You can report someone to the police for going through your phone without permission, and you can sue them in civil court, but pressing charges if someone goes through your phone is not something you personally do. That decision belongs to a prosecutor. You report the conduct, hand over your evidence, and cooperate; a district attorney reviews the case and decides whether to file criminal charges. If prosecutors pass on it, the criminal path ends there. The civil lawsuit, on the other hand, is yours to control from start to finish, and it’s often the more realistic route.
Which path makes sense depends on how the person got in, what they did once they were there, and your relationship to them.
Why You Can’t Directly “Press Charges”
In criminal law, private citizens don’t file charges. You report a crime; a prosecutor charges it. You can push, you can provide evidence, you can make clear you want prosecution, but you can’t force a district attorney to move. Most phone-snooping cases involve people who know each other, and prosecutors weigh the severity of the intrusion, the strength of the evidence, and the relationship context before spending resources on a case. A one-time peek by a spouse or roommate rarely clears that bar. Installing spyware, draining accounts, copying photos for leverage, or a pattern of surveillance is a different story.
Criminal Laws That Can Apply
Several federal statutes cover unauthorized access to a phone, and every state has its own computer crime law. The right fit depends on exactly what the person did.
Computer Fraud and Abuse Act
The CFAA makes it a federal crime to intentionally access a computer without authorization or to exceed the authorization you were given. The statute’s definition of “computer” is broad enough to cover any smartphone. A first offense for accessing a protected computer and obtaining information without authorization carries up to one year in prison and a fine. That maximum jumps to five years if the access was for commercial gain, to further another crime, or if the information’s value exceeds $5,000.
The CFAA was written with hackers in mind, and federal prosecutors typically don’t apply it to domestic snooping unless there’s real financial harm, identity theft, or a pattern of conduct behind it.
Stored Communications Act
The Stored Communications Act is more directly on point when someone opens your email app, reads messages in a cloud account, or accesses communications held by a service provider. It prohibits intentionally accessing a facility that provides electronic communication service without authorization. A first offense carries up to five years in prison if the access was for commercial gain, malicious destruction, or to further another crime, and up to one year otherwise.
Federal Wiretap Act
The Wiretap Act covers a different scenario: intercepting communications while they’re in transit. This is the statute that reaches spyware or monitoring software that captures your calls, texts, or emails as they arrive. Intentional interception of electronic communications is a felony punishable by up to five years in prison.
The distinction matters. Reading old text messages sitting in your inbox tends to be a Stored Communications Act or CFAA issue. Secretly installing an app that forwards your incoming messages in real time is wiretapping.
State Computer Crime and Wiretapping Laws
Every state has a computer crime or unauthorized access statute, and state laws often reach conduct federal prosecutors wouldn’t touch. Most classify a first offense as a misdemeanor, with felony exposure for repeat conduct or significant harm. State wiretapping laws add another layer, and they vary in an important way: some require all parties to a conversation to consent before it can be recorded or intercepted, while others require only one party’s consent. Check your state’s statutes before assuming what applies.
How the Relationship Changes the Analysis
Most people asking this question aren’t dealing with a stranger. They’re dealing with a partner, an ex, a parent, or a roommate. The legal analysis shifts with the relationship.
Spouses and Partners
Marriage does not give someone legal permission to access your phone, read your emails, or install monitoring software on your device. Federal privacy laws apply between spouses the same way they apply between strangers. Courts in divorce cases have found that unauthorized access to a spouse’s electronic communications can create civil liability and, in some cases, criminal exposure.
The complication is authorization. If you voluntarily gave your partner your passcode and never revoked it, arguing that their access was “unauthorized” becomes harder. Shared passwords have limits, though. If you changed your password and they guessed the new one or used recovery methods to get in, that access is much more clearly unauthorized. And installing hidden spyware to intercept communications crosses a separate line under wiretapping laws regardless of whether the passcode was shared.
In practice, prosecutors rarely pursue charges for a one-time look at a spouse’s phone during a fight. Criminal exposure gets real when the snooping involves tracking or monitoring software, access to financial accounts, copying private photos for leverage, or using what was found for harassment or blackmail.
Parents and Minor Children
Parents generally have a legal right to monitor a minor child’s phone. Minors don’t have the same privacy rights as adults inside the family home, and parental oversight of a child’s digital activity is widely considered lawful. It gets more complicated with older teenagers, and it gets more complicated when third parties are recorded. A parent secretly recording their teenager’s phone calls with friends can implicate state wiretapping laws that protect the other people on the call, even if the parent controls the device.
Suing on Your Own
You don’t need a prosecutor to sue someone who went through your phone. A civil lawsuit puts you in control, and the burden of proof is lower than in a criminal case.
Federal Statutory Claims
The CFAA has a private right of action. One catch: the civil provision requires you to show at least $5,000 in aggregate loss over a one-year period, which can include the cost of responding to the intrusion, not just money directly stolen.
The Wiretap Act’s civil remedy is more generous. If someone intercepted your communications, you can recover actual damages plus any profits the violator made, or statutory damages of $100 per day of violation or $10,000, whichever is greater. Punitive damages and reasonable attorney’s fees are also available.
The Stored Communications Act allows civil suits as well.
State Privacy Claims
The common-law tort of intrusion upon seclusion is available in most states. You need to show that the intrusion into your private affairs was intentional and would be highly offensive to a reasonable person. A stranger hacking your phone clearly meets that standard. A spouse glancing at a notification probably doesn’t. Most cases sit somewhere in between, and the outcome turns on how the access happened and what was viewed.
If the unauthorized access led to someone sharing your private information (posting your photos, forwarding your messages, disclosing personal details), you may also have a claim for public disclosure of private facts. State privacy statutes can add further options, sometimes including statutory damages that don’t require proof of financial loss. Filing fees for civil privacy lawsuits in state courts typically range from roughly $20 to over $400 depending on the jurisdiction and the amount in controversy.
Preserving Evidence
These cases usually come down to proving that someone actually accessed your device without permission, and that takes more than your suspicion.
Start capturing evidence as soon as you suspect unauthorized access. Screenshot anything unusual: messages marked as read that you didn’t open, apps rearranged, settings changed, unfamiliar login notifications, sent messages you didn’t write. Note dates and times. If the person admitted going through your phone in a text, email, or voicemail, preserve it. An admission is the single most powerful piece of evidence in these cases.
Don’t alter your phone after discovering the intrusion. No deleting apps, clearing caches, or factory resetting. Changes can destroy the digital footprints that prove someone else was in the device.
A digital forensics expert can extract evidence a casual user can’t see: device IDs, session timestamps, Wi-Fi connection logs, and interaction records for specific apps. These artifacts can show your phone was used at a time or place inconsistent with your own activity. Forensic experts typically charge between $100 and $500 per hour, and their testimony can carry real weight if a case goes to court.
Witnesses matter too. If anyone saw the person going through your phone, or heard them talk about it, written statements from those people corroborate your account.
Filing a Police Report
Report the unauthorized access to your local police department and bring your evidence with you. Be specific about what was accessed and how you know. The report creates an official record that strengthens both any criminal investigation and any civil suit you later file. If the conduct crossed state lines (remote account access, remote installation of monitoring software), you can also file a complaint with the FBI’s Internet Crime Complaint Center, which may refer the matter to federal, state, or local investigators.
Filing Deadlines
Every claim has a deadline, and missing it kills the case no matter how strong the evidence.
For civil claims under the CFAA, you have two years from the date of unauthorized access or two years from when you discovered the resulting damage, whichever is later. The Stored Communications Act gives you two years from when you first discovered or reasonably should have discovered the violation. Civil claims under the Wiretap Act follow a two-year window from the date of the violation or its discovery.
Criminal deadlines vary. Federal prosecutors typically have five years to bring charges for most felony computer crimes, though the window can vary by offense. State deadlines differ by jurisdiction and offense level, with misdemeanors often carrying shorter windows than felonies. You can’t control the criminal timeline, but reporting promptly gives prosecutors the most room to work.
What Actually Gets Pursued
The law gives you options; how these cases play out is a separate question. Police departments are stretched thin, and a report about a boyfriend scrolling through your Instagram DMs is unlikely to trigger a serious investigation. Prosecutors reserve computer crime charges for cases involving financial harm, stalking, harassment, identity theft, or repeated invasions of privacy. A single act of snooping by someone in your household, while potentially illegal, rarely results in criminal charges.
Civil suits are more within your control, but they cost money and take time. The CFAA’s $5,000 loss threshold can be a barrier when the harm was emotional rather than financial. The Wiretap Act’s statutory damages are more accessible if interception occurred, because you don’t need to prove a specific dollar loss. State privacy torts don’t have statutory floors, but you have to show the intrusion was serious enough to offend a reasonable person.
Where these cases gain real traction is when the snooping escalated: intimate photos copied, financial information used for fraud, persistent spyware installed, private communications shared to humiliate you, or a pattern of surveillance. Those facts turn a nuisance into a case that prosecutors and civil courts take seriously.