What is cyberstalking?
Cyberstalking is the repeated use of digital technology to harass, monitor, threaten, or intimidate a specific person.
Cyberstalkers may use social media, messaging apps, email, spyware, GPS trackers, or public records to contact, monitor, or gather information about someone without their consent. The behavior may aim to control, pressure, humiliate, or frighten the target.
Cyberstalking can overlap with other harmful acts, including online harassment, identity theft, cyberbullying, doxxing, blackmail, and threats.
Cyberstalking often falls into four behavior categories:
- 1. Unwanted contact — repeated messages, calls, emails, comments, friend requests, or attempts to reach someone after they’ve asked for no contact.
- 2. Digital surveillance — the use of social media, location data, spyware, GPS trackers, or public records to monitor someone.
- 3. Account compromise — attempts to access accounts, read private messages, lock someone out, or impersonate them.
- 4. Harassment campaigns — false claims, doxxing, reputation attacks, or attempts to get other people to target the same person.
Physical stalking and cyberstalking often overlap. A stalker may use online clues to find someone’s home, workplace, school, or daily routine. They may also use offline encounters to pressure the person online.
Checking someone’s public profile once doesn’t automatically count as cyberstalking. For example, viewing a new coworker’s LinkedIn profile or Instagram page isn’t stalking by itself. Cyberstalking involves repeated unwanted behavior, harmful intent, and actions that cause fear, distress, or loss of safety.
How to tell if you are being cyberstalked
Cyberstalking rarely starts with a direct threat. It can begin with repeated messages, unusual account activity, or a person who keeps showing up across your online spaces.
One warning sign doesn’t prove cyberstalking. A repeated pattern of unwanted contact, monitoring, or intimidation is what matters.
You may be dealing with cyberstalking if:
-
Someone mentions your location, plans, workplace, friends, purchases, or private conversations you didn’t share with them.
-
Someone monitors your posts across several accounts and responds to every one of them, even after you’ve asked them to stop.
-
Someone contacts your friends, family, coworkers, classmates, or partner to get information about you or damage your reputation.
-
Your accounts show logins you don’t recognize, password reset emails you didn’t request, or messages you didn’t send.
-
You’re locked out of an account because someone changed your password, recovery email, or two-factor authentication settings.
-
Your device shows possible stalkerware signs, such as fast battery drain, unfamiliar apps, high data use, strange permission requests, or an active microphone or camera indicator.
-
The same person appears near places you recently posted about or contacts you after you visit a specific location.
Being targeted is never your fault. Responsibility lies with the person who ignores your boundaries, monitors you without consent, or uses digital tools to frighten you.
Common examples of cyberstalking
Cyberstalking can involve repeated social media monitoring or more invasive tactics, such as spyware, account takeover, and hidden trackers. The following examples show how stalkers can use digital tools to gather information, impersonate someone, or keep unwanted contact going.
Catfishing and fake profiles
Catfishing happens when someone creates a fake online identity. A cyberstalker may use a fake profile to approach you as a friend of a friend, potential date, customer, recruiter, or classmate. Someone can also use fake profiles to impersonate the target and damage their reputation.
If you suspect a fake profile, these checks can help:
- Look at the friend list. Fake profiles often have very few friends or a strange mix of contacts with no clear connection.
- Run a reverse image search. Save the profile picture and search it online. Several profiles with the same photo can point to impersonation.
- Review the photos. A profile with only selfies, stock-style images, or single-person shots may be fake.
- Suggest a video call. A catfisher may make excuses, cancel repeatedly, or refuse a short live call.
Monitoring location check-ins on social media
Location check-ins can reveal where you are, where you’ve been, and which places you visit often. A single tagged coffee shop may not reveal much, but several check-ins can show patterns, such as your commute, gym schedule, favorite lunch spot, or weekend routine.
Public posts can also reveal clues. Street signs, school logos, office windows, event badges, or neighborhood landmarks can expose where you are even if you don’t add a location tag.
Virtual surveillance with Google Maps Street View
If a cyberstalker finds your home address, they can use Google Maps Street View to view the outside of your building or neighborhood. They may look for entrances, parking areas, nearby streets, visible security cameras, or other details that reveal your surroundings.
A stalker may also identify an address from photos you post. Landmarks, reflections, windows, shop signs, or the view outside your home can reveal enough details to match the image to a real location.
In 2019, Hibiki Sato allegedly found and attacked a singer in Japan after studying the reflections in her eyes in a photo she posted online. The risk remains current because phone cameras, high-resolution images, and public map tools can still expose location clues.1
Hijacking your webcam
A cyberstalker may try to access your webcam by tricking you into downloading malware. Malware is malicious software that can infect your device, steal data, or give another person remote access.
Webcam hijacking often starts when you open a harmless-looking file, link, fake update, or app. After installation, the malware may record audio, take screenshots, collect files, or turn on the camera. If your camera has been hacked, you may see a camera indicator, such as a green dot, when you aren’t using a camera app.
Installing stalkerware or spyware
Stalkerware is a type of spyware, which is software that secretly tracks activity or collects information.
Stalkerware can monitor a person through their device without their consent — it can track location, record audio, read texts, access call logs, view browsing history, and collect app activity.
Some companies market their tools as parental control or employee monitoring apps, but stalkers can misuse them. Stalkerware often runs in the background under a hidden app icon or a generic name.
Using geotags and metadata to track your location
Digital photos can contain geotags, which is location data saved inside the file. Photos may also contain EXIF data, a type of metadata that can include the time, date, device model, and location where the image was taken.
If you share a photo with location metadata intact, a cyberstalker may use online tools or apps to extract it. Social media platforms often remove some metadata, but you shouldn’t rely on that protection. Messaging apps, cloud albums, shared folders, and email attachments may keep location data intact, so check your privacy settings or remove metadata before sharing.
GPS and Bluetooth tracker misuse
Small Bluetooth trackers, such as AirTags and similar devices, help people find keys, bags, and luggage. GPS trackers can locate vehicles or belongings through satellite-based location data. However, a stalker may hide one of these in your car, coat, bag, or stroller.
iPhones and Android phones can alert you when an unknown Bluetooth tracker, such as an AirTag, moves with you. If you receive an unknown tracker alert, don’t ignore it. Move to a safe place, save screenshots, and follow your phone’s instructions. For a more detailed guide, read about AirTag stalking.
Account takeover and impersonation
A stalker may try to take over your email, social media, messaging, cloud, or banking accounts. They may guess your password, try passwords exposed in data breaches, send phishing messages, or exploit account recovery questions.
After an account takeover, a stalker can read private messages, track your activity, lock you out, reset passwords on other services, or impersonate you. Strong unique passwords and two-factor authentication can reduce that risk.
Cyberstalking vs. cyberbullying, online harassment, and doxxing
People often use the terms cyberstalking, cyberbullying, online harassment, and doxxing to describe similar harmful behavior. The terms overlap, but they don’t mean the same action.
Online harassment is the broadest term. It covers many types of abusive behavior through digital channels. Cyberstalking is more specific because it involves a repeated, targeted pattern of unwanted contact, monitoring, threats, or intimidation aimed at one person.
Cyberbullying often happens between peers and frequently involves minors. Doxxing means publishing private information, such as an address, phone number, workplace, or family details, without consent. Both can overlap with cyberstalking when they become repeated, targeted, and fear inducing.
| Term | Typical target | Defining feature | Overlap with cyberstalking |
|---|---|---|---|
Cyberstalking | A specific person | Repeated monitoring, contact, threats, or intimidation | May include harassment, doxxing, impersonation, and spyware |
Cyberbullying | Often minors or peers | Cruel, humiliating, or threatening behavior through digital channels | Can become cyberstalking if it involves repeated pursuit or monitoring |
Online harassment | Individuals or groups | A broad category of abusive digital behavior | Cyberstalking is one form of online harassment |
Doxxing | A person, family, or organization | Public release of private information | Stalkers may use doxxing to expose, intimidate, or direct others toward the target |
How to protect yourself from cyberstalking
You can’t control another person’s behavior, but you can reduce how much information they can access. Small changes make a difference:
- Review your social media privacy settings. Set your social media profiles to private where possible. Limit who can see your photos, friend lists, tagged posts, stories, and contact information.
To set your Instagram account to private, go to “Settings and activity,” select “Account privacy,” and turn on “Private account.” - Don’t share your live location. Avoid live check-ins, route updates, and posts that reveal where you are. Turn off geotagging in your camera settings and remove location metadata before you share photos or files.
- Be careful with events and routines. Public event pages can show where you plan to be and when. Avoid public RSVP lists for personal plans, recurring hobbies, and private gatherings.
- Reduce your data on people search sites. Data brokers and people search sites can list home addresses, relatives, phone numbers, and old locations. Use opt-out forms or a service that can help remove your data from people search sites.
- Use strong unique passwords. Reused passwords mean someone can use one leaked password to unlock multiple accounts. Follow these tips on creating a strong password and store your logins in a password manager.
- Turn on 2FA. Two-factor authentication requires a second proof of identity, such as an app code or security key. It can stop many account takeover attempts even if someone learns your password.
- Audit your device settings. Review app permissions for location, camera, microphone, contacts, Bluetooth, and photos. Remove apps you don’t recognize or no longer use. Keep your operating system and apps up to date because each release patches security flaws.
- Be careful with public Wi-Fi. On unsecured public Wi-Fi, anyone on the same network can see what you send, including login details a stalker could use to reach your accounts. Connect through a VPN service before you log in or share personal information. A VPN encrypts your internet traffic and replaces your IP address with that of a VPN server, so other people on that network can’t read your activity. Note that a VPN won’t remove stalkerware, stop a tracker in your bag, or protect an account a stalker can already access.
- Treat suspicious messages carefully. Don’t open unexpected attachments or unknown links. They may contain malware or lead to a phishing page that steals login details.
Cyberstalking laws and penalties in the US
Cyberstalking is illegal in the US. Federal prosecutors can use 18 U.S.C. § 2261A when someone uses mail, an interactive computer service, an electronic communication service, an electronic communication system, or another facility of interstate or foreign commerce to engage in a course of conduct with harmful intent. That intent can include intent to kill, injure, harass, intimidate, or place another person under surveillance for one of those purposes.2
To qualify under the statute, the conduct must place the person in reasonable fear of death or serious bodily injury, or cause, attempt to cause, or be reasonably expected to cause substantial emotional distress. The law can also cover threats or distress involving certain people close to the target, such as immediate family members, a spouse, or an intimate partner.2
Q: WHAT IS A CYBERSTALKING CHARGE?
A: It’s a criminal charge tied to repeated unwanted digital conduct that threatens, harasses, monitors, or intimidates a person.
Cyberstalking cases can involve more than one law. Depending on the facts, prosecutors may also use federal laws against interstate threats and extortion, harassing communications, identity theft, and unauthorized computer access.3,4,5,6 Civil defamation claims may also apply if the stalker spreads false statements that harm the target’s reputation.7
State laws also matter. Every US state has anti-stalking laws.8 Many states address online conduct directly through stalking, harassment, cyberstalking, electronic communication, or location tracking laws.9,10
North Carolina shows how specific state cyberstalking laws can be. Its cyberstalking statute, G.S. 14-196.3, covers certain threatening electronic communications, repeated electronic messages sent to abuse, threaten, terrify, harass, or embarrass someone, and nonconsensual electronic tracking, with limited exceptions. North Carolina classifies violations of this statute as a Class 2 misdemeanor, although related conduct can trigger other charges.11
| Level | Statute | What it covers | Typical penalties |
|---|---|---|---|
Federal | 18 U.S.C. § 2261A | Cyberstalking through mail, digital communication services, interactive computer services, or other interstate facilities | Fines and prison time. Penalties can increase in severe cases |
State | State anti-stalking and cyberstalking laws | Repeated harassment, threats, surveillance, electronic contact, or tracking | Misdemeanor or felony charges, fines, jail or prison time, and protective orders |
North Carolina example | N.C. G.S. 14-196.3 | Certain electronic communications, repeated messages, or tracking used to harass, threaten, or intimidate | Generally a Class 2 misdemeanor under the cyberstalking statute |
How to report cyberstalking
If you’re being cyberstalked, focus on safety first. If you’re in immediate danger, call 911.
For non-emergency cases, start by keeping a clear record:
- Save screenshots with dates, usernames, profile URLs, phone numbers, email addresses, and timestamps.
- Keep original messages, voicemails, emails, images, and files.
- Save metadata where possible, especially for emails, images, and files.
- Keep a dated log of each incident, the platform used, and how the incident affected you.
- Don’t delete evidence you may need later.
Next, report the account or content to the platform. Most social media apps, messaging services, and email providers have tools for reporting harassment, impersonation, threats, or nonconsensual image sharing.
Block the person after you save evidence and report the behavior, unless police advise you to keep the account visible for evidence collection. Avoid replies, arguments, or threats. Further contact can escalate the situation and weaken your documentation.
For image-based abuse, such as threats to share intimate images, contact police or a victim support organization before you block the person. Investigators may need access to messages, usernames, payment demands, or metadata.
You can also file a report with local police. Bring your evidence log and copies of messages when you make a report.
Where to get help: US victim resources
You don’t have to handle cyberstalking alone. If you’re in immediate danger or believe someone may harm you or someone else, call 911.
For non-emergency support, reporting, and safety planning, these US resources can help:
- Local police. File a report and ask about protective orders or stalking-specific resources in your area.
- FBI Internet Crime Complaint Center. Report internet-related crimes through IC3, the FBI’s online reporting center for cybercrime complaints.
- VictimConnect Resource Center. Get confidential support, information, and referrals through VictimConnect.
- National Domestic Violence Hotline. If the stalker is a partner, ex-partner, family member, or household member, call 1-800-799-SAFE.
- SPARC. Use the Stalking Prevention, Awareness, and Resource Center for stalking-specific education and resources.
Privacy tools can help reduce your exposure, but support services and law enforcement should come first when your safety is at risk.
Online security starts with a click.
Stay safe with the world’s leading VPN
