Can you find out who is behind an anonymous infringing account?

Anonymous accounts are a large part of online infringement: a handle, a stolen photo as the avatar, and no way to send a letter or name a defendant. Our internet law practice page explains why identifying an operator is sometimes worth it and sometimes is not. This page sets out the actual process for unmasking an account, what the provider has to give you, where the process stops working, and what to do with a name once you have one.

How a DMCA subpoena works, step by step

1. Confirm the claim is copyright. The subpoena exists to identify "an alleged infringer" of a copyright, and the declaration you sign limits use of the information to protecting rights under the Copyright Act (17 U.S.C. 512(h)(2)(C)).
2. Send a valid takedown notice. The request must include a copy of a notification described in 512(c)(3)(A), sent to the provider's designated agent. Our page on DMCA takedown notice requirements lists the six elements.
3. Prepare three documents. Under 512(h)(2) you file a copy of that notice, a proposed subpoena, and a sworn declaration that the purpose is to obtain the identity of an alleged infringer and that the information will only be used to protect rights under title 17.
4. File with a clerk. The request goes to "the clerk of any United States district court" (512(h)(1)). No lawsuit is needed.
5. The clerk issues it. If the notice satisfies 512(c)(3)(A), the proposed subpoena is in proper form and the declaration is properly executed, the clerk "shall expeditiously issue and sign" it and return it to you for delivery (512(h)(4)).
6. Serve the provider. Issuance, service and enforcement follow the Federal Rules of Civil Procedure for a subpoena to produce documents "to the greatest extent practicable" (512(h)(6)). Under Rule 45, any nonparty who is at least 18 may serve it by delivering a copy (45(b)(1)).
7. The provider discloses. On receiving the subpoena, the provider "shall expeditiously disclose" the information required, regardless of whether it responds to the takedown notice itself (512(h)(5)).

The statute gives no fixed number of days for the clerk or the provider. The subpoena sets a compliance date, and Rule 45(d)(3)(A)(i) requires a court to quash a subpoena that "fails to allow a reasonable time to comply," so build in a realistic window.

Who does what, and what do you actually get?

The provider must disclose "information sufficient to identify the alleged infringer of the material described in the notification to the extent such information is available to the service provider" (512(h)(3)). That last clause matters. A provider can only produce what it collected and kept, which may be an email address, account details or connection records rather than a verified name.

Court fees vary by district, so ask the clerk which applies. As of October 4, 2026, the Northern District of Georgia's fee page lists $52 for filing or indexing any paper not in a case for which a filing fee has been paid, and $405 to file a civil case. Our page on copyright and trademark lawsuits in Atlanta federal court covers that clerk's office and its rules.

When does a DMCA subpoena not work?

The Copyright Office's May 2020 report on section 512 found that 512(h) "has proven to be little-used by rightsholders," in part because of how restrictively courts have read it and in part because the information obtained "is often of little use." Its account of the case law shows four recurring limits.

• Internet access providers. The D.C. Circuit held in Recording Industry Association of America v. Verizon Internet Services (2003) that a subpoena may issue only to a provider storing the infringing material, because the request must attach a takedown notice for material that can be removed. The report describes later courts following that reasoning, including the Eighth Circuit in In re Charter Communications (2005) and the Northern District of Georgia in In re Subpoena Issued to Birch Communications (2015).
• Material already gone. Some courts, the report says, have read the link to 512(c)(3)(A) as limiting a subpoena to ongoing infringement, as in Maximized Living v. Google (N.D. Cal. 2011).
• Motions to quash. Account holders have challenged subpoenas, and courts have weighed the owner's need against the user's First Amendment and privacy interests. The report lists factors from Sony Music Entertainment v. Does 1 to 40 (S.D.N.Y. 2004), including a concrete showing of a claim, the specificity of the request and the user's expectation of privacy.
• Data that no longer exists. Rightsholders told the Office that providers may have deleted their logs by the time a subpoena arrives, and that what they receive is often inaccurate.

The Office recommended that Congress consider clarifying 512(h), particularly for conduit providers. As of October 4, 2026, the text of 512(h) is unchanged since enactment.

What if the claim is not copyright, or 512(h) does not reach?

The usual alternative is a lawsuit against an unnamed "John Doe" defendant, followed by a request for permission to subpoena the provider early. Discovery normally waits until the parties confer under Rule 26(f), but Rule 26(d)(1) allows it sooner "by court order." The Office's report notes that owners seeking the identity of file-sharing users commonly file John Doe suits and request subpoenas to internet providers under Rules 26(d)(1) and 45.

This route works for trademark and impersonation claims too, which 512(h) does not cover. Our page on what law applies when someone impersonates your business explains those claims. It costs more than a clerk's subpoena: a copyright suit over a U.S. work needs a registration first (17 U.S.C. 411(a)), and once the defendant is named, Rule 4(m) requires service within 90 days after the complaint is filed unless the court extends the time for good cause. If the account is posting a sexually explicit deepfake of you, our page on getting a deepfake intimate image taken down covers removal routes that do not depend on copyright.

What changes the answer

• What the provider does. "Service provider" in 512(k)(1)(B) is broad, but the case law the report describes ties 512(h) to providers that host or link to material that can be taken down.
• Where the provider is. A subpoena may be served anywhere in the United States (FRCP 45(b)(2)), and production can be required at a place within 100 miles of where the provider resides, is employed or regularly transacts business (45(c)(2)(A)). Rule 45(b)(3) points to 28 U.S.C. 1783 for U.S. nationals and residents abroad.
• Which court decides disputes. You may file with any district clerk, but motions to quash go to the court where compliance is required, which may transfer them to the issuing court only with consent or in exceptional circumstances (45(d)(3), 45(f)).
• The quality of your notice. The clerk issues the subpoena only if the notice satisfies 512(c)(3)(A), so a gap in the notice can stop the request.
• Pressure on the account. If the account keeps returning after takedowns, the platform's own termination policy is a parallel lever, covered on our page on whether platforms must ban repeat infringers.
• Timing. A copyright action must be commenced within three years after the claim accrued (17 U.S.C. 507(b)), and an unmasking effort that stalls uses up that time.

A worked example

Common mistakes

• Using 512(h) for a trademark or defamation problem. The declaration ties the subpoena to copyright; other claims need a lawsuit.
• Targeting the internet provider of a downloader. Courts have largely held that 512(h) does not reach providers that only transmit data.
• Filing with a weak notice. The clerk checks the notice against 512(c)(3)(A); a missing element can sink the request.
• Waiting months. Logs may be deleted, and some courts require the infringement to be ongoing.
• Overreaching in the subpoena. Asking for more than identifying information invites objections and a motion to quash.
• Using the identity for something else. You swear it will be used only to protect rights under the Copyright Act.

What to do this week

1. Capture every infringing page with its URL and date, and note the account handle and any account number.
2. Confirm the claim is copyright and that you own, or are authorized for, the works copied.
3. Find the provider's designated agent in the Copyright Office directory and send a complete notice.
4. Draft the proposed subpoena narrowly, asking only for information sufficient to identify the account holder.
5. Ask the clerk's office which fee and filing method apply to a 512(h) request.
6. Register the works if you have not, so a lawsuit stays available once you have a name.

Frequently asked questions

Do I have to file a lawsuit to get a 512(h) subpoena?

No. The request is filed with a district court clerk, who issues the subpoena if the papers are in order. That is the main difference from a John Doe suit, where a judge must authorize early discovery.

Can the provider refuse?

It can object in writing within the Rule 45 deadline or move to quash or modify, and the account holder may also challenge it. A person who, having been served, fails without adequate excuse to obey can be held in contempt (FRCP 45(g)).

Do I need a registered copyright to ask?

Section 512(h) does not require one. You need registration, or a refusal, before suing over a U.S. work, so registering early keeps the next step open; our page on registration cost and processing time compares the options.

Will I get a real name and address?

Only if the provider has them. The statute requires disclosure only to the extent the information is available to the provider, and the Office's report records complaints that subpoenaed information is often inaccurate.

What can I do once I know who it is?

Most owners start with a demand letter, which our post on cease and desist letters explains. For smaller claims the Copyright Claims Board caps recovery at $30,000 per proceeding. What a court can award is covered on our page on copyright infringement damages.

What if the account holder files a counter-notice instead?

A counter-notice must include the subscriber's name, address and telephone number and consent to federal court jurisdiction (512(g)(3)(D)), which can identify the person without a subpoena. Our page on what happens after a DMCA counter-notice explains the 10 to 14 business day deadline that follows.

Zala IP Law helps copyright owners prepare takedown notices and 512(h) subpoena requests and decide what to do once an infringer is identified, and Shreepal J. Zala practices federal intellectual property law nationally. The work the firm handles is described on our page about our intellectual property and entertainment practice in Atlanta. If an anonymous account is copying your work, request a consultation or call 404-313-1701.