Posting a photo of a suspected shoplifter is not automatically illegal, but it is one of the fastest ways a small business can walk into a lawsuit it cannot afford. The moment you publish someone’s face alongside an accusation of theft, you have made a public claim of criminal conduct. If you cannot prove that claim in court, the person in the photo has the makings of a defamation case, and often a privacy or emotional distress case on top of it. So the better question is not whether it is legal to post shoplifter photos, but whether the payoff is worth the exposure. For most businesses, it is not.
Defamation Is the Core Legal Risk
Defamation is the publication of a false statement of fact that damages someone’s reputation. In writing or online, it is called libel. Falsely accusing a specific person of a crime falls into a category called defamation per se, which means harm to reputation is presumed. The person suing does not have to produce receipts, pay stubs, or a lost job offer to collect. A jury can award damages for presumed harm, humiliation, and mental anguish on the accusation alone.
That changes the economics of a lawsuit against you. In an ordinary defamation case, the plaintiff carries the heavy burden of proving specific financial losses. In a defamation per se case, they skip that step and go straight to damages. Your business starts behind before any evidence comes in.
Why Being Right Isn’t a Clean Defense
Truth is a complete defense to defamation. If you can prove the person actually took your merchandise, you win. The problem is what “prove” means in a courtroom, which is not the same as what it means in your head.
Once a defamation claim is filed, you are the one who has to establish the accusation was true. Your personal certainty does not count. You need admissible evidence a jury will accept, and surveillance footage is often grainy, partial, or missing the moment that would actually show the theft. If the person was never charged, had charges dropped, or was acquitted, your public post looks weaker still, and the plaintiff’s lawyer will make sure the jury hears about it. The presumption of innocence does not formally apply to a civil case, but juries understand the idea and tend to react badly to a business that branded someone a criminal with no legal process at all. Even a case you ultimately win can cost tens of thousands of dollars to defend.
Shopkeeper’s Privilege Doesn’t Cover Publishing
Every state recognizes some version of the shopkeeper’s privilege, which allows retailers to briefly detain someone they reasonably suspect of shoplifting. The privilege is narrow. It requires probable cause rather than a hunch, limits detention to the time reasonably needed to investigate or wait for police, and permits only minimal force. It exists as a defense to false imprisonment claims, nothing more. It does not give you a right to photograph, name, or publicly shame the person. Once you move from detaining to publishing, you are outside the privilege entirely.
Privacy Claims Can Stick Even When the Person Did Steal
Defamation requires a false statement. Several privacy torts do not, which is why “but they really did it” is not the full answer some owners think it is.
Public disclosure of private facts applies when you publicize information about a specific person that a reasonable person would find highly offensive. Truth is not a defense here; the fact that the information is true is what makes it a privacy issue instead of a defamation one. Courts can treat an accusation that a particular person committed a crime as a private matter until it enters the public record through official proceedings. A social media post that reaches far beyond the handful of people who were in the store that day can be treated as an unreasonable disclosure.
False light claims cover being publicly portrayed in a way that would be highly offensive to a reasonable person. Misidentification is the classic trap: a photo captioned “caught stealing” that happens to include a bystander, or a caption vague enough to implicate anyone standing in the frame. The person depicted does not have to prove every detail was false, only that the overall impression was misleading and offensive.
Emotional Distress When a Post Goes Sideways
A person whose photo you post can also sue for intentional infliction of emotional distress. This claim requires conduct that is “extreme and outrageous” by community standards and that causes severe emotional harm. A dry, factual notice might not clear that bar. The way these posts tend to actually read often does.
Mocking language, captions that encourage followers to identify or confront the person, and invitations to share widely can push a post into outrageous territory. When something goes viral, the person in the photo can receive threats, lose their job, or be publicly humiliated at a scale you never planned on. You remain legally responsible for the foreseeable consequences. Courts look at the full context: the tone of the post, whether you encouraged pile-on, and the vulnerability of the person depicted. Severe distress is usually proven with medical records or testimony from a mental health professional documenting anxiety, depression, or PTSD tied to the incident.
Criminal Exposure You Probably Didn’t See Coming
Owners tend to think of a shoplifter post as, at worst, a civil problem. It can also be a criminal one.
Cyberstalking and Harassment
Federal law makes it a crime to use the internet in a course of conduct that causes, or would reasonably be expected to cause, substantial emotional distress, when done with intent to harass or intimidate. Penalties include up to five years in prison.1Office of the Law Revision Counsel. 18 U.S. Code 2261A – Stalking One measured post likely does not meet that threshold. Repeated posts targeting the same person, posts that publish a home address or workplace, or posts that explicitly urge followers to take action can. Many states have their own cyberstalking and harassment statutes with lower thresholds than the federal law.
Extortion
Telling a suspected shoplifter something like “pay for what you took or I’ll post your picture” is where business owners get into real trouble. Threatening to expose someone’s alleged criminal conduct in order to extract payment can meet the definition of extortion in most states. The fact that the person may have actually stolen from you does not make the threat lawful. Extortion statutes broadly prohibit using threats of exposure or disgrace to obtain money or other consideration. Conditioning the non-posting of a photo on payment is a direct route into that statute.
Minors Multiply Every Risk
If the person in the photo is a minor, every risk above gets worse. Federal law specifically prohibits making public the name or picture of a juvenile in connection with a delinquency proceeding, unless the juvenile is being prosecuted as an adult.2Office of the Law Revision Counsel. 18 USC 5038 – Use of Juvenile Records That statute addresses court proceedings directly, but it reflects a broader legal commitment to protecting minors’ identities, and state laws often go further.
Several states impose criminal penalties for wrongful disclosure of confidential juvenile record information, with fines running up to $2,000. A handful also give the minor’s family a private right of action for civil damages on top of any fines. Juries and judges are also far more willing to find that publicly shaming a child counts as “outrageous” conduct for emotional distress purposes, and damage awards reflect that.
Your Insurance Probably Won’t Cover Any of This
Standard commercial general liability policies include “personal and advertising injury” coverage, which on paper covers libel and slander claims. Nearly every policy also contains an intentional act exclusion. Because you deliberately chose to publish the photo and the accusation, your insurer will usually argue the conduct was knowing and intentional and refuse to indemnify you. Even insurers that agree to defend the case initially often decline to pay the resulting judgment. In practice, business owners who post shoplifter photos end up funding their own defense and paying any damages out of pocket. A single lawsuit of this kind can end a small business.
Better Ways to Respond to Theft
Avoiding the public post does not mean doing nothing. Several alternatives get you most of what you actually want without the liability.
- Report to law enforcement and share your surveillance footage. Police routinely release suspect images through official channels, and when they do, the legal risk sits with the agency instead of your business. This is the single most effective step, and the one most often skipped in favor of a social media post.
- Issue a formal trespass notice, verbally or in writing, banning the person from your property. If they come back after being warned, they can be arrested for trespassing, with no public accusation attached.
- Send a civil demand letter. All 50 states and the District of Columbia have civil recovery statutes that let retailers seek payment from shoplifters for their losses, with statutory penalties on top of actual damages. These letters are private and create no public record.
- Invest in visible deterrents: cameras, prosecution warning signage, electronic article surveillance tags, and trained loss-prevention staff. Less satisfying than a public callout, and far less expensive than a lawsuit.