What to do if…
you get a message that includes details about your location that you did not share
Short answer
Prioritize safety and containment: don’t respond, save the message, and get to a safer setting. If you feel in immediate danger or the person may be nearby, call 911.
Do not do these things
- Don’t reply to “see what they want” (it can escalate and confirms you’re reachable).
- Don’t click links, open attachments, scan QR codes, or install apps they suggest.
- Don’t share confirming information (your address, workplace, schedule) or send your live location.
- Don’t agree to meet them, move to a different app because they demand it, or send photos to “verify.”
- Don’t pay money, gift cards, or crypto to make it stop (payment commonly triggers repeat demands).
- Don’t blast it publicly on social media while you’re still exposed (it can increase risk).
What to do now
- Get to a safer pause point. If you’re alone, go somewhere with other people (store, lobby, neighbor). If you’re at home, lock doors and avoid going outside to “check.”
- Make the emergency vs non-emergency call.
- If you think there’s immediate risk (they claim to see you, are nearby, or you feel unsafe): call 911.
- If it’s threatening/harassing but not immediate danger: contact local law enforcement to make a report.
- Preserve evidence (quietly). Screenshot and/or screen-record the message thread showing the sender, timestamps, and the location details. Save usernames/handles, phone numbers, emails, and any payment demands.
- Shut down location-sharing paths (fast privacy check).
- Turn off any live location sharing you’ve enabled (messaging apps, maps, “Find My”/family sharing).
- Review app location permissions and set to “Never” or “While Using” where appropriate.
- Lock down accounts as if access might be compromised.
- Secure your email first (it’s the reset key for many accounts): change password, sign out of other sessions/devices where possible, and enable multi-factor authentication (MFA).
- Change the password on the account the message arrived on, and enable MFA there too.
- Report through the right channels (without waiting to “be sure”).
- Report/block inside the platform where it arrived.
- If this involves cyber-enabled threats, extortion, account compromise, or a pattern of online abuse, file a report with the FBI’s IC3. Type the IC3 address directly or use a trusted bookmark—avoid lookalike links.
- If you believe it’s a scam, you can also report it to the FTC.
- Tell one trusted person what’s happening. Send a simple, practical note: where you are, what they sent, and what your next step is. If you need to move, ask them to stay on the phone.
What can wait
- You don’t need to prove how they got the location right now.
- You don’t need to confront someone you suspect or contact mutual friends to “investigate.”
- You don’t need to scrub your entire online presence immediately—first stabilize safety, preserve evidence, and secure accounts/location sharing.
- Longer-term steps (deeper device checks, changing numbers/accounts, data broker removals) can wait until you’re safe and supported.
Important reassurance
Messages like this are designed to trigger panic and impulsive replies. Sometimes the “location” is pulled from public information, old data, broad location estimates, or previously enabled location sharing. Even if it’s a bluff, calmly securing sharing and accounts is still the right move.
Scope note
These are first steps only—focused on immediate safety and preventing irreversible mistakes. If messages continue or escalate, you may need ongoing documentation and specialist support.
Important note
This guide is general information, not legal advice. If you feel unsafe, trust your instincts and contact emergency services.
Additional Resources
- https://www.ic3.gov/
- https://reportfraud.ftc.gov/
- https://www.cisa.gov/topics/cybersecurity-best-practices/multifactor-authentication
- https://www.fbi.gov/investigate/cyber
- https://support.apple.com/guide/personal-safety/welcome/web
- https://support.apple.com/guide/personal-safety/find-my-and-location-sharing-ips05ede4573/web