Is It Legal to Search Someone by Username?
Public data is fair to read — but reading, collecting and acting on it are three different things. Where the lines actually fall.
By AliaScan · Updated · 8 min read
The short answer
Looking up a username to find publicly visible profiles is, in most jurisdictions, legal. You are viewing information that the platforms and their users have already chosen to make public — the same information anyone could see by visiting each profile directly. Aggregating public data doesn't, by itself, make it illegal.
This is general information, not legal advice. Laws differ by country and by situation, and if you are acting in a professional capacity — hiring, tenant screening, lending, investigations — specific statutes apply that do not apply to a private individual checking a dating match. When in doubt, consult a lawyer in your jurisdiction.
Three separate questions people collapse into one
Almost all confusion here comes from treating 'is username search legal' as a single question. It is three, and they have different answers.
Access — how you obtained the data. Reading a public page is not unauthorised access. Logging into someone else's account, guessing a password, or defeating a technical restriction is a different act, and that is where criminal statutes live. In the US, Van Buren v. United States (2021) narrowed the Computer Fraud and Abuse Act so that misusing data you were allowed to see is not 'exceeding authorised access', and the Ninth Circuit's hiQ Labs v. LinkedIn line held that scraping public, login-free data does not violate the CFAA. Public pages are not a computer-crime problem; accounts are.
Collection — whether gathering and storing the data engages data protection law. For a one-off personal lookup, generally not. For systematic or commercial processing, particularly in the EU and UK, it does.
Use — what you do with the result. This is where nearly all real legal exposure sits, and the fact that the underlying data was public is no defence.
Where legality depends on how you use it
The act of searching is rarely the problem; the use of the results is. The same lookup can be entirely lawful for personal safety and criminal when it feeds a course of conduct against someone.
- •Employment, credit, insurance or tenant decisions in the US fall under the Fair Credit Reporting Act. It requires written disclosure, the subject's consent, and an adverse-action process — and general search tools are not consumer reporting agencies and are not authorised to support those decisions. Most explicitly say so in their terms.
- •Stalking and harassment are illegal regardless of how public the source data was. In the US, 18 U.S.C. § 2261A covers interstate stalking including conduct carried out online, and every state has its own statute; in the UK, the Protection from Harassment Act 1997 covers a course of conduct amounting to harassment. Compiling public data about someone is exactly the evidence prosecutors use to establish that course of conduct.
Outside the US: GDPR and the household exemption
In the EU and UK, personal data is protected regardless of whether it is public, which is a genuine difference from the US framing. What saves ordinary personal use is Article 2(2)(c) of the GDPR — the household exemption — which takes purely personal or household activity outside the regulation's scope. Checking whether a person you're about to meet is who they say they are sits comfortably there.
It stops applying the moment the activity becomes professional, systematic or public-facing. If you are compiling profiles as part of a business, screening candidates, investigating for a client, or publishing what you find, you are a controller with the full set of obligations: a lawful basis (usually legitimate interests under Article 6(1)(f), which requires a documented balancing test), transparency duties under Articles 13 and 14, and the subject's rights of access and erasure. The UK's Data Protection Act 2018 mirrors this; Canada's PIPEDA and Australia's Privacy Act 1988 apply comparable rules commercially.
The ethical line most people should hold
Legal and ethical aren't the same thing, and the ethical line is the more useful one because it is stricter and easier to apply. Use a username search to protect yourself and verify identity, not to surveil, pressure or expose someone. A verification search has a stopping point; searching that never ends and expands to a person's friends and family has become monitoring.
Legitimate uses are easy to describe: checking whether a dating match is who they claim before you meet, confirming a seller has an established presence before you send money, verifying a creator's channels, or auditing your own footprint. Each is about a decision you are about to make regarding your own safety.
When to stop searching entirely
We take a firm position on this, and it is not a disclaimer: this tool is not for tracking people. Some searches should not happen at all, and no legal analysis makes them acceptable.
- •An ex-partner, or anyone who has asked you not to contact them, blocked you, or obtained a protective order. Locating someone who has withdrawn from you is the paradigm case of stalking, and a documented pattern of lookups is evidence against you.
- •A minor you have no responsibility for. Parents checking their own child's public footprint is a legitimate case with its own guide; anyone else searching for a child is not.
- •Someone in a vulnerable situation — a domestic abuse survivor, a person who has changed their name, a pseudonymous account in a recovery or LGBTQ+ community. Collapsing that separation can be dangerous in a way that is very hard to undo.
How AliaScan stays on the right side of the line
AliaScan only reads publicly available profile pages. It does not log into accounts, defeat privacy settings, use credentials, or expose data a platform has kept private, and it holds no database of people — every result is a live check of a page anyone could open. It does not return email addresses, phone numbers or IP addresses, because those are not on the public pages it reads.
It is not a consumer reporting agency, and results must not be used for employment, credit, insurance or tenant decisions. It is built for personal-safety and educational use, and we don't retain who you searched for. That design keeps the tool in the public-data lane by construction — but responsibility for what you do with a result is, unavoidably, yours.
Put this into practice — run a free username scan across 400+ platforms right now.
Search a username →Frequently asked questions
Is it illegal to look someone up online?+
Generally no — viewing publicly available profiles is legal, and US case law including Van Buren v. United States and the hiQ v. LinkedIn line has confirmed that accessing public pages isn't unauthorised access under the Computer Fraud and Abuse Act. It becomes illegal when the results feed harassment or stalking, or when they're used for regulated decisions such as employment screening without following the FCRA.
Can I use a username search to check a job applicant?+
Not with a general search tool. Using search results to make hiring decisions engages the Fair Credit Reporting Act in the US, which requires written disclosure, applicant consent, and a formal adverse-action process — and requires the provider to be a consumer reporting agency, which tools like AliaScan explicitly are not. Employers should use a licensed background screening provider and take HR and legal advice.
Does searching a public profile violate privacy laws?+
Reading a single public profile for personal reasons does not — in the EU and UK the GDPR's household exemption in Article 2(2)(c) takes purely personal activity outside the regulation. Systematic or commercial processing is different: it makes you a data controller, requiring a lawful basis such as legitimate interests with a documented balancing test, plus transparency and subject-rights obligations.
Is it legal to search my partner's username?+
Searching public profiles is legal. Logging into their accounts or reading their messages without permission is not — that's unauthorised access under the CFAA and state equivalents in the US, or the Computer Misuse Act in the UK. Installing monitoring software on their device is more serious still, with several jurisdictions now criminalising stalkerware specifically, and evidence obtained that way is generally unusable in legal proceedings and can be turned against you.