Posting someone’s license plate online is not, on its own, illegal. Plates are displayed in public and anyone can read, photograph, or share the number. What turns a plate post into a legal problem is what surrounds it: threats, personal details about the owner, a pattern of harassing posts, or a call for others to go after the driver. Those factors can pull the post under federal cyberstalking law, state anti-doxing statutes, or civil claims for invasion of privacy and defamation.
Why a License Plate Alone Is Public Information
License plates exist to identify vehicles on public roads. Because they’re mounted on the outside of a car and visible to every passing driver, pedestrian, and camera, courts treat anything displayed on the exterior of a vehicle as carrying a reduced expectation of privacy. Reading a plate, photographing it, or noting it down in a parking lot or on the highway is legal. Sharing that number in a social media post, dashcam video, or online review doesn’t change the baseline.
A quick word on the Driver’s Privacy Protection Act, since it’s the law people expect to apply here. The DPPA restricts state DMVs and their contractors from releasing personal information tied to motor vehicle records. It defines protected “personal information” as things like name, address, phone number, Social Security number, driver identification number, photograph, and medical or disability data.1Office of the Law Revision Counsel. 18 USC 2725 – Definitions License plate numbers are not on that list, and the statute does not regulate what private individuals do with a plate they observed in public.2Office of the Law Revision Counsel. 18 USC 2721 – Prohibition on Release and Use of Certain Personal Information From State Motor Vehicle Records Where the DPPA does matter is if someone uses a plate to pull DMV records for an unauthorized purpose and then publishes what they find. That opens the door to a federal civil suit with a guaranteed minimum of $2,500 per violation, plus potential punitive damages and attorney’s fees.3Office of the Law Revision Counsel. 18 USC 2724 – Civil Action
When Posting a Plate Crosses the Line
The line isn’t the plate. It’s the surrounding conduct. A caption like “this driver cut me off” is annoying but almost certainly protected speech. A post pairing the plate with the owner’s home address, workplace, daily routine, and language urging others to confront them is a different situation entirely. Prosecutors and courts look at intent, context, and foreseeable harm.
Federal Cyberstalking
Federal law makes it a crime to use the internet or any electronic communication service in a course of conduct that causes, or would reasonably be expected to cause, substantial emotional distress to a specific person or their immediate family. The statute requires intent to harass, intimidate, or place the target under surveillance with intent to harm.4Office of the Law Revision Counsel. 18 USC 2261A – Stalking A single plate post likely won’t qualify. Repeatedly posting someone’s plate to harass them, combining it with identifying details, or directing followers to target the owner can.
Penalties are steep. A baseline conviction carries up to five years in prison, rising to ten years if serious bodily injury results and up to life if the victim dies. Violating a protective order while stalking adds a mandatory minimum of one year.4Office of the Law Revision Counsel. 18 USC 2261A – Stalking
Federal Threats
If the post includes a threat to kidnap or injure someone and travels across state lines, 18 U.S.C. § 875(c) can apply. Courts read “threat” as a serious expression of intent to inflict harm that a reasonable person would perceive as genuine. The speaker doesn’t have to intend to follow through, but must at least be recklessly aware that the statement reads as threatening. The Sixth Circuit held in U.S. v. Alkhabaz that the communication must be intended to intimidate or accomplish a goal through fear, not simply express dark thoughts.5Justia. United States v Alkhabaz, 104 F3d 1492 (6th Cir 1997)
State Anti-Doxing Laws
Roughly 17 states as of 2025 treat some form of doxing as a standalone crime, using labels like “dissemination of personal information on the internet,” “improper disclosure of private information,” or “cyberintimidation by publication.” Others fold the same conduct into existing stalking or harassment statutes. Most share three elements: disclosing personal identifying information, doing so without consent, and acting with intent to cause harm or harassment.
Whether a plate number alone counts as “personal identifying information” depends on how the state defines the term. Some definitions are broad enough to reach vehicle registration data. Others center on home addresses, phone numbers, and Social Security numbers. Posting the plate together with a photo of the person, their workplace, or their neighborhood makes the statute far more likely to apply regardless of how narrowly it defines the term.
Civil Lawsuits That Don’t Require a Crime
Even where no prosecutor gets involved, the poster can be sued. Privacy and defamation claims turn on harm and wrongful conduct, not on a criminal conviction.
Public Disclosure of Private Facts
This claim covers publicly disclosing information that is genuinely private, offensive to a reasonable person, and not newsworthy. The plate itself fails the first element because it’s displayed in traffic. Pairing it with private information, such as a medical condition, an affair, or a home address, can support a claim because courts look at the totality of what was disclosed.
Intrusion Upon Seclusion
This tort covers intentional intrusions into someone’s private affairs that a reasonable person would find highly offensive. A single photo in a public lot won’t qualify. Repeatedly photographing someone’s vehicle, tracking their movements through the plate, or using the plate to monitor where they go can. The intrusion itself is what matters, even if nothing is ever posted.
Defamation
Posting a plate alongside false accusations, such as calling the driver a sex offender or a drunk driver without basis, can trigger a defamation suit. The plate identifies the person to anyone who recognizes the vehicle, which satisfies the “of and concerning” element. Damages can include emotional distress, reputational harm, and in some states punitive damages for knowing or reckless falsehoods.
What It Can Cost
Criminal exposure depends on the statute and the severity of the conduct. Federal cyberstalking convictions run up to five years in the baseline case, with heavier penalties tied to injury or death.4Office of the Law Revision Counsel. 18 USC 2261A – Stalking State harassment, stalking, and doxing penalties vary widely; some jurisdictions treat the conduct as a misdemeanor with up to a year in jail, while felony stalking in others carries several years of imprisonment.
Civil exposure can be just as serious. A DPPA claim guarantees at least $2,500 per violation, plus attorney’s fees and possible punitive damages.3Office of the Law Revision Counsel. 18 USC 2724 – Civil Action Privacy and defamation verdicts turn on the harm proven, and emotional distress and punitive awards can push totals into six figures when the conduct is egregious.
Then there’s the practical fallout. Employers monitor online behavior, and a public accusation of doxing or online harassment can lead to termination. Restraining or protective orders can limit where the poster goes and who they contact. And posts follow people; the person who put someone else’s plate online in bad faith may find their own name permanently attached to the incident in search results.
If Your Plate Has Been Posted
Several routes can get the content taken down or buried.
Report It to the Platform
Most major social platforms let users report posts that share personal information without consent, and many have specific doxing policies covering posts that combine personal identifiers with threats or calls to harassment. Use the built-in reporting tools and pick the privacy or harassment category that fits. Platforms tend to act faster when explicit threats are involved.
Ask Search Engines to Remove It
Even if the original post stays up, search engines will sometimes stop surfacing it. Google accepts removal requests for personal information that appears alongside explicit or implicit threats, and for large aggregations of personal data posted without a legitimate purpose.6Google Search Help. Remove My Private Info From Google Search Search removal doesn’t delete the content, but it dramatically shrinks who can find it.
Send a Cease and Desist Letter
A formal letter demanding removal does two things: it often prompts voluntary takedown, and it creates a paper trail showing you objected. It carries no legal force on its own, but ignoring one weakens the poster’s later claim that they didn’t know their conduct was unwelcome, which matters if you pursue a harassment or stalking case.
Go to Court
If nothing else works, you can sue and ask a court to order the content removed. Filing fees for civil cases vary by jurisdiction, generally running from a few hundred dollars in smaller courts to $500 or more for general civil filings. When the situation involves imminent physical danger, many courts offer expedited emergency protective orders that can issue within days or hours.