Cyberstalking Signs and How to Protect Yourself Online

Cyberstalking is the repeated use of electronic communications — email, social media, messaging apps, or tracking software — to harass, monitor, or threaten another person. Unlike a single unwanted message, it involves a pattern of behavior designed to intimidate or control the target. It is a federal crime under 18 U.S.C. § 2261A and illegal in all 50 U.S. states, though definitions and penalties vary by jurisdiction.

According to a 2021 Pew Research Center study on online harassment, 41% of U.S. adults have personally experienced some form of online harassment. Cyberstalking sits at the severe end of that spectrum — and it can escalate to physical danger. The U.S. Department of Justice notes that cyberstalking frequently precedes or accompanies physical stalking, which is why recognizing the signs early matters.

This guide identifies the most common cyberstalking signs, explains the tactics perpetrators use to monitor targets, and provides a practical action plan so you can secure your accounts, reduce your digital exposure, and report the behavior to the appropriate authorities.

Warning Signs You May Be a Cyberstalking Target

Cyberstalking is not always obvious at first. Perpetrators often begin with behavior that seems coincidental before escalating. The DOJ Office on Violence Against Women describes stalking as a course of conduct — meaning no single act constitutes stalking, but the pattern as a whole does. Recognizing that pattern early is the first step toward getting help.

Unwanted, Repeated Digital Contact

One of the clearest cyberstalking signs is a high volume of unsolicited messages — texts, emails, direct messages, or tagged social media posts — especially after you have asked for contact to stop. The defining element is persistence: a single unwanted message is not stalking, but dozens of messages across multiple platforms, or new accounts created the moment you block an existing one, establish a deliberate and willful course of conduct.

Evidence That Someone Is Monitoring Your Location or Activity

If someone repeatedly appears at locations you have not publicly announced — a coffee shop, a gym, a friend's home — they may be tracking your digital activity. Common methods include:

• Reading GPS coordinates embedded in photos you post online (EXIF metadata)
• Monitoring check-ins and tagged posts on social media in real time
• Accessing shared location features in apps like Find My, Google Maps sharing, or Life360 that were previously granted and never revoked
• Installing tracking software on a device they had physical access to at some point

References to private conversations you have had — details you never shared publicly — are a strong signal that someone may have unauthorized access to your accounts or device.

Threatening or Escalating Communication

Any message that threatens your physical safety, livelihood, family, or reputation crosses from harassment into a criminal offense in most jurisdictions. Threats do not have to be explicit; implied threats — such as references to knowing your daily schedule or where you park — can qualify depending on applicable state law. Save every threatening message verbatim, preserving the timestamp and platform name.

Identity Impersonation or Account Manipulation

Cyberstalkers sometimes create fake profiles using your name, photos, or personal details to damage your reputation or contact people in your network. Others attempt to take over existing accounts through password-reset abuse or phishing. If colleagues report receiving strange messages from "you," or if you receive unexpected password-reset emails you did not initiate, treat these as serious cyberstalking warning signs requiring immediate account security action.

Securing Your Accounts and Reducing Your Digital Footprint

Before you can effectively report cyberstalking, you need to stabilize your digital security so the perpetrator cannot observe your response actions. Start by changing passwords on all accounts connected to your primary email address — beginning with the email itself, then social media, then financial accounts. Use a password manager to generate long, unique credentials for each service. Our guide on CISA guidance on password managers and unique passwords provides a practical starting point if you haven't used one before.

Next, enable Multi-Factor Authentication (MFA) on every account that supports it. NIST guidelines on phishing-resistant MFA favor hardware security keys or authenticator apps over SMS codes, which are vulnerable to SIM-swapping — a method sometimes used by perpetrators who know their target's phone number.

Review App Permissions and Location Sharing

Open your phone's settings and audit which apps have access to your location, microphone, and contacts. Revoke permissions that are not strictly necessary for the app to function. Check whether any location-sharing sessions are active in Google Maps, Apple Find My, Snapchat, or any family-tracking apps — and disable sharing with recipients you no longer actively trust. If your device was ever in the physical possession of the suspected cyberstalker, treat it as potentially compromised and run a full security scan.

Locking Down Social Media Privacy

Set all social media profiles to private and audit your followers or connections for unfamiliar accounts. Remove specific location information from your profile — a general city is usually sufficient; avoid listing your neighborhood, employer address, or workplace. Before posting photos, disable geotagging in your device's camera settings (typically found under Settings → Camera or Settings → Location) to prevent EXIF coordinate data from being embedded. Disable "friends of friends" discoverability settings where available, and turn off search-engine indexing of your profile.

For a broader view of how your personal data circulates online, see our guide on dark web monitoring — what it is and why you need it. Data broker sites frequently surface information — your current address, phone number, and relatives' names — that cyberstalkers actively exploit, and monitoring services can alert you when new records appear with your information.

Documenting Cyberstalking Evidence for Law Enforcement

Prosecutors need evidence that demonstrates a pattern of behavior, not just a single incident. Start a dedicated evidence file the moment you suspect you are being cyberstalked. Comprehensive documentation should include:

• Screenshots of every harassing message, with the sender's username, the platform name, and the date/time stamp clearly visible in each image
• Preserved URLs of any public posts targeting you — copy the full URL before content can be deleted or accounts deactivated
• A written incident log listing date, time, platform, a factual description of what happened, and any witnesses present
• Records of unwanted real-world contact you believe was enabled by digital tracking — include the location, time, and what was said or done

Do not respond to or confront the cyberstalker, as this can escalate the situation and complicate legal proceedings. Avoid deleting messages even when they are distressing — courts need original records. If you believe stalkerware is installed on your device, consult with law enforcement or a domestic violence advocate before attempting to remove it, because removal may destroy forensic evidence needed for prosecution.

Where to File a Report

Start with an in-app abuse report on each platform involved — most can preserve account and message records tied to a law enforcement legal hold request. Then contact your local police department and ask them to document it specifically as a stalking or cyberstalking case under your state's statute. If the perpetrator is in a different state, the FBI's Internet Crime Complaint Center (IC3) accepts cybercrime complaints across jurisdictional lines. The Cyber Civil Rights Initiative offers a crisis helpline and legal referrals specifically for victims of online abuse and cyberstalking. If you are in immediate physical danger, contact local law enforcement — and consider requesting a civil protective order, which many states allow to be grounded in cyberstalking conduct.

Strengthening Your Broader Online Security Posture

Cyberstalking rarely exists in isolation — it often intersects with identity theft, account takeover, and broader digital exposure risks. Building layered security makes you a harder target and limits the damage a perpetrator can cause even if they already hold some of your personal information.

If a cyberstalker has been researching you online, there is a real chance that some of your credentials have surfaced in breach databases or dark web forums. Understanding dark web monitoring — what it is and why you need it can help you identify exposed accounts before they are weaponized against you. Phishing is also a common method perpetrators use to take over accounts, and targeted attacks against known individuals tend to be far more convincing than mass campaigns — reviewing how to spot phishing emails will help you recognize personalized attempts.

If a cyberstalker has already used your information to open accounts or commit fraud in your name, our guide on identity theft recovery steps walks through reversing that damage systematically. If you have children at home, the parental controls guide for home internet safety helps ensure younger family members are not inadvertently sharing location data or contact details that a stalker could exploit. For privacy-focused internet use, consider reviewing your options with a personal VPN for privacy and security.