Cyberbullying laws in the United States are a patchwork: no single federal statute carries that label, but several federal criminal provisions, a new federal law on non-consensual intimate images, criminal statutes in 45 states, school policies in 49 states, and civil claims like defamation and intentional infliction of emotional distress all apply depending on what happened and who was involved. Knowing which rules fit your situation, and how to document the conduct before you report it, is what turns a complaint into consequences.
What Counts as Cyberbullying Under the Law
A single rude comment almost never qualifies. The behavior that triggers legal or administrative consequences is targeted, repeated, or severe enough to threaten someone’s safety or ability to function. Patterns matter more than isolated incidents.
Doxxing — publishing a person’s home address, phone number, or workplace to invite harassment — is one clear example. So is sending repeated threatening, degrading, or sexually explicit messages after being told to stop. Impersonation accounts, websites or group chats built around mocking a specific person, and digitally altered photos (including AI-generated images) designed to humiliate a target all fit the pattern.
Two forms sit at the dangerous end of the spectrum. Swatting — calling in a fake emergency to send armed officers to someone’s home — is prosecutable under 18 U.S.C. § 1038, which carries up to five years in prison, up to 20 if someone is seriously injured, and up to life if someone dies.1Office of the Law Revision Counsel. 18 USC 1038 – False Information and Hoaxes Sextortion, in which a predator obtains an intimate image and then threatens to distribute it unless the victim sends more images or money, has grown rapidly and disproportionately targets minors. The FBI stresses that sextortion victims have committed no crime and should report immediately through their local field office, 1-800-CALL-FBI, or tips.fbi.gov.2Federal Bureau of Investigation. Sextortion
Federal Laws That Apply
Which federal statute fits depends on the conduct and whether the communication crossed state lines.
Federal Cyberstalking: 18 U.S.C. § 2261A
This is the statute most directly aimed at cyberbullying. It makes it a crime to use any interactive computer service, electronic communication system, or other facility of interstate commerce to engage in a course of conduct that places someone in reasonable fear of death or serious bodily injury, or that causes substantial emotional distress.3Office of the Law Revision Counsel. 18 USC 2261A – Stalking The “course of conduct” language captures the repeated pattern that defines most cyberbullying, rather than a single message. Penalties are governed by cross-referenced sentencing provisions and can be severe, particularly when the conduct causes injury.
Interstate Threats: 18 U.S.C. § 875
Transmitting a threat to kidnap or injure another person across state lines is punishable by up to five years in prison. If the threat is made with intent to extort money or anything of value, the maximum rises to 20 years.4Office of the Law Revision Counsel. 18 USC 875 – Interstate Communications Threats sent through social media, email, or messaging apps generally travel through interstate networks, which brings them within reach of this statute.
Harassing Communications: 47 U.S.C. § 223
This Communications Act provision makes it a federal crime to use a telecommunications device to transmit obscene material or to make repeated communications with intent to harass, abuse, or threaten. Violations carry up to two years in prison.5Office of the Law Revision Counsel. 47 USC 223 – Obscene or Harassing Telephone Calls in the District of Columbia or in Interstate or Foreign Communications Written originally for telephone harassment, it applies broadly to electronic communications.
The TAKE IT DOWN Act for Intimate and Deepfake Images
Congress passed the TAKE IT DOWN Act in May 2025, creating the first federal criminal penalties aimed specifically at non-consensual intimate images, including AI-generated deepfakes. Knowingly sharing — or threatening to share — intimate visual depictions of a person without their consent is now a federal crime, whether the images are authentic or digitally fabricated.6Congress.gov. S.146 – TAKE IT DOWN Act
Penalties scale with the victim’s age. Publishing non-consensual intimate images of an adult carries up to two years in prison; images involving a minor carry up to three. Threats to publish deepfake imagery of an adult carry up to 18 months, and threats involving a minor carry up to 30 months.7Congress.gov. The TAKE IT DOWN Act – A Federal Law Prohibiting Nonconsensual Intimate Visual Depictions
The law also gives victims a direct right against platforms. Social media sites and other covered websites must build a process for victims to request removal, and once a valid request comes in, the platform has to take the image down and make reasonable efforts to remove identical copies within 48 hours.6Congress.gov. S.146 – TAKE IT DOWN Act Before this law, victims often had no federal mechanism to compel removal at all.
Why You Usually Can’t Sue the Platform
Section 230 of the Communications Decency Act bars treating platforms as the publisher of content their users post.8Office of the Law Revision Counsel. 47 USC 230 – Protection for Private Blocking and Screening of Offensive Material In practice, a cyberbullying victim generally cannot hold Instagram, Snapchat, or any similar service legally responsible for failing to remove harmful posts fast enough. The lawsuit, if there is one, targets the person who wrote or shared the content.
Section 230 has limits. It does not shield anyone from federal criminal prosecution, override sex trafficking laws, or block enforcement of electronic communications privacy statutes.8Office of the Law Revision Counsel. 47 USC 230 – Protection for Private Blocking and Screening of Offensive Material The TAKE IT DOWN Act’s 48-hour removal requirement is one of the newest carve-outs, forcing platform action on non-consensual intimate imagery despite Section 230’s general protections.
State Cyberbullying Laws and School Obligations
Forty-eight states have laws that explicitly cover electronic forms of harassment, 49 require schools to maintain formal anti-bullying policies, and 45 attach criminal sanctions to electronic harassment in some form. The details vary widely. Some states limit criminal liability to threats of violence; others reach any conduct intended to cause serious emotional distress. Most treat a first offense as a misdemeanor, with felony exposure when the behavior is repeated, involves a minor victim, or causes documented harm. Checking your state’s specific statute matters before pursuing criminal charges.9StopBullying.gov. Laws, Policies and Regulations
Schools must address cyberbullying that affects the learning environment even when the conduct happens entirely off campus. State laws typically require districts to adopt formal policies defining prohibited behavior, establishing reporting procedures, and shielding students who come forward from retaliation.9StopBullying.gov. Laws, Policies and Regulations A school that ignores its own grievance procedures may face civil liability.
Title IX
When the harassment is sexual or sex-based, Title IX creates an independent federal obligation on any school receiving federal funding. The school must respond to reports, provide supportive measures (adjusted workloads, deadline extensions, counseling referrals, schedule changes), and investigate complaints. A school that lets sex-based digital harassment persist risks losing federal funding.
Students With Disabilities
When bullying targets a student with a disability, or when bullying of any kind interferes with a disabled student’s ability to participate in school, Section 504 of the Rehabilitation Act and Title II of the Americans with Disabilities Act require the school to address the conduct and evaluate whether the student’s services need adjustment. If harassment goes uncorrected and the student can no longer access a meaningful education, the school may be failing its obligation to provide a Free Appropriate Public Education.10U.S. Department of Education. Disability Discrimination – Bullying and Harassment The trigger is the educational impact, not whether the bullying was motivated by the disability.
Workplace Cyberbullying
No federal or state law prohibits “workplace cyberbullying” as its own category. The EEOC recognizes that digital harassment can contribute to a hostile work environment, but under federal employment law the conduct must be based on a protected characteristic — race, sex, religion, national origin, age, or disability — and must be severe or pervasive enough that a reasonable person would find the environment intimidating, hostile, or abusive. Isolated petty slights, even rude ones, generally don’t meet that bar.11U.S. Equal Employment Opportunity Commission. Harassment
Daily vicious messages from a coworker targeting your religion are legally actionable. A coworker who is a persistent jerk to everyone for no particular reason is not, under federal law, though internal employer policy may still apply. Hostile work environment claims, intentional infliction of emotional distress, and interference with the employment relationship become easier to pursue when an employer knew about the behavior and did nothing.
Suing the Person Responsible
Criminal charges aren’t the only path. A civil lawsuit lets a victim seek money damages without waiting for a prosecutor to take the case. Two theories come up most often.
Intentional infliction of emotional distress requires conduct that was outrageous — not merely mean, but beyond the bounds of decency — committed intentionally or recklessly, that caused severe emotional distress. Courts set the bar high, and plaintiffs often underestimate how extreme the conduct has to be.
Online defamation may fit when the harassment includes false statements of fact that damage reputation. A private plaintiff generally has to show the statement was false, communicated to at least one other person, caused reputational or financial harm, and reflected a failure to take reasonable care in checking the truth. False accusations of criminal behavior, professional misconduct, or sexual immorality are typically treated as harmful on their face, so specific financial losses don’t have to be proved. Section 230 shields the platform where the statement was posted but not the person who wrote it.
Documenting the Harassment
Evidence is what gets reports taken seriously. Skipping this step is the most common reason cyberbullying complaints stall. Collect everything before you report content to the platform or confront the person responsible, because once a post is removed, recovering it becomes much harder.
- Capture full-screen screenshots showing the content, the sender’s username or profile, and visible timestamps. Cropped images look selectively edited.
- Record the exact URL of every page where harmful content appeared. Posts get deleted, and the URL is often the only way an investigator can confirm the content existed.
- Keep a chronological log with date, time, platform, a short description, and any witnesses tagged or copied. A spreadsheet works.
- Download your account data from the platform. These exports preserve metadata — message timestamps, interactions — that may be altered or lost later.
- Store everything in a dedicated folder backed up to cloud storage or an external drive, so local copies survive if the originals disappear.
Where to Report
Most situations call for more than one channel. Match the channel to the severity.
Platform Reports
Every major social media service has a built-in reporting tool. Reporting can produce content removal, account suspension, or a permanent ban, and it creates a record that you notified the platform. Under the TAKE IT DOWN Act, platforms must remove non-consensual intimate images within 48 hours of a valid request.6Congress.gov. S.146 – TAKE IT DOWN Act
School Complaints
For student incidents, file a formal written complaint with the district’s Title IX coordinator or a designated administrator. Written complaints — not verbal heads-ups — trigger the school’s obligation to investigate. Request written confirmation of receipt and ask about the expected timeline, which varies by district but is usually a few weeks under most state policies.
Law Enforcement
When the conduct involves credible threats of violence, sextortion, or distribution of intimate images, file a police report and bring your documented evidence. Request a case number — you’ll need it to follow up, and it shows other agencies you took formal action.
FBI and IC3
For cyberbullying that crosses state or international lines, or that involves sextortion, online extortion, or other cyber-enabled crimes, the FBI’s Internet Crime Complaint Center at ic3.gov accepts reports from the public. The Bureau uses them for investigative and intelligence purposes, and early reporting improves the odds of recovering funds in extortion cases.12Federal Bureau of Investigation. Cyber For sextortion, you can also call 1-800-CALL-FBI or report through tips.fbi.gov.2Federal Bureau of Investigation. Sextortion
Protective Orders
If the harassment continues and you fear for your safety, petition a court for a protective order. These orders can prohibit the harasser from contacting you through any channel, including social media and messaging apps. Most jurisdictions offer an emergency order for immediate short-term protection, followed by a hearing where a judge decides whether to issue a longer-term order. You’ll need to present your documented evidence of the pattern and explain how the conduct threatens your safety. The harasser is notified as part of the legal process and gets an opportunity to respond in court.