Cyber sexual harassment is digital conduct that targets someone with unwanted sexual content, threats, or exposure, and it ranges from repeated explicit messages to sextortion, deepfakes, and the non-consensual sharing of intimate images. The most serious forms are federal felonies carrying up to five years in prison at baseline, with sentences reaching life imprisonment when the victim dies as a result. Every state criminalizes non-consensual sharing of intimate images, and a 2025 federal law now requires online platforms to remove that content within 48 hours of a valid takedown request.
Conduct That Qualifies
Not every unpleasant online exchange is illegal. The threshold is crossed when sexually charged digital behavior is targeted at a specific person, repeated after a request to stop, or built on content shared without consent.
Non-Consensual Intimate Images
Sharing someone’s private sexual photos or videos without their permission is the most widely prosecuted form. Perpetrators post to social media, dedicated exposure sites, or messaging apps to humiliate, control, or extort. It is now illegal in all 50 states and under federal law.
Sextortion
Sextortion is a threat to publish intimate images or information unless the victim pays money, sends more sexual content, or performs sexual acts. It frequently involves minors and carries some of the heaviest federal penalties because the conduct also triggers extortion statutes.
AI-Generated Deepfakes
Artificial intelligence can now superimpose a real person’s face onto sexually explicit media with disturbing realism. Perpetrators use fabricated images for blackmail, harassment, or public humiliation. As of mid-2025, about 45 states had laws specifically addressing sexually explicit deepfakes, and federal coverage is expanding.
Unwanted Explicit Messages
Repeatedly sending sexual messages, graphic descriptions, or solicitations after someone has asked you to stop is harassment. A single crude message may not meet the legal threshold; a pattern that ignores an explicit refusal does. The contact can arrive through direct messages, email, dating platforms, or social inboxes.
Sexualized Public Attacks
Using degrading sexual language in public comment sections, forums, or social threads to target a specific person crosses into harassment when the intent is to intimidate, silence, or damage that person’s reputation. What separates this from general online rudeness is that it is directed and weaponizes sexual content.
The Federal Laws That Apply
Several federal statutes reach online sexual harassment because most internet activity travels across state lines and through interstate networks.
The Federal Cyberstalking Statute
Under 18 U.S.C. § 2261A, it is a federal crime to use any interactive computer service or other facility of interstate commerce to engage in a course of conduct that causes, or would reasonably be expected to cause, substantial emotional distress. The statute also covers conduct that puts a person in reasonable fear of death or serious bodily injury. Sentencing is set by 18 U.S.C. § 2261(b) and scales with the harm caused.
The TAKE IT DOWN Act
Signed into law on May 19, 2025, the TAKE IT DOWN Act is the first federal law to directly criminalize non-consensual publication of intimate images, including AI-generated deepfakes.1Congress.gov. S.146 – TAKE IT DOWN Act 119th Congress (2025-2026) It covers images of adults published without consent and with intent to cause harm, and images of minors published with intent to abuse, harass, or gratify sexual desire. Threatening to publish such images is also a criminal offense under the Act.
The Act separately requires any public website, online service, or app that hosts user-generated content to build a notice-and-removal process by May 19, 2026. Once a platform receives a valid takedown request, it must remove the image and make reasonable efforts to remove known identical copies within 48 hours.2Congress.gov. The TAKE IT DOWN Act – A Federal Law Prohibiting Nonconsensual Intimate Visual Depictions Violators face criminal penalties and mandatory restitution to victims.
Interstate Threats
When harassment escalates to explicit threats of violence, 18 U.S.C. § 875 applies. Transmitting a threat to injure someone through interstate communications carries up to five years in prison. If the threat is tied to extortion, the maximum rises to 20 years.3Office of the Law Revision Counsel. 18 US Code 875 – Interstate Communications
State Criminal Laws
All 50 states criminalize the non-consensual distribution of intimate images, though they vary in how they classify the offense. Some treat a first violation as a misdemeanor; others escalate to felony charges when the conduct involves minors, repeat offenses, or distribution to large audiences. About 45 states had also passed laws specifically targeting sexually explicit deepfakes by mid-2025, though older statutes written before AI-generated content may not explicitly reach synthetic media. Federal law sets a floor; state law often adds parallel charges or different penalties.
Criminal Penalties
Federal sentencing under 18 U.S.C. § 2261(b) scales with the harm caused to the victim:4Office of the Law Revision Counsel. 18 USC 2261 – Interstate Domestic Violence
- Up to 5 years in prison as the baseline, for cyberstalking that causes substantial emotional distress or fear of serious harm without physical injury.
- Up to 10 years when the victim suffers serious bodily injury or the offender uses a dangerous weapon.
- Up to 20 years when the victim suffers permanent disfigurement or a life-threatening injury.
- Life imprisonment when the victim dies as a result of the conduct.
A conviction also carries fines up to $250,000 under the general federal felony fine statute.5Office of the Law Revision Counsel. 18 USC 3571 – Sentence of Fine Anyone who stalks in violation of an existing restraining or no-contact order faces a mandatory minimum of one year in prison.
State penalties vary widely. First offenses for distributing intimate images without consent are misdemeanors in many states, with jail time from several months to a year. Repeat offenses, conduct involving minors, or severe harm often trigger felony charges and longer sentences.
Mandatory Restitution
Federal courts must order convicted stalkers to pay restitution covering the full amount of the victim’s losses. Under 18 U.S.C. § 2264, those losses include medical and mental health treatment, lost income, attorney fees connected to obtaining a civil protection order, temporary housing and transportation, child care expenses tied to the disruption, and any other cost that is a direct result of the offense.6Office of the Law Revision Counsel. 18 USC 2264 – Restitution Restitution is mandatory regardless of the defendant’s ability to pay, though the court can set a payment schedule based on financial circumstances. The TAKE IT DOWN Act contains its own mandatory restitution provision.
What a Victim Can Do
Preserve Evidence First
Evidence collection decides most harassment cases. Platforms delete content, harassers scrub their profiles, and messages disappear. Before you report anything, save your own copies.
Screenshot every harassing message, post, or image as soon as you see it, and make sure the capture shows the date, time, sender’s username or profile handle, and the full browser URL. Capture the whole browser window rather than a cropped section, because partial images invite challenges to authenticity. For disappearing content on platforms like Snapchat or Instagram Stories, screen-record in real time if you can.
Screenshots alone may not carry the day in court. Digital evidence is stronger when it preserves metadata: timestamps, geolocation data, edit history, and account information. Save original email files rather than forwarding them, since forwarding strips header data that identifies the sender’s IP address and routing path. If the platform allows a data export, request your full message history.
Keep a written log of every incident in order: the date, the platform, what was said or sent, and how you responded. Record every time you asked the person to stop, because proving the contact was unwanted is a key element of most harassment claims. Record the harasser’s profile ID, not just the display name, since usernames change but profile IDs do not. Store copies in more than one place, and do not edit, filter, or crop the originals.
Send a Takedown Request
Most social platforms have built-in reporting tools. Use them, but treat platform reporting as a first step, not a solution. Platforms measure reports against their own community guidelines, which do not mirror criminal law, and they may remove a post without further action or decide the content does not violate policy. Preserve your own evidence before reporting, because you may lose access once content is removed.
Under the TAKE IT DOWN Act, platforms that host user-generated content must have a takedown process in place by May 19, 2026, and must act on valid requests within 48 hours.2Congress.gov. The TAKE IT DOWN Act – A Federal Law Prohibiting Nonconsensual Intimate Visual Depictions Once that deadline arrives, ignoring a properly submitted request can itself carry consequences.
Report to Law Enforcement
File a report with the FBI’s Internet Crime Complaint Center at ic3.gov for harassment that crosses state lines or looks like a federal crime.7Internet Crime Complaint Center. Internet Crime Complaint Center (IC3) An IC3 report enters a federal database that helps investigators connect cases involving the same perpetrator across jurisdictions. You can file even when you are unsure whether the conduct qualifies as a federal crime.
For state-law violations, file a police report with your local agency. Bring your log, screenshots, and organized documentation. A police report creates the official record that is often a prerequisite for a protective order. Ask for the report number and the name of the assigned officer. Investigations that rely on digital evidence can take weeks, because law enforcement may need to subpoena internet service providers to link accounts to real identities.
Get a Protective Order
A victim can petition a court for a protective order (sometimes called a restraining order) without waiting for criminal charges. The process starts with a petition describing the harassment, and a judge may issue a temporary order within a day or two. A hearing follows, usually within a few weeks, where the judge decides whether to extend the order. Protective orders can require the harasser to stop all contact, stay away from the victim’s home and workplace, and stop posting about the victim online. Filing fees vary by jurisdiction, from nothing to several hundred dollars.
Sue for Damages
Victims can also file civil lawsuits to recover damages for emotional distress, therapy costs, lost wages, and reputational harm. Defamation claims are common when harassment involves fabricated sexual content or false statements about someone’s sexual history. Civil cases use a lower burden of proof than criminal cases, so a civil suit sometimes succeeds even when prosecutors decline charges. Courts in civil harassment cases can issue permanent injunctions barring the harasser from contact or from posting about the victim, and violating an injunction triggers contempt charges with additional jail time and fines.
Work and School
Harassment tied to a coworker can implicate Title VII of the Civil Rights Act. Employers can be held liable for a hostile work environment when they know about the conduct and fail to act, even if the harassment happened on personal devices or outside work hours.8U.S. Equal Employment Opportunity Commission. Sexual Harassment Students facing cyber sexual harassment from classmates can report it to their school’s Title IX coordinator. The U.S. Department of Education’s Office for Civil Rights confirmed in January 2025 that schools receiving federal funding must address sexual harassment occurring online or through AI-generated content under the 2020 Title IX regulations, and schools that fail to investigate and take corrective action risk losing federal funding.
Taxes on Settlements and Awards
Money recovered from a lawsuit or settlement is usually taxable. Under 26 U.S.C. § 104(a)(2), only damages received on account of personal physical injuries or physical sickness are excluded from gross income.9Office of the Law Revision Counsel. 26 USC 104 – Compensation for Injuries or Sickness Because cyber sexual harassment typically involves emotional distress without physical injury, those damages are fully taxable. One narrow exception applies: if part of the award reimburses actual medical expenses for treating emotional distress, and the victim did not previously deduct those expenses, that portion can be excluded.10Internal Revenue Service. Tax Implications of Settlements and Judgments Punitive damages are always taxable regardless of the type of injury.
On the defendant’s side, 26 U.S.C. § 162(q) bars any tax deduction for settlements or payments related to sexual harassment when the settlement is subject to a nondisclosure agreement, and attorney fees connected to such a settlement are also non-deductible.11Office of the Law Revision Counsel. 26 US Code 162 – Trade or Business Expenses The provision was designed to remove the financial incentive to buy silence through NDAs.