The legal consequences of cyberbullying can include federal criminal charges carrying up to five years in prison, state misdemeanor or felony prosecution, civil lawsuits for money damages, court-ordered protection orders, mandatory school intervention, and in some cases financial liability for the bully’s parents. The specific exposure depends on what was actually done, whether a minor was involved, and whether the conduct crossed into threats, stalking, or the sharing of intimate images. There is no single federal statute titled “cyberbullying,” but a stack of existing laws already reaches most of the conduct the term describes.
Criminal Charges a Cyberbully Can Face
Prosecutors generally charge cyberbullying under whichever existing statute best fits the behavior. A pattern of online conduct that puts someone in reasonable fear of death or serious bodily injury, or causes substantial emotional distress, is federal cyberstalking. A baseline conviction carries up to five years. If the victim suffers serious bodily injury the maximum rises to ten years, life-threatening injuries push it to twenty, and a death can bring a life sentence.1Office of the Law Revision Counsel. 18 USC 2261A – Stalking2Office of the Law Revision Counsel. 18 USC 2261 – Interstate Domestic Violence
Sending a communication across state lines that threatens to kidnap or injure someone carries up to five years, or up to twenty if the threat is tied to extortion.3Office of the Law Revision Counsel. 18 USC 875 – Interstate Communications Because electronic messages almost always route through interstate infrastructure, this statute reaches online threats even between people in the same city.
Creating fake profiles or impersonating someone to harass or injure them can trigger federal identity theft charges.4Department of Justice. Identity Theft and Identity Fraud When the impersonation occurs during another felony, the aggravated identity theft statute tacks on a mandatory two-year consecutive sentence that a judge cannot reduce or run concurrently.5Office of the Law Revision Counsel. 18 USC 1028A – Aggravated Identity Theft
Distributing sexual images of a minor is among the most severely punished federal crimes. First-offense distribution carries a mandatory minimum of five years and a maximum of twenty; producing such material brings a fifteen-year minimum and thirty-year maximum.6U.S. Department of Justice. Citizens Guide to U.S. Federal Law on Child Pornography7Office of the Law Revision Counsel. 18 USC 2252 – Certain Activities Relating to Material Involving the Sexual Exploitation of Minors
The TAKE IT DOWN Act
Signed into law in May 2025, the TAKE IT DOWN Act made it a federal crime to share intimate images of someone without their consent. It covers both real images and AI-generated deepfakes of real people, and violators face prison time, fines, and mandatory restitution to the victim.8Congress.gov. S.146 – TAKE IT DOWN Act The law also requires platforms that primarily host user-generated content to remove flagged nonconsensual intimate images within 48 hours of being notified.
State Laws
More than half the states now specifically fold cyberbullying into their harassment or bullying statutes; the rest prosecute the same conduct under general harassment, stalking, or threats laws. Most state-level cyberbullying cases result in misdemeanor charges carrying up to a year in jail along with fines or community service. Felony exposure becomes more likely with repeated targeting, specific threats, or harassment of law enforcement. Definitions and penalties differ substantially by state, so anyone facing charges or considering a complaint should check their own state’s statutes.
Hate Crime Enhancements
If the harassment is motivated by bias against race, color, religion, national origin, gender, sexual orientation, gender identity, or disability, hate crime charges can stack on top of the underlying offense. The federal hate crime statute authorizes up to ten years in prison for bias-motivated offenses involving bodily injury or an attempt to cause it, and up to life when the crime results in death, kidnapping, or aggravated sexual abuse.9Office of the Law Revision Counsel. 18 USC 249 – Hate Crime Acts
What the First Amendment Protects, and What It Doesn’t
Not every cruel online statement is a crime. The First Amendment protects a great deal of speech that most people would call bullying, and courts have struck down cyberbullying laws drafted too broadly. The critical boundary is the “true threat.” In Counterman v. Colorado (2023), the Supreme Court held that prosecutors pursuing an online threat must prove the sender was at least reckless about how the message would be perceived, meaning they consciously disregarded a substantial risk that their words would be taken as a threat of violence. A purely objective “reasonable person” standard is not enough.10Supreme Court of the United States. Counterman v. Colorado
Speech that is merely insulting, embarrassing, or hurtful is usually protected. Once the conduct crosses into targeted threats, sustained harassment, stalking behavior, or distribution of intimate images, constitutional protection falls away and criminal statutes apply.
Civil Lawsuits a Victim Can Bring
Criminal charges are not the only route. A victim can sue the bully directly for money damages, and civil cases carry a lower burden of proof than criminal prosecution.
Defamation
Posting false statements online that damage someone’s reputation is defamation. The victim must show the statement was false, was communicated to at least one other person, was made with at least carelessness about its truth, and caused real reputational harm. Public figures face a higher bar and must show the speaker knew the statement was false or recklessly disregarded the truth. Most states give victims only one to two years from learning of the statement to file suit, so delay can kill the claim.
Intentional Infliction of Emotional Distress
When online conduct is so extreme that it exceeds all bounds of decency, the victim can sue for intentional infliction of emotional distress. The claim requires intentional or reckless conduct, truly outrageous behavior (not just offensive), and severe emotional suffering. Courts set a deliberately high bar for “outrageous.” Successful claims can recover therapy and medical costs along with compensation for the emotional harm itself; some jurisdictions require that the distress be severe enough to warrant professional treatment.
Invasion of Privacy
Cyberbullying often involves exposing someone’s private life. Privacy claims cover public disclosure of private facts, intrusion into private spaces or communications, and portraying someone in a misleading light that a reasonable person would find offensive. Damages can include compensation for emotional distress and reputational harm.
Civil awards vary with the severity of the conduct and can cover therapy expenses, lost wages if the harassment forced the victim out of work or school, and pain and suffering.
Protection Orders to Stop Ongoing Harassment
When the harassment is still happening, a court-issued protection order can legally compel the bully to stop. These orders generally require the victim to show that the conduct was intentional or knowing, followed a repeated pattern, and would make a reasonable person fear for their safety or suffer serious emotional distress. An emergency temporary order without notice to the other side generally requires a showing of immediate and irreparable harm before a full hearing can be held.
Violating a protection order is itself a separate crime. Under the federal stalking statute, anyone convicted of stalking while violating a restraining order faces a minimum of one year in prison.2Office of the Law Revision Counsel. 18 USC 2261 – Interstate Domestic Violence Courts expect documentation of the harassing messages, the dates and frequency of contact, and evidence that the behavior would continue without court intervention.
Why You Usually Cannot Sue the Platform
The social media site or messaging service where the harassment happened is almost always shielded from civil liability. Federal law provides that no provider of an interactive computer service can be treated as the publisher or speaker of content posted by its users.11Office of the Law Revision Counsel. 47 USC 230 – Protection for Private Blocking and Screening of Offensive Material Even if the company knew about bullying content and was slow to take it down, victims generally cannot hold it responsible for the harm the content caused.
There are narrow exceptions. Section 230 does not block federal criminal prosecution, and it carves out exceptions for sex trafficking and child exploitation. Under the TAKE IT DOWN Act, platforms must also now remove nonconsensual intimate images within 48 hours of notification.8Congress.gov. S.146 – TAKE IT DOWN Act For most cyberbullying situations, though, legal action must target the individual bully, not the platform.
What Schools Must Do When Students Are Involved
Schools that receive federal funding, which includes nearly all public schools and many private ones, have obligations under federal civil rights laws when cyberbullying affects students. Under Title IX, a school with actual knowledge of online sexual harassment within its education programs must offer the targeted student supportive measures such as counseling, schedule changes, and no-contact orders between the students involved. If the student files a formal complaint, the school must investigate through its Title IX grievance process before disciplining the accused student. Schools do not have to monitor all student online activity, but they must act on harassment they know about regardless of whether it happened on a school device or personal phone.12U.S. Department of Education. Online or Digital Sexual Harassment Under the 2020 Title IX Regulations
For students with disabilities, Section 504 and Title II add a further obligation. If bullying of any kind interferes with a disabled student’s ability to participate in or benefit from educational services, the school must address it. If the situation goes uncorrected, it can constitute a violation of the student’s right to a free appropriate public education.13U.S. Department of Education. Disability Discrimination – Bullying and Harassment
When Parents Can Be Held Financially Responsible
Parents are not automatically on the hook when their child cyberbullies someone, but there are several paths to parental liability. The most common is negligent supervision. If parents knew or should have known their child was harassing someone online and failed to take reasonable steps to stop it, a court can hold them responsible for the resulting harm. This comes up most often where there were clear warning signs, such as earlier complaints from the school or other parents, that went ignored.
Many states also impose a form of automatic liability on parents for intentional harmful acts committed by their children, regardless of parental fault. These statutes typically cap the recoverable amount, often somewhere between a few hundred and a few thousand dollars. The cap may not cover the full extent of the victim’s damages, but it provides some recovery without needing to prove negligence.
A less common theory applies when parents knowingly gave their child the tools and access to carry out the harassment while aware of the child’s harmful intent. In that scenario, liability is more direct. Parents found responsible under any of these theories can be ordered to pay the civil damages awarded to the victim.
Preserving the Evidence
Any legal action, criminal or civil, is only as strong as the evidence behind it. Digital content can be deleted or edited within minutes, so preservation needs to happen right away. Capture screenshots of every harassing message, post, or interaction. Each screenshot should show the content itself, the username or profile that posted it, the date and time, and the URL where it appeared.
Keep a running log of incidents, including when they happened, what platform was used, and the impact on you or the victim. Save direct messages, emails, and texts in their original format when possible, since embedded metadata can help authenticate the evidence later. If the harassment involves sexually explicit images of a minor, do not save those images yourself. Possessing that material is itself a serious crime. Report it to law enforcement and let them handle collection.
Cases built on thorough, timestamped documentation are far more likely to succeed than those relying on someone’s memory of what was posted weeks or months earlier.