Summary: Both children and adults can receive harassing or abusive email. Sadly there's no easy way to trace it back to a sender who doesn't want to be found.
My son has been receiving harassing e-mails that is sent to his yahoo account and on Facebook. How do I find out the IP and where and who they are coming from?
•
I think it's kind of frightening how often I get questions like this one.
The sad reality is that the answer for most people is very, very simple:
You don't.
So what can you do?
•
Each time I write on this topic I'm immediately flooded with even more requests similar to this one that indicate that folks have simply missed the point of the article. I don't mean to be rude or obnoxious, but I need to be excruciatingly clear at the outset:
|
You cannot trace the origin of email to an individual, an address or in most cases, even to a specific computer. If there's any hope at all, it requires the involvement of the police or other law enforcement. |
If the sender of an email does not want to be identified, and if the email does not clearly identify who it's from then there's no way for you as the recipient of that email to trace it back to the person that sent it.
And yes in many ways, to put it bluntly, that sucks. Anonymous email certainly has its uses, but harassing people shouldn't be one of them. And yet, here we are.
For true email, there are sometimes clues in the email headers that you typically don't see. In my earlier article How can I trace where email came from? I give a brief overview of what those headers look like and what information might be gleaned from them. (Applications like Facebook aren't really "true" email, and don't have these headers. As far as I can tell there's nothing available to message recipients on Facebook or other social media sites that could be used in a similar way to email headers.)
Using email headers you can sometimes determine the "name" of the computer sending the email, and its internet IP address. Many times the email is sent using web services like Hotmail or GMail, in which case that information doesn't apply to the user, but rather to Hotmail's or GMail's own servers. Sometimes the services will include the internet IP address of the machine that actually visited the web site to send the mail.
But even if you're "lucky" enough to get that information, that's still not enough.
In another earlier article, Can I get someone's name and address from their IP address? the answer is clearly "no", at least not without the help of law enforcement. An IP address actually tells you very little about the real world location of the machine (or machines!) that it represents. At best you can usually locate the ISP responsible for allocating that IP address to actual users.
But once you get that far, you'll need help.
And that's where law enforcement comes in. Their response will vary depending on the seriousness of the charge, how seriously they take these types of issues in general, their own expertise in the area and of course their own workload.
Based on my own experience with the sheer number of requests I get on this topic, I can only imagine that an already overworked justice system is going to be hard pressed to give you any satisfaction. Your best bet may, in fact, be to use methods unrelated to the email, such as your son's school's social structure and dynamics - perhaps with the aid of the staff there - to determine who might be responsible.
And at the risk of offending with redundancy, I have to reiterate:
|
You cannot trace the origin of email to an individual, an address or in most cases, even to a specific computer. If there's any hope at all, it requires the involvement of the police or other law enforcement. |
Related:
Ask Leo! - How can I trace where email came from?
Ask Leo! - Can I get someone's name and address from their IP address?
Ask Leo! - How do I figure out who owns an IP address?
Article C3333 - March 27, 2008
It has been years since I used Facebook but at one time you could not send a message to the user without being signed in yourself. If that is still the case sending a message to the folks who ride herd on the Acceptable Use Policy should result in some action.
Posted by: Dan Ullman at March 27, 2008 12:29 PMHi: I would suggest that families that wish to get involved in social networking sites such as Facebook or MySpace get a separate email address just for that purpose. That way if the email becomes offensive then close it and set up another. Also complain to the sites managers. We had a problem with MySpace when somebody set up an account in our name with false info. While I do not like the site, a number of relatives are on it so I set up a separate email account and then set up an account with no picture. I still get weird emails but it is manageable. Parents need to let their kids know that what they put out there can come back to them later.
Posted by: Margaret Louk at March 28, 2008 6:31 PMAll of Leo's comments are true enough, when it comes to a typical email sent by a typical person. But it gets worse if the person has some expertise. There are all sorts of ways to edit the headers of the emails that you send so they appear to come from a totally different IP address, different source email address, etc. So even if the recipient could trace the IP address, he can't be sure that what he reads in the header is true in the first place. Also, even for people without the expertise to do this kind of misdirection on their own, there are plenty of web-based forwarding services that will hide your identity for you, and many of them don't keep any records so police involvement will be useless. So it really is a long shot to hope to trace emails back to the source.
Posted by: Mike Williams at March 28, 2008 8:36 PMA simple solution is to change email address. Delete the old one, get a new one which does not include your name, and let only those from whom you wish to correspond know the new address. Also, use an address which has more than alphabet characters, such as knot232head45@isp.com
Posted by: Jake Smith at March 28, 2008 10:22 PMSo if someone lets say calls you dirty names or spreads your business around on facebook or myspace and they are not threatnign you but just causing you to look bad to others or make profiles of you but nothing bad then they can not be tracked?
06-Dec-2008