WHALE SAFETY FIELD GUIDE

Respond to doxxing blackmail and suspicious officials

Separate a remote scam, a credible physical threat and a real legal process. The response to one should not be blindly applied to the others.

Doxxing or a targeted threat

Save the content, account details, time and context without replying publicly. Record whether it exposes a home, school, routine, phone number or financial link. If there is immediate danger, contact emergency services and move to a safer location if possible.

Report the content through the platform's legitimate process and obtain professional assessment when threats are specific or persistent. Review exposed household access and routines. Do not publish a rebuttal that confirms private information or starts an argument with the threat actor.

Blackmail or intimate image threats

Preserve evidence, secure affected accounts and seek local police and specialist support. Do not send more images, grant account access or assume a payment will stop the demands. If the person knows your location or threatens physical harm, treat that as a personal safety issue as well as an online incident.

Support the affected person without blame. Limit who receives sensitive material and do not circulate it in family or work chats. Consider a lawyer's advice on reporting, privacy and evidence preservation.

An official contacts you remotely

Pause before disclosing information. Independently contact the relevant agency, mission, bank or court through a verified channel. A genuine official may contact someone, but a demand to move assets, disclose recovery words, install remote software or isolate yourself requires scrutiny. [S18] [S30]

Do not accept a callback number supplied only by the caller as verification. Do not assume an email address, caller ID or uniform in a video is proof of identity.

Officials are physically present

Do not apply “hang up on scammers” advice to an actual police encounter. Remain calm, avoid physical resistance, ask for identification and the reason when safe, and request an interpreter or lawyer where available. Follow lawful instructions and seek clarification through legitimate channels.

Do not delete data, coordinate false accounts of events or pay an unofficial fixer. Record what occurred when lawful and safe, and contact the appropriate legal and consular resources for your status.

Bilingual boundary for a remote request: “I will verify this through the official published contact details. I will not transfer money or provide account access on this call.”

“我会通过官方公布的联系方式核实。此次通话中,我不会转账,也不会提供账户访问权限。”

Keep the outcome private: after a threat, give your team the operational changes they need. Do not broadcast the new home, hotel, route or recovery arrangement.

Find your next step.

Search 50 cities, 54 chapters and ten case studies, or explore the incident register.

Search the full incident register
CITYDubai · United Arab EmiratesCITYAbu Dhabi · United Arab EmiratesCITYHong Kong · Hong KongCITYMacao · MacaoCITYSingapore · SingaporeCITYTokyo · JapanCASECher, France · Taken from home. Held apart.CASEParis, France · The family became the target.CASEHong Kong · A trade invitation became captivity.CASEPunggol, Singapore · A Telegram offer. A bag of cash.01Start here02Emergency numbers and bilingual card03Decide how much protection you need04Map your exposure without creating a target list05Reduce what strangers can learn06Separate daily spending from long term reserves07Make signing a deliberate activity08Backups and inheritance without new vulnerabilities09Secure phones accounts and communications10Recognise manipulation before money moves11Give family and staff a usable role12Make home entry predictable and controlled