Is It Legal to Look Someone Up Online? What You Need to Know
You want to look someone up. Maybe it is a new neighbor, a potential business partner, someone you matched with on a dating app, or an estranged relative. You open Google, type their name, and then pause. Is this legal? Could you get in trouble for searching someone online?
The short answer is: yes, looking someone up online is legal in the vast majority of cases. But there are important boundaries, and crossing them can turn a perfectly innocent search into a legal problem. This guide explains exactly where those lines are drawn, what laws apply, and how to research people without putting yourself at risk.
The General Rule: Public Information Is Fair Game
In the United States, there is no law that prohibits you from searching for publicly available information about another person. The First Amendment protects the right to access and share information that is already in the public domain. This includes:
- Search engine results from Google, Bing, DuckDuckGo, or any other engine
- Social media profiles that are publicly visible (not behind privacy settings)
- Public records including court filings, property deeds, voter registrations, business filings, and marriage/divorce records
- News articles and media reports mentioning someone by name
- Government databases like sex offender registries, professional license lookups, and campaign finance records
- People search sites like Spokeo, BeenVerified, TruthFinder, and Whitepages
All of this is legal to search, read, and use for personal knowledge. The government publishes these records precisely because the public has a right to access them. Courts are open. Property transfers are recorded. Business filings are indexed. This transparency is a feature of democratic governance, not a loophole.
The FCRA: Where It Gets Complicated
The Fair Credit Reporting Act (15 U.S.C. 1681) is the most important federal law affecting people searches. It does not prohibit looking someone up. Instead, it regulates how certain types of reports can be used.
Under the FCRA, a "consumer report" is any communication from a consumer reporting agency that bears on a person's creditworthiness, credit standing, character, general reputation, personal characteristics, or mode of living. When you pull one of these reports, you must have a "permissible purpose" under the law. Those purposes include:
- Employment screening (with the subject's written consent)
- Tenant screening for rental applications
- Credit decisions (loans, credit cards, insurance)
- Legitimate business transactions initiated by the subject
- Court orders or subpoenas
Key distinction: The FCRA regulates how reports are used, not whether you can look someone up. Searching for someone on Google or reading their public court records is not subject to the FCRA. Using a consumer report to deny someone a job without following proper notice procedures is a violation.
What This Means in Practice
If you are a landlord and you want to check out a prospective tenant, you can Google them all day long. That is legal. But if you use a formal tenant screening service (a consumer reporting agency) and then deny the application based on the results, you must follow FCRA procedures: provide a pre-adverse action notice, give the applicant a copy of the report, and allow them to dispute inaccuracies.
Similarly, if you are an employer, you can look at a candidate's public LinkedIn profile without any legal issue. But running a formal background check through a CRA requires written consent and compliance with adverse action procedures.
State Privacy Laws That Add Complexity
While federal law is relatively permissive about accessing public information, several states have enacted their own privacy laws that add restrictions:
| State | Law | Key Provision |
|---|---|---|
| California | California Consumer Privacy Act (CCPA/CPRA) | Right to know what personal data is collected; right to delete; right to opt out of sale of personal information |
| Illinois | Biometric Information Privacy Act (BIPA) | Requires consent before collecting biometric data (fingerprints, face scans); private right of action with statutory damages |
| Texas | Texas Data Privacy and Security Act | Consumer rights to access, correct, and delete personal data; opt-out of targeted advertising |
| Colorado | Colorado Privacy Act | Right to access, correct, delete personal data; opt-out of profiling |
| Virginia | Virginia Consumer Data Protection Act | Similar consumer rights framework; applies to businesses processing data of 100,000+ residents |
These laws primarily regulate businesses and data brokers, not individuals. If you are a person searching for someone online for personal reasons, these state laws generally do not restrict you. They are designed to give consumers rights over how companies collect, store, and sell their data.
When Looking Someone Up Becomes Illegal
While the act of searching is almost always legal, certain contexts and behaviors can make it illegal:
1. Stalking and Cyberstalking
Federal law (18 U.S.C. 2261A) criminalizes using electronic means to surveil, harass, or intimidate another person. Every state also has cyberstalking statutes. A single search is never stalking. But a pattern of obsessive research combined with any of the following can be:
- Repeatedly contacting the person after being told to stop
- Showing up at locations you discovered through online research
- Monitoring someone's movements using information found online
- Creating fake profiles to surveil someone who has blocked you
- Using information to threaten, intimidate, or control someone
The legal test is whether a reasonable person would feel threatened or harassed by the behavior. Context matters enormously. Researching a potential business partner is reasonable. Compiling a dossier on an ex who has a restraining order against you is a crime.
2. Unauthorized Access to Protected Systems
The Computer Fraud and Abuse Act (18 U.S.C. 1030) criminalizes accessing computer systems without authorization. This means:
- Hacking into someone's email or social media accounts is a federal crime, even if you guess the password
- Accessing restricted databases you are not authorized to use (law enforcement databases, medical records, financial systems)
- Using someone else's credentials to access accounts or information
- Circumventing security measures to access private content
The key word is "authorization." If information is publicly available without a login, accessing it is legal. If it requires bypassing security, logging in with stolen credentials, or exploiting a vulnerability, it is not.
3. Pretexting
Pretexting means using false pretenses to obtain someone's personal information. The Gramm-Leach-Bliley Act (15 U.S.C. 6821) specifically prohibits pretexting to obtain financial information. Calling a bank and pretending to be the account holder to get account details is a federal crime. More broadly, using deception to obtain protected records (medical, financial, educational) can violate multiple federal and state laws.
4. Violating Protective Orders
If a court has issued a restraining order or protective order that prohibits you from contacting or researching a specific person, any search activity related to that person could be a violation. Courts have increasingly interpreted protective orders to include online monitoring and research.
What About People Search Sites?
People search sites like Spokeo, BeenVerified, TruthFinder, and Intelius aggregate publicly available data and compile it into easy-to-read profiles. Using these sites is legal for personal use. Every one of these platforms includes terms of service that prohibit using their reports for FCRA-regulated purposes (employment, housing, credit, insurance).
When you use a people search site, you are essentially paying for convenience. The information they provide is already public. They have simply collected, organized, and made it searchable. The same information could be found by visiting individual county clerk websites, court record databases, and property assessor portals. The people search site just saves you hours of manual work.
Important: In 2026, people search sites are not considered Consumer Reporting Agencies under the FCRA precisely because they do not verify information and explicitly prohibit FCRA-regulated uses. Intelligence services like DeepDive also operate in this space: we compile publicly available information for research and personal knowledge, not for making regulated decisions about people.
Social Media: Public vs. Private
Social media adds a nuanced layer to the legality question. The general rule is straightforward:
- Public profiles: Viewing someone's public Facebook, Instagram, X (Twitter), LinkedIn, or TikTok profile is legal. If they have made their content visible to everyone, anyone can view it.
- Private/locked profiles: If someone has set their profile to private, you can still see that the profile exists. But creating a fake account to gain access, or using someone else's account to view their private content, enters legally questionable territory.
- Screenshotting and sharing: Taking screenshots of public posts is legal. Sharing them is generally legal too, though context matters. Using screenshots to harass or defame someone could create civil liability.
Employers should exercise particular caution with social media research. While viewing public profiles is legal, making employment decisions based on information about protected characteristics (race, religion, pregnancy, disability, age) discovered on social media can create discrimination liability, even if the search itself was legal.
The Ethics of Looking Someone Up
Just because something is legal does not mean it is always appropriate. Ethical people research means:
- Having a legitimate reason for the search (safety, due diligence, reconnection, business)
- Not using information to harm the person being searched
- Respecting boundaries when you find information (discovering someone's address does not give you license to show up unannounced)
- Verifying before acting on information found online (misinformation and identity confusion are common)
- Being transparent when appropriate (in business contexts, disclosing that you have researched someone is often the professional thing to do)
How DeepDive Handles Legal Compliance
At DeepDive, every report we produce is compiled exclusively from publicly available information. We do not access protected databases, hack into accounts, or use pretexting. Our analysts are trained to work within legal boundaries while still delivering comprehensive intelligence.
Our reports are explicitly not consumer reports under the FCRA. They cannot be used for employment decisions, tenant screening, credit determinations, or insurance underwriting. They are research and intelligence products designed for personal knowledge, due diligence, safety assessments, and investigative research.
Research Someone the Right Way
DeepDive delivers professional-grade intelligence reports compiled from public sources, legally and ethically. Know who you are dealing with. From $29.
Order Your DeepDive ReportA Quick Reference: Legal vs. Illegal People Research
| Legal | Illegal |
|---|---|
| Googling someone's name | Hacking into their email or social media |
| Viewing public social media profiles | Creating fake profiles to access private accounts |
| Searching public court records | Accessing sealed or expunged records without authorization |
| Using people search sites for personal knowledge | Using people search data to deny employment without FCRA compliance |
| Looking up property records on county assessor sites | Calling a bank pretending to be someone to get their financial info |
| Reading news articles about someone | Repeated online monitoring as part of a stalking pattern |
| Checking sex offender registries | Violating a restraining order by researching the protected person |
Get the Full Picture, Legally
When you need to know who someone really is, DeepDive compiles comprehensive intelligence from public sources. Professional analysts. Legal methods. Delivered in 24 hours.
Start Your DeepDiveFrequently Asked Questions
Is it illegal to Google someone?
No. Googling someone is completely legal. Search engines index publicly available information, and there is no law in the United States that prohibits searching for someone by name on Google or any other search engine. The information you find through a standard web search is public by definition.
Can I get in trouble for using a people search site?
Using a people search site for personal knowledge is legal. However, using the results to make decisions about employment, housing, credit, or insurance without following FCRA procedures is illegal. People search sites explicitly state their reports cannot be used for these regulated purposes.
Is it legal to look up someone's criminal record?
Yes. Criminal records are public records in the United States. You can search court records, state repositories, and sex offender registries freely. However, some states restrict how criminal records can be used in employment and housing decisions, and sealed or expunged records are not legally accessible.
When does looking someone up online become stalking?
Looking someone up becomes illegal when it is part of a pattern of behavior that causes the target to feel threatened or harassed. One-time searches are not stalking. But repeatedly researching someone, combined with unwanted contact, showing up at their locations, or monitoring their movements, can constitute cyberstalking under federal law (18 U.S.C. 2261A) and state stalking statutes.
Do people search sites notify the person you looked up?
No. People search sites like Spokeo, BeenVerified, TruthFinder, and intelligence services like DeepDive do not notify the person being searched. Your search is private. The subject will not receive any alert, email, or notification that their information was accessed.