To stop cyberstalking, you need to move on two fronts at once: preserve the evidence so it can be used, and trigger the legal mechanisms that force the behavior to end. Cyberstalking is a crime in all 50 states and under federal law, and the tools available to you include protective orders, criminal charges carrying up to five years in federal prison for a base offense, and civil lawsuits for damages. Acting early makes every one of those tools stronger.
Document Every Incident First
Evidence disappears fast online. Stalkers delete messages, deactivate accounts, and edit posts once they suspect a case is building. Before you block, before you call police, capture everything.
Take full-page screenshots of every harassing message, email, post, and comment. Each screenshot should show the URL in the browser bar, the stalker’s username or profile, and a visible timestamp. If the platform doesn’t display timestamps, capture the full screen so your device’s clock is included.
For emails, save the full message headers, not just the body. Headers contain the sender’s IP address and routing information that can help investigators trace where a message actually originated. Most email services expose headers through an option like “Show Original” or “View Source.” Save those headers as separate files alongside your screenshots.
Keep a written log with the date, time, platform, and a short description of each incident. This sounds tedious, but a clean chronological log is often the difference between a police report that gets attention and one that sits in a pile. Courts also find organized records far more persuasive than a jumble of screenshots.
Lock Down Your Accounts
Change passwords on every account: email, social media, banking, cloud storage. Use strong, unique combinations. If you’ve been reusing passwords, a stalker who compromises one account can reach the rest. Turn on two-factor authentication everywhere it’s available, and use an authenticator app rather than SMS codes when possible, because phone numbers can be hijacked through SIM-swapping.
Review privacy settings on every social platform. Set profiles to private, disable location tagging on posts and photos, and restrict who can see your friends list. Check each account’s login history for devices or locations you don’t recognize. If you find unauthorized access, log out all sessions, change the password, and enable two-factor authentication immediately.
If the stalker seems to know things they shouldn’t, your phone may have stalkerware installed. Signs include rapid battery drain, the device turning on and off by itself, or unexplained spikes in data usage. The most telling sign is the stalker’s own behavior: if they reference private conversations or locations with suspicious accuracy, trust your instincts. A professional technician or your local domestic violence advocacy program can inspect the device. Be cautious about removing stalkerware yourself, since the stalker may notice and escalate.
Block and Report on Every Platform
Block the stalker on every platform where contact has occurred: social media, email, messaging apps, gaming platforms. Blocking won’t stop a determined stalker who spins up new accounts, but it does two useful things. It reduces the volume of direct harassment reaching you, and it creates a documented record that you explicitly told this person to stop contacting you. That record matters later in court.
After blocking, report the behavior to each platform’s abuse or safety team. Every major platform prohibits harassment in its terms of service and has a reporting mechanism. Attach your screenshots and incident logs when you file. Detailed reports are more likely to result in suspension or a permanent ban. Even when the platform response is slow, the report itself becomes additional evidence that you took steps to stop the contact.
File a Police Report
Contact your local police department when the cyberstalking involves threats, makes you fear for your physical safety, or persists despite blocking and platform reports. Many departments now have cybercrime units or officers trained in digital investigations. Bring your documentation: the screenshot folder, the incident log, email headers, and any records of accounts the stalker has created to get around your blocks.
Be specific when you file. Rather than saying “someone is harassing me online,” walk through the timeline: when it started, how many incidents have occurred, what platforms are involved, whether threats have been made, and whether the stalker has shown knowledge of your physical location. A detailed report gives officers something concrete to investigate and strengthens any future request for criminal charges or a protective order.
After filing, get a copy of the police report and note the report number. You’ll need both if you seek a protective order or if the case is referred to prosecutors. Follow up periodically; cases can stall without a squeaky wheel.
When to Contact the FBI
Federal law makes it a crime to use any electronic communication service to stalk someone across state lines or to cause substantial emotional distress or fear of serious bodily harm to the victim or their immediate family. Penalties scale with the severity of harm: up to five years in prison for the base offense, up to ten years if serious bodily injury results, up to twenty years for life-threatening injury, and up to life in prison if the victim dies. If the stalking violates an existing protective order, there is a mandatory minimum of one year in federal prison.
You can report cyberstalking to the FBI’s Internet Crime Complaint Center at ic3.gov. The IC3 reviews complaints and refers them to the appropriate federal, state, or local law enforcement agency. File with the IC3 when the case involves a stalker in a different state, threats of physical violence, attempts to hack your accounts, or harassment so severe and sustained that local police resources seem insufficient. If you believe you are in immediate danger, call 911 first. The IC3 handles investigative referrals, not emergencies.
Get a Protective Order
A protective order (sometimes called a restraining order or order of protection) is a court order that legally prohibits the stalker from contacting you, including by text, email, social media, or through third parties. Violating a protective order is a separate criminal offense in every state, meaning the stalker faces arrest just for sending you a message after the order is in place.
The process starts by filing a petition at your local courthouse. You’ll describe the stalking behavior, present your evidence, and explain why you need protection. In most jurisdictions, a judge can issue a temporary or emergency order the same day you file, without the stalker being present. These temporary orders typically last five to fourteen days and are designed to protect you while the court schedules a full hearing. At that hearing, both sides can present evidence, and the judge decides whether to issue a longer-term order that may last a year or more.
Filing fees for stalking-related protective orders are waived in all U.S. states and territories. You may face costs for serving the order on the stalker, which can range from $30 to $100 when a private process server is used, though many jurisdictions waive this cost as well or have the sheriff’s office serve the papers at no charge. Many courts have victim advocates on-site who can help you complete the paperwork. The U.S. Department of Justice also funds the Legal Assistance for Victims Program, which provides free legal representation to stalking victims for protective order hearings and related matters.
If You Don’t Know Who the Stalker Is
You can still seek a protective order by filing against a “John Doe.” Once the case is filed, your attorney can subpoena social media companies or internet service providers to uncover the stalker’s identity. After identification, the case is amended to include the real name. It takes longer, but courts handle anonymous-defendant cases routinely.
In urgent situations, a judge may grant an ex parte order, meaning the stalker doesn’t need to be notified or present, if you can show you would suffer immediate and irreparable harm waiting for a hearing.
Sue for Damages in Civil Court
Criminal charges punish the stalker. A civil lawsuit compensates you. These are separate legal tracks, and you can pursue both simultaneously. A civil case doesn’t require criminal charges or a conviction to move forward.
The most common legal theory in cyberstalking civil suits is intentional infliction of emotional distress, which requires showing that the stalker’s conduct was extreme and outrageous, that they acted intentionally or recklessly, and that their behavior caused you severe emotional distress. Many states also have specific civil stalking statutes that let victims sue for compensatory damages, attorney fees, and court costs. Some states allow punitive damages on top of compensation for particularly egregious behavior.
Attorney fees typically run from a few thousand dollars for straightforward cases to tens of thousands for complex litigation, though some attorneys take stalking cases on contingency if the damages are substantial. Even modest judgments create meaningful consequences for stalkers and can fund your recovery.
Remove Your Information from the Internet
Data broker websites (Spokeo, WhitePages, Intelius, PeopleFinders, and dozens of others) collect and sell your home address, phone number, email, and family connections. A stalker with your name can find your physical location in minutes through these sites. Removing your information won’t happen overnight, but it significantly narrows what a stalker can find.
Each data broker has its own opt-out process. Some let you fill out a simple online form. Others make you jump through hoops, including uploading a photo of your driver’s license. Start with the easiest sites and work through the list. Free resources like the Big Ass Data Broker Opt-Out List, maintained by journalist Yael Grauer, compile the removal links for major brokers in one place. Paid services handle the process for roughly $100 to $500 per year depending on how many brokers they cover.
Google also lets you request removal of personal information (phone numbers, email addresses, and home addresses) from its search results directly. You submit a removal request through Google’s content removal form, identify the type of personal information displayed, and provide the URLs where it appears. Google reviews and removes qualifying results. This doesn’t delete the information from the source website, but it stops it from appearing when someone searches your name.
Check whether your login credentials have already been exposed in data breaches by searching your email address on Have I Been Pwned (haveibeenpwned.com), a free service that indexes billions of breached records. If your email appears in a breach, change that password immediately everywhere you used it. A stalker who finds your credentials in a breach database can access your accounts without any sophisticated hacking.
Protections at Work and School
If cyberstalking is affecting your workplace, your employer may have legal obligations. No federal law specifically addresses cyberstalking between coworkers, but Title VII of the Civil Rights Act prohibits a hostile work environment based on sex, race, or other protected characteristics, and courts have found that online harassment counts, because they treat digital platforms as extensions of the workplace. Report the behavior to your HR department and request that your employer enforce its harassment and technology-use policies.
Students facing cyberstalking have protections under Title IX when the stalking occurs on the basis of sex. Federal regulations define sexual harassment to include stalking as defined by the Violence Against Women Act, and schools that receive federal funding must respond to such reports. Once a school has notice of stalking allegations, it must offer supportive measures to the victim, investigate the allegations, and follow a formal grievance process. The school bears the burden of gathering evidence, not the student. These protections apply on and off campus if the school had substantial control over the context in which the harassment occurred.
Build a Physical Safety Plan
Cyberstalking doesn’t always stay online. A stalker who knows your routines from social media monitoring or data broker lookups may escalate to physical surveillance or confrontation. A safety plan bridges the gap between digital and physical protection.
Vary your daily routes to work, school, and regular errands. Tell family, friends, neighbors, and coworkers that you’re being stalked, and give them specific instructions: what the stalker looks like if known, what to do if contacted, and not to share any information about your location or schedule. Keep your phone charged, and make sure at least one trusted person knows your general whereabouts during the day.
If you’ve obtained a protective order, carry a copy with you everywhere: in your car, your bag, and saved as a photo on your phone. If the stalker violates the order, having it on hand means law enforcement can act immediately rather than waiting to verify the order in their system. The VictimConnect Resource Center (call or text 1-855-4-VICTIM) can connect you with local victim advocates who help with safety planning, legal referrals, and emotional support.