How to Get an Urgent Takedown and File a Criminal Complaint for Online Defamation, Threats or Doxxing in Austria (2026)

Online defamation Austria cases move fast, and so must you: content spreads within minutes, evidence can vanish when a post is deleted, and the window to secure a takedown or preservation order is narrow. This guide sets out a practical, step-by-step workflow for victims, in-house counsel and criminal or media lawyers who need to act immediately against defamatory posts, violent threats or doxxing. In recent years, Austrian enforcement priorities have shown a sharper focus on online harms and cross-border evidence, which makes early preservation and parallel civil-criminal action more important than ever. Every step below is grounded in Austrian statute and official procedure, with copy-ready templates, timelines and cost estimates.

1. Overview: when to use this workflow

This workflow applies whenever content published online causes reputational, personal or physical harm and needs to be removed, documented and prosecuted. Typical scenarios include a defamatory post or review that damages your name or business; doxxing, where your home address, phone number or private data is published to invite harassment; violent or coercive threats delivered by message or public post; and sustained online harassment or stalking.

The immediate goals are always the same and should run in parallel, not in sequence: remove the harmful content quickly, preserve the evidence before it disappears, file a criminal complaint to trigger state investigation, and, where removal is not achieved voluntarily, obtain an urgent civil injunction. Because these objectives serve different purposes, pursuing only one usually leaves a gap. A criminal complaint punishes the offender but does not automatically remove the post; a takedown request removes the post but does not preserve evidence for prosecution. Treating an online defamation Austria matter as a coordinated campaign, not a single action, is the difference between an effective response and a lost case.

2. Eligibility, who can file and the legal basis

Standing to act depends on who has been harmed and which remedy is sought. Austrian law recognises both natural and legal persons as victims of online harm, and it distinguishes between offences the injured party must prosecute privately and offences the public prosecutor pursues in the public interest.

Individuals versus companies

An individual whose reputation, personal data or safety has been attacked has direct standing to file a complaint and to seek civil relief. Companies also have standing: a business can act where defamatory statements damage its commercial reputation or where an employee is targeted in connection with their role. In practice, a company will often act alongside the affected employee, the employee pursues personal offences (such as threats), while the company pursues reputational harm and business-related claims. A company must act through an authorised representative, and counsel will require a signed power of attorney to file on the company’s behalf.

Private prosecution versus public prosecution

Under the Austrian Code of Criminal Procedure (Strafprozessordnung, StPO), some offences are prosecuted by the public prosecutor (Staatsanwaltschaft) in the public interest, while others are private prosecution offences (Privatanklagedelikte) that the injured party must pursue and, in effect, prove. Classic defamation-type offences are frequently private prosecution matters, whereas dangerous threats attract public prosecution and can trigger a police-led investigation. Establishing which category your case falls into at the outset determines who carries the procedural burden and what deadlines apply.

Relevant criminal offences

The Austrian Criminal Code (Strafgesetzbuch, StGB) contains the substantive offences relevant here: defamation and insult-type offences (such as üble Nachrede and Beleidigung), dangerous threat (gefährliche Drohung), and persistent harassment or stalking (beharrliche Verfolgung). Publication of certain private data online may also engage the offence commonly discussed in relation to “doxxing,” and unlawful publication of personal data may separately breach data protection law. Counsel should confirm the precise provisions and clause numbers against the current consolidated text on the Rechtsinformationssystem (RIS) before filing.

3. Step-by-step: urgent takedown and criminal complaint for online defamation Austria

The following ten steps form the core operational workflow. Run the early preservation and safety steps immediately and in parallel; the later prosecutorial and civil steps follow once evidence is secured. Bold actions mark the critical tasks.

1. Step 1, Immediate safety check and risk assessment

   Before anything else, assess whether there is a threat of imminent physical harm. If there is any risk of violence, call the police emergency number (133) or the EU emergency number (112) immediately. Dangerous threats are treated seriously and can justify urgent police intervention. If the threat is not imminent, note the risk level, identify the likely offender and decide whether emergency counsel involvement is needed. This step takes minutes but frames every decision that follows.

2. Step 2, Take screenshots and preserve metadata

   Capture everything before you report it. Take full-screen screenshots showing the content, the account name, the URL and a visible timestamp. Save the permalink of each post and export the full page HTML where possible. Record user IDs, handles and any profile information. Where the matter is serious, engage a forensic specialist to capture the material in a defensible format and to log hash values. Do not edit, crop or annotate original captures, keep raw copies. Budget one to three hours for thorough preservation.

3. Step 3, Send a preservation notice to the platform and host

   Even before demanding removal, ask the platform and any hosting provider to preserve the content and associated logs. Removal without preservation can destroy the very evidence a prosecutor needs. A short preservation letter (template below) should identify the exact URLs, state that legal proceedings are contemplated, and request retention of subscriber and traffic data. Under the Council of Europe Convention on Cybercrime (Budapest Convention), expedited preservation of stored data is an established cross-border tool that your prosecutor can later invoke. Send the notice the same day.

4. Step 4, Send an emergency takedown notice through platform notice-and-action routes

   Use each platform’s own reporting and notice-and-action mechanism to demand removal. Major platforms, Facebook, Instagram, X, YouTube and TikTok, maintain dedicated reporting pages for defamation, harassment, threats and the publication of private information. Under the EU Digital Services Act, larger platforms are also required to operate accessible notice-and-action systems for illegal content. Report the content under the most specific policy category available (for example, “sharing private information” for doxxing, or “credible threat” for violent messages) and reference the URLs preserved in Step 2. Where you can identify the hosting provider directly, send a parallel removal request to the host. Platform action can take anywhere from hours to several days.

5. Step 5, Handle counter-notices and escalate

   Offenders may file a counter-notice or the platform may refuse removal. Prepare to escalate: reference the specific legal basis for removal, attach evidence of harm, and set a clear deadline for a response. State plainly that failure to remove will lead to a criminal complaint and an application for a civil injunction. Keep every item of correspondence, refusals and delays are themselves evidence that supports later court action.

6. Step 6, File a police report or criminal complaint

   File a criminal complaint (Strafanzeige) at any police station or with the public prosecutor. Reporting channels operated by the police and the Federal Ministry of the Interior may also be available for certain matters. You may attend in person or, for some matters, submit in writing. The complaint should identify the offence, the suspect (or all identifying details available), the URLs and your preserved evidence. Under the StPO, the police and prosecutor are obliged to examine a credible report and open an investigation where grounds exist. For dangerous threats, expect faster intake. Police intake is usually same-day; the formal opening of an investigation typically follows within days to weeks.

7. Step 7, Request expedited prosecutor action and preservation or production orders

   Once a complaint is lodged, ask the public prosecutor to seek preservation and production of subscriber and traffic data, often the key to unmasking anonymous offenders. Where the platform or offender is abroad, the prosecutor can use EU cross-border instruments such as the European Investigation Order, alongside mutual legal assistance and the Budapest Convention framework. Flag urgency in writing, especially for threats, so the prosecutor prioritises expedited preservation before data is deleted.

8. Step 8, Seek an urgent civil interim injunction

   If voluntary removal fails, apply to the civil court for an interim injunction (einstweilige Verfügung) to order removal or blocking. The civil route can be faster than criminal prosecution and, unlike a complaint, can produce a binding order. The evidentiary standard is lower than in criminal proceedings, you must credibly show your claim (Bescheinigung) and urgency, not proof beyond reasonable doubt. Where a judge accepts urgency, emergency proceedings can move quickly, sometimes within a matter of days.

9. Step 9, Pursue parallel remedies: data protection complaint to the DSB

   Where the harm involves publication of personal data, the hallmark of doxxing, file a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, DSB). The DSB can investigate unlawful processing and take corrective measures, and its route runs independently of the criminal process. Use the DSB where the core wrong is the unlawful exposure of your personal data; use the criminal complaint where the wrong is defamation or a threat. Often both apply, and both should be filed.

10. Step 10, Follow-up and documentation

    Maintain a single, dated case file recording every action: preserved evidence, notices sent and received, complaint reference numbers, prosecutor correspondence and court filings. Keep a chain-of-custody log for all digital evidence to protect admissibility. Engage counsel to manage deadlines, monitor the investigation and coordinate the civil and criminal tracks. Disciplined documentation is what carries an online defamation Austria case through to removal, damages or conviction.

For a deeper technical checklist on capturing and storing digital material defensibly, see our forthcoming guide on how to preserve and collect digital evidence in Austria. For guidance on selecting and instructing counsel, the criminal lawyers in Austria overview is a useful starting point.

4. Required documents and templates

Assembling the right documents at the outset speeds every subsequent step. The table below lists the core materials, their purpose and who prepares them.

Police complaint template

A short written complaint should name the offence, identify the suspect or all available identifying details, list the URLs, attach the preserved evidence and request that the prosecutor secure subscriber and traffic data.

Preservation notice template

A preservation notice asks the platform or host to retain specified content and logs pending legal proceedings, it does not demand removal.

Platform takedown notice template

A takedown notice invokes the platform’s specific policy category, cites the legal basis and sets a deadline for removal.

Sample wording for the interim injunction application

The application must set out the credible basis for the claim, the urgency, and the precise order sought, removal, blocking or a prohibition on republication. Copy-ready wording appears in Section 10 below.

5. Timeline and deadlines

Timing varies by track. Police intake is usually same-day and platform preservation can often be arranged within a short period. Platform removal ranges from a few hours to several days depending on the provider and the policy category. A prosecutor’s decision to open an investigation typically follows within days to weeks, though dangerous threats are handled faster. An emergency civil injunction can be granted quickly where a judge accepts urgency. Cross-border evidence requests through EU instruments or mutual legal assistance can take weeks to months, depending on the cooperating state.

Limitation periods matter. The StGB sets time limits within which offences may be prosecuted, and some private prosecution offences carry short windows within which the injured party must act. Because the applicable period depends on the specific offence, confirm the exact limitation period with counsel against the current RIS text rather than relying on a general estimate, delay can be fatal to an otherwise strong claim.

6. Costs and fees

Filing a police complaint is generally free. Costs arise mainly from counsel, forensics, court fees and, in cross-border matters, translation. The figures below are indicative only; actual costs depend on complexity, claim value and the provider, and lawyers’ fees in Austria are commonly agreed by individual fee arrangement.

Court fees are governed by the Court Fees Act (Gerichtsgebührengesetz, GGG); confirm the current tariff for the specific application before filing.

7. What changes in 2026 for online defamation Austria cases

Enforcement continues to place greater weight on online harms and on the cross-border evidence chain that so often decides these cases. Prosecutors are expected to make increasing use of preservation requests and to lean more heavily on EU cooperation instruments when platforms and offenders sit outside Austria. The EU Digital Services Act has also strengthened the obligations of larger platforms to act on notices of illegal content. The likely practical effect for victims is that speed of preservation now matters even more: content and logs must be locked down before removal, and identifying data must be requested early while it still exists.

Three tactical shifts follow. First, act on preservation notices immediately, before any takedown demand. Second, consider running a civil interim injunction in parallel with the criminal complaint rather than waiting for the prosecution to conclude, the civil order can deliver removal faster. Third, prepare from day one for cross-border evidence requests and involve counsel early to coordinate the EU cooperation channels. These are practitioner observations on enforcement direction; where a case turns on a specific procedural rule, counsel should verify the current position, as statutory amendments should never be assumed without checking the consolidated text.

8. Common pitfalls and how to avoid them

• Delayed preservation. Waiting to secure evidence lets the offender delete the post and the platform purge logs. Preserve first, report second.
• Relying on platform guarantees. A platform’s promise to “review” is not removal and not preservation. Get written confirmation and set deadlines.
• Weak evidence. Cropped or annotated screenshots are easy to challenge. Keep raw captures, full URLs, timestamps and, where possible, forensic hashes.
• No chain of custody. Undocumented handling undermines admissibility. Maintain a chain-of-custody log from the first capture.
• Public counter-attacks. Responding publicly to the offender can create fresh liability and muddy the record. Keep exchanges through counsel.
• Harmful public statements. Comments to the press or online before proceedings conclude can prejudice your own case. Stay measured.
• Ignoring the data protection route. For doxxing, the DSB complaint is a powerful parallel remedy that many victims overlook. File it alongside the criminal complaint.

9. Comparison: criminal complaint versus civil injunction

Victims frequently ask whether to file a criminal complaint or seek a civil injunction. In most serious matters the answer is both, because they achieve different things. The criminal route punishes the offender and mobilises state investigative powers; the civil injunction can deliver a faster binding removal. The table below summarises the trade-offs.

For the civil counterpart in full, see our forthcoming guide on civil remedies for online defamation in Austria, covering injunctions, damages and takedowns.

10. Practical templates and sample wording

The wording below is a starting point only. Have counsel review and adapt each template before sending, as precise phrasing affects legal effect.

Preservation notice (to platform / host): “We act for [victim]. We require you to preserve, and not delete or alter, the content at the following URLs [list], together with all associated subscriber, access and traffic data, pending contemplated legal proceedings. This is a formal request to retain the specified data. Please confirm preservation in writing as a matter of urgency.”

Platform takedown notice: “The content at [URLs] breaches your policy on [defamation / private information / credible threats] and is unlawful under Austrian law. It causes serious harm to our client. We request removal within [deadline]. Failure to remove will result in a criminal complaint and an application for a court injunction.”

Police complaint (bullet wording):

• Complainant details and, where acting, counsel and power of attorney.
• Offence(s) alleged and a brief factual account.
• Suspect identity or all available identifying details (handle, profile, URLs).
• List of preserved evidence and where it is held.
• Request that the prosecutor secure subscriber and traffic data urgently.

Interim injunction application (core elements): a statement of the unlawful conduct, evidence of urgency and ongoing harm, and a precise order sought, removal, blocking, and a prohibition on republication. A sample doxxing complaint with fuller wording will appear in our dedicated template guide on filing a criminal complaint for doxxing.

12. Next steps and how to get help

An online defamation Austria matter rewards speed and coordination: preserve evidence, demand removal, file the criminal complaint, and, where content persists, seek an urgent civil injunction, all in parallel. Because deadlines are short and the cross-border evidence chain is fragile, engaging counsel early materially improves the outcome. For emergency intake, preservation letters and interim injunction support, contact a specialist through Nikolaus Sauerschnig, profile and contact, or review the broader panel of criminal lawyers in Austria. This guide is general information only and is not a substitute for case-specific legal advice.

Sources

1. RIS, Rechtsinformationssystem des Bundes (consolidated Austrian legislation, including the StGB and StPO)
2. Bundesministerium für Justiz (Federal Ministry of Justice)
3. Bundesministerium für Inneres (Federal Ministry of the Interior)
4. Datenschutzbehörde (Austrian Data Protection Authority, DSB)
5. Österreichischer Rechtsanwaltskammertag (Austrian Bar, ÖRAK)
6. Council of Europe, Convention on Cybercrime (Budapest Convention)
7. EUR-Lex, European Investigation Order, Digital Services Act and mutual legal assistance instruments