← Back to Research
LEGAL CONCEPTS · ESQURINE EXPLAINER

Online Shaming, Doxxing and the Law in Singapore

When does exposing someone’s behaviour become unlawful harassment or doxxing? Explore accountability, online safety and the limits of public call-outs.

Updated October 2026 · About 12 min read

1. Overview

A video of rude behaviour goes viral. A screenshot of a heated exchange is posted with the caption “everyone should know who this is”. Within hours, strangers have found the person’s workplace, their family and their address. For many people, this is what online accountability looks like. For the law, it raises a hard question: where does a legitimate call-out end and unlawful conduct begin?

There is no single law called “online shaming”. Instead, several areas of Singapore law apply depending on what was posted, why, and what happened as a result. These include the Protection from Harassment Act 2014 (POHA), the Online Safety (Relief and Accountability) Act 2025 (OSRAA), the law of defamation, and rules on personal data and contempt of court.

Why it mattersSocial media disputes, viral accusations and personal information shared online can lead to criminal charges, court orders, civil claims and takedown directions. They can also cause lasting harm to the person targeted, whether or not the accusation is true.

At a glance

  • Doxxing is an offence. Since 1 January 2020, publishing identifying information with the relevant intent can be a criminal offence under POHA.
  • Truth is not a complete shield. A post can be accurate and still amount to harassment or doxxing if the required intent and effect are shown.
  • There is a dedicated body. The Online Safety Commission began operations on 29 June 2026 to help victims of online harms.
  • Several laws overlap. One post can raise criminal, civil and regulatory issues at the same time.

2. Define the terms

People use these words loosely online. The law is more precise, so it helps to separate them.

TermWhat it generally meansIs it a legal category?
Online shaming or call-outPublicly criticising or exposing someone’s behaviour to an online audience.No. It is everyday language, and legality depends on the content and the conduct.
DoxxingPublishing a person’s identifying or personal information, such as their address, workplace, phone number or family details, usually to cause harm.Yes. It is addressed under POHA and the OSRAA.
Online harassmentConduct online that is threatening, abusive or insulting, or otherwise causes harassment, alarm or distress.Yes, under POHA and the OSRAA.
DefamationA false statement that damages someone’s reputation.Yes. It is mainly a civil claim, and criminal defamation also exists.

3. Five questions that decide whether a post crosses the line

Whether a post is lawful depends on the facts, but the same questions tend to come up. Think of them as a checklist, not a verdict.

  1. Does the post reveal identifying or personal information?Names, faces, addresses, phone numbers, workplaces, schools and family members can all point to a real person and make them targetable.
  2. What was the purpose?Intent matters. The doxxing offences require specific intentions, such as causing harassment, alarm or distress, or causing fear of violence.
  3. What was the effect?Did the person, or someone close to them, suffer harassment, alarm or distress, or fear of violence? Harm to family and colleagues can count.
  4. Is it fact, opinion or guesswork?Reporting verifiable facts, offering honest opinion and guessing at someone’s identity are very different. Misidentifying the wrong person can add serious legal risk.
  5. Is the response proportionate?Even a legitimate complaint can become unlawful if it turns into a campaign that encourages others to pile on, contact the person’s employer or turn up at their home.

4. The legal framework

Protection from Harassment Act 2014 (POHA)

POHA is the main criminal and civil law on harassment. Since 1 January 2020, it has specifically covered doxxing. Under section 3, it can be an offence to publish identifying information about a person, or someone related to them, with the intention of causing harassment, alarm or distress, where that harm results. Under section 5, publishing such information with the intention of causing fear of violence, or facilitating violence, can also be an offence. Penalties include fines and imprisonment, and the exact range depends on the provision, so check the current Act.

POHA also provides civil remedies, including protection orders that can require a person to stop publishing material, and expedited orders in urgent cases. The Protection from Harassment Courts hear many of these applications.

Online Safety (Relief and Accountability) Act 2025 (OSRAA)

The OSRAA is Singapore’s newest framework for online harms. It created the office of the Commissioner of Online Safety, supported by the Online Safety Commission (OSC), which began operations on 29 June 2026. In its first phase, the OSC supports victims of five harms: online harassment (including online sexual harassment), doxxing, online stalking, intimate image abuse and image-based child abuse. The Commissioner can issue directions to stop or limit online harm. The Act also created statutory torts, which give victims a route to civil claims, and sets out duties for communicators, administrators of online groups and pages, and online service providers.

It is worth noting how the process differs by harm. For online harassment and stalking, a victim generally reports to the platform first. For doxxing, intimate image abuse and image-based child abuse, a victim can approach the OSC directly. The OSC’s current scope and procedures are best checked on its official website. POHA remedies, including protection orders, remain available alongside the new framework.

Early figures show how common doxxing is. The OSC reportedly received more than 500 reports in its first two months, with doxxing the largest category (Bernama report).

Defamation

If a post makes a false statement that harms someone’s reputation, the person can sue for defamation. Defences include justification (the statement is substantially true), fair comment (honest opinion on a matter of public interest, based on true facts) and privilege in specific situations. A post that is true can still breach POHA, so defamation is only one part of the picture.

Personal data and other laws

The Personal Data Protection Act 2012 mainly regulates organisations, although individuals can face liability in specific situations, such as improperly obtaining or disclosing personal data from an organisation. Commenting on pending court proceedings or attacking the judiciary can also raise contempt of court issues. Other laws, such as those on falsehoods or on intimate images, may apply in particular cases.

5. Call-out or doxxing? Some illustrative scenarios

These are simplified examples, not predictions. Real outcomes depend on the exact words, the context and the evidence of intent and effect.

ScenarioWhy it may be riskyLegal pressure points
Posting a video of a dispute with no names, and a factual description of what happened.Lower risk, but others may identify the person and pile on.Defamation if inaccurate; harassment if it invites abuse.
Posting a person’s photo, home address and workplace, and urging followers to “let them know how you feel”.Reveals identifying information and encourages targeting.POHA doxxing and harassment provisions; OSRAA directions and torts.
Guessing who is behind an anonymous account and naming them publicly.The guess may be wrong, and a wrongly named person can be harmed.Defamation, harassment and doxxing.
Criticising a business’s service in a review, based on your own experience.Generally legitimate if it is honest and factual.Defamation risk if the claims are false or exaggerated.
An administrator of a large group allows harassing posts about a named person to continue.Administrators now have responsibilities.OSRAA duties for administrators.

6. If you are the one being targeted

Being exposed online can be frightening and exhausting. These steps are a general guide, and the current procedures should be checked on official sites.

  1. Stay safe and keep a recordIf you feel physically unsafe, call 999. Save screenshots, links, dates and usernames before content is deleted.
  2. Report to the platformMost platforms have processes to remove content that breaches their rules. For online harassment and stalking, a platform report is generally the first step under the OSRAA framework.
  3. Consider reporting to the Online Safety CommissionFor doxxing, victims can approach the OSC directly. Eligibility rules apply, including that the OSC currently supports Singapore citizens and residents.
  4. Consider POHA remediesYou may be able to apply for a protection order or take other steps under POHA, and police reports can be made for criminal conduct.
  5. Get advice and supportA lawyer can explain your options, including civil claims. Speak to someone you trust about the stress this can cause.

7. If you have posted or shared something

If someone says your post is harassment or doxxing, or you realise it went too far, the safest course is usually to stop, take it down, avoid further commentary and get legal advice before engaging with the other person. Deleting a post does not necessarily erase the legal consequences of what has already happened, but continuing or escalating can make matters worse.

8. Common misunderstandings

Select a statement to see what the law more accurately says.

“It’s true, so it’s legal.”

Truth can be a defence to defamation, but it does not automatically protect a post from POHA. Publishing accurate personal information with the intention of causing harassment, alarm or distress can still be an offence.

“The information was already public.”

Information being available somewhere does not mean compiling and publishing it is lawful. Gathering scattered details into one post can itself cause harm.

“I only reshared it.”

Resharing or amplifying content can create its own legal risk, depending on what you add, your purpose and the effect. Each case turns on its facts.

“It was in a private group chat.”

Privacy settings do not remove legal responsibility. Harassing messages can be covered even if shared in a closed group, and group administrators now have duties under the OSRAA.

“I blurred the face and used initials.”

Anonymising may reduce risk, but if other details still identify the person, the harm can remain. The test is whether the person is identifiable and what effect the post has.

“Deleting the post fixes everything.”

Deletion helps, but screenshots may already exist, and legal consequences for what was already published do not necessarily disappear.

9. Accountability without crossing the line

People have good reasons to speak up about bad behaviour, from poor service to unsafe conduct. The law does not prevent honest criticism, and some issues are better handled through formal channels such as the police, an employer, a regulator or a consumer body. If you do post publicly, a few habits lower the risk.

10. Key takeaways

11. Sources and further reading

  1. Singapore Statutes Online — read the current Protection from Harassment Act 2014 and the Online Safety (Relief and Accountability) Act 2025.
  2. Online Safety Commission — official information on reporting online harms.
  3. Ministry of Law: Online Safety — guidance for victims and details on the new framework.
  4. Ministry of Law press release — the announcement that the Online Safety Commission would begin operations on 29 June 2026.
  5. Singapore Courts — official information on court processes, including harassment applications.

This article is for general educational purposes only and is not legal advice. Verify current law and original sources before relying on this explanation. The law on online harms is developing quickly, so check official sources for the latest scope and procedures.