DOCUMENT FIRST, INTERPRET LATER

There is a particular kind of modern nightmare that begins innocently enough.

Someone makes a comment about you. Then someone else repeats it. A friend asks an oddly specific question. A colleague suddenly behaves differently. You notice that people who have never met one another appear to know the same strange version of a story about you. A fake account appears. An old photograph resurfaces. Someone starts dropping hints about your private life in public posts.

And then comes the most unsettling question of all:

Am I actually being targeted, or am I imagining this?

That question matters because gossip is slippery. One nasty comment is not necessarily a campaign. People misunderstand one another. Algorithms produce coincidences. Friends talk. Someone can dislike you without conducting an organised campaign against you.

But harassment can also be deliberately designed to make you doubt your own perception.

The safest approach is therefore neither “everyone is out to get me” nor “I must be imagining it”.

It is: document first, interpret later.

The distinction is important. You do not need to prove a conspiracy before you are entitled to take sensible precautions.

What does an online gossip campaign actually look like?

A campaign may be surprisingly unsophisticated. It does not necessarily involve a sinister mastermind sitting behind six computers.

It can consist of one person repeatedly feeding information, insinuations or accusations to different audiences: friends, relatives, colleagues, professional contacts, neighbours, online followers or members of a community.

Sometimes the campaign is entirely online. Sometimes online activity is simply the visible part of something happening offline.

Look for patterns rather than isolated incidents.

Possible warning signs include:

• Several people suddenly repeating substantially the same unusual allegation about you.
• People knowing private information you have not told them.
• Anonymous or newly created accounts repeatedly mentioning you.
• Someone contacting people in your professional or social network about you.
• Old photographs, posts or personal information being resurrected and reframed.
• False claims appearing repeatedly across different platforms.
• People who have never previously interacted with one another appearing to have received the same story.
• Someone impersonating you or creating accounts resembling yours.
• A sudden increase in hostile comments, reviews, messages or mentions.
• Attempts to provoke you into an angry public response.
• Threats, sexualised material, intimate photographs or personal information being circulated.
• Your workplace, clients, family members or friends being contacted.
• Your physical movements, home, workplace or daily routine appearing to be known by someone who should not know them.
• The behaviour continuing after you have clearly asked for it to stop.

South Africa’s Department of Justice specifically recognises that harassment can include persistent or serious unwanted conduct, including spreading malicious rumours, persistent criticism, public humiliation and cyber-stalking.

The Protection from Harassment Act is particularly relevant because its definition of harassment is deliberately broader than the old-fashioned picture of a stalker lurking outside someone’s house. It includes direct and indirect conduct and specifically recognises electronic communication.

In other words, “but nobody has physically touched me” is not necessarily the end of the story.

How do you know you aren’t being paranoid?

This is the question people are often afraid to ask.

The answer is not to become your own private detective and start interpreting every raised eyebrow as evidence.

Instead, separate facts from interpretations.

Write:

“Sarah told me on Tuesday that Jane had said X.”

rather than:

“Sarah is obviously part of Jane’s campaign.”

Write:

“A new Instagram account mentioned a private incident that only three people knew about.”

rather than:

“Jane must have hacked my phone.”

The first statements are observations. The second are conclusions.

That distinction protects you.

Try the three-source test

For anything that concerns you, ask:

1. What did I actually observe?

2. Is there independent corroboration?

3. Is there another plausible explanation?

Suppose three acquaintances independently tell you that someone has been saying you stole money from a business.

That is worth documenting.

It still does not prove that one person has organised a campaign.

But if you then discover that the same allegation has appeared in an online review, an anonymous Facebook post and an email sent to one of your clients — particularly if the wording is strikingly similar — you now have something much more concrete to investigate.

The goal is not to prove your theory.

The goal is to establish what happened.

The first rule: don’t react publicly

This is extraordinarily difficult.

Someone says something outrageous about you and every cell in your body wants to respond:

“THIS IS A LIE.”

Resist.

A furious public response can give the story a second life. It may also provide your antagonist with precisely the material they were trying to provoke.

South African Police Service guidance on cyberbullying similarly advises victims not to retaliate and to save evidence before blocking or otherwise dealing with the perpetrator.

You do not have to defend yourself against every accusation on the internet.

Sometimes the strongest response is no response at all — while you quietly preserve the evidence.

Do this immediately: start an evidence file

Think of this as your case file, not your diary.

Create one folder somewhere secure.

Inside it, create a chronological document with:

Date | Time | Platform | What happened | Who was involved | Evidence | Witnesses | Action taken

Then preserve:

• screenshots;
• URLs;
• usernames and profile names;
• dates and times;
• emails;
• text messages;
• WhatsApp messages;
• voicemails;
• photographs;
• copies of posts;
• comments;
• reviews;
• fake profiles;
• messages sent to third parties;
• letters;
• relevant call records;
• names of witnesses;
• and anything showing the sequence of events.

Do not rely on screenshots alone. Keep the original message, email or file where possible.

And do not edit the evidence.

If you crop a screenshot to make it easier to understand, keep the uncropped original too.

The US-based Stalking Prevention, Awareness & Resource Center (SPARC) recommends maintaining a detailed incident log precisely because patterns can become important when a victim later seeks assistance from police or the civil or criminal justice system.

This is one of those occasions when boring administration is your friend.

Don’t investigate by hacking back

If you suspect that someone has accessed your accounts, do not attempt to break into theirs.

Do not create fake accounts to spy on them.

Do not install spyware on their phone.

Do not threaten them.

Do not encourage friends to harass them.

Do not publish their private information in retaliation.

You are trying to move from the position of person being targeted to person with a documented case.

Don’t sabotage that position by creating another case.

Instead:

• change passwords;
• enable two-factor authentication;
• check account recovery details;
• review logged-in devices;
• remove unknown sessions;
• check email forwarding rules;
• review privacy settings;
• back up important information;
• and consider having a reputable IT professional examine compromised devices.

SAPS advises people to protect sensitive data, back up important information, use appropriate privacy settings and report suspected computer crime, identity theft and other illegal internet activity to the police.

Should you confront the person?

Sometimes. Often not.

There is no universal rule.

If you know who is responsible and the behaviour is relatively minor, a single calm written message may be appropriate:

“I am aware of statements being circulated about me. They are untrue. Please do not contact me or third parties about me again.”

Then stop.

Do not enter into a 47-message argument.

Do not send paragraphs explaining your entire life.

Do not threaten them with prison, lawyers, lawsuits, exposure or revenge.

And do not repeatedly demand that they admit what they have done.

If the person is volatile, threatening, obsessive or already escalating, do not confront them simply because you feel you need closure.

Your safety is more important than getting someone to confess.

SPARC’s guidance similarly emphasises safety, documentation and preserving evidence rather than trying to control the stalker’s behaviour.

When gossip becomes defamation

Not every unkind statement is defamation.

But gossip can cross a very important legal line when false statements are published to other people and damage someone’s reputation.

South African courts have repeatedly recognised that social-media publication can constitute publication for purposes of defamation.

In Garbade v Jan Van Niekerk, for example, the KwaZulu-Natal High Court dealt with defamatory material published on Facebook.

More recently, South African courts have continued to deal directly with defamatory social-media publications. In Mkhwanazi v Mathibeli, the KwaZulu-Natal High Court ordered the removal, deletion and retraction of defamatory publications from social media and other digital platforms.

And in Mbalula v Mda, the Gauteng High Court dealt with repeated defamatory social-media allegations and granted an interdict.

The important lesson is this:

“It was only a Facebook post” is not a legal defence.

Nor is:

“I only sent it to a few people.”

Publication to other people is precisely what makes reputational harm possible.

But there is another important qualification: do not assume that something is defamatory simply because it is offensive or because it hurts your feelings.

South African defamation law balances reputation and dignity against freedom of expression, and questions such as truth, public interest, opinion, privilege and reasonableness can matter.

That is why a lawyer should assess the actual words, context and evidence before you start firing off legal threats.

What about doxxing and private information?

If somebody begins publishing your:

• home address;
• telephone number;
• email address;
• workplace;
• location;
• financial information;
• private correspondence;
• photographs;
• identifying information;
• or other personal data,

treat the situation as a security problem, not merely a reputational one.

South Africa’s POPIA defines personal information broadly, including addresses, telephone numbers, location information, online identifiers, financial and employment information and private correspondence.

The question then becomes not simply:

“What are they saying about me?”

but:

“What could someone do with the information they are publishing?”

If someone has published your home address alongside threats, for example, that requires a very different level of response from somebody posting a nasty opinion about your haircut.

When should you go to the police?

Don’t wait for the situation to become cinematic.

Go to the police when there is a potential criminal offence, a threat to your safety, stalking or harassment, unauthorised access to accounts or systems, identity-related crime, extortion, threats of violence, intimate-image abuse or other conduct that warrants investigation.

South Africa’s Cybercrimes Act 19 of 2020 creates offences relating to various forms of cybercrime and specifically includes malicious communications, including data messages that threaten people with violence or damage to property and disclosure of intimate images.

The Protection from Harassment Act is also particularly important in cases involving stalking and harassment. The Department of Justice notes that a victim of cyber-stalking can apply for an interim protection order, including in circumstances where the alleged stalker’s identity is not yet known.

If there is immediate danger in South Africa, SAPS says to call 10111. For a non-emergency complaint, go to your nearest police station.

And when you report something, ask for the CAS number and keep it with your evidence file. SAPS explains that reported crimes are registered on its Crime Administration System and that the complainant receives a CAS number for future enquiries.

Don’t simply show an officer 300 screenshots on your phone and say, “Look at what they’ve done.”

Prepare a concise chronology.

What happened. When. Where. Who was involved. What evidence exists. What harm occurred. Why you believe there is an ongoing risk.

Make it easy for another person to understand.

When should you speak to a lawyer?

Earlier than you might think.

You do not necessarily need to sue.

A lawyer can help you determine whether the appropriate response is:

• a demand to stop;
• a takedown request;
• a retraction;
• a defamation claim;
• an urgent interdict;
• a harassment protection order;
• a criminal complaint;
• preservation of evidence;
• correspondence with a platform or service provider;
• or simply doing nothing while continuing to document the behaviour.

This is particularly important when the allegations concern your employment, business, professional reputation, children, finances or personal safety.

And if you are considering sending a formal demand, have the letter reviewed first.

A badly drafted “cease and desist” letter can sometimes make the situation worse.

Don’t underestimate the audience

One of the peculiarities of online gossip is that the original post may not be the greatest danger.

The greater danger can be republication.

A person tells ten people.

Two of those people tell another ten.

Someone posts a screenshot.

Someone else repeats it as fact.

A stranger discovers the post six months later and republishes it.

Suddenly the original source is almost irrelevant.

South African courts have recognised that online publication can have serious reputational consequences, and recent cases have included orders requiring defamatory material to be removed from digital platforms.

This is why the instruction “don’t make it bigger by talking about it” needs a qualification.

You may need to tell people.

Just tell the right people.

Your lawyer.

The police.

Your employer, if relevant.

A trusted family member.

A professional adviser.

A counsellor.

Perhaps one or two people who can corroborate what they have seen.

You do not need to turn your Instagram account into a courtroom.

What not to do

If you believe you are the subject of a gossip or harassment campaign, avoid:

The counter-campaign.
Don’t start telling everyone what the other person has allegedly done.

The public courtroom.
Don’t post your entire defence on Facebook.

The rage reply.
Assume anything you write may eventually be read by a lawyer, police officer or judge.

The amateur hacking operation.
Don’t attempt to access someone else’s accounts.

The evidence destruction.
Don’t delete everything because you are embarrassed.

The obsessive monitoring.
Checking someone’s accounts every fifteen minutes is unlikely to make you safer.

The assumption of certainty.
A pattern can be real while your explanation of who is behind it is wrong.

That last one is especially important.

You can say:

“Something unusual is happening and I am documenting it.”

without saying:

“I know exactly who is responsible and why.”

That is not weakness.

It is disciplined thinking.

Your emergency folder

If you think something is developing, create a folder today.

Call it something boring:

Personal Records — 2026

Inside it, keep:

1. Chronology
2. Screenshots
3. Original messages
4. Emails
5. Social-media URLs
6. Witnesses
7. Police reports / CAS numbers
8. Legal correspondence
9. Account-security records
10. Notes of telephone conversations

Keep a backup somewhere that the suspected perpetrator cannot access.

If you are dealing with sophisticated digital harassment or suspected account compromise, consider getting professional digital-forensic assistance rather than trying to investigate the technology yourself.

Finally: take yourself seriously — but stay evidence-led

There are two equally dangerous extremes.

The first is:

“It’s nothing. I’m being ridiculous.”

The second is:

“Every strange event is proof of the campaign.”

Neither is useful.

A better position is:

“I don’t yet know everything that is happening. But I know what I have observed, I am going to document it, secure myself, and get appropriate advice.”

That gives you something invaluable in a frightening situation:

agency.

You don’t have to win the argument on social media.

You don’t have to persuade every gossip that you are innocent.

You don’t have to identify the perpetrator tonight.

You need to protect yourself, preserve the evidence, establish what actually happened and choose the appropriate response.

And if the situation has moved beyond ordinary unpleasantness into harassment, stalking, threats, cybercrime or serious reputational damage, get professional advice before improvising your own legal strategy.

For South African readers dealing with digital harassment, online reputation issues, cyberbullying, privacy or other technology-related legal problems, The Digital Law Co https://www.thedigitallawco.com/ is a useful place to start.

Further reading and resources

• South African Department of Justice — Protection from Harassment Act: the legislation and official information concerning harassment, cyber-stalking and protection orders.
• South African Cybercrimes Act 19 of 2020: including provisions concerning malicious communications and harmful digital conduct.
• South African Police Service — Reporting a crime: information on opening a case and obtaining a CAS number.
• SAPS — Cybercrime prevention: practical advice on protecting accounts, information and devices.
• SPARC — Documentation Log: a particularly useful model for maintaining a chronological record of stalking and harassment incidents.
• SPARC — What To Do If You Are Being Stalked: safety, documentation and evidence-preservation guidance.
• South African case law on social-media defamation: Garbade v Jan Van Niekerk, Mbalula v Mda, Mkhwanazi v Mathibeli and related cases demonstrate that online publication can have real legal consequences.
• The Digital Law Co: South African legal guidance concerning digital life, online safety, privacy and cyber-related issues. https://www.thedigitallawco.com

This article is intended as general information, not legal advice. Laws and remedies depend on the facts and jurisdiction. If you believe you are in immediate danger, contact the appropriate emergency service rather than waiting for an online dispute to resolve itself.

AI disclosure: This article has been compiled with the assistance of ChatGPT and subsequently reviewed and edited by the author. ChatGPT was used as a research and drafting aid; it is not a lawyer, and its output should not be treated as legal advice. Readers should verify legislation, case law and other sources independently and obtain advice from a suitably qualified legal professional where appropriate.

＼ Get the latest news ／