Internet Law · SEARCHES

Is It Illegal to Use a VPN?

By Javaria Sagheer · Updated October 2026
TL;DR No — it is not illegal to use a VPNVPN (virtual private network): a service that encrypts your internet traffic and routes it through its own server, so websites see that server’s address instead of yours. in the United States. We found no federal law that bans VPNs, and no state law we verified punishes a person just for turning one on. What a VPN never does is change the rules underneath it: pirating movies, hacking, fraud, and harassment are exactly as illegal with a VPN running as without one. Using one to get around a streaming region lock or a school filter usually breaks a terms of serviceTerms of service: the contract you accept when you create an account. Breaking it usually costs you the account — it is not usually a crime. agreement or a school policy, not a criminal law. And a VPN is not invisibility: the company running it can be served with a subpoenaSubpoena: a formal legal demand for records. Internet providers, apps, and VPN services can all receive one. or a warrant like any other company.

A VPN Hides Your IP Address — It Doesn’t Change the Law

You’re on airport Wi-Fi with forty minutes before boarding. You tap the VPN app, a small key icon appears at the top of your screen, and the network you’re sitting on can no longer read your traffic. Ordinary, legal, and exactly what the tool is for. Then a friend leans over: “You’ve got a VPN? Then you can download anything. Nobody can tell it’s you.” Those are two different claims. One is about a privacy tool. The other is about what the law lets you do while the tool is on — and the law doesn’t look at the tool at all. Here’s what’s legal, what stays illegal, what only breaks a contract or a school rule, and what to do if a notice shows up.

Is It Illegal to Use a VPN? The Short Answer

Using a VPN is legal in the United States. A VPN encrypts your traffic and routes it through the VPN company’s server, so the sites you visit see that server’s IP addressIP address: the number that identifies your connection on the internet. Your internet provider assigns it and keeps records of who had it and when. instead of yours. We found no federal statute that bans using one. The Federal Trade Commission’s consumer guidance describes VPN apps as one way to protect information sent over public Wi-Fi and gives tips for choosing one. The law cares about what you do, not which IP address you did it from. Copyright infringement is the main one: a court can award $750 to $30,000 per work in statutory damages, and up to $150,000 per work if the infringement was willful (17 U.S.C. § 504(c)). Hacking falls under the Computer Fraud and Abuse Act (18 U.S.C. § 1030) and state computer-crime laws. Fraud and online stalking have their own federal statutes (18 U.S.C. §§ 1343 and 2261A). None has a VPN exception. In between sits a third category that isn’t crime at all: contracts and policies — a streaming service’s terms, a school’s acceptable-use policy, an employer’s IT rules. Break those and the usual consequence is a blocked stream, a closed account, discipline, or a lost job. This topic is mostly federal law and private contracts, so the answer barely changes from state to state. The two places state law does show up are covered below.

VPN Situations, One by One

Situation 1 · Streaming Using a VPN for Netflix — a terms-of-service problem, not a crime we could findNetflix’s Terms of Use say you may access its content “primarily within the country in which you have established your account” and only where it has “licensed such content.” Its help pages add that with a VPN on, you may only be shown titles it holds worldwide rights to. The same terms let Netflix “terminate or restrict” your service if you violate them.

That makes getting around a region lock a contract issue — the same kind of problem as sharing your Netflix password. We found no federal criminal statute aimed at a paying subscriber who watches through a VPN, and no court decision punishing one. That is a report of what we found, not a guarantee.

Situation 2 · Piracy Downloading, torrenting, or streaming pirated movies — illegal with or without a VPNThe U.S. Copyright Office puts it plainly: “Uploading or downloading works protected by copyright without the authority of the copyright owner is an infringement of the copyright owner’s exclusive rights of reproduction and/or distribution.” The owner can sue for $750 to $30,000 per work, or up to $150,000 if willful, plus attorney’s fees. A VPN changes none of those numbers.

Willful infringement can also be a federal crime — for example, copying or distributing works worth more than $1,000 at retail within any 180-day period, or infringing for commercial advantage (17 U.S.C. § 506; 18 U.S.C. § 2319). The Protecting Lawful Streaming Act of 2020 (18 U.S.C. § 2319C) added a felony for people who offer commercial pirate streaming services to the public. It is written for operators, not the audience — but that doesn’t make a pirate stream authorized.

Situation 3 · School and work Using a VPN at school or work — a policy violation firstThe network belongs to the school or the employer, and the rules sit in the acceptable-use policy you or a parent agreed to. Under the Children’s Internet Protection Act, schools that take federal E-rate internet discounts must certify that they filter the internet and monitor minors’ online activity (47 U.S.C. § 254(h)(5)). A VPN that tunnels past the filter breaks the policy, and the usual result is discipline. At a job, it can get you fired — see when you can be fired for no reason.

Is it a crime? Usually not. In Van Buren v. United States (2021), the Supreme Court read the federal hacking law narrowly: a person “exceeds authorized access” by entering parts of a computer that are off limits to him, not by misusing access he legitimately has. A broader reading, the Court warned, would make “millions of otherwise law-abiding citizens” criminals for breaking computer-use policies. The caveats: the Court left open whether a written policy alone can put part of a computer off limits, the ruling covers only the federal statute, and state computer-crime laws are worded differently.

Situation 4 · Police Can a VPN hide you from police? Less than the ads suggestA VPN moves your traffic out of your internet provider’s view and into the VPN company’s. Under the Stored Communications Act, the government can use a subpoena to require a communications provider to hand over a subscriber’s name, address, session times, “any temporarily assigned network address,” and “means and source of payment” (18 U.S.C. § 2703(c)(2)). Other records take a court order or a warrant. A provider can only produce what it keeps — so “no logs” is an advertising claim, not a legal shield.

A VPN also does nothing about the accounts you sign in to or your phone’s connection to cell towers — location records with their own rules, covered in can police track your phone.

Situation 5 · State laws State age-verification laws that mention VPNs — aimed at websites, not usersIn Free Speech Coalition v. Paxton (2025), the Supreme Court upheld a state law requiring certain adult websites to verify that visitors are 18 or older. Lawmakers have since started writing VPNs into similar laws and bills. Three we verified:

Utah — S.B. 73 took effect May 6, 2026. It treats a visitor as being in Utah if the person is actually located there, even when a VPN makes it look otherwise (Utah Code § 78B-3-1002(3)). The duties fall on websites. On September 24, 2026, a federal judge preliminarily blocked the state from enforcing that rule.

Wisconsin — Assembly Bill 105, as introduced, would have made covered sites block visitors from known VPN addresses. Lawmakers removed that language in February 2026, and the governor vetoed the bill in April 2026.

Michigan — House Bill 4938, introduced September 11, 2025, would require internet providers to block “circumvention tools,” defined to include VPNs. Its bill page shows no action after it went to committee.

None of the three, as we read them, punishes an ordinary person for simply using a VPN.

Where state law really differs: unauthorized access. Each law below punishes getting into a computer or network without permission. None of these sections mentions VPNs, but the starting penalty varies:
  • New York — Penal Law § 156.05: class A misdemeanor.
  • Florida — Fla. Stat. § 815.06(2)(a) and (3)(a): third-degree felony.
  • Texas — Penal Code § 33.02(a) and (b): Class B misdemeanor at the base level, and a state jail felony if the computer or network is owned by the government.
  • Illinois — 720 ILCS 5/17-51(a)(1): Class B misdemeanor.
  • Ohio — R.C. 2913.04(B): fifth-degree felony at the base level.
  • Washington — RCW 9A.90.050: gross misdemeanor.
To find your own state’s rule, search your state’s name plus “unauthorized access to a computer” and open the result on your state legislature’s official website.

What to Say and Do When a VPN Lands You in Trouble

Turn it off, keep the paper, bring in an adult
When a streaming app shows a VPN or proxy error:

Turn the VPN off and reload. The service is enforcing its terms, and there is nothing to argue.

When a teacher or IT administrator asks about a VPN on the school network:

“I’ve turned it off. Can you show me which part of the acceptable-use policy covers this?” Then tell a parent the same day.

When a police officer or investigator asks about your online activity:

“I’d like to talk to a lawyer before I answer questions.” If you’re under 18, add: “I want my parent here.”

None of these moments calls for an argument or a cover story. For police questions, see can police question a minor without a parent.
What to Do If You Get a Copyright Notice From Your Internet Provider
  1. Check that it’s real. Scammers copy these notices. Don’t click links in the message or pay anything through it. Sign in to your provider account the way you normally do. Report a fake at ReportFraud.ftc.gov.
  2. Tell the account holder. The notice goes to whoever pays for the internet — often a parent. They need to know the same day.
  3. Stop the activity and find the source. Check every device on the network for file-sharing apps. If nobody can account for it, change the Wi-Fi password.
  4. Save everything. Keep the notice. Write down the date you got it, the title it names, and the date and time it lists.
  5. Count the notices. Federal law protects providers that have a policy for terminating repeat infringers “in appropriate circumstances” (17 U.S.C. § 512(i)). Repeated notices can end with your service cut off.
  6. Know which papers carry deadlines. A forwarded notice is an allegation, not a lawsuit. Three things are different: a letter saying a court subpoena seeks your identity (check it for a response date); a Copyright Claims Board notice, which gives you 60 days after you are served to opt out at ccb.gov; and a federal summons and complaint, where the general deadline to answer is 21 days after you are served (Federal Rule of Civil Procedure 12(a)). Any of the three means a parent and a lawyer, right away.

VPNs: What You Can vs. Can’t Do

✓ YOU CAN LEGALLY

  • Install and use a VPN anywhere in the United States
  • Use one to protect your data on public Wi-Fi
  • Use one at home, on your own network and devices
  • Use the VPN your school or employer gives you for remote access

✗ A VPN DOESN’T LET YOU

  • Download or share pirated movies, music, or games
  • Get into accounts, networks, or devices without permission
  • Run a scam or harass someone — those laws don’t ask which IP address you used
  • Break a streaming service’s terms without risking your account
  • Bypass school or work filters without risking discipline or your job
  • Avoid a valid subpoena or warrant served on the VPN company
The trade you’re making: a VPN doesn’t erase your browsing trail — it hands it to a different company. That’s why the FTC’s tips are about the provider: research the app before you install it, review the permissions it asks for, confirm that it encrypts your information, and check whether it shares your information with third parties.

VPN Myths, Busted

Myth: “VPNs are illegal in the United States.”
False. We found no federal statute banning VPN use, and the FTC publishes consumer tips for choosing one.
Myth: “If my VPN is on, torrenting is legal.”
False. Copyright law has no VPN exception. Downloading or uploading a copyrighted work without permission is infringement, at $750 to $30,000 per work.
Myth: “A VPN makes me anonymous to police.”
False. A VPN company can receive a subpoena, court order, or warrant, and can turn over whatever records it keeps.
Myth: “Watching a pirate stream is fine because the 2020 streaming law only targets the sites.”
Overstated. That felony is aimed at people who run commercial pirate services. It doesn’t make the stream authorized, and downloading from one is ordinary infringement.
Myth: “Some states have banned VPNs.”
Not as of October 2026, in anything we verified. Utah’s 2026 law puts duties on certain websites, not on VPN users, and a federal judge blocked its actual-location rule in September 2026.

VPN Questions People Actually Ask

Tap a question to open it.
Is it illegal to use a VPN for Netflix?
It isn’t a crime under any law we found, but it does break Netflix’s Terms of Use. The terms limit viewing to the country where you set up your account and to places where Netflix has licensed the content, and they let Netflix terminate or restrict your service for violations.
Is it illegal to use a VPN at school?
Usually it’s against school rules, not against the law. Most acceptable-use policies ban tools that get around the school’s filter, and the usual consequence is discipline. State computer-crime laws are written broadly, though, so treat the school network as someone else’s property. Whether the school can also look through your device is a separate question — see can schools search your phone.
Is it illegal to download or stream pirated movies?
Yes for downloading: the U.S. Copyright Office says downloading or uploading a copyrighted work without the owner’s permission is infringement. For streaming, the 2020 federal felony targets people who run commercial pirate services, not viewers — but the stream still isn’t authorized. We did not find a court decision that squarely settles a viewer’s liability for only watching, so treat pirate streams as legal risk with no legal protection.
Can you get in trouble for torrenting?
Yes, if the file is a copyrighted work shared without permission. Copyright owners can sue individual users for $750 to $30,000 per work, up to $150,000 if willful, and your internet provider may end service for repeat infringers. Sharing files you have the right to share is legal.
Can a VPN hide you from police?
No, not reliably. Federal law lets the government demand subscriber records from communications providers with a subpoena, and other records with a court order or warrant. What comes back depends on what the VPN company keeps. A VPN also doesn’t hide the accounts you sign in to or your phone’s cell-tower location.
Has any state banned VPNs?
No state law we verified bans using a VPN as of October 2026. Utah’s S.B. 73 makes certain websites responsible for visitors physically in Utah even when they use a VPN, and a federal court blocked that provision on September 24, 2026 while the case continues. Wisconsin removed VPN-blocking language from a bill that was then vetoed.
Is a VPN legal in other countries?
Not everywhere, so check before you travel. The U.S. State Department’s travel information for China warns: “Use of a VPN in China is illegal in most cases and may result in confiscation of your device, a fine, or detention.” Look up your destination on travel.state.gov first.

VPN Law: Key Terms, Explained

VPN (virtual private network) — a service that encrypts your traffic and routes it through its own server.
IP address — the number that identifies your internet connection; your provider keeps records of who had it and when.
Terms of service — the contract you accept to use an app or site; breaking it risks your account.
Copyright infringement — copying or distributing a copyrighted work without the owner’s permission.
Statutory damages — a set range of money a court can award for infringement without proof of actual loss.
Acceptable-use policy — the written rules for a school or workplace network.

The Law Behind VPNs, Piracy, and Online Privacy

The linked case has its own full breakdown in our case library — tap the card for the whole story.
17 U.S.C. §§ 501, 504, and 506 — copyright infringementAnyone who violates a copyright owner’s exclusive rights is an infringer. Statutory damages run $750 to $30,000 per work, up to $150,000 if willful, and willful infringement is a crime in set circumstances.
18 U.S.C. § 1030 and Van Buren v. United States (2021)The federal hacking law punishes accessing a computer without authorization or exceeding authorized access. Van Buren held that the second phrase means entering areas of a computer that are off limits — not misusing access you were given.
Cox Communications, Inc. v. Sony Music Entertainment (2026)Decided March 25, 2026. The Supreme Court held that an internet provider is liable for its users’ infringement only if it intended its service to be used for infringement — by inducing it or by offering a service tailored to it. The ruling is about the provider’s liability, not the user’s.
Carpenter v. United States (2018)The Supreme Court required a warrant for a long run of cell-site location records held by a phone company — and called its own decision “a narrow one.”Read the full case →
Aylo Freesites Ltd v. Utah Division of Consumer Protection (D. Utah 2026)On September 24, 2026, a federal judge preliminarily blocked Utah’s actual-location rule for VPN users, writing: “It is undisputed that geolocation perfection is not presently possible.” The age-verification requirement itself was not blocked.

VPN Law That’s Still Moving

The edges to watch as of October 2026:
  1. Utah’s VPN provision in court — the September 24, 2026 order is a preliminary injunction, not a final ruling. The case continues.
  2. More state bills — Wisconsin’s bill was vetoed in April 2026 and Michigan’s House Bill 4938 has not left committee. Other legislatures may try their own versions.
  3. Internet providers after Cox — the Supreme Court narrowed when a provider is liable for its users’ piracy. How providers handle copyright notices from here is worth watching. Nothing in the ruling protects the individual user.
When these move, this article gets updated.
One important note: this topic is mostly federal law and private contracts, so the core answer is the same in every state. State law enters in two places — computer-crime statutes and age-verification laws — and here’s how federal and state law fit together. To check your state, search your legislature’s official bill tracker for “virtual private network.”

The Bottom Line on Whether It Is Illegal to Use a VPN

A VPN is a lawful privacy tool, and using one in the United States breaks no law we could find. What it can’t do is change what happens inside the tunnel. Piracy is still infringement at $750 to $30,000 a work. Hacking, fraud, and harassment are still crimes. A streaming service can still close your account, a school can still discipline you, and a VPN company can still be handed a subpoena. If a notice ever arrives, save it, tell a parent, and watch the deadlines. Now you know.
The tracking questionCan police track your phone? → More copyrightCan you get sued for a meme? → The whole subjectExplore Internet Law →

Sources

Primary sources: Secondary sources:

LawJustic is for educational purposes only and does not provide legal advice. Internet law mixes federal statutes, private contracts, and state laws that are changing quickly. If you receive a subpoena notice, a Copyright Claims Board notice, or court papers, talk to a parent and contact a licensed attorney right away. Last reviewed: October 2026.

Internet Law · SEARCHES

Is It Illegal to Make a Deepfake of Someone?

By Javaria Sagheer · Updated October 2026
TL;DR It depends: whether it is illegal to make a deepfake of someone turns on what it shows and what you do with it. No single U.S. law bans every deepfakeDeepfake: a realistic image, video, or audio clip, made or altered by software, that shows a real person doing or saying something that never happened., but one line is absolute: creating, keeping, or sharing a sexual image of anyone under 18 — real or AI-made — is a serious crime. Knowingly publishing an intimate digital forgeryDigital forgery: the federal TAKE IT DOWN Act’s term for an intimate image of an identifiable person, made or altered by software or AI, that a reasonable viewer could not tell from a real one. of a real person without consent is a federal crime, and some states punish making one even if it is never posted. Non-sexual fakes can still bring lawsuits, fraud or harassment charges, and school discipline. If you are the target, covered platforms must take an intimate fake down within 48 hours of a valid request.

A Fake Clip, a Real Person: When Deepfakes Break the Law

Sunday night, the group chat lights up. Someone has posted a video of a girl from your grade saying something ugly about a teacher. It looks like her. It sounds like her. It isn’t her — somebody built it. By Monday morning the clip has been forwarded to people who never saw the word “fake.” She is in the counselor’s office, and three questions are moving through the hallway: Is this a crime? Is forwarding it a crime? And what is she supposed to do now? The answers depend on details most people skip. A fake that puts words in someone’s mouth is handled very differently from a sexual fake — and the law gets far harsher when the person shown is under 18. Here is where the lines sit, what each one costs, and the exact steps to take if the fake is of you.

Is It Illegal to Make a Deepfake? The Short Answer

The technology is not banned. The law looks at what the fake shows, who is in it, and what was done with it — and three layers of law apply at the same time. Layer one: federal child-exploitation law. The federal definition in 18 U.S.C. § 2256(8) covers computer-generated images that are indistinguishable from a real minor engaged in sexually explicit conduct, and any image “created, adapted, or modified to appear that an identifiable minor is engaging in sexually explicit conduct.” A minor is anyone under 18. In a 2024 public warning, the FBI wrote that “child sexual abuse material (CSAM) created with content manipulation technologies, to include generative artificial intelligence (AI), is illegal.” Layer two: the TAKE IT DOWN Act. Public Law 119-12, signed May 19, 2025, made it a federal crime to knowingly publish online an intimate digital forgery of an identifiable person, adult or minor. It also orders websites and apps to remove nonconsensual intimate images — real or fake — within 48 hours of a valid request. Layer three: state law and older legal tools. States have their own deepfake statutes, and some reach the person who only made the image. Fakes that are not sexual at all can still be defamation, fraud, harassment, or a misuse of someone’s likeness. Which of these you are dealing with changes everything, so the next section takes them one at a time.

Are Deepfakes Illegal? Five Situations, One by One

Situation 1 · Anyone under 18 A sexual deepfake of a minor — a serious crime at every stepThis is the line with no gray area. Under 18 U.S.C. § 2252A, knowingly receiving or distributing this material carries 5 to 20 years in federal prison, and knowingly possessing it carries up to 10. A separate law, 18 U.S.C. § 1466A, covers producing obscene images of minors and says the minor shown does not even have to exist.

“It’s AI” is not a defense, and neither is “it was a joke.” Deputy Attorney General Lisa Monaco said in 2024: “Put simply, CSAM generated by AI is still CSAM.” Nothing in § 2252A makes an exception because the person who made or shared the image is also a teenager, and the FBI’s warning specifically mentions teenagers altering ordinary pictures of classmates.

Situation 2 · Adults An intimate deepfake of an adult — a federal crime to publishThe TAKE IT DOWN Act makes it unlawful to knowingly publish an intimate digital forgery of an identifiable adult without consent when, among other conditions, publishing it was intended to cause harm or does cause harm — the statute lists psychological, financial, and reputational harm — and what is shown is not a matter of public concern. The penalty is up to 2 years in prison, or up to 3 when the person shown is a minor.

Threats count too. Threatening to publish a forgery to intimidate, coerce, or extort someone carries up to 18 months, or up to 30 months when the target is a minor. The federal crime is about publishing and threatening; some state laws in the box below, including Florida’s and Texas’s, go further and punish creating the image itself.

Situation 3 · Not sexual Fake words, fake actions, fake voices — older laws do the workNo federal statute bans a non-sexual fake just for existing. But pass one off as real and it can be defamationDefamation: a false statement presented as fact, shared with others, that damages someone’s reputation. It is a civil claim — the person harmed sues for money.: a false statement presented as fact, shared with others, that damages a reputation. Use a cloned voice or face to get money and it is fraud — federal wire fraud, 18 U.S.C. § 1343, carries up to 20 years. The FTC has warned since 2023 that scammers clone relatives’ voices for fake emergency calls.

Repeated fakes aimed at one person can also be harassment or stalking: the federal stalking law, 18 U.S.C. § 2261A, covers a course of online conduct meant to harass or intimidate that causes substantial emotional distress. The same laws apply to doxxing and online harassment. And using someone’s face or voice to sell something can violate their right of publicityRight of publicity: a person’s legal control over commercial use of their name, face, or voice. It comes from state law, so the details change from state to state. — New York’s Civil Rights Law § 50, for example, makes it a misdemeanor to use a living person’s “name, portrait, picture, likeness, or voice” for advertising or trade without written consent.

Situation 4 · Jokes and politics Parody and satire — protected, within limitsThe First Amendment protects mockery, including harsh mockery of public figures. In Hustler Magazine v. Falwell (1988), the Supreme Court protected an offensive ad parody because it “could not reasonably have been interpreted as stating actual facts about the public figure involved.” An obviously absurd fake of a politician fits that idea, the same way memes about public figures usually do.

The protection runs out when a fake is realistic enough to be taken as fact, or when it is sexual: the TAKE IT DOWN Act protects any identifiable person, famous or not. Some states also restrict deceptive deepfakes of candidates close to an election, and those laws are being challenged in court. In August 2025, a federal judge ruled that California’s version violated the First Amendment.

Situation 5 · School A deepfake of a classmate or teacher — discipline on top of the lawYou can get in trouble at school for a deepfake even when it was made at home on your own phone. Under Tinker v. Des Moines (1969), student conduct that “materially disrupts classwork or involves substantial disorder or invasion of the rights of others” is not shielded by the First Amendment. In Mahanoy Area School District v. B.L. (2021), the Court listed “serious or severe bullying or harassment targeting particular individuals” among the off-campus behavior schools may still have reason to regulate.

A fake that humiliates a classmate or a teacher fits that description easily, so suspension or expulsion is realistic, and the school may also call the police. Our guide on when schools can punish off-campus posts covers the full test.

How six states handle deepfakes. State law is where “making” versus “sharing” gets decided. Six examples from different regions:
  • Florida — § 836.13: willfully generating an “altered sexual depiction” of an identifiable person without consent is a third-degree felony, and the person shown can sue for $10,000 or actual damages, whichever is greater. § 106.145 requires a disclaimer on certain political ads made with generative AI.
  • Texas — Penal Code § 21.165: knowingly producing or distributing sexually explicit deep fake media without the depicted person’s consent is a Class A misdemeanor, and a third-degree felony if that person is under 18. A “this is fake” label is not a defense. Election Code § 255.004 makes it a crime to create a deep fake video and have it published within 30 days of an election with intent to injure a candidate or influence the result.
  • New York — Penal Law § 245.15: publishing an intimate image without consent, “including an image created or altered by digitization,” with intent to harm the person shown is a class A misdemeanor. Civil Rights Law § 52-c lets the person shown sue.
  • Virginia — § 18.2-386.2: maliciously sharing or selling such an image “created by any means whatsoever,” with intent to coerce, harass, or intimidate, is a Class 1 misdemeanor. It covers images built to depict a recognizable real person.
  • Minnesota — § 617.262: intentionally sharing a sexual deep fake without consent is a gross misdemeanor, rising to as much as 3 years with aggravating factors such as intent to harass. § 609.771 criminalizes election deep fakes spread within 90 days before a party nominating convention or after absentee voting begins.
  • Washington — RCW 9A.86.030: disclosing a “fabricated intimate image” is a gross misdemeanor, or a class C felony with a prior conviction, and the statute has a specific rule for defendants under 18. RCW 29B.35.010 lets candidates sue over undisclosed synthetic media in campaign communications.
To check your own state: go to your state legislature’s official website and search the statutes for “deep fake,” “digitization,” “intimate image,” or “altered sexual depiction.” Your state attorney general’s site is the second place to look.

What to Say and Do If Someone Makes a Deepfake of You

Don’t spread it — report it
When the fake lands in your chat or feed:

“I’m not passing this on, and I’m asking you to stop sending it.” Then don’t forward it — not to warn people, not to prove it exists.

When you tell a parent, counselor, or another adult you trust:

“Someone made a fake image of me and it’s going around. It isn’t real. I need help reporting it.”

When you report an intimate fake to the platform:

“This is an intimate image of me, published without my consent. I am requesting removal under the TAKE IT DOWN Act.”

If someone threatens to post a fake unless you pay or send something:

Stop replying. Do not send money or images. Tell an adult and report the threat — threatening to publish an intimate fake is itself a federal crime.

If police or school officials want to question you about a deepfake:

“I want my parent here, and I’d like to talk to a lawyer before I answer questions.”

Stay calm and polite in every one of these conversations. If you are under 18, our guide on police questioning a minor without a parent explains that last line.
What to Do If Someone Makes a Deepfake of You
  1. Do not share it. Every forward makes removal harder and can create legal trouble for the sender.
  2. Write down the evidence. Record the link or URL, the platform, the username, the date and time, and who sent it to you. If the image is sexual and shows anyone under 18, do not screenshot, download, or forward the image itself — note where it is and let investigators handle the file.
  3. Tell a trusted adult — a parent, school counselor, or teacher.
  4. Send the platform a removal request. Since May 19, 2026, covered platforms must remove a nonconsensual intimate image, and known identical copies, within 48 hours of a valid request. The request must be in writing and include your signature (electronic is fine), where the image is, a short statement that you believe in good faith it was published without consent, and how to reach you. A parent or another authorized person can file for you.
  5. Use the free fingerprint tools. If you were under 18 in the image, use NCMEC’s Take It Down at takeitdown.ncmec.org. If you are 18 or older and were an adult in the image, use StopNCII.org. Both create a digital fingerprint on your own device so participating platforms can find copies; the image is not uploaded.
  6. Report the crime. Contact local police, or the FBI at tips.fbi.gov or 1-800-CALL-FBI. Online crimes can also go to the FBI’s Internet Crime Complaint Center at ic3.gov. If a minor is shown, report to NCMEC’s CyberTipline at CyberTipline.org or 1-800-843-5678.
  7. If the platform misses the 48 hours, report the platform to the Federal Trade Commission at TakeItDown.ftc.gov. If students are involved, report it to the school as well.

Deepfakes: What You Can vs. Can’t Do

✓ YOU CAN

  • Make obvious parody or satire of a public figure that no reasonable viewer would take as fact
  • Edit or alter your own face and voice in ordinary, non-sexual content
  • Use an adult’s likeness with their real consent, for non-deceptive purposes
  • Demand removal of an intimate image of you, real or fake, and expect action within 48 hours of a valid request
  • Report a platform that ignores your request to the FTC

✗ YOU CAN’T

  • Create, keep, or share a sexual image of anyone under 18 — real, edited, or AI-made
  • Publish an intimate deepfake of a real person without consent
  • Threaten to post a fake to get money, images, or silence
  • Use a cloned voice or face to get money or pose as someone else
  • Present a realistic fake as real to damage someone’s reputation
  • Count on a “fake” label, a joke, or your age to protect you
If a sexual image of someone under 18 lands on your phone: you did not ask for it, but what you do next matters. Do not forward it and do not save extra copies. Tell a trusted adult right away, report it to the CyberTipline or the police, and follow their instructions about the message itself.

Deepfake Myths, Busted

Myth: “It’s fake, so it can’t be illegal.”
False. Federal law was written for exactly this: the TAKE IT DOWN Act covers forgeries made with “software, machine learning, artificial intelligence, or any other computer-generated or technological means,” and the federal child-exploitation definition covers computer-generated images.
Myth: “I only made it. I never posted it.”
It depends on the image and the state. The federal forgery crime targets publishing, but federal law also punishes possessing sexual images of minors, Florida’s statute reaches a person who “willfully generates” a sexual fake, and Texas covers anyone who “produces” one.
Myth: “I’m under 18, so nothing can happen to me.”
False. Section 2252A contains no exception based on the offender’s age, Washington’s law spells out when a person under 18 is guilty, and schools can discipline on top of any court case.
Myth: “I didn’t make it, I just forwarded it.”
Forwarding is the conduct most of these laws punish. The federal crime is publishing, and the state laws above use words like “distributes,” “disseminates,” and “discloses.”
Myth: “If I label it ‘fake’ or ‘parody,’ I’m covered.”
Not for sexual fakes. Texas law says outright that a disclaimer or a label saying the depiction is not authentic is no defense. Labels matter more for political parody, where the question is whether a viewer would take the fake as fact.

Deepfake Questions People Actually Ask

Tap a question to open it.
Are deepfakes illegal in the United States?
Not all of them. No federal law bans every deepfake, but specific uses are crimes: sexual images of minors, publishing intimate forgeries without consent, threats to publish them, and fraud. Other fakes can lead to civil lawsuits for defamation or misuse of a person’s likeness. State laws add more, and they differ.
Is it illegal to share a deepfake someone else made?
It can be, and sharing is often the main offense. The federal TAKE IT DOWN Act punishes knowingly publishing an intimate digital forgery, whoever created it. If the image is sexual and shows someone under 18, receiving, keeping, or distributing it violates federal child-exploitation law.
Can you get in trouble at school for a deepfake?
Yes. Public schools can discipline student expression that substantially disrupts school or invades the rights of others, and the Supreme Court has said that interest can reach serious off-campus bullying or harassment of particular individuals. A fake of a classmate or teacher can mean suspension or expulsion, plus a police report. Private schools follow their own handbooks.
What should you do if someone makes a deepfake of you?
Don’t share it, write down the link, username, and date, and tell a trusted adult. For an intimate image, send the platform a written removal request — it has 48 hours to act on a valid one — and use takeitdown.ncmec.org if you were under 18 in the image, or StopNCII.org if you are an adult. Report crimes to local police or the FBI.
Can you go to jail for making a deepfake?
Yes, in some situations. Publishing an intimate forgery carries up to 2 years in federal prison, or 3 if the person shown is a minor; receiving or distributing sexual images of minors carries 5 to 20 years. State penalties range from misdemeanors to felonies. Our guide on going to jail for what you post covers other online speech crimes.
Are deepfakes of celebrities or politicians legal?
Only obvious parody is generally protected; realistic or sexual fakes are not. The First Amendment shields satire that no reasonable person would read as fact. It does not shield an intimate forgery, a fake used to sell something, or, in states such as Texas and Minnesota, certain deceptive candidate deepfakes near an election.
Is cloning someone’s voice with AI illegal?
It depends on the use. Using a cloned voice to trick someone out of money is fraud, and New York’s Civil Rights Law § 50 bars using a living person’s voice for advertising or trade without written consent. If you get a call that sounds like a relative in trouble, the FTC’s advice is not to trust the voice: call that person on a number you know is theirs, and report scams at ReportFraud.ftc.gov.
Can you sue someone who makes a deepfake of you?
Often yes, under state law. Florida lets the person shown recover $10,000 or actual damages, whichever is greater, and New York’s Civil Rights Law § 52-c allows suits for damages and a court order. A federal right to sue, the DEFIANCE Act, passed the Senate in January 2026 but is not law as of October 2026.

Deepfake Law: Key Terms, Explained

Deepfake — a realistic image, video, or audio clip, made or altered by software, showing a real person doing or saying something that never happened.
Digital forgery — the TAKE IT DOWN Act’s term for an intimate image of an identifiable person, made or altered by software or AI, that a reasonable viewer could not tell from a real one.
CSAM — child sexual abuse material; sexual images of anyone under 18. Federal law treats realistic AI-generated versions the same way.
Notice and removal — the process every covered platform must offer for reporting a nonconsensual intimate image, with a 48-hour deadline to take it down.
Defamation — a false statement presented as fact, shared with others, that harms a reputation; the basis for a civil lawsuit.
Right of publicity — state-law control over commercial use of your name, face, or voice.
Sextortion — threatening to release an intimate image, real or fake, to force someone to pay or send more.

The Law Behind Deepfake Cases

Two of these have full breakdowns in our case library — tap a linked card for the whole story.
TAKE IT DOWN Act, Public Law 119-12 (2025)The federal law aimed at intimate deepfakes: a crime to knowingly publish an intimate digital forgery or threaten to, and a 48-hour removal duty for platforms, enforced by the Federal Trade Commission.
18 U.S.C. §§ 2256(8) and 2252AThe federal child-exploitation statutes. The definition reaches computer-generated images and images altered to show an identifiable minor; the penalties are measured in years.
Tinker v. Des Moines (1969)The school-speech foundation: students keep free-speech rights, but not for expression that substantially disrupts school or invades the rights of others.Read the full case → Mahanoy Area School District v. B.L. (2021)The off-campus rule: schools have less power over what you post at home, but serious bullying or harassment of particular individuals can stay within their reach.Read the full case →
Hustler Magazine v. Falwell (1988)The parody case: a public figure could not recover emotional-distress damages for an offensive parody that could not reasonably be read as stating actual facts about him.

Deepfake Law That’s Still Moving

The edges to watch as of October 2026:
  1. A federal right to sue — the DEFIANCE Act, which would let people depicted in sexual digital forgeries sue those who make or share them, passed the Senate by unanimous consent on January 13, 2026. As of October 2026 we found no record of a House vote, and it is not law.
  2. FTC enforcement of the 48-hour rule — the Federal Trade Commission began enforcing the removal duty on May 19, 2026, and says platforms face civil penalties of up to $53,088 per violation. How strictly it enforces is still being worked out.
  3. Election deepfake laws in court — on August 29, 2025, a federal judge in California ruled in Kohls v. Bonta that the state’s election deepfake law, AB 2839, violates the First Amendment and barred officials from enforcing it against the people who sued. On February 9, 2026, a federal appeals court declined to block Minnesota’s election deepfake statute but did not decide whether it violates the First Amendment. In Minnesota, that question is still open.
  4. State statutes keep changing — Texas amended its sexual deepfake law in 2025, and Florida amended its law in both 2025 and 2026. A summary written last year may already be out of date.
When these move, this article gets updated.
One important note: federal law and state law apply to deepfakes at the same time — here is how that layering works. The federal rules above are the same everywhere, but whether simply making a fake is a crime, what the penalty is, and whether you can sue all change by state. Check your own state’s statute before you assume anything.

The Bottom Line on Whether It Is Illegal to Make a Deepfake

The software is legal. What you point it at decides the rest. A sexual image of anyone under 18 is a serious crime to make, keep, or share, whether a camera or a computer produced it. An intimate fake of an adult is a federal crime to publish and, in some states, a crime to create. A non-sexual fake can still cost you a lawsuit, a fraud charge, or your place at school. And if the fake is of you, the law now gives you a clock: 48 hours for a platform to take it down once you ask the right way. Don’t share it, write down where it is, tell an adult, report it. Now you know.
The other online attackIs doxxing illegal? → The bigger questionCan you go to jail for what you post? → The whole subjectExplore Internet Law →

Sources

Primary sources: Secondary sources:

LawJustic is for educational purposes only and does not provide legal advice. Deepfake law varies by state and is changing quickly. If a fake image of you is circulating, or you are facing charges or school discipline over one, talk to a parent or trusted adult and contact a licensed attorney. Last reviewed: October 2026.

Internet Law · SEARCHES

Is Doxxing Illegal?

By Javaria Sagheer · Updated October 2026
TL;DR Often, yes — whether doxxing is illegal depends on why the information was posted and what happened because of it. No single federal law bans doxxing by name. But publishing someone’s home address, phone number, or workplace to threaten, stalk, or harass them can be prosecuted as cyberstalkingCyberstalking: under 18 U.S.C. § 2261A, using the internet with intent to harass or intimidate, through two or more acts that cause reasonable fear of serious harm or substantial emotional distress. or as a true threatTrue threat: a serious expression that the speaker means to commit unlawful violence. Not protected by the First Amendment — Counterman v. Colorado (2023). under federal law, and states including California, Texas, Florida, Arizona, Illinois, and Washington have their own doxxing laws — some criminal, some civil. If it happens to you, save the evidence, report the post, and report any threat to police — and if you’re under 18, tell a parent or trusted adult the same day.

Your Address Just Showed Up in the Comments: What the Law Does About It

It starts as an argument in a comment thread. By midnight a stranger has replied with your full name, your street, and a photo of your front door. Then it spreads. Accounts you’ve never seen start messaging: “we know where you live.” Food you didn’t order shows up at the house. Your mom asks why someone called her at work. That is doxxing: your private details, published so other people can come after you. Whether it’s a crime turns on what was posted, why, and what it led to. Here’s where federal law draws the lines, how six states handle it, and the steps to take that day and in the week after.

Is Doxxing Illegal? The Short Answer

“Doxxing” is internet slang, not the name of a federal crime. What federal law punishes is what doxxing is usually for:
  • Cyberstalking — 18 U.S.C. § 2261A. Using the internet with intent to harass or intimidate, through two or more acts that put someone in reasonable fear of death or serious bodily injury, or would reasonably be expected to cause “substantial emotional distress.” Up to 5 years in an ordinary case; more if the victim is physically hurt.
  • Interstate threats — 18 U.S.C. § 875(c). Transmitting a threat to kidnap or injure someone in interstate commerce — the statute charged over Facebook posts in Elonis v. United States. Up to 5 years. Anonymous messages sent to abuse, threaten, or harass a specific person fall under 47 U.S.C. § 223 (up to 2 years).
  • Doxxing protected officials — 18 U.S.C. § 119. The one federal statute that reads like a doxxing law: knowingly making public the home address, phone number, personal email, or Social Security number of a federal officer or employee, juror, witness, or informant with intent to threaten, intimidate, or incite a crime of violence. Up to 5 years.
Why no blanket ban? The First Amendment. In Florida Star v. B.J.F. (1989), the Supreme Court said that when a newspaper “lawfully obtains truthful information about a matter of public significance,” punishing publication takes a state interest of the highest order. True threats, though, get no protection — Counterman v. Colorado (2023). So doxxing laws are built around intent and harm, not the information itself. State law is where doxxing is targeted directly. Six examples from different regions:
  • California — criminal and civil. Penal Code § 653.2: a misdemeanor (up to one year in county jail, a $1,000 fine) to electronically distribute someone’s personal identifying information without consent, intending to put them in reasonable fear for their safety and to imminently cause harassment, injury, or unwanted contact by a third party. Civil Code § 1708.89, in effect since January 1, 2025, adds a lawsuit with $1,500 to $30,000 in statutory damages.
  • Texas — criminal. Penal Code § 42.074: posting a person’s home address or phone number on a public website, or disclosing it through an electronic communication, “with the intent to cause harm or a threat of harm” to that person or their family or household. Class B misdemeanor; Class A if bodily injury results.
  • Florida — criminal. § 836.115: electronically publishing someone’s personal identification information intending — or intending that a third party will use it — to incite violence or a crime against them, or to threaten or harass them into reasonable fear of bodily harm. First-degree misdemeanor.
  • Arizona — criminal. A.R.S. § 13-2916: a class 1 misdemeanor to distribute someone’s personal identifying information without consent to imminently cause harassment, injury, or unwanted contact by a third party — and only if the post actually produces it.
  • Illinois — civil. The Civil Liability for Doxing Act, 740 ILCS 195: you can sue someone who intentionally publishes your personally identifiable information without consent, intending it to be used to harm or harass you, while knowing or recklessly disregarding that you’d likely suffer death, bodily injury, or stalking — and it must cause real harm.
  • Washington — civil. RCW 4.24.792: a lawsuit for publishing personal identifying information without express consent, with intent, knowledge, or reckless disregard that it will be used to harm you, when harm follows. Statutory damages are $5,000 per violation.
The pattern: every one requires a harmful purpose or state of mind, and several require actual harm. If your state has no doxxing-specific law, its general threat, stalking, and harassment laws may still apply.

Doxxing Situations, One by One

Situation 1 · Group harassment Someone posts your address and tells people to use itThis is the version state doxxing laws were written for. The poster doesn’t have to show up at your door. Florida’s statute reaches publishing your information “with the intent that a third party will use the information” to threaten or harass you; California’s and Arizona’s are built around harassment “by a third party.”

If it keeps coming — repeated posts, messages, new accounts — it can also become federal cyberstalking.

Situation 2 · The threat The post comes with a threat to hurt youA threat of violence doesn’t need a doxxing law. Section 875(c) covers “any threat to kidnap any person or any threat to injure the person of another.” The constitutional line comes from Counterman: the government must show the speaker at least consciously disregarded a substantial risk that the words would be viewed as threatening violence. “I was joking” is not an automatic defense — and not every angry post is a crime. See our guide to going to jail for what you post.

A threat plus your address is an emergency. If anyone is at your door or says they’re coming, call 911.

Situation 3 · Public info “It was already public” — true, and not the end of the questionSharing truthful, lawfully obtained information is often protected speech — naming a business in a review or linking a news story isn’t doxxing. But the laws above focus on the poster’s purpose and the harm that follows, not on whether the address could be found somewhere.

One post that gathers a person’s details and nudges others to act can turn public facts into evidence of intent.

Situation 4 · You’re the poster You’re angry and about to “expose” someoneStop before you publish an address, school, or workplace. If the post is meant to send people after someone, you’re inside the statutes above. If you’ve identified the wrong person, a stranger takes the harm — and you may also be sued over what you posted.

The lawful route: report the conduct to the platform, the school, or the police. Reporting a crime to law enforcement isn’t doxxing — Illinois’s and Washington’s laws both say so expressly.

Situation 5 · At school A classmate doxxes you — or you doxx a classmateSchool discipline is separate from criminal law. In Mahanoy Area School District v. B.L. (2021), the Supreme Court limited schools’ power over off-campus speech but named “serious or severe bullying or harassment targeting particular individuals” as behavior a school may still have reason to regulate. Details are in our guide to whether your school can punish you for what you post.

If you’re the target and under 18, tell a parent or trusted adult first, then the school in writing.

What to Say and Do If You Get Doxxed

Save it, report it, lock it down — in that order
1. Before anything disappears:

Screenshot every post and message with the username, the URL, and the date and time showing. Save the links. Don’t reply and don’t argue.

2. When you report the post to the platform:

“This post shares my home address and phone number without my consent and is being used to harass me. Please remove it.”

3. If there’s a threat — 911 for immediate danger, otherwise the police non-emergency line:

“I’d like to file a report. Someone posted my home address online along with threats against me. I have screenshots, links, and usernames. May I have the report number?”

4. For online threats and stalking, also file with the FBI’s Internet Crime Complaint Center at ic3.gov:

Give the same facts: what was posted, where, by which account, and what happened next. IC3 is not an emergency line.

5. If you’re under 18, say this to a parent or trusted adult today:

“Someone posted where we live and people are messaging me. I saved everything. I need help reporting it.”

Keep every report calm and factual — who, what, where, when. Don’t threaten the poster, and don’t post their information in return.
What to Do in the Week After You’re Doxxed
  1. Lock your accounts. New passwords, two-step login, private profiles, and no address, school, or phone number in bios.
  2. Protect your credit if a Social Security number was exposed. A credit freeze is free; you place it with Equifax, Experian, and TransUnion. If your identity is misused, the FTC’s IdentityTheft.gov builds a recovery plan.
  3. Ask for your details to be taken down. Google’s “Results about you” tool takes requests to remove search results showing your phone number, home address, or email. People-search sites have opt-out pages; the FTC says opting out is free and that your information can reappear, so check again later. California residents can use the state’s free DROP tool to send one deletion request to every registered data broker.
  4. Keep a dated log. Every new post, call, delivery, or visit, with the police report number beside it.
  5. Ask about a court order and a lawsuit. A court clerk or victim advocate can tell you which protective orders your state offers; a lawyer can tell you whether you can sue.

Posting About Other People: What You Can vs. Can’t Do

✓ YOU CAN

  • Criticize, review, or disagree with someone by name
  • Share truthful, lawfully obtained information on a matter of public concern
  • Report a crime or a threat to police, a school, or a platform
  • Save and hand over evidence of harassment aimed at you
  • Ask platforms, search engines, and people-search sites to remove your own details

✗ YOU CAN’T

  • Post someone’s home address or phone number to threaten them or send others after them
  • Send or post a true threat of violence
  • Keep up online harassment that puts someone in reasonable fear or causes substantial emotional distress
  • Threaten someone’s reputation or property to extort money or anything of value
  • Break into an account to get the information — a separate federal crime under 18 U.S.C. § 1030
The retaliation trap: the urge after being doxxed is to doxx back. Don’t. Posting the other person’s address is the same act with your name on it. Evidence goes to the police and the platform, not into a public post.

Doxxing Myths, Busted

Myth: “Doxxing is a federal crime, period.”
Not exactly. There’s no general federal doxxing statute. Federal charges come from cyberstalking, interstate threats, or the narrow law protecting federal officials, jurors, and witnesses.
Myth: “I only posted the address. What other people did with it isn’t on me.”
Dangerous myth. Florida’s law covers intending that a third party will use the information; California’s and Arizona’s are written around harassment by third parties; Washington’s reaches reckless disregard for the risk of harm.
Myth: “The platform’s rules are the law.”
False both ways. A platform can remove a legal post and leave up an illegal one. A ban isn’t a legal penalty, and a post staying up doesn’t make it lawful. Report to the platform and, when there’s a threat, to police.
Myth: “I’m a minor, so nothing can happen to me.”
False. The statutes quoted here apply to “a person” or “whoever.” How a case against someone under 18 is handled depends on your state’s juvenile system, and school discipline is a separate track.

Doxxing Questions People Actually Ask

Tap a question to open it.
What counts as doxxing?
Doxxing means publishing someone’s private identifying information — home address, phone number, workplace, school, Social Security number — without consent, usually so others can find or harass them. There’s no single legal definition; each statute writes its own. Texas’s covers a home address or phone number; Arizona’s covers information that would let a person be located, contacted, or harassed. Criticizing or naming someone is not, by itself, doxxing.
Can you go to jail for doxxing?
Yes, when the conduct fits a criminal statute. Federal cyberstalking, an interstate threat, and doxxing a covered federal official each carry up to 5 years in an ordinary case. California’s doxxing offense carries up to one year in county jail; Texas, Florida, and Arizona also classify theirs as misdemeanors. Illinois’s and Washington’s doxxing laws are civil — money, not jail.
Is it illegal to post someone’s address online?
Not automatically. It becomes illegal when the address is posted with the intent the statutes describe: to threaten, to harass, or to send other people after the person. Under 18 U.S.C. § 119, doing that to a federal officer or employee, juror, witness, or informant is a federal crime.
Can you sue someone for doxxing you?
In some states, yes, under a specific statute. California allows $1,500 to $30,000 in statutory damages plus other damages and attorney’s fees. Illinois allows damages, attorney’s fees, and court orders. Washington allows $5,000 per violation. Elsewhere, an older state-law claim such as invasion of privacy may fit, depending on the facts and the state — a question for a lawyer.
Is threatening to dox someone illegal?
It can be. When a threat to damage your reputation or property is used to demand money or anything else of value, 18 U.S.C. § 875(d) makes sending it in interstate commerce a federal crime punishable by up to 2 years. A “do what I say or I post your address” message may also violate state harassment, stalking, or extortion laws, which vary. Save the message and report it.
What should I do if I get doxxed?
Act in this order: screenshot everything with usernames, links, and times; report the post to the platform; call 911 if you’re in immediate danger and report any threat to police; file a complaint at ic3.gov; then lock down your accounts and ask search engines and people-search sites to remove your details. If you’re under 18, bring in a parent or trusted adult at step one.

Doxxing Law: Key Terms, Explained

Doxxing — publishing someone’s private identifying information without consent, typically so others can locate or harass them.
True threat — a serious expression that the speaker means to commit unlawful violence. Not protected by the First Amendment.
Cyberstalking — the federal crime in 18 U.S.C. § 2261A: online conduct, with intent to harass or intimidate, that causes reasonable fear or substantial emotional distress.
Course of conduct — defined in federal law as a pattern of two or more acts showing a continuity of purpose.
Recklessness — consciously disregarding a substantial risk. After Counterman, the minimum mental state the government must prove in a true-threat case.

The Court Cases Behind Doxxing Law

The linked card opens a full breakdown in our case library.
Counterman v. Colorado (2023)A man sent hundreds of Facebook messages to a local musician. Voting 7–2 on the outcome, the Court held that in a true-threat prosecution the government must prove the speaker was at least reckless about how the words would be received.
Elonis v. United States (2015)Violent Facebook posts charged under 18 U.S.C. § 875(c). The Court held that negligence isn’t enough to convict — what the speaker was thinking matters.
Florida Star v. B.J.F. (1989)A newspaper printed a crime victim’s name taken from a police report. The Court held that punishing truthful, lawfully obtained information of public significance takes a state interest of the highest order.
Mahanoy Area School District v. B.L. (2021)The school-speech piece: off-campus posts get broad protection, but severe harassment and threats targeting individuals remain within a school’s reach.Read the full case →

Doxxing Law That’s Still Moving

The edges to watch as of October 2026:
  1. New and wider state laws — Texas and Washington passed theirs in 2023; Illinois’s took effect in 2024 and California’s civil law in 2025. Texas widened its statute in 2025, and Indiana added doxxing to its intimidation law effective July 1, 2026.
  2. Bills in Congress — Senate bills introduced in June 2025 (S. 1952) and January 2026 (S. 3651) would add federal crimes for exposing certain federal officers and special operations personnel. We found no record of either becoming law.
  3. Data-broker deletion rights — California’s DROP platform opened in January 2026; data brokers had to begin processing its deletion requests on August 1, 2026.
When these move, this article gets updated.
One important note: doxxing law is a patchwork. The six states above are examples, not the whole map. To check yours, search your state legislature’s official website for “doxxing,” “harassment,” “stalking,” and “personal identifying information,” and look at your state attorney general’s site. Federal law applies alongside whatever your state does — here’s how federal and state law fit together.

The Bottom Line on Whether Doxxing Is Illegal

Doxxing isn’t one crime — it’s a behavior that several laws catch from different angles. The information is rarely the problem; the purpose is. Post someone’s address to send a crowd after them and you can face criminal charges, a lawsuit, and school discipline. Get doxxed, and the law gives you real tools — which work best when you save the evidence first. Screenshot, report, lock down, tell an adult, and never answer a doxx with a doxx. Now you know.
The related questionCan you go to jail for what you post? → The school sideCan your school punish you for what you post? → The whole subjectExplore Internet Law →

Sources

Primary sources:

LawJustic is for educational purposes only and does not provide legal advice. Doxxing, stalking, and harassment laws vary by state and change often. If you are in danger, call 911. If you’re facing charges, discipline, or a lawsuit over a post, talk to a licensed attorney in your state. Last reviewed: October 2026.

Internet Law · SEARCHES

Can You Go to Jail for What You Post Online?

By Javaria Sagheer · Updated October 2026
TL;DR Yes — you can go to jail for what you post online, but only when a post falls into one of a few narrow categories the First Amendment doesn’t protect. Rude, offensive, even hateful opinions are protected speech. What gets people charged is a true threatTrue threat: a serious expression that you mean to commit unlawful violence against a person or group. It gets no First Amendment protection — even if you never planned to do it. against a person or a place (school “jokes” included), repeated harassment, hoax emergency reports, and publishing someone’s intimate images. “I was kidding” is not an automatic defense: since 2023, prosecutors need to show only recklessnessRecklessness: you were aware people could take your words as a threat of violence, and you sent them anyway. The minimum set by Counterman v. Colorado (2023).. If police ask about a post, stay calm and ask for a lawyer.

Free Speech or a Felony? When a Social Media Post Becomes a Crime

It’s 11:47 on a Sunday night. You did badly on a quiz, practice was miserable, and tomorrow is Monday. So you post a story to forty people: the school hallway, a caption saying nobody should bother showing up tomorrow, a skull emoji. To you it’s obviously just a bad mood. By 12:15 someone has screenshotted it. By 6 a.m. a parent has called the police, the district is deciding whether to open, and two officers are at your front door. This is the situation the FBI’s hoax-threat warnings were written for. It sits next to a fact that is just as true: most of what people post — including things that are cruel, crude, or hateful — can’t be punished by the government at all. Here’s where the line runs, which posts cross it, and what to do if you, or someone threatening you, lands on the wrong side.

Can You Go to Jail for What You Post Online? The Short Answer

Start with the protection — it’s bigger than most people think. In Matal v. Tam (2017), Justice Alito wrote: “Speech may not be banned on the ground that it expresses ideas that offend.” In Snyder v. Phelps (2011), the Court shielded protesters who picketed a Marine’s funeral with hateful signs from a damages lawsuit. American law has no general “hate speech” exception. The exceptions are narrow. A true threat — a serious expression that you mean to commit unlawful violence against a person or group — gets no protection. In Counterman v. Colorado (2023), the Court ruled 7–2 that prosecutors must prove at least recklessness: you were aware others could take your words as threatening violence, and you sent them anyway. You don’t have to mean it. As Virginia v. Black (2003) put it, “The speaker need not actually intend to carry out the threat.” Transmitting a threat to injure someone in interstate commerce carries up to five years in federal prison (18 U.S.C. § 875(c)), and the FBI says that covers social media, texts, and email. Three more categories reach court. Incitement: speech “directed to inciting or producing imminent lawless action” and likely to produce it (Brandenburg v. Ohio, 1969). Cyberstalking: a pattern of online conduct meant to harass or intimidate one person (18 U.S.C. § 2261A). And crimes that happen to use a keyboard: hoax emergency reports (18 U.S.C. § 1038) and publishing nonconsensual intimate images, a federal crime under the TAKE IT DOWN Act, signed May 19, 2025. State prosecutors use their own statutes, and the names and penalties change at every state line. One thing that usually is not a crime: defamation. A false statement of fact that damages someone’s reputation normally means a civil lawsuit for money, not jail (see whether you can get sued for a meme) — though Wisconsin, for one, still has a criminal defamation statute (Wis. Stat. § 942.01).

Posts That Lead to Charges, Situation by Situation

Situation 1 · The “joke” threat “Don’t come to school tomorrow” — the post that gets students arrestedA post that says or hints you’ll shoot, bomb, or attack a school is treated as a threat first and a joke later, if ever. The legal question isn’t whether you planned anything. It’s whether you knew — or consciously ignored the risk — that people would take it seriously.

Some states say so in plain words. California’s criminal threats law applies “even if there is no intent of actually carrying it out.” New York’s says it is no defense that you “did not have the intent or capability of committing the conduct threatened.”

How six states treat a threat posted online (statutes as we read them in October 2026):
  • California — Penal Code § 422: up to one year in county jail, or state prison. Newer § 422.3 covers threats against a school, daycare, university, workplace, house of worship, or medical facility, including “an image or threat posted or published on an internet web page.”
  • Texas — Penal Code § 22.07 (terroristic threat): from a Class B misdemeanor up to a third-degree felony when the threat is meant to put the public or a substantial group in fear of serious bodily injury.
  • Florida — Fla. Stat. § 836.10: posting or sending a threat to kill or do bodily harm, or to conduct a mass shooting or act of terrorism, is a second-degree felony.
  • New York — Penal Law § 240.78 (threat of mass harm): a class B misdemeanor for threatening serious injury or death at a school, business, place of worship, or other gathering place to intimidate a group or create public alarm.
  • Ohio — Revised Code § 2917.31 (inducing panic): causing an evacuation or serious public alarm by threatening violence starts as a first-degree misdemeanor. A knowingly false warning that does it to a school is a second-degree felony.
  • Michigan — MCL 750.235b: threatening to use a gun, explosive, or other dangerous weapon against students or school employees, including by electronic device, is a misdemeanor (up to 1 year). With specific intent or an overt act, it’s a felony (up to 10 years).
To check your own state: open the criminal code on your state legislature’s official website and search “terroristic threat,” “criminal threat,” “threat of mass violence,” and “harassment.”
Situation 2 · A threat at one person DMs, comments, and “lyrics” aimed at a real personA threat doesn’t need an audience. Billy Counterman was convicted of stalking over hundreds of Facebook messages sent to one musician; he kept opening new accounts after she blocked him. Anthony Elonis posted violent “rap lyrics” about his estranged wife on Facebook and was sentenced to three years, eight months under § 875(c).

The Supreme Court sent both cases back — not because DMs or lyrics are immune, but because the sender’s own understanding hadn’t been weighed. Calling something a joke, a lyric, or a meme settles nothing. Context does.

Situation 3 · Harassment Not one post — a patternCyberstalking law targets a campaign, not a comment. Under 18 U.S.C. § 2261A, it’s a federal crime to use the internet with intent to harass or intimidate someone through a “course of conduct” that puts them in reasonable fear of death or serious injury, or causes substantial emotional distress. A course of conduct means “a pattern of conduct composed of 2 or more acts, evidencing a continuity of purpose.” The basic penalty is up to five years.

Publishing someone’s address raises its own issues — see whether doxxing is illegal. States have their own harassment and stalking laws too.

Situation 4 · Hoaxes and swatting Fake emergencies bring real sentencesSwatting — reporting a fake emergency to send armed police to someone’s address — is prosecuted even when nobody is hurt. The federal hoax statute, 18 U.S.C. § 1038, carries up to five years, up to 20 if serious bodily injury results, and up to life if someone dies, plus repayment of the emergency response costs.

Being a teenager isn’t a shield. In February 2025, the Justice Department announced that an 18-year-old from Lancaster, California, got 48 months in federal prison after pleading guilty to making interstate threats — more than 375 swatting and threat calls, prosecutors said.

Situation 5 · Intimate images Posting someone’s private images — now a federal crimeThe TAKE IT DOWN Act makes it a federal crime to knowingly publish nonconsensual intimate images of an identifiable person online — real images or realistic digital forgeries. The maximum is 2 years when the person shown is an adult and 3 years when the person is a minor. Sexual images of anyone under 18 can also fall under federal child pornography law, where distribution carries 5 to 20 years (18 U.S.C. § 2252A).

The Act also helps victims: since May 19, 2026, covered platforms must remove a reported image within 48 hours of a valid request. AI fakes are covered in our guide to deepfake law.

What to Say and Do If a Post Gets You in Trouble

Stop the damage — then stop explaining
1. You posted something you regret, and nobody has contacted you yet:

Screenshot it for your own records, take it down, and tell a parent or trusted adult tonight. No “just kidding” follow-up. No messages asking people to keep quiet.

2. The school calls you in:

“I’d like my parents here before I answer questions about this.”

3. Police call, knock, or show up at school:

“I’m not refusing to cooperate. I’d like my parents called, and I’m not answering questions without a lawyer.”

4. They ask to look through your phone:

“I don’t consent to a search of my phone.” Say it once, calmly. If they take it anyway, don’t grab it and don’t argue.

Then stay polite and quiet. Officers don’t always have to give warnings first — here’s when police have to read you your rights — and they can generally bluff about what they know, as explained in our guide to police lying during questioning. Explaining “what you really meant” hands over proof of your mental state — the thing prosecutors must prove.
What to Do If Someone Threatens You Online
  1. Immediate danger? Call 911.
  2. Don’t reply and don’t repost. The FBI asks people not to share or forward a threat before law enforcement has looked at it.
  3. Screenshot everything — the message, username, profile link, date, and time.
  4. Report it to local police or your local FBI office, or at tips.fbi.gov. If it involves school, tell an administrator the same day.
  5. Report the account to the platform, then block it.
  6. If it’s an intimate image of you: use the platform’s removal request. Not removed within 48 hours? Report the platform to the FTC at TakeItDown.ftc.gov. If the image was taken before you turned 18, NCMEC’s free Take It Down service can help.

Posting Online: What You Can vs. Can’t Say

✓ YOU CAN

  • Post opinions that are rude, offensive, or unpopular
  • Criticize the government, police, your school, or public figures — harshly
  • Use obvious exaggeration nobody would read as a real plan
  • Say things most people find hateful, short of a threat, harassment, or incitement
  • Decline police questions about a post and ask for a lawyer

✗ YOU CAN’T

  • Threaten to hurt or kill someone — in a post, a DM, or a group chat
  • “Joke” about shooting or bombing a school, workplace, or place of worship
  • Run a repeated campaign to harass or intimidate one person
  • Report a fake emergency as a prank
  • Publish someone’s intimate images without consent, real or AI-made
The delete trap: taking down a post you regret before anyone has contacted you is sensible, as long as you keep your screenshot of it. Wiping your phone or account after police or the school start asking is different — it can look like destroying evidence, and in a federal investigation that is its own crime (18 U.S.C. § 1519, up to 20 years). Once questions start, change nothing and let a lawyer decide.

Myths About Posting and the Law, Busted

Myth: “It’s free speech, so nothing I post can be a crime.”
False. The protection is broad, not total. True threats, incitement, cyberstalking, hoax reports, and nonconsensual intimate images all sit outside it.
Myth: “If I was joking, it’s not a threat.”
False. After Counterman, prosecutors don’t have to prove you meant it — only that you were aware people could take it as a threat of violence and posted anyway.
Myth: “Hate speech is illegal.”
False as a general rule. Hateful opinions are protected from government punishment. Threats, harassment, and incitement are not — whatever the motive.
Myth: “It was a private story, so it doesn’t count.”
False. Counterman was about direct messages. The Snapchat post in Mahanoy Area School District v. B.L. went only to the student’s Snapchat friends — until one of them captured it and passed it along.
Myth: “If it’s not a crime, nobody can punish me for it.”
False. Criminal law, school discipline, and platform rules are separate systems. A legal post can still get you suspended, banned from an app, or fired over a social media post.

Social Media Post Questions People Actually Ask

Tap a question to open it.
Can you get arrested for a social media post?
Yes. Police can arrest you over a post when they have probable cause to believe it’s a crime, such as a threat or a hoax report. An arrest is not a conviction — a prosecutor still has to prove every element, including what you understood when you posted.
Is it illegal to make a threat as a joke?
It can be. Prosecutors must prove at least recklessness — that you knew people could take your words as a threat of violence and sent them anyway — and “I didn’t mean it” doesn’t answer that. Obvious exaggeration is different: in Watts v. United States (1969), the Supreme Court treated a draft protester’s rally remark about the president as “political hyperbole,” not a true threat.
Is hate speech illegal in the United States?
No, not by itself. The government can’t punish speech because its ideas offend. The line is conduct: a threat aimed at someone because of who they are is still a threat, and in Virginia v. Black the Court said a state may punish cross burning done with intent to intimidate.
Can a minor go to jail for a social media post?
Yes, a minor can be taken into custody and prosecuted over a post, usually in juvenile court. Youth.gov, a federal site, notes that some states send certain serious offenses to adult court regardless of age. Some laws add a softer first step: California’s § 422.3 refers an eligible under-18 offender to diversion services, and treats the offense as a misdemeanor otherwise. Also read whether police can question a minor without a parent.
Can you get in trouble for sharing or reposting someone else’s threat?
It depends on what you do with it. Sending a threat to a parent, an administrator, or the police to report it is the right move. Reposting it to your own story spreads the alarm and can look like joining in. Screenshot, report, don’t repost.
Can police see deleted posts or private messages?
Often, yes. Anyone who received your message can show it to police on their own. Platforms can be required to hand over records and messages they still hold through the legal process in 18 U.S.C. § 2703, and police can have a platform preserve an account’s records for 90 days in the meantime. For your own device, see whether police can search your phone.
Can your school punish you for a post even if police never charge you?
Yes. School discipline is separate from criminal law. In Mahanoy (2021), the Supreme Court ruled 8–1 for a student punished over an off-campus Snapchat post, but said schools keep an interest in “serious or severe bullying or harassment targeting particular individuals; threats aimed at teachers or other students.” Details are in our guide to school punishment for what you post.

Online Speech Law: Key Terms, Explained

True threat — a serious expression that you mean to commit unlawful violence against a person or group. Not protected speech.
Recklessness — knowing others could take your words as threatening violence and sending them anyway.
Incitement — speech aimed at producing imminent lawless action and likely to produce it.
Cyberstalking — two or more online acts intended to harass or intimidate a specific person.
Swatting — reporting a fake emergency to send armed police to someone’s location.
Terroristic threat — what some states, including Texas, call the crime of threatening violence to cause fear or disruption.
Probable cause — fact-based grounds to believe a crime was committed. What police need to arrest you.

The Court Cases Behind What You Can Post

The linked card opens a full breakdown in our case library.
Counterman v. Colorado (2023)The rule for every threat case: the state must prove the sender had some subjective understanding that the words were threatening, and recklessness is enough.
Elonis v. United States (2015)Violent Facebook “lyrics” and a federal threat conviction, reversed because the jury was asked only how a reasonable person would read the posts.
Brandenburg v. Ohio (1969)A Ku Klux Klan rally speech and the incitement test still used today: imminent lawless action, likely to happen.
Matal v. Tam (2017) and Snyder v. Phelps (2011)Why offensive and hateful speech stays protected: the government can’t ban ideas because they offend.
Mahanoy Area School District v. B.L. (2021)The Snapchat cheerleader case: schools have less power over off-campus posts, but keep it for threats and targeted bullying or harassment.Read the full case →

Online Speech Law That’s Still Moving

The edges to watch as of October 2026:
  1. New state threat statutes — California’s Penal Code § 422.3 took effect January 1, 2026, and reaches threats aimed at a place. The Ventura County District Attorney announced charges against a 17-year-old under it that same month.
  2. TAKE IT DOWN Act enforcement — the platform removal duty began May 19, 2026. The next day the FTC announced warning letters to 12 companies and said violations can cost up to $53,088 each.
  3. Recklessness and memes, reposts, and lyrics — Counterman set the minimum mental state and left judges and juries to apply it one post at a time. We found no later Supreme Court decision adding detail.
When these move, this article gets updated.
One important note: the First Amendment rules here apply in every state, but the crime a local prosecutor would charge has a state name, a state definition, and a state penalty. The same post can be a misdemeanor in one state and a felony in the next. Look up your own state’s threat and harassment statutes, and see how federal and state law fit together.

The Bottom Line on Going to Jail for What You Post Online

The government can’t punish you for an opinion, however harsh — and it can punish you for a threat, a harassment campaign, a hoax, or someone’s private images. The line isn’t how offensive the post is. It’s whether a real person or place was put in fear, and whether you knew that could happen when you hit send. If a stranger with no context would read it as a plan to hurt someone, don’t post it. If it’s already up, save it, take it down, and tell an adult. If police ask, be polite and ask for your parents and a lawyer. Now you know.
The school sideCan your school punish you for what you post? → The related questionIs doxxing illegal? → The whole subjectExplore Internet Law →

Sources

Primary sources:

LawJustic is for educational purposes only and does not provide legal advice. Laws on threats, harassment, and online speech vary by state and change often. If police or a school have contacted you about something you posted, talk to your parents and a licensed criminal defense attorney before answering questions. Last reviewed: October 2026.

Internet Law · SEARCHES

Can You Get Sued for a Meme?

By Javaria Sagheer · Updated October 2026
TL;DR Technically yes, realistically it depends on what you’re doing. Most memes are built on someone else’s copyrightedCopyright: automatic legal ownership of creative work — photos, videos, art, text — the moment it’s created. The owner controls copying and distribution. image, so sharing them is often technically infringement — but casual reposting almost never gets anyone sued. The lawsuits start when money enters the picture: ads, merch, monetized accounts. Your shield is fair useFair use: a legal defense that allows limited use of copyrighted work without permission — for things like commentary, parody, criticism, and education. Decided case by case with a four-factor test. — but it’s a defense you argue in court, not a permission slip you carry.

Reposting a Meme: Where the Legal Risk Starts

You see a perfect reaction image, screenshot it, add your caption, post it. It gets shares. Then someone in the comments says “you know that’s copyrighted, right?” — and suddenly you’re wondering: can I actually get sued for a meme? What about reposting someone else’s meme? Putting one in a video you monetize? Printing one on a shirt? This guide answers every version — with a risk meter for the situations you’re actually in.

The Short Answer: When Memes Become Lawsuits

Yes, meme lawsuits are real — but they cluster around commercial use. The photo or screenshot behind a meme belongs to whoever created it, automatically, from the moment it was taken. Using it without permission is technically infringementInfringement: using copyrighted work in a way the owner controls — copying, posting, selling — without permission or a legal defense like fair use., and creators of famous meme images (Grumpy Cat, Pepe the Frog, Success Kid) have sued — and won — when companies and campaigns used their work without asking. For ordinary reposting, the realistic worst case isn’t a lawsuit; it’s a DMCA takedownDMCA takedown: a copyright owner’s formal request to a platform to remove content. The platform deletes the post; repeat strikes can kill an account. Far more common than lawsuits. deleting your post.

The Meme Repost Risk Meter

Where your meme habits actually fall, from “relax” to “call a lawyer first”:
LOW
Sharing memes in group chats or DMsPrivate sharing between friends is effectively zero-risk territory — no public distribution, no money, no one watching.
LOW
Reposting existing memes on your personal, non-monetized accountTechnically often infringement, realistically tolerated at internet scale. Worst realistic case: a takedown, not a courtroom.
MEDIUM
Making memes from movie stills, celebrity photos, or artists’ workStudios rarely bother; photographers sometimes do. Press photos and paparazzi shots are actively policed — photographers have sued even celebrities for posting photos of themselves.
MEDIUM
Memes in monetized content — YouTube videos, sponsored posts, streamsMoney changes the fair use math against you. This is where takedowns become strikes, and strikes become demonetization or worse.
HIGH
Memes in ads, campaigns, or merch — shirts, mugs, postersThis is where the real lawsuits live. Grumpy Cat’s owners won about $710,000 from a beverage company that overstepped its license. Success Kid’s mom successfully sued a congressman’s campaign (the jury awarded $750, the legal minimum). Don’t sell other people’s images.
HIGH
Memes targeting a real, private person with false claimsDifferent law entirely: defamationDefamation: a false statement of fact about a real person that damages their reputation. “Obviously a joke” can be a defense — but the less obvious the joke, the bigger the risk., harassment, and in many states specific cyberbullying laws. A meme can absolutely be evidence.

What Copyright Law Says About Memes

Copyright is automatic — the second someone snaps a photo or draws a frog, they own it. No registration, no © symbol needed. Posting it publicly doesn’t make it free; it just makes it visible. The safety valve is fair use. Courts weigh four factors: the purpose of your use (commentary, parody, and education help; commercial use hurts), the nature of the original, how much you took, and the market effect — whether your use replaces sales or licenses the owner could have made. Memes often have a real fair-use story: they’re transformativeTransformative: using the original to say something new — new meaning, message, or purpose — rather than just repackaging it. The heart of many fair use wins., turning a photo into commentary or a joke. But in Warhol v. Goldsmith (2023), the Supreme Court tightened this: “I added new meaning” carries less weight when the use is commercial. Translation for meme culture: your joke repost has a decent story; your meme merch does not.

✓ SAFER GROUND

  • Sharing and reposting in private chats
  • Commentary, criticism, and parody that actually comments on something
  • Using meme formats and captions — ideas and jokes aren’t copyrighted, images are
  • Original memes from your own photos or drawings

✗ RISKY GROUND

  • Selling anything with someone else’s image on it
  • Using memes in ads or brand accounts without a license
  • Monetized content leaning on others’ images
  • Memes making false factual claims about real people
  • Reposting watermarked/press photos — the most-policed images online

Meme Lawsuit Questions People Actually Ask

Can I get sued for just reposting a meme on my feed?
In theory yes; in practice it’s the least-pursued “violation” on the internet. Suing costs thousands; removing your repost earns the owner nothing. What actually happens at this level is a DMCA takedown — the platform removes the post, you get a strike. Repeat strikes are what kill accounts. If you get a takedown, the move is: let it go unless you’re confident it’s fair use (there’s a counter-notice process, but filing one invites the owner to actually sue).
Has anyone actually been sued over a meme?
Yes — and the pattern is always money or politics. Grumpy Cat Limited won roughly $710,000 when a beverage company used the cat beyond its license. Pepe the Frog’s creator, Matt Furie, went after commercial and political uses, including a settlement with Infowars. The mother of “Success Kid” won her case against a congressman’s campaign that used the photo in fundraising ads. Notice what’s missing from this list: a regular person who reposted a meme on their timeline.
Can I make money from memes — monetized videos, meme pages, merch?
This is where the risk meter jumps. A monetized meme page or YouTube channel built on others’ images is running a business on unlicensed material — takedowns, strikes, and demonetization are common, and big accounts have been sued. Merch is the highest tier: printing someone’s image on products you sell is classic infringement with real damages. The safe monetization paths: original images you create, licensed content, or formats-and-captions with your own visuals. Plenty of huge meme businesses run exactly this way.
Can my school punish me for a meme?
Yes — and this is usually a bigger real-world risk for students than copyright. Schools discipline for memes under harassment, bullying, and disruption rules, not copyright law. A meme mocking a classmate can trigger cyberbullying policies (and in many states, cyberbullying laws). Off-campus and online memes have more protection after Mahanoy v. B.L. (2021), but schools can still reach severe bullying and threats. Meme about politics or the news? Strong protection. Meme targeting the kid in your algebra class? Suspension territory. Related: what schools can and can’t punish you for posting.
Can I get fired over a meme?
In most states, yes — private employers can generally fire at-willAt-will employment: the default rule in most U.S. states — either side can end the job at any time, for almost any reason that isn’t specifically illegal (like discrimination). employees for social media posts, including memes, with narrow exceptions (some states protect lawful off-duty activity, and federal law protects some coworker discussions about working conditions). The First Amendment restricts the government, not your manager. Post accordingly.
Does crediting the creator protect me?
No. Credit is politeness, not permission — copyright requires authorization, and “I said whose it was” isn’t authorization. Credit can even prove you knew whose work you were using. It’s still good manners; it’s just not a legal shield.
Is parody automatically legal?
Not automatically, but real parody is fair use’s strongest suit. In Campbell v. Acuff-Rose (1994), the Supreme Court held 2 Live Crew’s parody of “Oh, Pretty Woman” could be fair use even though it was commercial. The catch: parody means commenting on the thing itself. Using a movie still to joke about your Monday isn’t parodying the movie — it’s just borrowing it. That’s satire-with-borrowed-clothes, and it gets weaker fair-use treatment.
What about AI-generated memes?
The frontier. If the AI output copies a recognizable copyrighted character or a real person’s face, the old rules still bite — “an AI made it” is not a defense. Meanwhile, purely AI-generated images generally can’t be copyrighted by you either (the Copyright Office requires human authorship), so your AI meme is hard for you to own and still risky if it copies someone.
Can a meme about a person get me in trouble even if the image is fine?
Yes — this is the switch from copyright to people-law. A meme asserting a false fact about a real person (“this teacher was arrested for…”) can be defamation. A campaign of memes targeting one person can be harassment or cyberbullying under state law. Public figures have to clear a higher bar (actual maliceActual malice: the standard public figures must prove in defamation — that you knew the statement was false or recklessly ignored the truth. Much harder than a private person’s case.) to win — private people don’t. Punching up at politicians is protected space; piling on a classmate is not.
Someone stole MY meme. Do I have rights?
If you created the image — your photo, your drawing — yes: you own it automatically, and you can file DMCA takedowns against reposts (every major platform has a form). If big money is involved, registering the copyright unlocks statutory damagesStatutory damages: preset money awards for infringement — up to $150,000 per work if willful — available mainly when the copyright was registered. This is what makes small lawsuits financially possible., which is exactly how the famous meme creators made lawsuits worth filing. If you only added a caption to someone else’s image, you own — at most — the caption.
What should I do if I get a takedown, a strike, or a scary letter?
Takedown or strike: usually just comply and move on — deleting a repost costs you nothing. A formal cease-and-desist letter or anything mentioning court: stop the use immediately, save everything (the letter, the post, dates), don’t reply in panic or in snark, and show it to an adult and, if it involves money you made, an actual lawyer. Many letters are scare tactics — but the ones that aren’t get worse when ignored.

Meme Copyright Myths

Myth: “It’s on the internet, so it’s public domain.”
False. Public means visible, not free. Nearly everything online is copyrighted by someone.
Myth: “No watermark, no problem.”
False. Copyright exists with or without a watermark — the mark is just easier evidence.
Myth: “Fair use protects memes automatically.”
False. Fair use is a case-by-case defense you’d argue after being accused — helpful for jokes and commentary, weak for merch and ads.
Myth: “They’d have to sue everyone who shared it, so they can’t sue me.”
False. Owners can pick any target they want — and they pick the ones making money.
Myth: “It’s just a joke, so it can’t be defamation.”
Only if a reasonable person would clearly read it as a joke. The more believable the false claim, the more dangerous the meme.

Meme Law Terms, Explained

Copyright — automatic ownership of creative work from the moment it’s made. Controls copying, posting, and selling.
Infringement — using copyrighted work without permission or a valid defense.
Fair use — the four-factor defense for commentary, parody, criticism, and education. Argued case by case.
Transformative — adding new meaning or purpose rather than repackaging. Weighs heavily in fair use — less so when money’s involved, after Warhol.
DMCA takedown — the owner’s request that a platform remove your post. The internet’s everyday copyright enforcement.
Statutory damages — preset awards (up to $150,000 per work for willful infringement) that make copyright lawsuits financially viable.
Defamation — a false factual claim about a real person that harms their reputation. Separate from copyright entirely.

The Court Cases Behind Meme Law

Campbell v. Acuff-Rose Music (1994)The parody landmark: commercial parody can be fair use when it genuinely comments on the original. The foundation of transformative-use law.
Andy Warhol Foundation v. Goldsmith (2023)The tightening: “new meaning” matters less when the use is commercial and substitutes for the original’s market. The case that made meme merch more dangerous.
Griner v. King (2020–2024)The meme-specific one: Success Kid’s photographer-mom beat a congressional campaign that used the image in fundraising. Political and commercial users pay; casual sharers weren’t the story.

Meme Law That’s Still Being Decided

We tell you this because pretending the law is settled when it isn’t would be misleading. As of October 2026, courts have not fully resolved:
  1. AI and memes — purely AI-made images get no copyright (the Supreme Court let that rule stand in March 2026), but how much human input is enough, and how copying-by-AI will be treated, are still open. Multiple major lawsuits over AI training and outputs are still working through the courts.
  2. How far Warhol reaches — lower courts are still mapping what the 2023 decision means for remix culture, reaction content, and monetized commentary.
  3. Platform liability lines — in March 2026 the Supreme Court (Cox v. Sony) made it harder to hold service providers liable for their users’ infringement; how that plays out for social platforms is still being worked out.
When these change, this article will be updated — check the “last reviewed” date below.
One important note: copyright is federal, so it works the same in every state — but defamation, harassment, and cyberbullying laws are state-by-state, and schools add their own conduct rules on top. The meme that’s a copyright nothing-burger can still be a suspension, or worse, under your state’s harassment laws.

The Bottom Line on Meme Lawsuits

The meme economy runs on technically infringing fun, and the law mostly lets it — until money or malice shows up. Repost freely in your group chats, think twice on monetized content, never put someone else’s image on merchandise, and never use a meme to spread a false claim about a real person. Make your own images and you’re not just safe — you own something. Now you know.
More digital rightsCan police search your phone? → Rights at schoolCan schools search your backpack? → The whole subjectExplore Internet Law →

Sources

Primary sources: Secondary sources:

LawJustic is for educational purposes only and does not provide legal advice. Laws vary by state and situation — and some questions in this article are still being actively decided by courts. If you need help with a specific legal issue, contact a licensed attorney. Last reviewed: October 2026.