When Should I Send a Cease and Desist for Online Harassment in California?

The Comments Started Small — Then They Didn't

Maya ran a small skincare business out of her apartment in Sacramento. Her Instagram had grown to about 12,000 followers — not enough to make her rich, but enough to make her business viable. In March, someone left a comment calling one of her products "overpriced garbage." She ignored it. Criticism happens.

A week later, the same account — or what appeared to be the same person using a different handle — left three more comments. Then five. Then the comments started appearing on her personal posts, not just her business ones. "Scam artist." "Everyone should know what you really are." "People like you don't deserve a platform."

By April, the account had tagged her business partners in posts accusing her of fraud. Someone created a fake profile using her photos, posting content designed to make her look unhinged. A review appeared on Google claiming she had "threatened" a customer — something that never happened.

Maya didn't know when should I send a cease and desist for online harassment California became a question she needed to answer. But three months into this, she realized she needed to understand her options. The harassment wasn't stopping on its own. It was getting worse.

Her situation raises the questions this article addresses: When does online harassment cross from infuriating to legally actionable? When is a cease and desist letter the right tool — and when might it make things worse?

What California Law Says About Online Harassment

Understanding the legal framework matters before deciding whether a cease and desist makes sense. California has several statutes addressing harassment, stalking, and threatening conduct online — but they don't cover everything that feels like harassment.

Criminal vs. Civil Harassment — Why It Matters for Your Letter

California law treats harassment differently depending on whether the conduct is criminal or civil in nature.

Criminal harassment involves conduct that violates penal statutes — laws that can result in arrest, prosecution, and jail time. The most relevant statute is California Penal Code § 646.9, which defines stalking as willfully, maliciously, and repeatedly following or harassing another person and making a credible threat with the intent to place that person in reasonable fear for their safety. This includes electronic communications — cyberstalking falls under § 646.9 when threats are made via text, email, social media, or other digital platforms.

Civil harassment, by contrast, involves conduct that may not be criminal but still causes harm that courts can remedy through restraining orders or monetary damages. A victim doesn't need police involvement to pursue civil remedies.

Why does this distinction matter for a cease and desist? Because the legal basis cited in the letter — and the realistic next steps if the harassment continues — depend on whether the conduct is criminal, civil, or both.

A cease and desist typically functions as a civil tool. It puts the harasser on notice that their conduct is documented and that legal action may follow. For criminal conduct, the letter creates evidence that the harasser knew their behavior was unwelcome — which can matter if law enforcement becomes involved later.

California's Cyberstalking Statute and When It Applies

Penal Code § 646.9 applies to online harassment when several elements are present:

1. Willful and malicious conduct. The harasser acts intentionally, with the purpose of causing fear or harm — not accidentally or as part of legitimate criticism.

2. Repeated harassment or following. A single offensive message generally doesn't qualify. The statute requires a pattern — a "course of conduct" that shows persistent, targeted behavior.

3. A credible threat. This means a threat that causes the target to reasonably fear for their safety or the safety of their immediate family. The threat can be explicit ("I'm going to hurt you") or implied through conduct (showing up at someone's workplace after sending threatening messages).

4. Electronic communication qualifies. The statute explicitly includes threats made through electronic devices, making it applicable to social media, email, text messages, and other digital platforms.

Not all online harassment meets these elements. Someone posting repeatedly that your business is a "scam" — while damaging and distressing — may not constitute a credible threat to your safety. The line matters.

California Penal Code § 653.2 addresses another form of online harassment: posting someone's personal identifying information (name, address, phone number) on the internet with the intent that others will harass or harm them. This is commonly called "doxxing." If someone publishes your home address online with comments like "someone should teach her a lesson," that conduct may violate § 653.2 even without a direct threat.

The Line Between Free Speech and Actionable Harassment

This is where many people's expectations clash with legal reality.

California strongly protects speech, including speech that is offensive, mean-spirited, or damaging to someone's reputation. Calling someone a "fraud" or "scam artist" in an online review, without more, is likely protected opinion. Repeatedly posting that someone's products are "garbage" is unpleasant but probably not actionable harassment.

The conduct becomes legally actionable when it crosses specific lines:

For a cease and desist to carry weight, the underlying conduct needs to fit one of these categories. A letter demanding someone stop posting negative reviews — when those reviews are opinion rather than false statements of fact — may not have any legal backing. That doesn't mean it won't work psychologically. But it does mean the threatened legal consequences may be empty.

• True threats — statements that a reasonable person would interpret as a serious expression of intent to commit violence
• Defamation — false statements of fact (not opinion) that damage someone's reputation
• A pattern of conduct causing substantial emotional distress — under civil harassment standards
• Conduct meeting the stalking or cyberstalking definitions — under Penal Code § 646.9

Five Signs It's Time to Send a Cease and Desist for Online Harassment

Not every instance of online harassment warrants a formal legal letter. Here are the indicators that timing may be right.

The Harassment Is Documented and Ongoing

A single offensive comment, even a deeply hurtful one, rarely justifies a cease and desist. California law — and courts — look for patterns.

The California Court of Appeal addressed this in Brekke v. Wills (2005) 125 Cal.App.4th 1400, clarifying that harassment requires a "course of conduct" — a pattern of behavior composed of a series of acts over time, not isolated incidents. Two incidents close in time might qualify; a single act generally won't.

If the harassment has been ongoing for weeks or months, with multiple incidents documented, the timing element is satisfied. The conduct shows a pattern, not a one-time outburst.

The Harasser Can Be Identified (or Their Platform Is Known)

A cease and desist requires a recipient. Someone needs to receive the letter for it to function.

If the harasser uses their real name or a traceable handle, delivering the letter is straightforward. If they're anonymous, options narrow. In some cases, the platform hosting the harassment (Instagram, Facebook, Google) can receive a letter demanding content removal — though platforms have varying policies about responding to cease and desist demands versus court orders.

For truly anonymous harassment, identification may require legal discovery — a process where a court can compel platforms to reveal user information. That's a more complex step than sending a letter, but a cease and desist to the platform can sometimes precede it.

The Conduct Crosses a Legal Threshold — Not Just an Ethical One

This is the hardest assessment for most people to make objectively. The harassment feels wrong. It feels like it should be illegal. But "feeling illegal" and "being illegal under California law" are different standards.

Before sending a cease and desist, the conduct should fit at least one legal category:

A cease and desist is strongest when it can cite specific legal violations, not general complaints about offensive behavior.

Lower-Stakes Options Have Already Been Tried

Cease and desist letters exist on a spectrum of escalation. They're more formal than blocking someone or reporting them to a platform, but less severe than filing a lawsuit or seeking a restraining order.

Before sending a formal letter, most people have already tried:

If these steps haven't worked — if the harassment continues or escalates — a cease and desist represents a reasonable next step. It signals seriousness without immediately involving the courts.

Realistic Expectations Exist About What the Letter Can Accomplish

A cease and desist letter is not a restraining order. It has no enforcement mechanism. If the harasser ignores it, no automatic legal consequence follows.

What a cease and desist does:

What it doesn't do:

Understanding these limits matters. If immediate safety is a concern, or if the harassment is severe enough that legal enforcement is clearly the next step, starting with a restraining order application may make more sense than a letter.

• Cyberstalking (credible threats + pattern of harassment) under Penal Code § 646.9
• Doxxing (posting personal information with intent to incite harassment) under Penal Code § 653.2
• Civil stalking (pattern causing fear for safety) giving rise to liability under Civil Code § 1708.7
• Defamation (false statements of fact causing reputational harm)
• Civil harassment meeting the standard for a restraining order under Code of Civil Procedure § 527.6
• Blocking the harasser
• Reporting the content to the platform
• Adjusting privacy settings
• Ignoring the behavior to see if it stops
• Creates a formal written record that the harasser was put on notice
• Documents the specific conduct being complained about
• Establishes a timestamp — if the harassment continues, it's now "after notice"
• Sometimes stops the behavior, especially if the harasser didn't realize legal consequences were possible
• Force anyone to stop
• Result in automatic legal consequences if ignored
• Assure any particular outcome

When a Cease and Desist Might Not Be the Right Move

Sometimes a cease and desist is premature, counterproductive, or simply not the right tool for the situation.

The Harasser Is Anonymous and Untraceable

If the harassment comes from accounts that can't be traced to a real person, a cease and desist has nowhere to go. The letter requires delivery to be effective — and "effective" here means both practical delivery and the recipient knowing the letter is meant for them.

Anonymous harassment may require different approaches: working with platforms to remove content, pursuing legal discovery to unmask the harasser, or focusing on restraining orders where courts can compel platform cooperation.

The Behavior Is Likely to Escalate With Attention

Some harassers are looking for a reaction. A formal legal letter might feel like validation — proof that their conduct is having an impact. For certain personality types, receiving a cease and desist can intensify the behavior rather than stop it.

This assessment is difficult to make and involves judgment about the specific harasser. Factors that might suggest escalation risk:

When escalation is a concern, consulting with a professional before sending anything may help assess the safest approach.

Immediate Protection Is Needed

A cease and desist takes time to prepare and send. Even if sent immediately, there's no assurance of response.

If safety concerns exist — if the harassment includes threats of physical violence, if the harasser has appeared in person, if there's reason to believe immediate harm is possible — a restraining order may be the better first step.

Under California Code of Civil Procedure § 527.6, a civil harassment restraining order can be requested when someone has been harassed by a person with no close relationship (not a spouse, domestic partner, or close family member). The court can grant a temporary restraining order on the same day as the request, providing immediate legal protection.

The California Courts Self-Help Center provides guidance on the restraining order process.

The Conduct Doesn't Meet California's Legal Definitions

If honest assessment reveals that the conduct — however upsetting — doesn't fit California's legal definitions of harassment, stalking, or defamation, a cease and desist may create more problems than it solves.

Sending a cease and desist based on weak legal grounds can:

Sometimes the honest answer is that the harassment is deeply wrong but not legally actionable. That's a frustrating conclusion, but it's better to reach it before sending a letter than after.

• The harasser has explicitly stated they want attention or a response
• Previous attempts to engage (even to ask them to stop) led to more harassment
• The harassment appears motivated by a desire to provoke rather than a specific grievance
• Embolden the harasser, who may research the law and realize the threats are empty
• Potentially expose the sender to claims of harassment (if the letter itself is threatening or frivolous)
• Waste time and emotional energy on a tactic unlikely to succeed

How to Build Your Case Before Sending Anything

Documentation matters. The strength of a cease and desist — and any subsequent legal action — depends on the evidence supporting it.

Screenshots Aren't Enough — What Courts Actually Want

Screenshots can be faked. Courts know this. Platforms know this. Even a legitimate screenshot may not show metadata that proves when and where the content was posted.

Better documentation includes:

For defamation claims specifically, evidence needs to show not just that a statement was made, but that it's a false statement of fact (not opinion), that the person making it knew or should have known it was false, and that it caused actual damage.

Creating a Harassment Timeline

A timeline serves two purposes: it demonstrates the pattern required under California law, and it organizes evidence for anyone who needs to review it (whether that's an attorney, a court, or the recipient of the cease and desist).

The timeline should include:

A clear, organized timeline is more persuasive than a jumbled collection of screenshots.

Preserving Evidence From Disappearing Platforms

Some platforms delete content automatically. Others allow users to delete their own posts. Harassers sometimes delete evidence once they realize legal action is possible.

Preservation steps:

Evidence that's been deleted and can't be recovered significantly weakens any legal claim.

• Screen recordings showing the harassment in context (scrolling through a page, showing the URL bar, showing timestamps)
• Platform export data — many platforms allow users to download their data, which can include messages and interactions with timestamps
• Certified printouts — some services specialize in creating certified records of web content that can be authenticated in court
• Witness statements — if others saw the harassment (friends who viewed the posts, employees who received the messages), their statements add credibility
• Date and time of each incident (as precisely as available)
• Platform where the incident occurred
• Nature of the conduct (what was said or done)
• Your response (if any) — this can matter if the harasser claims provocation
• Impact — how the incident affected you, your business, your mental health
• Save everything immediately — don't wait to document until you're "sure" you want to take action
• Use multiple methods — screenshots, screen recordings, and platform exports together create redundant records
• Consider preservation services — tools exist specifically to create authenticated records of web content before it disappears
• Keep copies in multiple locations — local storage, cloud backup, and email to yourself creates redundancy

What Happens After a Cease and Desist Is Sent

Understanding the realistic range of outcomes helps set appropriate expectations.

Best Case — They Stop

Sometimes a cease and desist works exactly as intended. The recipient receives the letter, realizes their conduct has been documented, fears the threatened legal consequences, and stops.

This outcome is most likely when:

When the harassment stops after a letter, the matter is typically resolved. The letter becomes a record that can be referenced if the behavior ever resumes.

Common Case — They Ignore It

Many cease and desist letters receive no response. The recipient may not care, may think the threats are empty, or may simply decide to ignore it.

If the harassment continues after the letter, the letter's value shifts. It's now evidence that:

This documentation can support a subsequent restraining order application or civil lawsuit.

Worst Case — They Retaliate

Some harassers respond to a cease and desist by escalating. They may:

Retaliation is a risk, particularly with harassers who appear unstable, who seem to crave attention, or who have already shown willingness to escalate.

If retaliation occurs, the calculus changes. The next steps may include restraining orders, police reports (if the conduct is now criminal), or civil litigation.

Using the Letter as Evidence Later

Whether or not the immediate response is favorable, a well-drafted cease and desist creates evidence.

If a restraining order is sought later, the letter demonstrates:

If a civil lawsuit is filed later (for defamation, intentional infliction of emotional distress, or under Civil Code § 1708.7 for civil stalking), the letter establishes:

Evidence of continued harassment after formal notice can support claims for punitive damages, showing willful disregard for the rights of another.

• The harasser didn't realize their conduct might be illegal
• The harasser has something to lose (a job, reputation, assets that could be at risk in a lawsuit)
• The letter is credible, well-documented, and cites specific legal violations
• The harasser was formally notified their conduct was unwelcome
• The harasser chose to continue after receiving notice
• Any claim of "not knowing" the impact of their behavior is undercut
• Publicize the letter (posting it online to mock the sender)
• Increase the frequency or severity of harassment
• Begin targeting people connected to the sender (family, business partners)
• Threaten legal action in return
• The pattern of harassment existed before the filing
• The petitioner formally demanded the conduct stop
• The respondent was on notice
• When the plaintiff first demanded the conduct stop
• What conduct was complained about
• That the defendant had notice and continued anyway

Maya's Decision — What She Did and Why

Maya spent two weeks thinking about her options after documenting three months of escalating harassment.

She made a timeline. It showed 47 separate incidents across Instagram, Google reviews, and posts on a local business forum. The incidents included name-calling, false statements about her business practices, tagging her business partners in defamatory posts, and the creation of a fake profile using her photos.

She researched the accounts involved. The primary harasser — the one who started everything — used a handle that appeared on other platforms. Enough digital breadcrumbs existed to identify a likely real person: a former customer who had requested a refund, which Maya had provided, but who apparently remained angry.

Maya assessed the conduct against California law. Some of it was defamatory — false statements of fact, like the claim that she "threatened" a customer. Some of it was opinion — calling her products "garbage" was mean but protected. The fake profile using her photos might implicate other laws. The overall pattern — 47 incidents over three months, designed to damage her business and reputation — suggested a course of conduct that might support a civil harassment claim.

She considered the risks. The harasser seemed motivated by anger, not attention-seeking. The harassment had continued despite being ignored for months; there was no evidence that engagement would make it worse. Maya had documented everything and was prepared to escalate if the letter failed.

She sent the cease and desist.

The letter cited specific incidents, quoted the relevant California statutes, and demanded the harassment stop within 10 days. It was sent both by email (to an address associated with the suspected harasser) and by certified mail (to their last known physical address).

The response wasn't immediate. For two weeks, nothing changed — posts continued to appear, though perhaps slightly less frequently. Then the fake Instagram profile disappeared. Then the Google review was deleted. The posts on the business forum remained, but no new ones appeared.

Three months later, Maya's situation had improved but wasn't fully resolved. The harasser never responded to the letter. The harassment had decreased by about 80% — some legacy content remained online, but no new attacks had occurred. Maya kept her documentation organized in case the behavior resumed.

Was the letter a complete success? No. Did it help? Yes. More importantly, Maya now had a clear record of everything that happened, when it started, when she formally demanded it stop, and how the harasser responded. If she ever needed to pursue a restraining order or civil lawsuit, her position was significantly stronger than if she had done nothing.

Checklist — Is It Time to Send a Cease and Desist?

Use this checklist to assess whether timing is right for a cease and desist letter:

Evidence and Documentation

Identity and Delivery

Legal Basis

• Credible threats (cyberstalking)

• False statements of fact causing harm (defamation)

• A pattern causing substantial emotional distress (civil harassment)

• Posting personal information to incite harassment (doxxing)

Practical Readiness

Emotional Readiness

If most of these boxes are checked, sending a cease and desist may be a reasonable step. If several are not, more preparation — or a different approach — may be warranted.

• The harassment has been ongoing for at least several weeks
• Multiple incidents (not just one or two) have been documented
• Screenshots, screen recordings, or other records exist for each incident
• A timeline showing the pattern of conduct has been created
• The harasser's identity is known, or can be reasonably determined
• A physical address, email address, or other delivery method exists
• If anonymous, the platform hosting the harassment is known and might respond to formal demands
• The conduct includes at least one category of legally actionable behavior:
• The conduct goes beyond protected opinion or criticism
• Lower-stakes options (blocking, reporting, ignoring) have been tried and failed
• Realistic expectations exist about what a letter can and cannot do
• Escalation risk has been considered — attention is unlikely to make things worse
• Immediate safety concerns (if any) have been addressed through other means
• The situation has been assessed as objectively as possible
• The decision is based on documentation and legal analysis, not just frustration
• A plan exists for what happens if the harasser ignores the letter
• A plan exists for what happens if the harasser retaliates

Frequently Asked Questions

Can I send a cease and desist if I don't know who is harassing me?

A cease and desist generally requires a recipient address. For anonymous harassers, options include sending the letter to the platform hosting the content (requesting removal under the platform's terms of service or citing legal violations) or pursuing legal discovery to unmask the harasser. Some platforms respond to formal legal demands even without litigation, particularly when the content clearly violates their policies. However, if the harassment is severe and the identity unknown, a restraining order application may trigger court processes that help identify the person through subpoenas to platforms.

Will a cease and desist letter stop online harassment?

Sometimes. A cease and desist has no legal enforcement power on its own — it is a formal demand, not a court order. Some harassers stop when they realize their conduct is documented and legal action may follow, particularly if they have jobs, reputations, or assets they want to protect. Others ignore the letter or escalate. The letter's primary value is often creating a paper trail that demonstrates the harasser received notice and chose to continue, which strengthens any future legal claims including restraining order applications and civil lawsuits for damages.

What happens if someone ignores a cease and desist in California?

If a harasser ignores a cease and desist letter, the recipient's documented refusal to stop becomes evidence of willful conduct. The next steps depend on the severity of the situation: options include applying for a civil harassment restraining order under Code of Civil Procedure § 527.6, filing a civil lawsuit for damages under Civil Code § 1708.7, or reporting criminal conduct to law enforcement under Penal Code § 646.9. The letter itself does not create legal consequences — it creates a record that supports those consequences through subsequent legal action.

Is online harassment a crime in California?

Yes, under certain circumstances. California Penal Code § 646.9 criminalizes stalking, including cyberstalking involving credible threats made via electronic communication. Penal Code § 653.2 makes it a crime to post someone's personal information online with intent to cause harassment (doxxing). However, not all offensive online behavior qualifies as criminal — the conduct must meet specific statutory definitions involving threats, patterns, or intent to harass. Criticism, negative reviews, and mean-spirited comments, while hurtful, are often protected speech rather than criminal conduct.

Taking a Clear First Step

Online harassment creates real harm — to businesses, reputations, mental health, and sense of safety. California law provides tools to address that harm, but using those tools effectively requires understanding when they apply and what they can realistically accomplish.

A cease and desist letter is one tool in that toolkit. When used at the right time — with documented evidence, an identifiable harasser, and conduct that crosses legal lines — it can stop harassment, create a critical paper trail, or both. When used prematurely or without a clear legal basis, it may accomplish little or even make things worse.

The decision to send a cease and desist is personal. It depends on the specific facts, the specific harasser, and the specific goals. What matters most is making that decision from a place of information rather than frustration.

For more context on cease and desist letters in California generally, including what they contain and how they work, the xCounsel resource library provides additional guidance. If you want to prepare your facts before taking action, the xCounsel Toolkit lawyer-ready summary builder can help you organize your evidence and timeline.

This article is general information from xCounsel and is not legal advice. Reading it does not create an attorney-client relationship.

Ready to Take a Clearer First Step?

If you have documented evidence of online harassment and an identifiable harasser, xCounsel can help you prepare a California cease and desist letter reviewed by a licensed attorney. The process starts with organizing what you have — facts, dates, and evidence — so that whatever step you take next is grounded and clear.

Start a cease and desist matter

Frequently Asked Questions