Is Cyberbullying a Crime? Federal and State Laws and Penalties

Yes, cyberbullying is a crime when the online behavior involves true threats, stalking, sustained harassment, or sharing intimate images without consent. There is no single federal statute called the Cyberbullying Act, but federal and state prosecutors use stalking, harassment, threat, and image-abuse laws to charge conduct that happens online. Nearly every state has a law covering cyberbullying or electronic harassment, and federal law reaches cases that cross state lines or cause serious harm. What separates a crime from an ugly argument comes down to three things: intent, repetition, and the effect on the person targeted.

What Turns Online Behavior Into a Crime

Prosecutors look for evidence that the sender meant to harass, intimidate, or injure a specific person, not just that the messages were offensive. They also look for a pattern. The federal cyberstalking law uses the phrase “course of conduct,” and most state harassment statutes require repeated contact with no legitimate purpose. A single heated comment almost never qualifies. Weeks of targeted messages designed to frighten someone usually do.

The third element is impact. The conduct has to place the target in reasonable fear or cause substantial emotional distress. Rude opinions, insults between people who dislike each other, and offensive posts that no reasonable person would read as a threat generally fall outside criminal law, even when they cause real hurt.

Behaviors That Lead to Criminal Charges

Cyberbullying is an umbrella term. Several specific behaviors under that umbrella have their own criminal classifications.

Online stalking and harassment. A sustained pattern of unwanted contact meant to frighten or distress someone. Federal law requires a course of conduct rather than isolated messages.¹
Doxxing. Publishing someone’s home address, phone number, or workplace to invite harassment. If the information was obtained by breaking into an account, federal prosecutors can add charges under the Computer Fraud and Abuse Act.²
Swatting. Filing a false emergency report to send armed police to someone’s home. There is no single federal swatting statute; prosecutors combine laws covering hoaxes, false bomb threats, and interstate threats, with hoax penalties starting at up to five years and climbing if someone is injured.³
Nonconsensual intimate images. Sharing private sexual photos or videos, including AI-generated deepfakes, without the depicted person’s permission. This is now a federal crime under the TAKE IT DOWN Act, and many states criminalize it separately.⁴
Direct threats. A single message threatening to kill or injure someone can be a federal crime if it crosses state lines, and most internet traffic does.⁵

Federal Laws That Apply

Because online messages typically pass through servers in multiple states, most cyberbullying qualifies as interstate commerce for federal jurisdiction purposes. Three federal statutes do the heavy lifting.

Federal Cyberstalking

Under 18 U.S.C. § 2261A, it is a federal crime to use an interactive computer service or electronic communication system in a course of conduct that places someone in reasonable fear of death or serious bodily injury, or that causes (or would reasonably be expected to cause) substantial emotional distress. The government must prove the defendant acted with intent to harass, intimidate, or injure the target.¹

Interstate Threats

Under 18 U.S.C. § 875, transmitting a communication containing a threat to kidnap or injure someone across state lines is a federal crime punishable by up to five years in prison. Unlike cyberstalking, this statute does not require a pattern. One credible threat is enough.⁵

The TAKE IT DOWN Act

Signed into law on May 19, 2025, the TAKE IT DOWN Act created the first federal criminal prohibition on sharing intimate images, including deepfakes, without the depicted person’s consent. Knowingly publishing nonconsensual intimate imagery of an adult carries up to two years in federal prison. If the victim is a minor, the maximum is three years. Threatening to publish such images is also criminal, with penalties up to two years for threats involving adults and thirty months for threats involving minors.⁶

How States Handle It

Most cyberbullying prosecutions happen at the state level. Nearly all states have enacted laws addressing cyberbullying, electronic harassment, or cyberstalking, though names and structures vary.⁷ Some states passed dedicated cyber-harassment statutes. Others expanded their stalking and harassment laws to explicitly cover electronic communications.

State prosecutors generally weigh whether the messages were repeated, whether the sender had any legitimate reason for the contact, and whether the target suffered genuine fear or emotional harm. States also differ on whether a first offense is a misdemeanor or can be charged as a felony, and whether enhanced penalties apply when the victim is a minor or when the defendant violates a protective order.

Where the First Amendment Draws the Line

Not everything cruel said online is a crime. Speech restrictions have to survive strict scrutiny, meaning the government needs a compelling reason and the law has to be written narrowly. Courts have held that the government can only prohibit speech in recognized categories: true threats, incitement to imminent violence, obscenity, defamation, and statements integral to criminal conduct. Hurtful or hateful speech outside those categories remains protected.

In 2023, the Supreme Court clarified the standard for true threats in Counterman v. Colorado. Prosecutors must now prove the defendant was at least reckless about whether the statements would be perceived as threatening, meaning the sender was aware others could read the messages as threats and sent them anyway.⁸ Someone who genuinely did not realize their words sounded threatening has a constitutional defense, even if the recipient was afraid.

Cyberbullying statutes have also been struck down when written too broadly. Laws that require specific intent to harass or threaten and target a narrow set of harmful behaviors tend to survive. Vague laws that criminalize anything “annoying” or “embarrassing” online tend not to.

Penalties

Sentencing depends on which law was charged, how severe the conduct was, and whether the victim was a minor.

Federal Penalties

Federal cyberstalking starts at up to five years in prison for a standard violation. The ceiling rises to ten years when the victim suffers serious bodily injury, twenty years for life-threatening injuries, and up to life if the victim dies.⁹ When the victim is under 18, the maximum increases by up to five additional years.¹⁰ A defendant who stalks someone while violating a restraining order or no-contact order faces a mandatory minimum of one year.

Interstate threats carry up to five years.⁵ All federal offenses can also carry fines.

State Penalties

At the state level, most first-offense cyberbullying or electronic harassment charges are misdemeanors with a maximum of one year in county or local jail. Felony charges come into play when the conduct involves credible threats of violence, targets a minor, involves a repeat offender, or violates a protective order. Felony sentences vary widely but can reach several years. Courts also commonly impose fines, mandatory counseling, community service, and restitution for the victim’s therapy or security costs. Either level creates a permanent criminal record.

When a Minor Is Involved

A large share of cyberbullying cases involve minors on one or both sides, and the legal system treats them differently.

Minors accused of cyberbullying are usually routed through juvenile court, which emphasizes rehabilitation over punishment. Outcomes lean toward counseling, community service, educational programs, and probation. Some states allow or require transfer to adult court for older teenagers charged with particularly serious offenses. The minimum age at which a minor can face criminal prosecution varies, with some states setting no minimum and others setting it as high as 16.

When the victim is a minor, federal penalties are enhanced. The cyberstalking statute adds up to five years beyond the base sentence, and the TAKE IT DOWN Act increases the maximum from two years to three for nonconsensual intimate images of minors.¹⁰ Many state laws include similar enhancements. Schools in most states are also required to maintain anti-bullying policies covering electronic conduct, and school discipline operates independently from any criminal case; a student can be suspended or expelled even if prosecutors decline to file charges.⁷

Reporting Cyberbullying and Preserving Evidence

If the conduct against you may be criminal, the first step is preserving evidence before anything gets deleted. Take screenshots of every message, post, and comment. Record dates, times, usernames, and the platform. Save emails and texts rather than just reading them. If the sender later deletes their posts, screenshots may be the only proof the conduct happened.¹¹

Report the behavior to the platform. Most social media companies have reporting tools for harassment and threats, and a platform report creates a timestamped record that the content was flagged.

Contact law enforcement when the conduct involves threats of violence, stalking, sexually explicit images shared without consent, or anything that makes you fear for your safety. Start with your local police department. If the sender is in another state, local officers can coordinate with federal authorities or refer the case to the FBI. Victims can also seek a protective order requiring the harasser to stop all contact; violating one is a separate criminal offense and, under federal law, triggers a mandatory minimum of one year in prison when the underlying conduct is stalking.⁹

1
Office of the Law Revision Counsel. 18 USC 2261A – Stalking
2
Office of the Law Revision Counsel. 18 US Code 1030 – Fraud and Related Activity in Connection With Computers
3
Congress.gov. Federal Criminal Statutes That May Apply to Swatting
4
Congress.gov. S.146 – TAKE IT DOWN Act
5
Office of the Law Revision Counsel. 18 US Code 875 – Interstate Communications
6
Congress.gov. The TAKE IT DOWN Act – A Federal Law Prohibiting Nonconsensual Intimate Visual Depictions
7
StopBullying.gov. Laws, Policies and Regulations
8
Supreme Court of the United States. Counterman v. Colorado
9
Office of the Law Revision Counsel. 18 USC 2261 – Interstate Domestic Violence
10
Office of the Law Revision Counsel. 18 USC 2261B – Enhanced Penalty for Stalkers of Children
11
StopBullying.gov. Report Cyberbullying