Helping people with computers... one answer at a time.

Both children and adults can receive harassing or abusive email. Sadly there's no easy way to trace it back to a sender who doesn't want to be found.

My son has been receiving harassing e-mails that is sent to his yahoo account and on Facebook. How do I find out the IP and where and who they are coming from?

Whoops. If you're here via the link in the April 5th newsletter, that link was incorrect - it should be: Why do some programs say to "disable anti-virus" before installing, and should I turn it on again after?

Sorry for the confusion.

I think it's kind of frightening how often I get questions like this one.

The sad reality is that the answer for most people is very, very simple:

You don't.

So what can you do?

Each time I write on this topic I'm immediately flooded with even more requests similar to this one that indicate that folks have simply missed the point of the article. I don't mean to be rude or obnoxious, but I need to be excruciatingly clear at the outset:

You cannot trace the origin of email to an individual, an address or in most cases, even to a specific computer. If there's any hope at all, it requires the involvement of the police or other law enforcement.

If the sender of an email does not want to be identified, and if the email does not clearly identify who it's from then there's no way for you as the recipient of that email to trace it back to the person that sent it.

And yes in many ways, to put it bluntly, that sucks. Anonymous email certainly has its uses, but harassing people shouldn't be one of them. And yet, here we are.

"Your best bet may, in fact, be to use methods unrelated to the email..."

For true email, there are sometimes clues in the email headers that you typically don't see. In my earlier article How can I trace where email came from? I give a brief overview of what those headers look like and what information might be gleaned from them. (Applications like Facebook aren't really "true" email, and don't have these headers. As far as I can tell there's nothing available to message recipients on Facebook or other social media sites that could be used in a similar way to email headers.)

Using email headers you can sometimes determine the "name" of the computer sending the email, and its internet IP address. Many times the email is sent using web services like Hotmail or GMail, in which case that information doesn't apply to the user, but rather to Hotmail's or GMail's own servers. Sometimes the services will include the internet IP address of the machine that actually visited the web site to send the mail.

But even if you're "lucky" enough to get that information, that's still not enough.

In another earlier article, Can I get someone's name and address from their IP address? the answer is clearly "no", at least not without the help of law enforcement. An IP address actually tells you very little about the real world location of the machine (or machines!) that it represents. At best you can usually locate the ISP responsible for allocating that IP address to actual users.

But once you get that far, you'll need help.

And that's where law enforcement comes in. Their response will vary depending on the seriousness of the charge, how seriously they take these types of issues in general, their own expertise in the area and of course their own workload.

Based on my own experience with the sheer number of requests I get on this topic, I can only imagine that an already overworked justice system is going to be hard pressed to give you any satisfaction. Your best bet may, in fact, be to use methods unrelated to the email, such as your son's school's social structure and dynamics - perhaps with the aid of the staff there - to determine who might be responsible.

And at the risk of offending with redundancy, I have to reiterate:

You cannot trace the origin of email to an individual, an address or in most cases, even to a specific computer. If there's any hope at all, it requires the involvement of the police or other law enforcement.

Article C3333 - March 27, 2008

Leo Leo A. Notenboom has been playing with computers since he was required to take a programming class in 1976. An 18 year career as a programmer at Microsoft soon followed. After "retiring" in 2001, Leo started Ask Leo! in 2003 as a place for answers to common computer and technical questions. More about Leo.

Not what you needed?

Recent Comments
12 Comments

I have been getting emails of harrasment for mens enhancement drugs (I'm 14 years old) by what I think are friends (or people I know) at school. I email a bunch of people at school, so it wouldn't be hard to find out my email if you went to my school. I recently broke up kinda harshly so it could be my ex sending them, or one of her friends. Could I go to the authorities with this? I just really want to bust whoever is doing this.

Sounds more like typical spam. If it is as you describe it's possible that the authorities would be an appropriate place to go, I just don't know how much time and effort they'd be able to put into it. In your shoes I'd probably delete it and ignore it.
Leo
07-Nov-2010

Posted by: Grant at November 6, 2010 10:59 AM

Love your stuff Leo!

I understand that I can't track an email and ID the individual nor the address-----But can I least tell what state (ex: Ohio) the email originated from? Even if they are using an anonomous email service...can I at least figure out they state they are in? or no? Thank you

Not reliably, no. Especially if they're using an anonymizer.
Leo
17-May-2011

Posted by: Ryan at May 16, 2011 9:58 AM

My ex-wife is not allowed to email my work (by court order), so now her current husband sends harrassing emails on a daily basis. Is there a way to deteremine if she was involved in the email prior to it being sent? They both have yahoo accounts.

Any insight would be greatly appreciated.

Posted by: Kelly at May 18, 2011 9:22 AM

Someone wrote me an usual email and I think its my ex sending it from a fake email address. Here is the trick at the end it reads "Sent from my HTC on the Now Network from Sprint."

He send it from a hotmail to my aol account. Can there be something in email header info, I don't know.


Is there any way that I can find out the telephone number its being send from?

Thanks

Posted by: Luis at October 23, 2011 7:51 PM

@Luis
The only thing that message says is that someone with an HTC phone using the Sprint Network sent you the message. That's probably all you ever would be able to find out.

Posted by: Mark J at October 24, 2011 12:48 AM
Post a comment on "How do I find out who's sending harassing email?":





Remember Me?

(You may use HTML tags for style)

Before commenting, please...

  • READ THE ARTICLE. A comment that shows you didn't will be deleted and ignored.

  • Comment only on the article. Use the search box at the top of the page if you have a question about something else.

  • NO PERSONAL INFORMATION in the comment. No email addresses. No phone numbers. No physical addresses.

  • Anything that looks the least bit like spam will be deleted. Links to unrelated sites or links that appear to be primarily promotional will be deleted, or the comment will be deleted.

  • Don't ask me to recover lost passwords or hacked accounts. I can't. Those comments will be deleted.

  • I can't respond to every comment. And I can't vouch for the accuracy of others who do.

Please wait. Your comment is being processed ...