Cyberstalking, under federal law, is a deliberate pattern of electronic conduct aimed at a specific person that either puts them in reasonable fear of serious physical harm or causes them substantial emotional distress. What constitutes cyberstalking is not a single ugly message or one heated exchange online. It is repeated, intentional behavior carried out through the internet, email, texts, social media, or any other electronic system, and under 18 U.S.C. § 2261A it is a federal felony.1Office of the Law Revision Counsel. 18 USC 2261A – Stalking
The Four Elements That Make Conduct Cyberstalking
To secure a conviction under the federal statute, prosecutors have to prove each of these:
- Intent. The person acted with the purpose of killing, injuring, harassing, intimidating, or placing someone under surveillance with intent to harm or intimidate.
- Use of interstate electronic communication. The conduct ran through the internet, email, text messaging, social media, or another electronic system of interstate commerce.
- A course of conduct. Not one incident. A pattern of actions directed at the victim over time.
- A harmful result. The behavior placed the victim in reasonable fear of death or serious physical injury to themselves, a family member, a spouse, or even a pet or service animal, or it caused (or would reasonably be expected to cause) substantial emotional distress.
That last element matters. The law does not require proof of physical injury. Substantial emotional distress is enough on its own, as long as a reasonable person in the victim’s position would also have experienced it.
The jurisdictional piece is easier to satisfy than many people assume. Under § 2261A(2), using any interactive computer service or electronic communication system of interstate commerce qualifies. The internet itself is a facility of interstate commerce, so a harassing email or social media campaign meets the federal threshold even when the sender and the target live in the same town.
Behavior That Typically Qualifies
Where prosecutors draw the line is sustained, targeted conduct. Common examples include:
- Repeated unwanted messages after being told to stop.
- Creating fake profiles to monitor someone’s activity or to continue contact after being blocked.
- Posting a victim’s home address, workplace, or other identifying information to invite threats from third parties.
- Sending explicit threats of violence against the victim or someone close to them.
Each of these, done repeatedly and with intent to harass or intimidate, fits the statutory pattern.
Where Cyberstalking Ends and Ordinary Online Harassment Begins
“Cyberstalking” and “online harassment” are often used interchangeably, but the legal line is real. Online harassment can be a single incident — one threatening message or one humiliating post. Cyberstalking requires repetition and a victim who, as a result, fears for their safety or suffers serious emotional harm. One shouted insult is harassment. Being followed home every night for a month is stalking, and the digital equivalent gets treated the same way.
The intent requirement raises the bar further. Random trolling, a nasty comment thread, or a one-off argument does not meet the standard, however unpleasant it feels. The conduct has to be aimed at a specific person with the purpose of harassing, intimidating, or frightening them.
Federal Prison Time and Fines
Cyberstalking is a felony, and the sentence scales with the harm done. Under 18 U.S.C. § 2261(b):
- Up to 5 years in prison when no serious physical injury occurs. This is the baseline for most cyberstalking convictions.
- Up to 10 years if the victim suffers serious bodily injury or the offender uses a dangerous weapon.
- Up to 20 years if the victim suffers permanent disfigurement or a life-threatening injury.
- Life imprisonment if the victim dies as a result of the stalking.
- At least 1 year if the stalking violates an existing restraining order, no-contact order, or similar protective order.
A felony conviction also carries fines up to $250,000.2Office of the Law Revision Counsel. 18 USC 2261 – Offenses3Office of the Law Revision Counsel. 18 USC 3571 – Sentence of Fine
Harsher Penalties When the Victim Is a Minor
When the target is under 18, the maximum sentence increases by five years above the standard tier. A baseline case that would normally carry up to five years becomes up to ten. The enhancement does not apply if the offender is also a minor, or if the victim is between 15 and 17 and the offender is within three years of the victim’s age.4Office of the Law Revision Counsel. 18 USC 2261B – Enhanced Penalty for Stalkers of Children
Other Federal Charges That Can Apply
Section 2261A is the main cyberstalking statute, but prosecutors sometimes layer other charges on top.
18 U.S.C. § 875(c) makes it a federal crime to transmit any communication containing a threat to injure another person across state lines, with a maximum of five years in prison. A single serious threat sent online can trigger this statute even without a stalking pattern.
47 U.S.C. § 223 makes it a crime to use a telephone or any telecommunications device to threaten, harass, or abuse a specific person, or to make repeated calls solely to harass. It carries up to two years and applies even when no conversation occurs, as long as the intent was to harass.5Office of the Law Revision Counsel. 47 USC 223 – Obscene or Harassing Telephone Calls in the Interstate or Foreign Communications
How State Laws Compare
Every state has a stalking law, and most have been updated to cover electronic communications. Some have standalone cyberstalking statutes. Others fold electronic conduct into general stalking or harassment laws that apply across all forms of communication.
The core elements usually track the federal approach: repeated conduct, intent to harass or frighten, and a victim who experiences genuine fear or serious emotional distress. The details diverge. Some states require a “credible threat” as a separate element, meaning the perpetrator must have communicated a specific threat the victim reasonably believed would be carried out. Others, like the federal statute, allow prosecution based on substantial emotional distress alone. Penalty classifications range from misdemeanors for first offenses to felonies for repeat conduct or cases involving minors. Anyone facing a cyberstalking situation should check the specific statute in the state where the conduct occurred or where the victim lives.
What a Victim Can Do Right Now
Three things tend to matter most, and they can run in parallel.
Preserve the evidence. Digital proof disappears quickly. Screenshot every threatening message, email, post, and voicemail, with timestamps, usernames, and URLs visible. Keep original files, not just screenshots. For harassing emails, save the full header, which contains routing information investigators can use. Maintain a dated log of each incident.
Report it. File with your local police department even if the conduct crosses state lines; a local report creates an official record. Because most internet-based stalking involves interstate communications, you can also file with the FBI’s Internet Crime Complaint Center at ic3.gov, which routes reports to field offices and law enforcement partners.6Internet Crime Complaint Center. IC3 Complaint Form Report to the platforms where the conduct is happening too; abuse reporting can result in account suspensions and content removal while an investigation proceeds.
Get a protective order, and consider a civil suit. Courts can issue temporary protective orders quickly, sometimes the same day, based on a sworn statement. These orders can prohibit contact through any channel and bar the stalker from your home, workplace, or school. Violating a protective order while stalking triggers the mandatory one-year minimum under federal law, and states must give full faith and credit to protective orders issued elsewhere.2Office of the Law Revision Counsel. 18 USC 2261 – Offenses Separately, many states allow civil suits against a stalker under tort theories like intentional infliction of emotional distress or invasion of privacy, and some have specific statutory causes of action. The civil burden of proof is preponderance of the evidence, so a victim can sometimes prevail civilly even when prosecutors decline to charge. Recoverable damages can include therapy costs, lost wages, emotional suffering, and in egregious cases, punitive damages.