Contributor Safety Guide

UpdatedSeptember 6, 2026

ByEpsteinWiki

EpsteinWiki contributors research sensitive records involving sexual abuse, trafficking allegations, criminal investigations, powerful institutions, public figures, survivors, witnesses, minors, and private individuals. This work can create emotional, digital, legal, reputational, and physical safety risks.

No article, lead, document, deadline, or investigation is more important than the safety of a contributor, survivor, source, or member of the public.

Contributors must work lawfully, protect sensitive identities, limit unnecessary exposure to traumatic material, secure their accounts, document threatening conduct, and seek help when a situation exceeds their training or authority.

Snapshot

Risk	Required response
Account compromise	Change credentials, end active sessions, notify the safety team, and preserve alerts
Phishing attempt	Do not open the attachment or sign in through the message
Doxxing	Preserve lawful evidence, restrict exposed information, and report immediately
Credible threat	Move to safety and contact emergency services when danger is immediate
Coordinated harassment	Do not engage publicly, preserve evidence, and report through private channels
Survivor identity exposure	Restrict the page and notify an editor immediately
Contact involving a minor	Do not respond or conduct an interview
Suspected child sexual abuse material	Do not download, copy, screenshot, upload, or redistribute
Traumatic material exposure	Stop, step away, and request reassignment or support
Questionable evidence	Do not publish until provenance and authenticity are reviewed
Unauthorized source contact	Stop communication and notify an editor
Legal demand or threat	Preserve it and refer it to authorized leadership
Lost device	Secure accounts, revoke sessions, and report the loss
Private group information leak	Preserve evidence, notify moderators, and rotate affected access
Immediate danger	Call 911 or the appropriate local emergency service

The central safety rule is:

Stop when necessary. Preserve what can be lawfully preserved. Report the problem through the safest available channel.

Core Safety Principles

All EpsteinWiki contributors must follow these principles.

Use only lawful and ethical research methods.
Access only the information necessary for the assigned work.
Protect survivors, minors, witnesses, sources, contributors, and private individuals.
Never harass, threaten, pressure, impersonate, stalk, or retaliate against anyone.
Do not contact a research subject without authorization.
Do not attempt to obtain unauthorized access to an account, device, database, or restricted record.
Do not download or redistribute unlawful sexual abuse material.
Preserve original evidence and document provenance.
Separate verified facts from allegations, interpretations, and open questions.
Disclose conflicts of interest.
Correct errors promptly and transparently.
Report serious safety, privacy, account, evidence, or conduct concerns.
Step away when the work begins to impair judgment or wellbeing.
Ask for help before a preventable problem becomes an emergency.

Contributors may decline or leave an assignment when they do not feel safe completing it.

Personal Identity Protection

Contributors should decide how much of their legal identity they want associated with public research.

Separate Research and Personal Accounts

When possible, use separate accounts for:

EpsteinWiki access
Research email
Public research communication
Social media research
File storage
Private contributor discussions

Do not use a personal account merely because it is convenient.

Limit Public Profile Information

Avoid publicly displaying unnecessary information such as:

Home address
Personal telephone number
Personal email address
Daily schedule
Family information
Children’s names
Employer information
Vehicle information
Travel plans
Real time location
Personal security questions

Review old social media accounts for information that could reveal your location, relatives, routines, workplace, or identity verification answers.

Usernames and Profile Images

Use a consistent research identity only when appropriate. Do not reuse a username or profile image that connects directly to unrelated personal accounts unless you intentionally want those accounts associated.

Reverse image searches may connect profile photographs across platforms. Consider using an authorized project image or non identifying graphic.

Mailing Addresses and Telephone Numbers

Do not publish a home address or personal telephone number for contributor activity.

Use an approved organizational contact method when one is available.

Legal Names

Private contributor spaces must not reveal a contributor’s legal name without permission. Editors should collect only the identity information necessary for access, accountability, safety, or legal compliance.

Account Security

Account security protects contributors, sources, evidence, and the integrity of the archive.

Unique Passwords

Use a long, random, unique password for every important account. Do not reuse a password from a personal email, banking account, social media account, or previous data breach.

The Cybersecurity and Infrastructure Security Agency recommends using strong passwords and a password manager.

Multifactor Authentication

Enable multifactor authentication on:

EpsteinWiki
Research email
File storage
Social media
Messaging services
Domain accounts
Administrative tools
Password manager accounts

Authentication applications, hardware security keys, and passkeys are generally stronger than text message codes. Use the strongest method supported by the account.

CISA explains that multifactor authentication adds another layer of protection when a password is stolen.

Recovery Information

Review account recovery settings and remove:

Former telephone numbers
Old email addresses
Unknown devices
Unrecognized applications
Former collaborators
Unnecessary account connections

Store recovery codes securely. Do not keep the only copy on the device used to access the account.

Session Review

Regularly check:

Active sessions
Login history
Connected applications
Authorized devices
Email forwarding rules
Password reset notices
Administrator changes

Unexpected forwarding rules or recovery changes may indicate account compromise.

Shared Accounts

Avoid shared credentials. Each contributor should use an individual account so changes remain attributable.

When a shared account is unavoidable:

Limit access
Store credentials in an approved password manager
Enable multifactor authentication
Record authorized users
Rotate credentials when access changes
Review account activity
Never send the password in an open group message

Phishing and Malicious Files

Contributors may receive deceptive messages designed to steal credentials, expose identifying information, install malware, or provoke unsafe communication.

Common Warning Signs

Be cautious when a message:

Creates unusual urgency
Demands immediate login
Claims an account will be deleted
Includes an unexpected attachment
Uses a slightly altered domain
Requests a password or verification code
Offers exclusive evidence with no provenance
Pressures you to move to an unfamiliar platform
Claims to represent a survivor without verification
Asks you to keep the communication secret from editors
Requests payment or cryptocurrency
Contains a shortened or concealed link
Arrives from a familiar account using unusual language

Safe Response

When a message appears suspicious:

Do not select the link.
Do not open the attachment.
Do not reply.
Verify the sender through a separate trusted channel.
Inspect the actual domain.
Preserve the message and headers when safe.
Report it through the private safety channel.
Delete it only after preservation and review.

Never enter an EpsteinWiki password after following a link from an unsolicited message. Open the known site directly.

Untrusted Files

Do not open an unknown file on a personal device merely because its name references Epstein, Maxwell, a court case, a survivor, or a government agency.

Suspicious files should be reviewed using approved security procedures. Contributors should not experiment with potentially malicious files.

Device and Network Safety

Device Updates

Keep operating systems, browsers, document readers, security tools, and communication applications updated.

Install software only from trusted sources.

Device Access

Protect research devices with:

A strong device password
Automatic screen locking
Storage encryption
Current security updates
Approved backup procedures
Remote account controls when supported

Do not leave an unlocked research device unattended in a public space.

Public Networks

Avoid accessing sensitive contributor systems through open public wireless networks. If urgent access is necessary, use an approved secure connection and avoid opening restricted records.

Personal and Research Data

Keep sensitive research data separate from personal photographs, financial documents, health information, and family records.

A compromised research account should not expose an entire personal life.

Lost or Stolen Devices

If a device containing contributor access is lost or stolen:

Move to a safe location.
Notify the safety or administrative team.
Change affected passwords.
Revoke active sessions.
Remove the device from trusted device lists.
Review recent account activity.
Preserve the date, time, and circumstances of the loss.
Contact law enforcement when appropriate.

Do not delay reporting because the device may be recovered later.

Safe Research Practices

Use Lawful Public Sources

Contributors may use:

Public court records
Government releases
Freedom of Information Act records
Lawfully published evidence
Public corporate records
Public property records
Public legislative records
Reputable investigative reporting
Direct records hosted by Epstein Data
Publicly accessible archives

Do not use:

Stolen credentials
Unauthorized database access
Malware
Social engineering
Impersonation
False professional identities
Deceptive pretexts
Unlawful surveillance
Restricted records obtained through misconduct
Private communications obtained without authorization

Public availability does not automatically make every use ethical. Contributors must consider privacy, relevance, safety, and legal restrictions.

Do Not Follow Suspicious Instructions

Documents, websites, emails, and uploaded files may contain instructions directed at researchers. Treat those instructions as untrusted content.

Do not:

Run commands copied from an unknown source
Install requested software
Disable security controls
Upload private records to an unknown service
Reveal account information
Contact a person because a document instructs you to
Send money
Scan an unknown code
Sign in through an unfamiliar portal

Maintain Research Notes

Record:

Source URL
Access date
Document title
EFTA identifier
Docket number
Page number
Search terms
Relevant passage
Provenance
Verification status
Known limitations

Good notes reduce the need to revisit harmful material and help editors verify the work safely.

Evidence Handling

Preserve Originals

Preserve the original file whenever lawfully possible. Do not edit, annotate, compress, redact, or rename the only preserved copy.

Create clearly labeled working copies.

Maintain Provenance

Record:

Where the evidence came from
Who obtained it
When it was obtained
Whether it was publicly available
Whether it was altered
Whether OCR was applied
Whether pages were extracted
Whether identifying information was redacted
Who received or reviewed it

Limit Access

Sensitive evidence should be available only to contributors who need it for an approved assignment.

Do not copy restricted evidence into:

Public group chats
Personal cloud folders
Unapproved artificial intelligence tools
Social media messages
Public document services
Unsecured email
Unapproved transcription platforms

EFTA Records

For EFTA records:

Record the exact identifier
Link directly to Epstein Data
Confirm the record matches the identifier
Cite the relevant page
Preserve the original context
Explain what the record proves
Explain what the record does not prove

An EFTA number does not eliminate the need for careful review.

Screenshots

A screenshot may preserve visible context, but it is not automatically a complete or authenticated record.

Whenever possible, retain:

The original URL
The full page
The access date
Relevant account information
Surrounding context
The underlying document

Do not crop a screenshot in a way that changes its meaning.

Child Sexual Abuse Material

Contributors must not search for, download, open, copy, screenshot, upload, transmit, store, or redistribute suspected child sexual abuse material.

Do not attempt to determine authenticity by repeatedly viewing the material.

If suspected material is encountered:

Stop interacting with it.
Do not save a copy.
Do not forward it to another contributor.
Do not upload it to EpsteinWiki.
Preserve only safe contextual information, such as the page address, account name, date, and circumstances.
Notify the designated safety lead privately.
Use the appropriate reporting channel.
Call emergency services when a child appears to be in immediate danger.

The National Center for Missing and Exploited Children CyberTipline accepts reports involving suspected online child sexual exploitation.

Do not include suspected material in an internal incident report. Include only the information necessary to identify where it appeared.

Survivor and Minor Privacy

Survivor centered research requires more than removing a name from a paragraph. Identities can also be exposed through tags, file names, page titles, image metadata, search results, screenshots, descriptions, timelines, and combinations of details.

Protected Information

Do not publish identifying information about an anonymous survivor, minor, or protected witness.

Protected information may include:

Legal name
Former name
Address
School
Workplace
Family relationships
Telephone number
Email address
Social media account
Medical information
Therapy records
Immigration information
Exact location
Unredacted signature
Identification numbers
Details that make identification reasonably possible

Publicly Known Survivors

A survivor’s public identity does not eliminate the need for care.

Use only information that is:

Relevant
Accurately sourced
Necessary to the article
Consistent with the survivor’s public disclosures
Presented without sensationalism

Do not use trauma details merely to make an article more dramatic.

Survivor Requests

A request involving privacy, safety, or identifying information should receive prompt review.

Do not publicly argue with a survivor about a safety request. Preserve the request privately and refer it to an authorized editor.

Minors

Contributors must never directly contact a minor for EpsteinWiki research.

Any communication involving a minor must be referred to authorized leadership and handled through appropriate professional or legal channels.

Contacting Sources and Research Subjects

Contributors must not contact survivors, witnesses, public figures, employees, family members, attorneys, institutions, or suspected participants without authorization.

Required Authorization

Before contact occurs, the contributor should have:

Editorial approval
A defined purpose
Verified contact information
Approved questions
A safety plan
A documentation plan
A clear disclosure of EpsteinWiki affiliation
A plan for handling sensitive information

Contact Rules

Authorized contact must be:

Honest
Respectful
Limited
Relevant
Documented
Free from pressure
Free from promises
Free from threats
Free from impersonation

One respectful request is normally sufficient. Repeated unwanted messages can become harassment.

Prohibited Contact Conduct

Never:

Pretend to be a journalist, attorney, law enforcement officer, survivor, employee, or acquaintance
Conceal EpsteinWiki affiliation when acting on its behalf
Use a false identity to gain trust
Pressure a person to disclose trauma
Threaten publication
Promise legal results
Offer protection that EpsteinWiki cannot provide
Contact someone’s family to force a response
Contact a minor
Continue after a no contact request
Publish private correspondence without review

Receiving Unsolicited Contact

If a person contacts you with evidence or a disclosure:

Do not promise confidentiality you cannot guarantee.
Do not provide legal or therapeutic advice.
Explain your role accurately.
Avoid asking for unnecessary identifying information.
Move the communication to an approved channel.
Preserve the original message.
Notify the appropriate editor.
Escalate immediate safety concerns.

Private Groups and Confidentiality

EpsteinWiki’s private sleuth groups are reserved for people actively investigating the files.

Access is not automatic. Private groups require:

An application
An interview
An invitation
Acceptance of confidentiality rules
Assignment to an appropriate access level
Continued compliance with professional conduct standards

Private group membership does not authorize unrestricted access to every record or discussion.

Confidential Information

Do not share outside the authorized group:

Contributor identities
Source identities
Unpublished evidence
Restricted records
Research assignments
Internal disputes
Safety reports
Access credentials
Interview details
Draft allegations
Private contact information
Moderation decisions
Information that could expose an investigation

Confidentiality obligations continue after a contributor leaves the group.

Access Levels

Access should follow the principle of least necessary access. Contributors receive only the records, tools, and channels required for their approved work.

Access may be reduced or removed when:

An assignment ends
A contributor becomes inactive
A device or account is compromised
Confidentiality is breached
Conduct rules are violated
A safety investigation is pending
Continued access creates an unnecessary risk

Public Participation

People who are not part of a private investigation group may participate through public EpsteinWiki resources, the Discord community, or EpsteinForums.

Public participation does not provide access to confidential investigations.

Harassment, Doxxing, and Threats

Contributors should not debate, confront, or investigate a threatening person in real time.

Preserve Evidence Safely

When safe, record:

Date and time
Platform
Account name
Profile address
Exact wording
Message address
Screenshots
Email headers
Witnesses
Related incidents
Known exposure of private information
Actions already taken

Do not alter screenshots or add commentary inside the preserved copy.

Doxxing Response

If private information is published:

Do not amplify the post.
Preserve lawful evidence.
Notify the safety team.
Report the content to the platform.
Review exposed accounts.
Change compromised credentials.
Warn affected household members when necessary.
Remove public records that can safely be removed.
Contact law enforcement when the risk is credible.
Consider temporary changes to routines or location when advised.

Threat Assessment

A threat should be treated more seriously when it includes:

A specific target
A specific place
A specific time
A described method
Knowledge of private information
Evidence of surveillance
Repeated escalation
Attempts to contact family or employers
Weapon references
Travel toward the target
Prior violence
Evidence of stalking

Contributors should not attempt to determine alone whether a threat is legally actionable.

The FBI Threat Intimidation Guide advises calling 911 when immediate physical danger exists. Threats associated with federal crimes may be reported through the FBI tip system or a local FBI field office.

Coordinated Harassment

Coordinated harassment may include:

Multiple accounts repeating the same accusation
Impersonation
False reporting campaigns
Employer contact
Family contact
Mass tagging
Fabricated screenshots
Edited recordings
Threats
Doxxing
Attempts to enter private groups
Efforts to provoke public retaliation

Do not organize counter harassment. Preserve patterns, limit engagement, and refer the matter to moderators.

Account Compromise and Data Leaks

Warning signs of account compromise include:

Unexpected password resets
Unknown active sessions
New recovery information
Messages you did not send
Deleted records
Changed permissions
Unknown forwarding rules
Login alerts from unfamiliar locations
Unexpected multifactor prompts
Files shared with unknown users

Immediate Response

Use a trusted device.
Change the password.
Revoke active sessions.
Reset recovery information.
Review connected applications.
Preserve security alerts.
Notify the administrative team.
Review recent edits and messages.
Rotate any exposed shared credentials.
Warn affected contributors privately.
Report cybercrime when appropriate.

The FBI Internet Crime Complaint Center accepts reports involving cyber enabled crime, account compromise, fraud, and related activity.

Do not announce an active security investigation in a public channel.

Legal and Ethical Boundaries

EpsteinWiki contributors are researchers and archivists. Unless separately qualified and authorized, they are not acting as:

Attorneys
Law enforcement officers
Prosecutors
Private investigators
Therapists
Crisis counselors
Forensic examiners
Process servers
Government agents

Legal Threats and Demands

If you receive a subpoena, preservation request, cease and desist letter, legal demand, or threat of litigation:

Do not ignore it.
Do not admit wrongdoing.
Do not argue with the sender.
Do not delete related information.
Preserve the complete communication.
Record how and when it was received.
Notify authorized leadership.
Refer the matter to qualified counsel.

Contributors must not provide legal advice to sources, survivors, or other contributors.

Conflicts of Interest

Disclose personal, professional, financial, political, or legal relationships that could affect an assignment.

A disclosed conflict does not automatically accuse anyone of misconduct. It allows editors to assign work fairly and protect the credibility of the archive.

No Retaliation

No contributor may retaliate against a person for:

Reporting a safety concern
Requesting privacy
Correcting an error
Raising an ethical objection
Declining an assignment
Leaving a private group
Reporting harassment
Requesting a second editor
Disclosing a conflict

Trauma Exposure and Wellbeing

Research involving sexual abuse, exploitation, violence, survivor testimony, and institutional failure can cause emotional strain, secondary traumatic stress, sleep disruption, intrusive thoughts, numbness, irritability, anxiety, grief, and difficulty concentrating.

These responses are not proof that a contributor is incapable of doing the work. They are signals that care and limits may be necessary.

Warning Signs

Pause and reassess when you notice:

Loss of sleep
Intrusive images
Increased anxiety
Emotional numbness
Anger that affects judgment
Compulsive searching
Difficulty leaving the work
Isolation
Hopelessness
Increased substance use
Physical stress symptoms
Inability to evaluate evidence neutrally

Protective Practices

Contributors may:

Set time limits
Avoid late night exposure
Work in pairs
Rotate difficult assignments
Use content warnings
Read summaries before opening records
Minimize repeated viewing
Take scheduled breaks
Request reassignment
Speak with a qualified mental health professional
Step away without penalty

Do not pressure another contributor to view graphic or traumatic material.

Support Resources

The RAINN National Sexual Assault Hotline provides confidential support by telephone, text, and online chat.

The 988 Suicide and Crisis Lifeline provides crisis support by telephone, text, and chat throughout the United States.

If someone is in immediate danger, call 911 or the appropriate local emergency service.

Incident Reporting

Report serious safety, privacy, evidence, account, or conduct concerns through an approved private channel or the EpsteinWiki contact page.

Include

When safe, include:

Date and time
Platform or location
People or accounts involved
Factual description
Exact links or identifiers
Lawfully preserved evidence
Known risk
Actions already taken
Witnesses
Requested protection
Whether immediate danger exists

Do not include unnecessary survivor information, passwords, unlawful files, or suspected child sexual abuse material.

Immediate Intervention Events

Report immediately when an incident involves:

Credible threats
Doxxing
Stalking
Evidence tampering
Account compromise
Confidential information leaks
Unauthorized risky contact
Illegal access
Coordinated harassment
Survivor identity exposure
Minor identity exposure
Suspected child sexual abuse material
Imminent danger
Threats of self harm
Threats toward another person

Possible Safety Actions

Authorized leaders may:

Restrict a page
Pause publication
Preserve logs
Lock an account
Reset credentials
Reduce permissions
Remove a contributor from an assignment
Separate participants
Suspend an account
Preserve evidence
Contact a platform
Consult counsel
Contact law enforcement
Refer someone to crisis support

Safety actions are protective measures. They should not be presented publicly as proof of misconduct.

Emergency Response

Immediate Physical Danger

Call 911 or the appropriate local emergency service. Move to a safer location if possible.

Do not wait for an EpsteinWiki moderator to respond before seeking emergency help.

Credible Federal Threat

The FBI electronic tip form may be used to report information concerning federal crimes. The FBI also directs people experiencing qualifying threats to contact a local field office or call 1 800 CALL FBI.

Cybercrime

Report qualifying cybercrime through the Internet Crime Complaint Center.

Child Exploitation

Report suspected online child sexual exploitation through the NCMEC CyberTipline.

Sexual Assault Support

Contact the RAINN National Sexual Assault Hotline at 800 656 HOPE, through online chat, or by texting HOPE to 64673.

Mental Health Crisis

Call or text 988 or use the 988 Lifeline chat.

EpsteinWiki is not an emergency response service.

Step by Step Safety Checklist

Step 1: Protect Your Identity

Separate research accounts from personal accounts and remove unnecessary public information.

Step 2: Secure Every Account

Use unique passwords, a password manager, multifactor authentication, and current recovery information.

Step 3: Secure Your Device

Install updates, enable device encryption, use screen locking, and separate personal data from research data.

Step 4: Review the Assignment

Identify the people, records, privacy issues, and potential risks before beginning.

Step 5: Limit Access

Open only the records required for the assignment. Do not copy sensitive material into unapproved systems.

Step 6: Preserve Provenance

Record the source, date, identifier, page number, and verification status.

Step 7: Avoid Unauthorized Contact

Do not contact survivors, minors, witnesses, subjects, or institutions without approval.

Step 8: Monitor Your Wellbeing

Stop when fatigue, distress, anger, or compulsive research begins affecting judgment.

Step 9: Document Incidents

Preserve lawful evidence of threats, harassment, account compromise, doxxing, or evidence tampering.

Step 10: Report Privately

Use the designated private channel or EpsteinWiki contact page.

Step 11: Escalate Immediate Danger

Contact emergency services or the appropriate official reporting system.

Step 12: Review Access

After an incident, rotate affected credentials, revoke sessions, and confirm that restricted information remains protected.

Questions

Must contributors use their legal names publicly?

No. Public identification should reflect the contributor’s role, consent, and safety needs.

Can I use the same password for several research accounts?

No. Use a unique password for every important account.

Is text message authentication enough?

It is better than using a password alone, but authentication applications, passkeys, and hardware security keys generally provide stronger protection.

Can I contact someone named in a document?

Not without editorial authorization.

Can I contact a survivor to verify a story?

Not without authorization and a survivor centered contact plan.

Can I contact a minor?

No.

Can I pretend to be someone else to obtain information?

No. Impersonation and deceptive pretexts are prohibited.

What should I do with suspected child sexual abuse material?

Do not download, copy, screenshot, upload, store, or redistribute it. Preserve only safe contextual information and report it through the appropriate channel.

Can I upload sensitive evidence to an artificial intelligence service?

Not unless the service and use have been specifically approved for that material.

Should I respond publicly to harassment?

Usually not. Preserve the evidence and report the incident privately.

What counts as doxxing?

Publishing private identifying information in a way that exposes someone to harassment, intimidation, or danger may constitute doxxing.

Should I investigate the person threatening me?

No. Preserve the threat and refer it to the safety team, platform, or appropriate authority.

What if the threat appears to be a joke?

Preserve it and report it when it includes violence, private information, stalking, or other credible warning signs.

Can a moderator remove content during an emergency?

Yes. Content exposing protected identities, immediate safety risks, unlawful material, or fabricated evidence may be temporarily restricted while it is reviewed.

Can I refuse a disturbing assignment?

Yes.

Does stepping away mean I am failing the investigation?

No. Protecting judgment and wellbeing supports accurate research.

Should I promise confidentiality to a source?

No. Do not promise protections you may not be able to provide.

Can private group information be discussed with friends?

No. Confidentiality continues outside meetings and after membership ends.

What if my account may be compromised?

Use a trusted device, change the password, revoke sessions, preserve alerts, and notify the administrative team.

What if I receive a legal letter?

Preserve it, do not argue or delete related information, and refer it to authorized leadership.

Does a public record eliminate privacy concerns?

No. Public availability does not automatically make republication necessary, relevant, or safe.

Who should receive an incident report?

Use the designated private reporting channel or the EpsteinWiki contact page.

What should I do if someone is in immediate danger?

Call 911 or the appropriate local emergency service.

Related EpsteinWiki Guides

Sources

PostedDecember 9, 2025