Online harassment has a strange way of making the “block” button look incredibly attractive.
Someone sends you a slur. Another person tells you to hurt yourself. A stranger makes a vague comment about knowing where you live. Your first instinct may be to block the account, delete the message, close the app, and get on with your day.
That instinct makes sense. Unfortunately, it can also destroy information you may want later.
For transgender people who spend any meaningful amount of time online, knowing how to preserve digital harassment is becoming a basic cybersecurity skill. You don’t have to treat every troll like you’re starring in an episode of CSI: Internet. But when harassment becomes persistent, threatening, personal, or frightening, keeping good records can make it much easier to demonstrate what actually happened.
The basic rule is simple: document first, report second, block third.
There are exceptions, especially when immediately disengaging is necessary for your safety or mental health. But when possible, take a few minutes to preserve the evidence before making the offender disappear from your screen.
Not Every Nasty Comment Is the Same
The internet contains an impressive supply of people behaving badly. Most of them are annoying rather than dangerous.
A stranger saying your makeup looks terrible is rude. Someone deliberately misgendering you is harassment in the everyday sense of the word, but depending on where you live, it may not meet a legal definition of harassment. Someone repeatedly creating new accounts to contact you after being blocked is considerably more concerning.
Then there are threats.
Statements suggesting violence, revealing knowledge about your location, threatening family members, publishing private information, or encouraging other people to target you should receive a different level of attention.
Context matters.
One isolated insult from an anonymous account with three followers is different from 30 messages sent over several weeks. “I hate people like you” is different from a message containing your home address. A person saying “someone should punch you” is different from someone describing when and where they intend to attack you.
You don’t need to determine the precise legal category before preserving something. If a message makes you think, I might need to prove this happened later; save it.
Storage is cheap. Regret is considerably more expensive.
Start With Screenshots, But Don’t Stop There
Screenshots are the easiest form of documentation, and they are better than nothing.
Take screenshots showing the complete message whenever possible. Include the sender’s username, profile image, date, and time if the platform displays them. Then zoom out.
A screenshot containing only one threatening sentence can lose important context. Capture the messages immediately before and after it. If the harassment happened underneath one of your posts, preserve the original post and the surrounding conversation.
Also capture the person’s profile. Usernames can be changed. Profile pictures disappear. Accounts get suspended. Bios are rewritten. An account called @DefinitelyNotATroll today may have an entirely different identity tomorrow.
Save screenshots showing the display name, username or handle, profile URL when available, bio, and other identifying information that is publicly visible. If the platform displays when the account was created, preserve that too.
Do not edit the original screenshots. You can make redacted copies later if you need to share them publicly, but keep untouched originals somewhere safe.
Screen Recording Can Capture What Screenshots Miss
For a long conversation, dozens of individual screenshots can become confusing. Screen recording can help.
Most modern phones include built-in screen-recording tools. Start recording, open the person’s profile, and slowly scroll through the conversation. Show enough of the interface to establish which platform you’re using and which account sent the messages.
Don’t race through it like you’re speedrunning TikTok. The goal is to create a record another person can understand without you standing beside them explaining every screen.
Screen recordings are particularly useful when messages are disappearing, when a user has sent numerous messages or when the platform’s interface makes dates and account information difficult to capture in one screenshot.
Again, preserve the original file.
Save the URL
This takes seconds and is frequently forgotten. Copy the URL for the offending post, profile, comment, or message whenever the platform allows it. A screenshot shows what you saw. A URL identifies where you saw it.
For public posts, that can help a platform moderator, attorney, journalist, or investigator locate the original content if it still exists. Save URLs in a simple document alongside a description of what happened. For example:
August 26, 2026, 9:42 p.m. – Account posted my photograph with a threatening caption. Screenshot saved as IMG_4821. Original URL: [saved separately].
Congratulations. You have created an incident log. It isn’t glamorous, but neither is changing every password you own because some weirdo decided your existence was their new hobby.
Keep an Incident Log
Repeated harassment becomes much easier to understand when it is documented chronologically. You don’t need specialized software. A spreadsheet, notes app, or text document works.
Record the date and time, platform, username, what happened, any URL associated with the incident, what evidence you saved, and whether you reported it.
Also note anything that connects separate accounts.
Suppose you block someone on X and 20 minutes later a newly created Instagram account sends you a message referring to the conversation. Write that down.
Individually, those incidents may look unrelated. Together, they can demonstrate a pattern. Patterns matter because persistent harassment often looks less serious when each incident is examined in isolation.
One message.
One comment.
One new account.
One email.
Put 40 of them in chronological order, and suddenly the picture looks very different.
Preserve Emails Differently
If harassment arrives through email, don’t rely exclusively on a screenshot.
Emails contain technical information in their headers that isn’t normally visible when reading a message. Depending on the service, headers can contain information about the servers involved in delivering the email and other technical details.
Most major email services provide an option to view the original message, message source, or full headers.
You don’t need to understand what all of it means.
Save it anyway.
If your email provider allows you to download the original message as an EML or similar file, consider doing that as well. Keep the original email rather than immediately deleting it after taking a screenshot.
And resist the urge to start playing amateur cyber-detective.
An IP address or strange-looking email header is not an invitation to hunt someone down. Technical information can be misleading, masked, or interpreted incorrectly. Preserve it so someone qualified can examine it if that ever becomes necessary.
Don’t Crop Away Useful Information
We crop screenshots constantly because we’re accustomed to posting them online. Evidence is different.
The clock at the top of your phone, the app interface, surrounding messages, and other seemingly boring details can help establish context. Keep the full original.
If you later want to post the harassment publicly, create a duplicate and redact personal information from that version.
Be particularly careful about accidentally exposing your own email address, phone number, location, children’s names, workplace information, or other details while attempting to call attention to someone else’s behavior.
Nothing says “the internet was a mistake” quite like accidentally doxxing yourself while posting about someone trying to dox you.
Back It Up Somewhere Else
If everything is stored on the same phone where the harassment occurred, you don’t really have a backup. Phones break. Accounts get compromised. Files get accidentally deleted.
Create at least one additional copy.
That might mean encrypted cloud storage, an external drive, or another secure location you control. For particularly serious incidents, having two backups isn’t unreasonable.
Organize files by date rather than dumping 147 screenshots into a folder called “Troll BS.”
Something like 2026-08-26_ Instagram_Message_01.png is far easier to work with six months later. You are building a timeline, not a junk drawer.
Report Before You Block
When practical, report the offending content through the platform before blocking the account. Why?
Because blocking can sometimes make messages, comments, or profiles more difficult for you to access afterward. Platform interfaces also change, so you shouldn’t assume you’ll be able to retrieve everything later.
Preserve your evidence, submit the platform report, and save confirmation that you made the report. If the platform gives you a case number or sends an email confirming your report, keep that too.
Then block.
You are under absolutely no obligation to continue interacting with someone because you’re collecting evidence. In fact, engaging can make matters worse.
Don’t threaten them back. Don’t try to bait them into saying something more extreme. Don’t announce that you’re documenting everything in hopes of frightening them.
Save it. Report it. Block them. Let them scream into the digital void.
When Harassment Starts Getting Personal
Certain developments should raise your level of concern.
Someone mentioning your home address, workplace, or daily routine deserves attention. So does someone repeatedly circumventing blocks, contacting relatives, impersonating you, publishing private information, or moving across multiple platforms to continue contacting you.
Threats involving specific places or times can be particularly concerning.
If someone goes from “I hate trans people” to referencing the coffee shop you visit every morning, the situation has changed.
Your response should change with it.
Consider telling someone you trust what is happening. Review what personal information is publicly available about you. Tighten account security and enable multi-factor authentication.
If you believe there is an immediate threat of violence, contact emergency services or appropriate local authorities rather than spending another hour organizing screenshots.
Digital hygiene matters. Physical safety matters more.
Don’t Turn Documentation Into Doomscrolling
There is another side to all of this. Documenting harassment shouldn’t require you to repeatedly reread abuse directed at you.
Once you’ve preserved what you need, put it away.
If the harassment is extensive, consider asking a trusted friend to help organize the material. They may be able to maintain the incident log or monitor an account while giving you some distance from the garbage.
You are not required to absorb every hateful thing strangers decide to type about you. Blocking isn’t weakness. Muting isn’t surrender. Taking a day away from social media doesn’t mean the trolls won.
Cybersecurity is partly about protecting data and accounts.
It’s also about protecting the human being sitting behind the screen.
The Bottom Line
Transgender people are frequently given remarkably bad advice about online harassment: just get offline. No. The solution to harassment cannot be telling the people being harassed to disappear.
Trans people have every right to post selfies, run businesses, make videos, argue about movies, share transition milestones, complain about politicians, show off questionable fashion purchases, and participate in the same messy internet everyone else gets to use.
Being visible does carry risks, and understanding those risks is not paranoia. It’s preparation.
Most obnoxious comments will never become anything more than obnoxious comments. You don’t need to create a federal case file every time somebody with an anime avatar calls you a man.
But sometimes a message crosses a line. When it does, don’t depend on the platform to remember it for you. Take the screenshot. Capture the profile. Save the URL. Preserve the original. Write down when it happened. Back everything up.
Then report, block, and get back to living your life. Because if someone’s hateful little DM ever becomes something more serious, “I know they sent it” isn’t nearly as useful as “here’s the evidence.”
