How to Unmask an Anonymous Online Poster in Illinois

If an anonymous account is posting false statements about you or your business, Illinois law gives you ways to learn who is behind it, but you have to ask a court and meet a standard. Jonathan Phillips has unmasked anonymous defamers and the operators of deepfake ad campaigns, in Illinois and federal courts. Updated October 2026.

At a glance

  • Illinois pre-suit route: A verified petition under Illinois Supreme Court Rule 224 for discovery before suit, to identify a person who may be responsible in damages [verify rule text]

  • Other route: File a John Doe lawsuit, then subpoena the platform or internet provider

  • What you get: Usually the identity behind the account: name, email, IP address, subscriber records. Not necessarily a complete answer, since accounts can be false or shared.

  • Time pressure: Platforms and internet providers keep logs for limited periods. Send a preservation request early.

  • Platforms are not the target. Section 230 protects them from liability, but they can be subpoenaed for information about the poster.

How does a Rule 224 petition work?

Rule 224 lets a person file a petition before suing to identify someone who may be responsible in damages. In an anonymous defamation case, Illinois's Third District, the appellate district that includes Peoria, set the process in Maxon v. Ottawa Publishing Co., No. 3-08-0805 (Ill. App. Ct. 3d Dist. June 1, 2010) [verify citation and later history]. The court required that the petition:

  • Be verified, meaning sworn

  • State with particularity facts that would make out a defamation claim

  • Seek only the identity of the poster

  • Be heard at a hearing where the court decides whether the petition states a claim

The court declined to add the stricter summary-judgment-style test some other jurisdictions use. Check whether later cases have changed this before you file.

Rule 224 or a John Doe suit?

  • Rule 224 petition: Faster and cheaper; the case is about identity only. Best when the post is clearly factual and false, and you want the name before deciding whether to sue.

  • John Doe suit: The complaint is filed against an unnamed defendant, and you subpoena the platform for identity. Best when you want the claim on file and a court order preserving the evidence.

  • Federal court: A federal John Doe suit needs permission to subpoena before the usual discovery start, and courts apply their own tests for anonymous speakers.

What will a platform or internet provider give me?

  • A subpoena or court order is required. Platforms generally will not release user data on request.

  • They notify the user. Many send notice to the poster so the poster can object. See the anonymous speaker page.

  • What they hold varies. Often an email address, IP address with time stamps, and sign-up details. Sometimes only an IP address, which means a second subpoena to the internet provider to get a subscriber name. See how that process works on the Strike 3 page.

  • Retention is limited. IP logs can be kept for weeks to months, so a preservation letter goes out first.

Is there a copyright shortcut?

Only if the post copies your own copyrighted work. A DMCA subpoena under 17 U.S.C. § 512(h) can be issued by a federal court clerk to identify an infringer without a lawsuit. It does not apply to defamation alone.

What should I do in the first week?

  1. Capture every post with URL, date, and the account's profile page.

  2. Send a preservation letter to the platform and, if known, the internet provider.

  3. Do not message the poster or try to out them yourself; self-help unmasking can backfire.

  4. Write down who could plausibly be behind it and why; it helps the court and narrows the subpoenas.

  5. Decide whether you want identity only or an eventual claim, and plan the one-year limitations period for defamation.

What are the risks?

  • The poster can fight back. Courts take anonymous speech seriously, and a weak petition can be denied.

  • Anti-SLAPP motions. Illinois's Citizen Participation Act allows early dismissal and fee awards against plaintiffs whose suits target protected speech. A careful petition, built on verifiable facts of falsity, matters.

  • The answer may be wrong. An IP address or email identifies an account, not necessarily the person typing.

How I handle these

Jonathan has unmasked anonymous defamers and the operators of deepfake advertising campaigns, which produced large settlements and takedowns. He has handled [N] unmasking matters. He does not promise a particular identity or outcome, and he declines petitions that cannot be supported by verifiable facts. Flat fees and payment plans are available for many Rule 224 petitions. Prior results do not guarantee a similar outcome.

Frequently asked questions

Do I have to sue to find out who posted it? No. In Illinois you can file a Rule 224 petition first, but it must show facts supporting a defamation claim.

Will the platform just tell me? No. Platforms generally require a subpoena or court order, and many notify the poster before responding.

What if the poster used a VPN or fake email? The records may lead nowhere, or only to a service. Some leads can still be followed through other accounts and details.

Can I do this for a bad review I just dislike? Courts will not unmask for opinion or true statements. The petition has to describe false statements of fact.

What does it cost? Flat fees and payment plans are available for many pre-suit petitions.

Jonathan L.A. Phillips, Brown, Hay & Stephens, LLP. Part of Internet Law. Last reviewed October 2026. Prior results do not guarantee a similar outcome.