How To Know If You’re On A List

Lists are silent. You get added quietly, and you find out months later when something weird happens and you finally connect the dots.

I mean every kind of list. Data broker watchlist. A Telegram doxxing channel. A corporate risk database. A glowie file. An ex's private Discord where they track you. A competitor's OSINT board.

In a low-trust world, everyone keeps lists. The question is not if you are on one. The question is if you can tell when you got added.

Here is how you can.

1. Your Data Broker File Refreshes When You Did Nothing

This is the most reliable signal and no one checks it.

Go to Whitepages, FastPeopleSearch, Spokeo. Search yourself. Screenshot the "last updated" date.

Now do it again in 30 days. If it updated and you did not move, change your number, or buy a house, someone paid $0.99 to pull your file. When someone pays, the broker refreshes your record across the network to make it look fresh and valuable.

One update is noise. Three brokers updating in the same week is a signal. That means someone ran a full background pull.

Someone paid to find your current address.

If your home address is already burned, your apartment is now part of your attack surface. Most people leak more at home than online — smart TV, robot vacuum, Alexa, packages. I had to learn to de-bug my own place from scratch. The full sweep protocol is in THE FARADAY ROOM.

2. You Get Followed By Ghosts That Watch But Never Like

Not trolls. Ghosts.

• Account made in last 60 days
• 5 to 20 followers, all random
• Zero posts or 2 stolen reposts
• Watches every story within 10 minutes, never likes, never comments
• Follows 2 of your close friends too

One ghost is nothing. Three ghosts in one week, all with the same behavior, from different platforms, is a sock puppet cluster. That is how investigators, journalists, and obsessed people monitor you without getting blocked.

The real tell is second-order. They do not just follow you. They follow your roommate, your girlfriend, your coworker. They are building a map around you before they build a file on you.

If you post daily, you are the easiest target alive. You give them fresh material every day. I wrote the counter playbook for people who have to be public in THE BRAND THAT WATCHES BACK. How to be visible but leak nothing useful.

3. People Start Knowing Things You Only Said In Private

You tell a brand your new address in Instagram DMs to ship a PR box. A week later a random comment says "nice neighborhood, [your street]."

You talk about a court case or a medical thing in a small Discord with 4 people. A week later an anon account on X asks you about it.

Your DMs are not private. Telegram is not encrypted by default. Discord servers get scraped. Slack logs forever. Instagram hands over full chat history with a subpoena.

If you are being watched, the first leak is not your content. It is your comms. Someone is reading what you thought was private and repeating it to test if you notice.

This is why I stopped trusting rented infrastructure. If you do not own the server, you do not own the conversation. I built my own encrypted dead drop system for sensitive talks and documented it in THE DEAD DROP.

4. Your Old, Dead Accounts Get Hit With Resets

You get a password reset for a Yahoo you have not used since 2016. Then a 2FA code for a crypto exchange you closed. Then a login attempt on an old Gmail that forwards to your main.

No one is randomly hacking your dead accounts for fun. They found an old username you used, maybe from a 2012 forum breach, and they are chaining it to your current identity. If they get into one old account, they get old photos with EXIF, contacts, purchase history, your real name from 10 years ago.

This is how most people get fully doxxed. Not by a zero day. By linkability. One identity doing five jobs. One breach collapses all of them.

If this is happening, your compartmentalization is broken. You need clean separation: different emails, numbers, payments that never touch. I run 5 identities without losing my mind and the system is in BURNERCONOMICS.

5. Your Analytics Get Weirdly Specific

Check the stuff no one checks:

• TikTok analytics showing 80 percent of profile views from one city you have no audience in
• YouTube Studio showing private or direct traffic spiking on a video where you accidentally leaked a package label
• Someone rewatching the same 2 seconds of your vlog 30 times — they are trying to read something in the background
• Google autocomplete: type your name + city and it suggests your middle name, your mom's name, your new address you never posted

The algorithm knows you are being looked up before you do. Search engines start suggesting what investigators are searching.

Set tripwires. Post a unique spelling of your name in a data broker opt out. Use a canary link that only one person has. If it gets clicked, you know who leaked it.

I put my full tripwire checklist, how to set canaries, how to check Telegram doxxing groups and data broker refresh logs, in THE WATCHER'S WATCHER. That guide is specifically for this moment — when your gut says someone is building a file on you.

6. Your Circle Gets Probed Before You Do

Good investigators never contact the target first. They contact your friends.

Signs:

• A friend says "some weird account asked if I knew you"
• An old coworker gets a LinkedIn message asking about you
• Your family gets spam calls the same week you get ghost followers
• Someone joins your Discord and only asks questions about you, not the topic

This is second-order OSINT. They are building a dossier around you so that when they come to you, they already know everything. By the time they DM you, they know where you live.

In a low-trust world, your network is part of your attack surface. Your friends' old posts from 2019 can dox you today.

7. Your Money Leaves A Trail You Forgot About

This is the one that blackpills people.

You get paid via Wise or PayPal for a freelance gig. That payment has your legal name. You post your Venmo for commissions — Venmo is a public social network of payments by default. I can map your friend group, location pattern, and real name in 4 clicks.

You sell something on Marketplace with Zelle. You link an ENS or a wallet that you flexed once in 2021. That wallet is forever. Your entire financial history is public.

If you are on a financial risk list, it is because your money is doxxing you faster than your content. Banks freeze first and ask later. Payment apps deplatform faster than X.

You cannot be ungovernable if your bank can be turned off with one call.

You need anonymous money infrastructure. Not crypto bro nonsense. Real cards, accounts, and rails that do not link to your public name. I built the full stack for creators and freelancers in THE GHOST STACK.

So You Think You Are On A List. Now What?

Do not spiral. Do not delete everything. Deleting everything after you notice you are being watched is the biggest signal that you know you are being watched.

Become expensive to track.

Step 1: Confirm. Run the audit. Check data broker update dates. Log ghosts. Check analytics. Use tripwires. The full checklist is in THE WATCHER'S WATCHER. Do not guess. Confirm.

Step 2: Stop the bleeding. No real time posts. Delay everything 48 hours. Strip metadata from every photo and video. No package labels, street signs, key fobs, gym tags.

Step 3: Harden your base. One room in your house that is truly dead. No mics, no cameras, no WiFi. If you cannot think clearly at home, you cannot do opsec at all. That is THE FARADAY ROOM.

Step 4: Separate your lives. Public you and private you cannot share an email, a number, or a payment method. Ever. Read BURNERCONOMICS.

Step 5: Own your comms and your money. Move sensitive chats to infra you own — THE DEAD DROP. Ghost your payment stack — THE GHOST STACK.

You will never get off every list. That is not the goal. The goal is to be on so many fake, conflicting, boring lists that no one knows which one is real.

You do not need to disappear. You need to become boring to the right people and expensive to everyone else.

I build practical guides for people who live online but want to stay sovereign.

If your gut is telling you something shifted, start with the audit:

Think someone is hunting you right now? → THE WATCHER'S WATCHER: How To Know You're Being Investigated — tripwires, canaries, data broker checks

Home is leaking? → THE FARADAY ROOM — de-bug your apartment

Public by necessity? → THE BRAND THAT WATCHES BACK — counter-OSINT for creators

Money is doxxing you? → THE GHOST STACK — anonymous money infra

Comms compromised? → THE DEAD DROP — build your own encrypted infra

One identity doing too much? → BURNERCONOMICS — 5 clean identities

Want to audit your own space with hardware? → SPECTER BOX + SHADOW CATALOG — $17 drop box + firmware dumping without bricking

All guides are on my Gumroad, link in profile.