The RightsRelay mission

Making the internet safer, clearer and more accountable.

RightsRelay examines digital risk and online harm in the public interest. We publish independent analysis and practical guidance, and provide a structured way to report concerns.

Explore our work Find practical guidance

Why this work matters

Being online should not mean being exposed.

Modern risks move between breached services, public information, compromised accounts and highly organised fraud. Advice that treats each incident in isolation misses how the harm compounds.

Exposure is cumulative

A breach can separate personal information from its original context. Copies persist, combine with other records and remain useful long after a password is changed.

Fraud uses real information

Names, employers, relationships and transaction details make false messages more credible. Data exposure and manipulation reinforce one another.

Personal caution has limits

Careful decisions matter, but they cannot repair insecure products, opaque data practices or services that transfer the consequences of failure to users.

What RightsRelay does

Connect the incident to the system around it.

RightsRelay combines public-interest analysis, practical guidance and structured reporting. Each part supports the same goal: making digital risk easier to understand and harder to dismiss.

Examine the wider risk

We look beyond a single message or compromised account to explain the systems, incentives and data flows that allow harm to spread.

Publish usable guidance

We translate complex technical and behavioural risks into clear decisions people can use before, during and after an incident.

Review submitted concerns

We provide a structured channel for reporting suspicious resources, scams, privacy concerns and other forms of online harm.

Our standards and process

Issue areas

Five connected pressures shaping digital life.

These areas overlap by design. A leaked record can enable an impersonation attempt; a compromised account can expose more data; a weak reporting system can allow the same pattern to continue.

Data exposure

Breaches, aggregation, public records and the long life of information once it leaves its original context.

Fraud & manipulation

Impersonation, manufactured urgency, recovery scams and the industrial systems behind digital deception.

Accounts & identity

Compromised accounts, recovery systems and the way one failure can travel across an entire digital life.

Platform responsibility

The choices services make about defaults, retention, reporting and who carries the cost when systems fail.

Information integrity

Synthetic media, copied context and the growing difficulty of deciding what deserves trust online.

Response centre

Start with the situation you are facing now.

Clear ordering matters during an incident. These guides begin with the action most likely to prevent additional harm.

Suspicious contact

Someone is pressuring me to act now

Break the contact, verify independently and preserve the information needed to report what happened.

Account incident

Someone accessed one of my accounts

Contain the incident in the right order and protect the accounts connected to it.

Personal exposure

My information is visible online

Identify the source, assess the risk and reduce exposure without sending more data to unknown services.

View all response guidance

Latest analysis

Look beyond the immediate incident.

RightsRelay analysis connects practical harm with the design choices, information flows and incentives that made it possible.

Systems & responsibility01

Submit a report

Trace a referral path without giving up control of the complaint.

Record a public starting URL, choose a narrow Investigation Scope, and use only your own email address or phone number as Subject Data. Never send passwords, payment details or identity documents.