To prove cyberstalking, you have to show a pattern of intentional electronic contact that put you in reasonable fear or caused substantial emotional distress, and you have to back that pattern with preserved, authenticated evidence. A single ugly message won’t do it. What convinces police, prosecutors, or a judge is volume, chronology, and clean documentation that ties each incident to the harm it caused. Learning how to prove cyberstalking is largely a matter of collecting the right kinds of evidence, preserving them in a way that survives challenge, and organizing them so an investigator can follow your case without doing the work themselves.
What You Have to Prove
The federal cyberstalking statute, 18 U.S.C. ยง 2261A, targets anyone who uses the internet, email, or other electronic communication to engage in a pattern of conduct that either places someone in reasonable fear of death or serious bodily injury, or causes (or would reasonably be expected to cause) substantial emotional distress.1Office of the Law Revision Counsel. 18 USC 2261A – Stalking That language gives you three elements to hit.
A course of conduct. The law requires repeated actions forming a pattern, not one bad email. Dozens of messages over weeks, persistent contact after you asked the person to stop, an escalating series of posts about you online: those establish the pattern. The more incidents you document, the stronger this element becomes.
Intent. The behavior has to be willful. You don’t need a confession. Intent is routinely inferred from the content of the messages, how often they arrive, and whether the person kept going after being told to stop or blocked.
Harm. You can show the conduct placed you in reasonable fear of death or serious physical injury to yourself, an immediate family member, a spouse or intimate partner, or even a pet. Or you can show it caused (or would reasonably cause) substantial emotional distress.1Office of the Law Revision Counsel. 18 USC 2261A – Stalking That second path matters, because many cyberstalking cases involve relentless psychological harassment rather than explicit death threats.
Every state also has its own stalking or harassment law, and many explicitly cover electronic conduct. Definitions of the required pattern and the required level of harm vary, so the specific elements you need to prove depend on where you live. The federal statute primarily applies when the conduct crosses state lines or uses interstate electronic communications.
Evidence That Carries Weight
Preserve everything, even material that seems minor on its own. Cases are built on volume and pattern. One threatening screenshot may not be enough. That same screenshot as part of fifty documented contacts over three months paints a clear picture of a course of conduct.
Direct Communications
Save every text, email, direct message, voicemail, and chat log from the stalker. When you screenshot, make sure the sender’s username, phone number, or email address and the date and time stamp are visible. For emails, also save the full message with headers intact. Email headers carry metadata like the sender’s IP address, routing information, and server timestamps that help investigators trace origin and verify authenticity.
Public Posts and Online Activity
Capture screenshots of any social media posts, comments, videos, or profile pages the stalker creates about you. Public harassment is powerful evidence of intent because the person chose to broadcast the behavior. Copy the URL of each post as well, since posts can be deleted or edited later.
Location and Surveillance Evidence
If the stalker references your physical location, movements, or daily routine in ways they shouldn’t know, document those references alongside any evidence of how they got the information. Check your devices for unfamiliar tracking apps. Screenshot any location-tagged photos or check-ins the stalker has made that correspond to your whereabouts. This kind of evidence is especially compelling because it shows invasive surveillance that goes beyond words on a screen.
Witnesses
Collect the names and contact information of anyone who has seen the harassment or its effects on you. A coworker who watched you receive threatening messages in real time, a friend who saw the public posts, a family member who can describe how your behavior and mental health changed: each provides corroboration that strengthens your case.
Preserving Evidence So It Holds Up
This is where most cases quietly weaken before they ever reach a detective’s desk. Screenshots on their own are limited evidence because they’re just images. They don’t inherently prove when the content was created, who created it, or whether the image was altered. Investigators and courts need more.
When you capture a screenshot, preserve the original file without cropping or editing. Note who took it, what device was used, and the exact date and time. Where you can, save the complete webpage rather than just an image of it. A full save preserves underlying HTML and metadata that a screenshot strips away. For particularly important evidence, use a web archiving service that creates a timestamped, independently verifiable copy of the page.
Keep originals separate from any copies you share. Store originals on a USB drive or external hard drive in a secure location, and keep a backup in cloud storage behind a strong password. Under Federal Rule of Evidence 901, digital evidence must be authenticated to be admissible, meaning you have to be able to show how it was obtained and that it wasn’t tampered with. A clean, documented collection process is what gets you there.
If the stalking is severe and criminal prosecution or a civil lawsuit looks likely, hiring a digital forensics expert early is worth considering. Forensic imaging tools and hash validation produce copies that are cryptographically verified as unaltered. Expensive, and difficult for a defense attorney to challenge.
Building the Log That Ties It Together
Organize everything into a chronological log. This document becomes the backbone of your report, so make it easy for someone unfamiliar with your situation to follow.
For each incident, record the date, time, and platform where the contact happened. Write a short, factual description of what the person said or did. Then note the impact: “I was afraid to leave my house,” “I couldn’t sleep and called in sick to work,” “I changed my route to avoid the location they mentioned.” Those impact notes connect the stalker’s actions to the harm element the law requires you to establish.
Set up a simple reference system so each log entry points to the corresponding evidence. Label screenshots and saved files with consistent numbering, and add a note like “See Screenshot #14” next to the matching entry. When an officer reads your log, they should be able to move straight from an entry to the proof that backs it. That kind of organization signals a serious, well-documented complaint, which matters more than people realize when investigative resources are scarce.
Proving It When the Stalker Is Anonymous
Anonymous or pseudonymous harassment is harder, not impossible. Law enforcement has tools you don’t, and identification usually depends on giving them enough to work with.
When you file, provide every piece of identifying information you have: usernames, email addresses, phone numbers (even spoofed ones), IP addresses pulled from email headers, and URLs of every account the stalker has used. Police and federal investigators can serve subpoenas on platforms and internet service providers to obtain subscriber information tied to those accounts. The process typically works in stages. A subpoena to the platform produces an IP address and registration details. A second subpoena to the internet service provider then reveals the account holder’s identity.
If law enforcement declines or moves slowly, a civil attorney can file what’s called a “John Doe” lawsuit against the unknown person. That opens court-issued subpoenas through the discovery process, aimed at the same platforms and ISPs. Identity information obtained through civil subpoenas can then support a criminal complaint or a civil claim for damages. It costs money in attorney fees, but it gives you a way to push identification forward when the criminal system isn’t moving.
Bringing Your Case to Law Enforcement
Start with your local police or sheriff’s department. Call the non-emergency line and ask to schedule a time to file a formal report. Walk-ins are fine, but scheduling means an officer will have time to sit with you rather than rushing between calls.
Bring your complete package: the chronological log, printed screenshots labeled to match the log entries, and a USB drive with the original digital files. Both formats matter. The officer can review paper during the meeting while the department retains the full digital evidence. Walk the timeline methodically, pointing to the corresponding proof for each incident and explaining how the behavior caused you fear or distress. After filing, ask for a copy of the report and the case number. You’ll need both if you pursue a protection order, file an insurance claim, or follow up with another agency.
Filing With the FBI’s IC3
You can also file with the FBI’s Internet Crime Complaint Center, the federal government’s central intake point for cybercrime reports.2Internet Crime Complaint Center (IC3). Internet Crime Complaint Center Home Page The online form at ic3.gov asks for your information, details about the subject, a narrative description of the incident (limited to 3,500 characters, so keep it focused), and technical details like email headers or IP addresses.3Internet Crime Complaint Center (IC3). IC3 Complaint Form IC3 is especially important when the stalking crosses state lines or involves someone in another country, since those scenarios fall squarely within federal jurisdiction.
Reporting to Platforms
Report the stalker’s accounts and posts to every platform where the harassment happens. Most major platforms, including Facebook, Instagram, X, TikTok, Snapchat, YouTube, and Discord, have reporting mechanisms for harassment and threats that violate their terms of service.4StopBullying.gov. Report Cyberbullying Platform reports can result in account suspension or content removal. More important for your case, each report creates an internal record at the platform that law enforcement can later reference when serving a subpoena for account data. Report only after you’ve preserved your evidence, since removal can make later documentation harder.
A Parallel Option: Civil Protection Orders
A criminal report and a civil protection order are separate tracks, and you don’t have to choose between them. A protection order (sometimes called a restraining order or no-contact order) legally prohibits the stalker from contacting you. Violation is a separate offense and, under federal law, triggers a mandatory minimum of one year in prison when the underlying conduct amounts to stalking.5Office of the Law Revision Counsel. 18 USC 2261 – Interstate Domestic Violence
To obtain one, you generally file a petition in civil court describing the stalking. You need to show that the conduct was knowing and repeated, forming a course of conduct, and that it caused you reasonable fear or emotional distress. The standard of proof is typically “preponderance of the evidence,” meaning more likely than not. That’s a significantly lower bar than the “beyond a reasonable doubt” standard for criminal conviction, so a protection order may be achievable even when a criminal prosecution is uncertain.
Many jurisdictions waive filing fees for protection orders tied to stalking and domestic violence. The same evidence log and documentation you prepare for police works for a protection order petition. If a judge grants a temporary order, a hearing is scheduled where both sides can present evidence before the court decides whether to issue a longer-term order.
Where to Get Help
The VictimConnect Resource Center operates a 24/7 anonymous and confidential hotline at 1-855-484-2846, where trained specialists provide emotional support, information, and referrals to local services for crime victims.6VictimConnect. VictimConnect Resource Center The Stalking Prevention, Awareness, and Resource Center (SPARC) at stalkingawareness.org provides safety planning guidance and information for stalking victims.7The Stalking Prevention, Awareness, and Resource Center. Stalking Prevention, Awareness, and Resource Center Homepage If the cyberstalking involves a current or former intimate partner, the National Domestic Violence Hotline at 1-800-799-7233 offers additional support. All three can connect you with local resources and help you plan next steps.