Cyberstalking and CFAA Overlap

Evidence Types in Stalking Cases

Cyberstalking and CFAA Overlap prosecutions rely heavily on electronic evidence: text messages, social-media posts and direct messages, email, location data, surveillance video, and phone records. The defense's foundation work in a cyberstalking allegation with potential federal CFAA exposure is rigorous review and authentication of every piece of evidence the State intends to use.

Counsel should request preservation letters and discovery for the complete communication record — not just the messages the State has highlighted. Selective excerpts often misrepresent the full course of communication. Where the defendant and complainant exchanged hundreds of messages, the prosecutor's curated selection of 10 to 20 messages may strip away context that supports the defense.

Cell-site location data, third-party application records (Snapchat, Instagram, WhatsApp), and ISP records are all subject to preservation deadlines that run quickly. Counsel should serve preservation letters within days of taking the case, and should issue subpoenas where the defense is entitled to do so. Late-preserved evidence may be permanently lost.

Protective Order Overlap

Cyberstalking and CFAA Overlap matters often coincide with civil protective-order proceedings under Texas Family Code Chapter 85 or Code of Criminal Procedure Chapter 7B. The protective-order hearing typically occurs within weeks of the filing — long before any criminal case proceeds to trial. The defense's approach to the protective-order hearing affects the criminal case in important ways.

For a cyberstalking allegation with potential federal CFAA exposure, statements made by the defendant at the protective-order hearing can be used in the criminal case. The protective-order hearing's evidentiary rules are more relaxed than the criminal trial's. The standard of proof is lower (preponderance vs. beyond reasonable doubt). The defendant may face the choice between testifying to defeat the protective order and preserving silence to protect the criminal defense.

Counsel should coordinate the protective-order defense with the criminal defense from the start. In some cases, agreeing to a limited protective order may be preferable to a contested hearing that creates a record harmful to the criminal case. In others, contesting the protective order vigorously may produce a no-finding outcome that supports the criminal defense at trial.

CFAA Application to Cyberstalking Conduct

Federal cyberstalking cases can involve overlapping Computer Fraud and Abuse Act (CFAA) charges under 18 U.S.C. §1030. Where the defendant accessed accounts, devices, or systems belonging to the complainant or used unauthorized methods to monitor or harass, CFAA exposure may attach to the stalking conduct.

The Supreme Court's decision in Van Buren v. United States, 593 U.S. 374 (2021), narrowed CFAA's "exceeds authorized access" clause. For cyberstalking cases involving employees, contractors, or others with some legitimate access, Van Buren may defeat CFAA charges based on misuse of authorized access.

Defense workflow examines whether the CFAA charge survives Van Buren. Where the defendant had authorized access to the systems or accounts at issue, the CFAA charge may not stand under the gates-up-or-down standard. The defendant's stalking conduct may still face other charges (federal stalking, state stalking), but the CFAA charge can be challenged.

Federal Stalking Under 18 U.S.C. §2261A

Federal stalking under 18 U.S.C. §2261A reaches conduct involving interstate facilities. The statute applies where the defendant traveled in interstate commerce, used the mail, used interstate or foreign facilities (including the internet), or engaged in conduct affecting interstate commerce, with intent to kill, injure, harass, or intimidate the complainant.

The internet-based subsection (2261A(2)(B)) is most relevant to cyberstalking cases. Defendants who used online platforms, messaging services, or social media to engage in stalking conduct can be prosecuted federally under this subsection.

The mens rea element is significant. The defendant must have intent to harass, intimidate, kill, or injure. Mere annoyance, embarrassment, or unwanted contact may not satisfy the element. Defense workflow examines the State's evidence of specific intent.

Federal stalking penalties scale with the type of conduct and any resulting injury. The base offense is up to five years; offenses involving death of the victim carry life imprisonment. Defense workflow brief the specific penalty exposure for the alleged conduct.

State-Federal Prosecution Coordination

Some cyberstalking conduct can be prosecuted by both state and federal authorities. Dual sovereignty allows both to prosecute the same conduct without Double Jeopardy issues. Defense workflow examines whether parallel state and federal investigations exist and how to address each.

The Petite policy at the U.S. Attorney's Office and informal coordination with the District Attorney's Office typically result in one prosecution. The defense should ask early whether a parallel investigation exists and whether the matter has been declined by one sovereign in favor of the other.

Where both prosecutions proceed, sequencing matters. A federal plea bar will not cover state conduct, and vice versa. Counsel should negotiate global resolution where possible with explicit waivers in writing.

Defense Strategy in Cyberstalking Cases

Defense workflow in cyberstalking cases involves several recurring tasks. Documentary preservation is critical: text messages, social-media exchanges, account logs, and device data may be lost through automated retention policies. Defense workflow includes immediate preservation letters and follow-up.

The relationship history is often the central context. Where the parties had a romantic, social, or professional relationship, the prior relationship affects how the conduct should be viewed. Defense workflow develops the relationship history thoroughly.

Identification can be contested. Where the State's evidence relies on IP addresses, account credentials, or other digital indicators, the defense can examine whether the indicators reliably identify the defendant. Multi-user devices, shared accounts, and account compromises all create identification disputes.

Mens rea is often the strongest defense. The State must prove specific intent to harm, harass, or intimidate. Where the defendant's conduct was motivated by other purposes (legitimate communication, response to provocation, attempt to resolve disputes), the intent element may not be satisfied.

Practical Checklist

• Document everything early. Communications, records, and witness contact information lose value as time passes. Preserve them at the start of the case.
• Identify all parallel proceedings. Criminal, administrative, civil, and regulatory tracks often run in parallel. A statement in one becomes evidence in another. Map the full picture before any disclosure.
• Calendar every deadline. Filing deadlines, response deadlines, discovery deadlines, and hearing dates all have consequences. Missing a deadline can foreclose defenses that the facts otherwise support.
• Build the mitigation package early. Witness letters, treatment records, employment verification, and character references take time to gather. Counsel should begin building the package at the first consultation, not as the hearing approaches.
• Coordinate counsel across forums. Where the matter implicates multiple proceedings, having coordinated counsel (whether one firm or multiple firms in close communication) avoids the strategic errors that inconsistent representation creates.
• Understand the public-record dimension. Many dispositions create searchable records that follow the licensee, defendant, or respondent for years. The decision to contest versus resolve must account for the public visibility of each path.

For a confidential evaluation of your matter, call L&L Law Group at (972) 370-5060 or email info@landllawgroup.com. Initial consultations are free.