What Do I Do If I’m Being Harassed, Bullied, or Stalked Online?

Online harassment is rampant. Here’s what you need to know.

Normally, this is where I’d quote the original question. But this topic appears in so many different guises and in so many different ways that quoting a single question would represent only a small slice of a much larger issue.

Cyber-bullying, or online harassment, is a frighteningly common occurrence. Those most at risk appear to be children and individuals who have been in abusive relationships, but it can happen to anyone.

The questions I get most often are:

• Isn’t it illegal?
• How do I find out who’s responsible?
• How do I make them stop?
• How can I get back at them?

Let’s tackle each of those and a couple more.

Online harassment & bullying

Unfortunately, varying degrees of online harassment may or may not be illegal, depending on the laws in your area. While it’s tempting to want to find the harassers, force them to stop, and even get revenge, the thing to do in all cases is to contact local law enforcement or other appropriate authorities for assistance. Sadly, not all authorities have the resources to respond, and not all harassment rises to a level warranting their involvement.

Isn’t it illegal?

I need to remind you that I am neither a lawyer nor a law enforcement professional. I cannot give legal advice, and none of this should be taken as such. If you need legal advice, seek out an attorney or reach out to one of the many organizations set up to help victims of domestic violence in your area.

One problem with this question is that the answer varies — sometimes dramatically — from location to location. Some activities are illegal in some jurisdictions and acceptable in others. The only way to know which laws apply to your situation is to contact an attorney or your local law enforcement. (You’ll find this to be a common refrain throughout this article.)

There are, however, a couple of generalizations or examples that might be instructive.

Sexual exploitation of children is pretty clear. While the definition of “exploitation” may be unclear in some cases, and the legal definition of “child” may vary, authorities are typically clear on its illegality.

At the other end of the spectrum, simple password theft might not be illegal. Accessing your account and reading your email without your permission might be legal. Most would consider it wrong, rude, offensive, and perhaps immoral, but depending on your local laws, it might not be an illegal offense.

What they do once they have your password may or may not be illegal. For example, hacking into your account to threaten people in your address book might be illegal, but simply annoying people in your address book may not be.

It’s a large grey area. Unless things are obviously illegal, like sexual predation, you may not be able to assume what is or is not a violation of your local laws. You’ll need to ask a local authority.

How do I find out who’s responsible?

You don’t.

This is perhaps the most common harassment-related question I get. People who are being harassed or threatened anonymously want to find out who’s doing it.

The most common specific question I get relates to IP addresses. People believe that once they have an IP address, they can identify the individual.

No. It’s nowhere near that simple.

Working on your own, your best bet is to look for all the clues relating to the situation. Sure, perhaps an IP address matches an IP address in an email you got from someone you know. That’s no guarantee it’s the same person, but it’s a clue. So are things like who might have a problem with you in the real world, who’s been causing you grief at work or in school, or who you just broke up with.

None of that can prove anything, but it can build a case you can take to the proper authorities.

You cannot definitively trace the source of an email (or any other internet connection) unless the offender slipped up and made it obvious in non-technical ways. But if a law has been broken, law enforcement may be able to. Some time ago, I spoke to Detective Malinda Wilson of the Seattle Police Department and the Internet Crimes Against Children task force, who indicated that she had served as many as nine different warrants to follow the trail of one of her suspects.

This brings us to another point: police may not always be able to help. Detective Wilson’s case likely involved a crime against a child, as that’s her specialty. That’s a priority, and certainly justifies the time and effort to locate the criminal and prosecute the crime.

Someone hacking into your email account? That’s just not as important. To quote Detective Wilson, “Often, if no crime other than the ‘hacking’ is done, the best advice is going to be to start over with a new account.”

The abilities and resources available to your local law enforcement dictate what’s possible and what’s reasonable to expect when it comes to tracking down your offender.

How do I make them stop?

If you believe a crime may have been committed, contact your local law enforcement.

If the offender is in school/at work and using school/work resources, the school or workplace may have additional options. Certain forms of harassment may not be illegal, but may still be against school rules and regulations. The organization may be able to take action on your behalf and likely have a better picture of what warrants involving law enforcement.

In lieu of support from law enforcement or other authorities, your options are limited. Some ideas include:

• If you’re receiving harassing email at a particular email address, close that account and open a new one.
• If your email account has been stolen and you no longer have access to it, create a new account and let your contacts know to ignore the old one.
• If you’re getting harassing chat messages, close the account and begin a new one.

Yes, all of these are the cyber-equivalent of changing your phone number to an unlisted one, or even moving to avoid harassment. As in real-world examples, make sure only people you trust have your new information.

And yes: to put it bluntly, it sucks.

But the fact is, unless some law has been broken, it’s not illegal to be an annoying pain in the… neck. And even if a law has been broken, the authorities may not have the resources to assist sufficiently.

How can I get back at them?

You don’t.

This, too, is a common question. People feel they have been violated, and they want to get revenge.

Consider this fact: How Do I Hack into Someone’s Account? is a popular Ask Leo! article.  My theory is that it’s mostly children attempting to figure out how to get revenge on someone who has bullied or harassed them, online or off. Many of the comments on that article, including most of the comments you don’t see because they are themselves abusive and have been removed, would seem to bear this out.

Bypassing the authorities and attempting to exact revenge can only do more harm than good and rarely resolves anything.

At best, you’ll only waste time. More likely, you’ll antagonize your target into taking harsher actions against you. In the worst case, you might find yourself in violation of the law and, as a result, face harsher penalties than the person harassing you.

Don’t do it. Don’t even try. It’s just not worth it.

Involve the authorities — law enforcement, school officials, ISPs — if you can, and let them do their jobs. If they can’t help, then it’s by far safest to let it go if at all possible.

How do I prevent all this in the first place?

Frequently, this is asked in the context of parents wanting to keep their children safe, but most of the rules apply to us all.

• Be the parent. This is by far the toughest, but it means understanding what’s appropriate for your children, and being aware of — perhaps even monitoring — what they’re doing online. It means setting rules with consequences, sticking to them, and taking care to make sure your children understand what it means to be safe on the internet.
• Be realistic. Children are more likely to be affected by what I’d call “peer-to-peer bullying” than they are to be approached by an adult for illicit purposes. That does not mean that sexual predation does not happen; it clearly does. But what’s much more likely is that your child will be bullied by another child. Don’t ignore the latter because the former is so much more heinous and gets more press.
• Choose strong passwords. Yes, strong passwords are hard to remember, but that’s what makes them strong. The easier they are to remember, the easier they are to guess. Most individual account theft is simply someone guessing your password, with no special technology or techniques necessary.
• Don’t share your password with anyone. The one exception is that children should be required to share their passwords with their responsible parent(s). The scenario I see repeated over and over, with both children and adults, is this: someone shares an account password with a trusted friend, and sometime later the friendship ends. It’s not infrequent that the former friend does serious damage before the account misuse is detected.
• Don’t publish personal information publicly. Google yourself: you may be amazed at what you find. Don’t publish information publicly in newsgroups, public forums, social media, and other places where anyone can see. Even the smallest bit of personal information here and there can be used by a savvy stalker. Assume your worst enemy is trying to find you and every little piece of information you leave online is helping them.
• Don’t assume you know someone you’ve never actually met. On the internet, it’s easy to appear to be something or someone you’re not. Only once you’ve actually met them, or perhaps when someone else you know (i.e., someone you’ve met) has met them face to face, can you assume you know who you’re talking to.
• Learn the technology. You don’t have to know how a car’s engine works to drive safely, but you do have to know how to drive and the rules of the road. The same is true for the internet. Take the time to learn about your computer, the internet, and the sites and services you use most often. The better educated you are about these things, the safer you’ll be.

Where can I get help?

I attended a presentation on internet safety for children, which is where I met Detective Wilson. The presentation covered some of what I’ve mentioned here and a lot more. If you have the opportunity to attend something similar in your area, I strongly recommend it as a starting point.

Remember, the rules and cautions apply to everyone, not just children. Adults can learn a lot about the potential risks and the steps to stay safe, even by attending a presentation aimed at keeping kids safe. If nothing else, it’s a good place to ask questions, and you’ll get references to the local agencies and support organizations that can help you learn more or deal with any immediate issues.

Additional resources include:

• Local law enforcement — your first place to turn if you believe a crime has been committed.
• Use the CyberTipLine on the web (or at 800-843-5678 in the US) to report or learn more about preventing sexual exploitation of children. (Also includes a link to U.K.-based resources.)
• Your local ISP. I know this can be spotty depending on the service you use or the scenario involved, but your ISP can be a source not only for action but for guidance on where to go next.
• Online Resources like NetSmartz.org from the National Center for Missing and Exploited Children.