Is It Illegal to Expose Someone on Social Media? 2026

Exposing someone on social media can be illegal, and whether it crosses a legal line depends entirely on what type of information you share, whether it is true, and whether it was private. Some forms of online exposure are clearly criminal. Others are protected speech under the First Amendment.

This is one of the most legally varied topics in internet law right now. Doxxing, revenge porn, defamation, and cyberstalking each carry different laws and different penalties. A single post can trigger multiple legal theories at once.

This article breaks down every legal angle: criminal versus civil exposure, the specific statutes that apply to each type, how state laws differ, and what you can do if someone has exposed you online.

Before you go further, consider reading Is It Illegal to Get a Happy Ending? 2026 State Laws

Is It Illegal to Expose Someone on Social Media?

Exposing someone on social media is illegal in many situations but not all of them. The legality depends on what you are sharing: private information, intimate images, false statements, or true facts about public conduct. Each category triggers a different set of laws.

Sharing true information about a person’s public behavior is generally protected by the First Amendment. Sharing false information that harms someone’s reputation is defamation. Sharing someone’s private contact information to invite harassment is doxxing, which is now illegal in a growing number of states. Sharing intimate images without consent is a crime in 48 states plus Washington DC.

The word “expose” covers all of those situations, which is why the legal answer is not simple. What matters is the content of what you post, the truthfulness of it, whether it was private, and whether your intent was to harass, harm, or simply inform.

Quick Facts:

• True statements about public conduct are generally protected speech
• False statements that damage reputation constitute defamation
• Posting private personal information to invite harassment is doxxing, now illegal in many states
• Sharing intimate images without consent is a crime in 48 states
• Cyberstalking and harassment laws apply when exposure is part of a pattern of targeted conduct

Is It Illegal to Expose Someone Online?

Exposing someone online is illegal when the content is false, private, intimate, or designed to harass or harm. The platform does not change the legal analysis. Whether you post on Instagram, X (formerly Twitter), TikTok, or a personal blog, the same laws apply to the content you share.

The clearest illegal forms of online exposure are sharing nonconsensual intimate images (revenge porn), doxxing someone’s home address or personal contact information to invite harassment, posting false statements of fact that harm someone’s reputation (defamation), and engaging in a pattern of online contact designed to cause fear (cyberstalking).

The clearest legal forms include sharing public court records, publicly available information about a public figure’s professional conduct, your own verified experience with a business or person, and opinion statements that do not contain false statements of fact.

Legal exposure types and their status:

Is It Illegal to Call Someone Out on Social Media?

Calling someone out on social media is generally legal when you are sharing your genuine opinion or true facts about their conduct. The First Amendment broadly protects speech about matters of public concern, including publicly expressed criticism of individuals.

The legal line is crossed when you make false statements of fact presented as true. Saying “I believe this person is dishonest based on my experience” is opinion. Saying “This person embezzled $50,000 from their employer” when that is factually untrue is defamation. The distinction between opinion and false fact is what determines whether calling someone out is protected or actionable.

Context also matters. Calling out a local business owner for poor service on Yelp is protected consumer speech. Posting that a private individual committed a crime they did not commit, with the goal of destroying their reputation, is defamation with real legal consequences.

What calling someone out legally requires:

• Stick to true, verifiable facts about conduct you actually witnessed or experienced
• Clearly frame opinions as opinions, not as statements of fact
• Avoid false statements that could constitute defamation per se, such as falsely accusing someone of a crime, of immoral conduct, or of professional incompetence
• Do not pair the callout with private personal information designed to direct harassment
• Avoid a pattern of repeated posts targeting the same person in a way that constitutes harassment

Is It Illegal to Expose a Cheater on Social Media?

Exposing a cheater on social media is generally legal when you share true information about their conduct, but it can become illegal quickly when it crosses into sharing private messages, intimate images, personal identifying information, or false statements.

Infidelity is not a crime in most US states. It is personal conduct that falls within the sphere of private relationships. Sharing that someone cheated on you, without sharing private content from the relationship, is typically protected speech because it is a true statement about conduct you personally experienced.

The legal problems begin when you share screenshots of private text messages without consent, which can implicate electronic privacy laws in some states. Sharing intimate photos from the relationship without the other person’s consent is a crime in 48 states under nonconsensual intimate image laws. Posting their home address or workplace address to direct public anger toward them can constitute doxxing.

Exposing a cheater: legal versus illegal:

• Saying they cheated: Generally legal (true statement)
• Sharing their name, photo, and story: Generally legal if true and not paired with harassment tools
• Posting their home address or phone number: Potentially illegal under doxxing statutes
• Sharing intimate photos from the relationship: Illegal in 48 states
• Posting private messages without consent: May implicate wiretapping or privacy laws in some states
• Making false claims about additional misconduct: Defamation

Key Takeaway: Exposing a cheater can be legal when limited to true statements about their conduct, but it becomes criminal the moment intimate images, home addresses, or false statements enter the picture.

Is Public Shaming on Social Media Legal?

Public shaming on social media is legal when based on true facts about public or semi-public conduct, but it can become illegal when it transitions into a campaign of harassment, includes false statements, or is paired with private personal information designed to amplify the harm.

The concept of public shaming sits at the intersection of free speech and harassment law. American courts have consistently held that people have the right to criticize, mock, and publicly discuss the actions of others when those actions occurred in public or semi-public settings. Online public shaming of a genuinely bad actor, using only true information, is generally protected.

Where it gets legally complicated is with private individuals. Shaming a public figure for their professional conduct differs legally from shaming a private person for a moment captured without their knowledge. Courts apply a higher standard of protection to speech about public figures and more scrutiny when private individuals are targeted.

Public shaming and legal risk factors:

Is Doxxing Illegal?

Doxxing is illegal in a growing number of US states, and it can also violate federal law under certain circumstances. Doxxing means researching and publicly publishing private information about a specific individual, typically with the intent to expose or harm them.

The specific conduct covered by doxxing laws varies by state, but most statutes target the publication of private identifying information, including home addresses, workplace information, and phone numbers, when done with intent to harm, harass, or threaten. The federal cyberstalking statute at 18 USC 2261A can apply to doxxing when it involves a course of harassing conduct across state lines.

As of 2026, states including California, New York, Illinois, Nevada, and several others have enacted statutes that specifically address doxxing. The legal momentum is toward broader criminalization of the practice, particularly after several high-profile cases involving threats to public officials and private citizens.

Doxxing legal status:

• Explicitly illegal in California (AB 1649), Illinois, Nevada, and several other states
• Covered under cyberstalking statutes in many states without specific doxxing laws
• Federal cyberstalking statute (18 USC 2261A) can apply to interstate doxxing
• Civil claims available even where no specific criminal statute exists
• Most doxxing laws require intent to harass, threaten, or harm

Doxxing Laws by State

Doxxing laws vary significantly by state in 2026, with some states having explicit anti-doxxing statutes and others relying on existing harassment, stalking, or cyberstalking laws to prosecute the conduct. The trend is firmly toward more explicit coverage.

California’s approach under Penal Code 653.2 prohibits electronically distributing personal information with intent to cause a person to reasonably fear for their safety or the safety of their family. Illinois enacted a specific doxxing law at 720 ILCS 5/12-7.5 covering publication of private information with intent to harass. Nevada Revised Statutes 200.780 covers doxxing with explicit criminal penalties.

States without specific doxxing statutes often prosecute the conduct under cyberstalking, criminal harassment, or related statutes when it can be shown that the publishing of personal information was part of a pattern of conduct designed to cause fear or harm.

Is It Illegal to Post Someone’s Personal Information Online?

Posting someone’s personal information online is illegal when done with intent to harass, threaten, or cause harm, and in states with specific doxxing statutes. Posting publicly available information without harmful intent generally does not create legal liability.

The intent element is what separates legal speech from criminal doxxing in most state statutes. Sharing a public official’s office phone number from their government website is different from posting a private person’s home address along with a call to confront them. The context, the pairing of information with inflammatory language, and the foreseeable result of the posting all factor into the legal analysis.

Explore this too: Is It Illegal to Have a Crack in Your Windshield? 2026

Electronic privacy laws add another dimension. In states with wiretapping or electronic privacy statutes that apply to private communications, sharing screenshots of private messages, emails, or texts can violate those statutes independently of any doxxing law.

When posting personal information is and is not illegal:

• Posting publicly available information without harassment intent: Generally legal
• Posting private information with intent to cause fear or harm: Illegal under doxxing or cyberstalking statutes in many states
• Posting information directing people to confront or harm someone: Illegal; potentially criminal conspiracy depending on outcome
• Posting screenshots of private communications: May violate electronic privacy law in some states
• Posting someone’s information in connection with a false accusation: Defamation plus potential doxxing

Key Takeaway: The intent behind posting personal information and the context in which it is shared determines legality far more than the content of the information itself. The same address can be legal to post in one context and criminal in another.

Is It Illegal to Share Someone’s Address Online?

Sharing someone’s home address online is illegal in many states when done with intent to cause fear, harassment, or harm, and when the address was not publicly available. It can also create civil liability even in states without specific criminal statutes.

The home address is particularly sensitive under doxxing and harassment law because it eliminates the barrier between online harassment and physical harm. Courts and legislators have recognized that providing someone’s home address to an angry online audience creates a foreseeable threat of physical danger, making the act legally more serious than sharing other types of personal information.

Several high-profile cases involving the sharing of home addresses that preceded physical violence have accelerated legislative action. In those cases, criminal charges including criminal conspiracy and facilitation of violence have been pursued against people who shared addresses that led to direct harm.

Legal risk for sharing someone’s home address:

• High legal risk in states with explicit doxxing statutes (California, Illinois, Nevada)
• Covered under cyberstalking statutes when sharing is part of a harassment campaign
• Civil liability for any harm that results from sharing the address, even in states without criminal statutes
• Potentially criminal if the sharing preceded a physical attack on the person

Revenge Porn Laws: The Legal Framework

Revenge porn laws, now more formally called nonconsensual intimate image (NCII) statutes, make it illegal to share explicit or intimate images of a person without their consent. As of 2026, 48 US states plus Washington DC have enacted these laws.

The legal framework varies by state in terms of whether a criminal conviction requires proof of intent to harm, whether the statute covers both photographs and videos, and whether it extends to images that were altered or digitally manipulated. Most states classify a first offense as a misdemeanor, with aggravating factors or repeat offenses elevating the charge to a felony.

Federal legislation has also been proposed repeatedly, and advocacy groups continue to push for a unified federal NCII statute that would fill the gaps in the states without coverage. States that do not yet have specific statutes often prosecute NCII sharing under harassment, stalking, or obscenity laws.

Nonconsensual intimate image law coverage:

Is It Illegal to Post Private Photos of Someone Online?

Posting private photos of someone online without their consent is illegal in 48 US states when the photos are intimate or sexually explicit in nature. For non-intimate private photos, the analysis depends on whether a reasonable expectation of privacy existed and whether sharing the photo constitutes harassment.

Intimate images are the clearest category. The nonconsensual intimate image statutes in 48 states cover photographs and videos of a sexual nature that were shared between partners or captured without the subject’s knowledge. Posting those images without consent is a crime regardless of whether the relationship ended badly or the person believes they were wronged.

Non-intimate private photos present a more nuanced situation. Sharing a photo taken in a private setting that the subject did not consent to have shared publicly can implicate invasion of privacy claims even without a specific statute. Photos taken or shared as part of harassment can trigger cyberstalking and harassment laws independent of their intimate nature.

Private photo posting and legal status:

• Intimate images shared without consent: Criminal in 48 states
• Non-intimate private photos shared to harass: Civil and potentially criminal under harassment law
• Photos taken in private settings without consent: Invasion of privacy claim possible
• Photos combined with false captions or allegations: Defamation in addition to privacy violations
• Photos of minors in any intimate context: Federal child pornography law applies regardless of state

Nonconsensual Intimate Images Law

Nonconsensual intimate images (NCII) law refers to the statutory framework that criminalizes sharing explicit or sexual images of a person without their consent. The laws were enacted in response to the widespread harm caused by revenge porn, a practice that increased significantly with the proliferation of smartphones and social media platforms.

The core elements of most NCII statutes include: an intimate or sexually explicit image, the subject’s reasonable expectation that the image would remain private, publication or distribution by a defendant who knew or should have known of that expectation, and absence of consent from the subject. Most statutes do not require proof that the defendant intended to cause harm, only that the sharing was intentional.

Federal law fills some gaps through the 2022 SHIELD Act, which created a federal civil cause of action for NCII victims to sue in federal court regardless of where they or the defendant are located. This gives victims in states with weak or no criminal statutes a federal civil remedy.

NCII law key provisions:

• Criminalizes sharing of intimate images without consent
• Does not typically require proof of intent to harm, only intentional sharing
• Covers both photos and videos in most states
• Some states include digitally altered images (deepfakes)
• Criminal penalties range from misdemeanor to felony depending on state and circumstances
• Federal SHIELD Act provides civil remedy in federal court
• Victims can seek injunctions to compel removal of images in addition to damages

Key Takeaway: Nonconsensual intimate image laws now cover 48 states, and a federal civil remedy exists through the SHIELD Act. Posting intimate images without consent is a criminal offense in the vast majority of US jurisdictions, with penalties ranging from misdemeanor fines to felony prison time.

Defamation on Social Media

Defamation on social media is illegal and actionable as a civil lawsuit when a false statement of fact is published to a third party, causes harm to the subject’s reputation, and the poster acted with the required level of fault. Social media posts are not exempt from defamation law simply because they are online.

The key element is falsity. Truth is an absolute defense to defamation. You cannot successfully sue someone for defamation if what they said about you is true, no matter how harmful or embarrassing. Opinions are also generally protected. Saying “I think this person is a fraud” is opinion; saying “This person defrauded 10 customers out of $50,000 each” when that is false is defamation.

The fault standard differs depending on whether the plaintiff is a public figure or a private individual. Public figures must prove “actual malice,” meaning the defendant knew the statement was false or acted with reckless disregard for its truth. Private individuals generally only need to prove negligence, a lower bar.

Something similar worth reading: Is It Illegal to Walk Around Without ID? 2026 Laws

Defamation elements for social media posts:

• False statement: The statement must be factually false, not merely unflattering
• Statement of fact: Not an opinion or clearly rhetorical hyperbole
• Publication: Sharing on social media satisfies this requirement
• Identification: The subject must be identifiable from the post
• Damages: Reputational harm, emotional distress, or economic loss
• Fault: Actual malice for public figures; negligence for private individuals

Cyberstalking and Social Media Exposure

Cyberstalking refers to using digital communications including social media to engage in a course of conduct that causes another person substantial emotional distress or reasonable fear for their safety. When social media exposure is part of a pattern of targeted, repeated conduct against a specific person, cyberstalking law applies.

The federal cyberstalking statute at 18 USC 2261A prohibits using any electronic means to engage in a course of conduct that causes substantial emotional distress or reasonable fear of death or serious injury. It applies when the conduct crosses state lines. Every state also has its own cyberstalking or electronic harassment statute.

Cyberstalking law is particularly relevant when the “exposure” is not a single post but an ongoing campaign. Repeatedly posting about someone, contacting their employer, friends, and family with harmful information, and using social media to direct others to harass the target can all constitute cyberstalking as a pattern of conduct even if no individual post would be criminal standing alone.

Cyberstalking charges applied to social media exposure:

Social Media Harassment Laws

Social media harassment laws refer to the collection of state and federal statutes that prohibit using social media or other digital platforms to intimidate, threaten, or cause substantial distress to another person. These laws apply independently of whether the harassing content is true, false, private, or public.

The distinction between harassment and protected speech is the intent and the effect. Posting a strongly worded criticism of a person’s professional conduct is protected speech. Posting repeated messages designed to frighten, isolate, or distress a specific person crosses into harassment. Most state harassment statutes require a pattern of conduct rather than a single incident for criminal liability.

Online harassment targeting minors is subject to enhanced penalties in many states and can trigger federal charges under 18 USC 2261A when it involves a course of conduct that causes fear. Schools and workplaces also have their own policies that can result in disciplinary consequences independent of criminal law.

Social media harassment: legal versus criminal conduct:

• Strong criticism, even harsh: Generally protected speech
• Repeated targeted posts designed to cause fear: Criminal harassment
• Threats of violence: Criminal, regardless of whether they follow other harassment
• Coordinating others to harass: Can constitute criminal conspiracy in addition to harassment
• Harassment of minors: Enhanced penalties in most states
• Workplace-related harassment: EEOC and employment law may apply independently

Can You Sue Someone for Exposing You on Social Media?

Yes, you can sue someone for exposing you on social media when their conduct constitutes defamation, invasion of privacy, intentional infliction of emotional distress, violation of nonconsensual intimate image laws, or related torts. Civil lawsuits are often an option even when criminal prosecution is not pursued.

The most commonly pursued civil claims for social media exposure are defamation (for false statements of fact), invasion of privacy (for sharing genuinely private information), and intentional infliction of emotional distress (for particularly outrageous conduct). Nonconsensual intimate image statutes in many states explicitly create civil causes of action in addition to criminal penalties.

Damages in these cases can include compensatory damages for actual harm such as lost income, medical costs for therapy, and reputational harm, as well as non-economic damages for emotional distress. In cases of particularly egregious conduct, courts can award punitive damages to punish the defendant and deter similar conduct.

Civil claims available for social media exposure:

• Defamation: False statements of fact that harm reputation
• Invasion of privacy: False light, public disclosure of private facts, intrusion
• Intentional infliction of emotional distress: Outrageous conduct causing severe distress
• Nonconsensual intimate image statute civil claim: Available in most states and under federal SHIELD Act
• Cyberstalking civil claim: 18 USC 2261A permits civil lawsuits for federal cyberstalking
• Tortious interference: If exposure was designed to damage business or employment relationships

Frequently Asked Questions

Is it illegal to expose someone on social media in the United States?

It depends on what you are sharing.
False statements that harm reputation are defamation.
Private intimate images shared without consent are criminal in 48 states.
Sharing personal information to direct harassment toward someone is doxxing, which is illegal in many states.
True statements about public conduct are generally protected by the First Amendment.

Can you go to jail for posting someone’s private information online?

Yes, posting private information online with intent to cause fear or harm can result in jail time under doxxing and cyberstalking statutes.
California, Illinois, and Nevada have explicit doxxing laws that carry criminal penalties including possible jail time.
Federal cyberstalking charges under 18 USC 2261A can result in up to five years in federal prison for interstate cases.
Civil penalties and lawsuits are available in addition to criminal charges in most situations.

Is it illegal to share private photos of someone without their consent?

Yes, sharing intimate or sexually explicit images without consent is a crime in 48 US states plus Washington DC.
These laws are called nonconsensual intimate image statutes and they apply regardless of whether the images were originally shared willingly within a relationship.
Penalties range from misdemeanor charges to felony convictions depending on the state and the circumstances.
The federal SHIELD Act additionally provides a civil cause of action for victims to sue in federal court.

What is the difference between exposing someone legally and illegally?

Legal exposure involves sharing true information about someone’s public conduct without pairing it with private contact information designed to direct harassment.
Illegal exposure includes false statements (defamation), intimate images without consent (NCII law), personal information shared to invite harm (doxxing), and patterns of targeted conduct that cause fear (cyberstalking).
The same piece of information can be legal in one context and illegal in another based on intent and how it is presented.
The primary legal tests are: Is the statement true? Was the information private? Was the intent to inform or to harm?

Can you sue someone who posted your personal information on social media?

Yes, you can sue someone who posted your personal information on social media when their conduct constitutes defamation, invasion of privacy, doxxing, or related civil wrongs.
Civil lawsuits can recover compensatory damages for actual harm including lost income and medical costs, emotional distress damages, and in egregious cases, punitive damages.
The federal SHIELD Act allows civil lawsuits in federal court for nonconsensual intimate image violations regardless of state.
Evidence preservation is critical: document the posts with screenshots before reporting them for removal, because platforms may take the content down before you can preserve it.

Closing

The law around exposing someone on social media in 2026 is more developed and more enforceable than it was even five years ago. Doxxing statutes, NCII laws, and cyberstalking provisions give both prosecutors and civil plaintiffs real tools to hold people accountable.

Save this article as a reference whether you are trying to understand your own exposure risk or protect yourself from someone who has targeted you online. The legal framework changes regularly, and knowing where the lines are is the first step.

For a deeper understanding, check Is It Illegal to Borrow Money for a Down Payment? 2026