who experience online exposure of personal information should consider both the ordinary legal remedies available in Turkey and any security procedures applicable through their mission.
Immediate safety concerns should be addressed without waiting for the completion of a criminal investigation.
Preserve evidence concerning each affected person.
Publication of information relating to spouses, children or relatives may create separate violations and can demonstrate the broader pattern of conduct.
Real-time or frequently updated location information deserves particularly urgent attention.
If publication creates a credible immediate physical danger, the victim should contact the competent authorities promptly rather than relying only on platform reporting.
A victim should not respond to doxxing by publishing the alleged perpetrator’s address, telephone number or private information.
Retaliatory disclosure can create a separate legal dispute and complicate the original complaint.
An effective file should show the progression of the conduct: first contact, threats, first publication, repeated disclosure, communications from third parties, content-removal requests and subsequent harassment.
Chronology can be particularly useful in demonstrating persistent conduct.
If friends, colleagues or relatives saw the posts before deletion, record who saw what and when.
Witness testimony can support digital evidence where the original publication later disappears.
Keep records of threatening calls, unwanted messages, security expenses, accommodation changes, workplace consequences or other harm following the disclosure.
These records may become relevant to both criminal and civil proceedings.
The victim should clearly explain the specific conduct rather than using only the term “doxxing.”
Identify the personal data disclosed, threats made, repeated harassment and resulting safety risks so that the relevant legal issues can be evaluated individually.
A foreign complainant who cannot adequately understand Turkish should ensure that language difficulties do not cause important facts to be omitted or misunderstood during the criminal procedure.
The complaint should accurately describe the digital evidence and chronology.
If the victim’s police or prosecutor statement is translated inaccurately or omits important facts, the issue should be raised before signing.
The written record should accurately reflect the complaint.
A foreign victim should immediately preserve screenshots and original digital files, record usernames and dates, save threats and private messages, document the personal information disclosed, preserve evidence before requesting platform removal, assess immediate physical-security risks, consider a criminal complaint, evaluate urgent content-removal and personal-data remedies, identify witnesses and preserve evidence of resulting financial or personal harm.
Not as a single offence under that name. The conduct may fall within offences concerning personal data and, depending on the facts, threats, blackmail, stalking, unauthorized digital access or other criminal provisions.
Yes. Foreign nationality does not prevent a victim from seeking protection under Turkish criminal law where Turkish jurisdiction applies.
Yes. Unauthorized publication of an identifiable person’s private address can raise serious personal-data, privacy and potentially criminal-law issues depending on the circumstances.
Deletion does not necessarily end the investigation. Previously preserved screenshots, witnesses and other digital evidence may remain relevant.
A fake username does not automatically prevent investigation. Preserve all account identifiers and evidence connecting the account with the conduct.
Unauthorized publication of passport information can create significant personal-data and privacy issues and should be addressed promptly.
Potentially. Content-removal and other urgent protective mechanisms can be considered separately from the criminal investigation.
Potentially. Civil remedies may be available where unlawful publication violates personality or privacy rights and causes legally compensable harm.
The threat should be documented separately and included in the complaint. The disclosure and threatening conduct may raise multiple criminal-law issues.
Preserve the online evidence before it disappears. Capture the complete context, account identity, dates, personal information disclosed and any accompanying threats before seeking removal or confronting the person responsible.
Doxxing cases involving foreign nationals may require rapid coordination of criminal complaints, digital evidence preservation, personal-data protection, content removal, stalking or threat allegations and civil compensation claims. Fırat Fesih Kaya Law Office assists foreign nationals facing unlawful disclosure of their personal information, online harassment and related criminal conduct in Turkey. Lawyer Fırat Fesih Kaya provides legal assistance in preserving and presenting digital evidence, filing criminal complaints, following prosecutor investigations, evaluating urgent protective measures and pursuing additional remedies arising from unlawful disclosure of personal data.
Phone: +90 312 434 22 22
Mobile: +90 532 769 22 22
Email: info@firatfesihkaya.av.tr
Address: Mevlana Boulevard No:221, Yıldırım Tower, Office No:148, 06520 Balgat, Çankaya, Ankara, Turkey