Verification answers a specific, legitimate question and stops; stalking involves unwanted, intrusive monitoring that ignores necessity, consent, boundaries, or personal safety.
Looking Someone Up Is Not Automatically Stalking
People routinely check information about others before accepting a job applicant, hiring a contractor, meeting an online date, renting a property, buying an expensive item, or responding to suspected fraud.
A limited check can be sensible. You might confirm that a professional license is valid, verify that a company is registered, check whether a profile photograph has been stolen, or confirm that a seller controls the account they are using.
The problem begins when a focused check expands into persistent monitoring of someone’s location, relationships, communications, workplace, family, routines, or private life.
The difference between verification and stalking is not simply whether someone searched for information. The real boundary depends on:
- Why the information is needed
- How much information is collected
- Which methods are used
- Whether the conduct is repeated
- Whether consent or access has been withdrawn
- Whether clear boundaries are ignored
- What the person does with the information
- Whether the behavior causes, or would reasonably cause, fear or serious distress
It is also important to distinguish between conduct that is reasonable, conduct that is invasive or unethical, and conduct that may legally qualify as stalking, harassment, unauthorized surveillance, account intrusion, or another offense. Exact legal definitions vary between countries, states, provinces, and territories.
What Is Verification?
Verification is a focused process used to determine whether a specific claim, identity, credential, document, account, or transaction is genuine.
Common examples include:
- Confirming that a doctor, tradesperson, lawyer, or other professional holds a valid license
- Checking whether a business is officially registered
- Verifying employment history or qualifications relevant to a job
- Confirming that an online seller owns the item being offered
- Using reverse-image search to identify stolen dating-profile photographs
- Checking that a payment request came from the correct person or company
- Validating someone’s identity before providing financial or account access
Reasonable verification normally has five characteristics.
1. A defined purpose
There is a specific question to answer, such as:
- Is this business genuine?
- Is this qualification authentic?
- Does this person control the account?
- Has this profile photograph been stolen?
- Is this payment request legitimate?
2. A limited scope
Only information relevant to that question is collected.
Checking a contractor’s license may be appropriate. Investigating their family, former partners, home life, and travel history normally is not.
3. Proportionate methods
The level of checking should match the level of risk.
Confirming a low-value marketplace purchase should not require the same investigation as hiring someone for a sensitive financial or security role.
4. Reasonable accuracy checks
Search results, public records, photographs, and names can be matched to the wrong person. Information should be confirmed before it is used to reject an applicant, accuse someone of fraud, contact third parties, or publish allegations.
5. A clear stopping point
Verification ends when the relevant fact has been confirmed, disproved, or cannot reasonably be established.
Formal identity-proofing standards follow a similar principle. Current guidance from the U.S. National Institute of Standards and Technology emphasizes using the minimum identity attributes required for the verification process and limiting unnecessary personal data collection.
Verification is not permission to create a complete profile of another person simply because information about them can be found online.
What Is Stalking?
Stalking generally involves a course or pattern of unwanted attention, surveillance, tracking, communication, interference, or intimidation directed at a particular person.
Depending on the applicable law, relevant factors may include:
- Repeated or continuing behavior
- Following or watching someone
- Persistent unwanted messages or calls
- Monitoring online activity or communications
- Tracking a person’s location
- Appearing repeatedly at places they visit
- Contacting relatives, friends, colleagues, or neighbors
- Publishing material about the person
- Impersonating them or using fake accounts
- Damaging or interfering with property
- Threatening, coercive, or controlling behavior
- Conduct that causes, is intended to cause, or would reasonably cause fear, alarm, or serious distress
The U.S. Department of Justice describes stalking as a course of conduct directed at a specific person that would cause a reasonable person to fear for their safety or the safety of others, or experience substantial emotional distress.
Stalking does not require physical following. Cyberstalking can involve constant online tracking, spyware, unauthorized account access, GPS monitoring, repeated contact through multiple platforms, or the misuse of connected devices and shared services. Australia’s eSafety Commissioner identifies these technologies and behaviors as common forms of cyberstalking and technology-facilitated abuse.
Verification vs. Stalking at a Glance
| Factor | Reasonable verification | Potentially invasive or stalking behavior |
|---|---|---|
| Purpose | Answers a relevant question | Serves fixation, control, jealousy, intimidation, or continuing curiosity |
| Scope | Limited to necessary information | Expands into unrelated areas of the person’s life |
| Frequency | One-time or occasional | Persistent, repeated, continuous, or prolonged |
| Methods | Lawful and proportionate | Deceptive, coercive, invasive, or unlawful |
| Contact | Appropriate and limited | Continues after refusal, silence, blocking, or a request to stop |
| Location | Used with informed, current permission | Secretly tracks movements or routines |
| Accounts | Uses information voluntarily provided | Uses password guessing, spyware, impersonation, or unauthorized access |
| Boundaries | Respects consent and objections | Treats boundaries as obstacles to bypass |
| Stopping point | Ends when the fact is established | Continues after the original purpose has been met |
| Effect | Resolves a genuine question or risk | Creates pressure, fear, loss of privacy, or safety concerns |
No single row decides every situation. The full pattern, context, methods, intent, and effect matter.
The Five-Part Boundary Test
Before researching another person, apply five practical tests.
Purpose: What exact fact are you confirming?
State the question in one sentence.
A legitimate search begins with something specific:
- Is this person licensed?
- Does this company exist?
- Is this account genuine?
- Is this photograph stolen?
- Is this claimed qualification authentic?
“Finding out everything I can” is not a verification purpose.
Relevance: Do you genuinely need this information?
Information can be interesting without being relevant.
A prospective client may need to confirm a financial adviser’s license. They usually do not need the adviser’s home address, relatives, dating history, political activity, or weekend routine.
Proportionality: Are you using the least intrusive method?
Start with the narrowest reliable method:
- Ask the person directly
- Use an official professional register
- Request an appropriate document
- Confirm through an authorized reference
- Check the relevant company or government database
Do not begin with fake accounts, location monitoring, relatives, neighbors, data brokers, or invasive searches when an official source can answer the question.
Boundaries: Has access or consent been withdrawn?
Consent is not permanent.
Previous access to a shared location service, cloud account, vehicle application, smart-home system, or device does not authorize continued monitoring after consent has been withdrawn.
Blocking, refusal, revoked access, silence, and requests for no further contact should not be treated as challenges to overcome.
Stopping point: When will the search end?
Set the stopping point before beginning.
Once the relevant fact has been confirmed, disproved, or cannot reasonably be verified, stop. Changing the objective to justify further searching is a warning sign.
When Verification Crosses the Line
Verification may be becoming invasive when someone:
- Continues searching after the original question has been answered
- Checks a person’s accounts repeatedly throughout the day
- Records every post, follower, comment, check-in, or relationship
- Tracks real-time or historical locations without current permission
- Creates alternative accounts after being blocked
- Contacts relatives, employers, colleagues, neighbors, or former partners without a genuine need
- Uses deception to gain access to restricted information
- Attempts to enter private accounts or devices
- Installs spyware or secretly places a tracking device
- Repeatedly appears at locations the person visits
- Saves large amounts of unrelated personal information
- Uses information to threaten, expose, embarrass, pressure, or control
- Treats rejection or silence as a reason to intensify the investigation
This gradual expansion is often called scope creep.
For example:
- Confirming someone’s employer becomes investigating every former workplace.
- Checking a profile photograph becomes identifying their relatives.
- Confirming the city where they live becomes locating their home.
- Checking for fraud becomes continuous monitoring after no fraud is found.
- Reviewing a public profile becomes bypassing a block through new accounts.
That conduct may be intrusive before it meets a jurisdiction’s criminal definition of stalking. It may also breach privacy, surveillance, computer-access, communications, harassment, discrimination, or platform rules.
Is It Stalking If the Information Is Public?
Public availability does not provide unlimited permission to monitor, combine, store, or misuse personal information.
A home address may appear in a public record. A workplace may be listed on a professional profile. A running route may be visible through a fitness application. Family names may appear in social-media comments.
Context still matters.
These situations are not equivalent:
- Checking an official company register to confirm a director’s role
- Mapping the director’s home, family, travel habits, and daily movements
- Viewing a date’s public profile before meeting
- Creating new accounts to monitor them after being blocked
- Reading a public post once
- Recording every post, location, follower, and interaction for months
- Checking a public professional license
- Collecting unrelated medical, political, family, or relationship information
The fact that individual details are public does not automatically make a compiled surveillance profile reasonable or harmless.
How Common Online Tools Can Be Used or Misused
Search engines
Verification: Confirming a business history, professional role, publication, or obvious identity inconsistency.
Crossing the line: Running constant searches and alerts for every new reference to a person after the relevant question has been answered.
Social media
Verification: Reviewing basic information someone has chosen to make public to confirm identity or detect an obvious scam.
Crossing the line: Monitoring every interaction, bypassing blocks, documenting relationships, or contacting people in the person’s network.
Reverse-image search
Verification: Determining whether a profile uses photographs stolen from another person.
Crossing the line: Using a confirmed photograph to locate unrelated personal accounts, family members, workplaces, or private interests.
Public records
Verification: Checking a professional license, corporate appointment, property interest, or relevant court filing.
Crossing the line: Combining records to identify a person’s home, schedule, relatives, vulnerabilities, and movements.
Location technology
Verification: Voluntary, informed, revocable location sharing for travel, safety, deliveries, or family coordination.
Crossing the line: Secret monitoring through GPS devices, vehicle applications, Bluetooth trackers, shared cloud services, fitness applications, spyware, or saved passwords.
Practical Examples
Dating safety
Reasonable verification: Checking whether a profile photograph and basic identity appear genuine before meeting in a public place.
Invasive conduct: Identifying the person’s home, vehicle, workplace entrance, relatives, previous partners, and daily routine.
Potential stalking: Continuing to monitor or contact the person after rejection, blocking, or a request to stop.
Hiring
Reasonable verification: Confirming qualifications, references, licenses, and work history relevant to the position through a lawful process.
Invasive conduct: Searching an applicant’s relatives, health history, private relationships, political beliefs, or unrelated personal accounts.
Potentially unlawful conduct: Using unauthorized background reports, discriminatory information, hacked data, or intrusive monitoring methods.
Online marketplace purchases
Reasonable verification: Confirming that the seller controls the account, owns the item, and has a credible transaction history.
Invasive conduct: Investigating the seller’s personal relationships, relatives, workplace, or home life.
Potential stalking: Continuing to monitor the seller after the transaction has ended or after deciding not to proceed.
Suspected fraud
Reasonable verification: Comparing a claim with official records, preserving transaction evidence, contacting the relevant company, and reporting genuine inconsistencies.
Invasive conduct: Starting an open-ended personal investigation based only on suspicion.
Potential stalking or harassment: Contacting everyone the person knows, publishing unverified allegations, repeatedly confronting them, or monitoring their movements.
Employers and Organizations Have Additional Responsibilities
Organizations often operate under privacy, employment, consumer-reporting, and data-protection rules that do not apply in exactly the same way to a private individual.
In the United States, an employer that obtains a background report from a consumer reporting company generally must follow the Fair Credit Reporting Act. This includes providing a clear disclosure, obtaining written permission, and following required procedures before and after taking adverse action based on the report.
In the United Kingdom, covered organizations must observe principles including purpose limitation and data minimization. Personal information should be collected for specified, legitimate purposes and limited to what is needed.
Australian Privacy Principle 3 requires covered entities to limit collection to personal information that is reasonably necessary for their functions or activities. Current Australian guidance also encourages less intrusive identity-verification methods when they can establish identity adequately.
Canada’s PIPEDA framework requires covered organizations to identify their purposes, obtain meaningful consent where required, limit collection, restrict later use, and retain only information connected to legitimate purposes. Strictly personal activity is not necessarily governed by PIPEDA in the same way.
These frameworks reflect a practical standard that applies beyond formal compliance: collect only what is genuinely needed, use it for the stated purpose, protect it, verify its accuracy, and do not quietly repurpose it.
How Stalking Laws Differ Across Countries
United States
Stalking is addressed through federal, state, territorial, and tribal laws, and the required elements vary. Laws commonly focus on a course of conduct directed at a particular person that causes, or would reasonably cause, fear or substantial emotional distress.
Relevant conduct may include repeated communications, surveillance, physical following, online monitoring, threats, location tracking, and misuse of technology. Authorities assess the entire pattern rather than viewing every incident in isolation.
United Kingdom
The United Kingdom has separate legal systems.
In England and Wales, statutory examples of stalking-related conduct include following someone, attempting contact, publishing material about them, monitoring their internet or email use, loitering, interfering with property, and watching or spying.
Scotland has a separate statutory stalking offense under the Criminal Justice and Licensing (Scotland) Act 2010. Northern Ireland has its own offense under the Protection from Stalking Act (Northern Ireland) 2022.
Australia
Stalking offenses are primarily governed by state and territory laws, so definitions and thresholds differ across Australia.
Relevant behaviors may include following, unwanted contact, surveillance, online monitoring, location tracking, account interference, and information gathering used to intimidate or control.
Although stalking usually involves repeated conduct, this is not universal. Queensland law, for example, can cover conduct occurring on one occasion when it is prolonged, as well as conduct occurring on multiple occasions.
Canada
Canada primarily addresses stalking through the Criminal Code offense of criminal harassment.
Section 264 covers specified conduct carried out without lawful authority when the accused knows — or is reckless as to whether — the person is harassed, and the conduct reasonably causes fear for that person’s safety or someone else’s safety.
The listed conduct includes repeatedly following or communicating with someone, watching places where they live or work, and engaging in threatening behavior.
A Single Incident Can Still Be Serious
Stalking frequently involves a pattern, but repetition is not the only issue.
A single act may independently involve:
- Unauthorized account access
- Spyware or stalkerware
- Trespassing
- Threats
- Impersonation
- Doxxing
- Unlawful surveillance
- Property interference
- Misuse of a tracking device
- Nonconsensual disclosure of private information
Someone should not assume that an act is lawful merely because it happened once or has not yet formed a longer pattern.
What to Do When “Verification” Feels Like Stalking
Focus on the full pattern rather than dismissing each incident as minor.
Preserve evidence
Save relevant:
- Messages and emails
- Screenshots
- Call records and voicemails
- Account-security alerts
- Dates, times, and locations
- Photographs or videos
- Details of unwanted deliveries
- Witness information
- Records of reports made to platforms or authorities
Store copies somewhere the other person cannot access. Preserve useful evidence before deleting messages, closing accounts, or blocking users.
Consider your immediate safety
Tell a trusted person what is happening. Avoid confronting someone when confrontation could increase the risk.
When intimate-partner abuse or coercive control may be involved, use a safer device when possible. Sudden password, location, or device changes can sometimes alert the person monitoring the account.
Review digital security
When it is safe to do so:
- Change important passwords
- Use unique passwords
- Enable multifactor authentication
- Review active login sessions
- Check account-recovery details
- Review location-sharing permissions
- Inspect connected devices and applications
- Check shared cloud, vehicle, fitness, and smart-home accounts
- Remove access that is no longer authorized
Seek appropriate help
Report abusive accounts or content to the relevant platform.
Contact local police, a stalking-support service, domestic-abuse service, workplace-security team, or lawyer when behavior is persistent, threatening, escalating, or causing fear.
Contact emergency services when there is an immediate danger.
What to Do If Your Own Checking Has Gone Too Far
Stop the monitoring rather than finding a new reason to continue.
Do not:
- Bypass a block
- Create another account
- Contact relatives or coworkers
- Track locations
- Save unrelated personal data
- Repeatedly revisit the person’s profiles
- Use shared passwords or old access
- Publish accusations
- Treat silence as permission
Delete information you do not genuinely need. Revoke alerts and automated searches. Use official reporting channels when there is evidence of fraud, danger, or misconduct.
Verification should resolve uncertainty. It should not become a way to maintain access to someone who has withdrawn it.
Frequently Asked Questions
Is looking someone up online stalking?
Not by itself. A limited search for a legitimate reason is usually different from stalking. The risk increases when the search becomes persistent, invasive, deceptive, threatening, or continues after boundaries have been communicated.
Is checking someone’s social media stalking?
Viewing a public profile once is not generally the same as stalking. Constant monitoring, recording every interaction, using fake accounts, bypassing blocks, or tracking someone across platforms may form part of a stalking or harassment pattern.
Does public information make monitoring acceptable?
No. Public availability does not automatically justify collecting unlimited information, combining it into a detailed profile, monitoring changes continuously, or using it to intimidate or control someone.
Can one incident count as stalking?
Many stalking laws require a course or pattern of conduct, but the rules differ. Some jurisdictions can cover a single prolonged episode, and one act may separately constitute threats, hacking, trespass, unlawful surveillance, or another offense.
What is the simplest way to tell verification from stalking?
Ask what exact fact is being checked, why it is needed, whether the method is proportionate, whether boundaries are being respected, and when the checking will stop.
Verify the Fact, Not the Person’s Entire Life
Verification is narrow, relevant, proportionate, and temporary.
Stalking is unwanted, intrusive, and boundary-violating. It often expands from checking one fact into monitoring the person themselves.
The safest rule is straightforward:
Confirm only what you genuinely need to know, use the least intrusive reliable method, respect consent and boundaries, and stop when the purpose has been met.