Social Media and Criminal Behavior

Social media and criminal behavior examines the multifaceted relationship between social media platforms and crime, encompassing the use of social media as a tool for committing offenses, as a medium through which criminal activity is documented and displayed, as a source of evidence for law enforcement investigation, and as an environment whose structural features shape criminal opportunity and behavior. Within Cyber Criminology, social media’s relationship to crime extends well beyond the platform-specific offenses of cyberbullying and online harassment to encompass how the architecture of social media platforms — their incentive structures, algorithmic curation, network effects, and communicative affordances — creates conditions that facilitate, amplify, and in some cases transform criminal conduct. With over 300 million social media users in the United States and daily engagement averaging more than two hours per user, social media constitutes a social environment of sufficient scale and significance that its relationship to criminal behavior demands systematic criminological attention. This article examines how social media facilitates crime, how it serves as evidence in criminal investigations, how platform design shapes criminal opportunity, and how criminal justice institutions are adapting to a landscape in which social media is woven into the fabric of both criminal activity and its detection within the broader study of Criminology.

Introduction

The relationship between social media and crime is complex, bidirectional, and evolving. Social media platforms function simultaneously as environments in which crimes are committed (harassment, fraud, exploitation), as tools that facilitate crimes occurring elsewhere (drug dealing coordinated through messaging, burglary targets identified through vacation posts, gang conflicts escalated through online provocation), as documentation of criminal activity (offenders posting images or videos of their crimes), and as investigative resources through which law enforcement identifies suspects, establishes timelines, and builds cases. The diversity of these relationships resists simple characterization: social media is neither simply a crime facilitator nor simply a crime-fighting tool but a social infrastructure that reshapes the dynamics of criminal behavior across multiple offense categories.

The scale of social media’s integration into American life provides the context for understanding its criminological significance. Instagram, TikTok, Snapchat, X (formerly Twitter), Facebook, YouTube, and their competitors collectively constitute the primary public communication infrastructure for a substantial proportion of the American population, particularly younger adults. Social media is where relationships are formed and dissolved, where reputations are built and destroyed, where commercial transactions are initiated, where political opinions are expressed and contested, and where social identity is performed and negotiated. The criminal dimensions of social media activity are embedded within this broader social function, making it impossible to understand social media crime without understanding social media as a social environment.

Social Media as a Criminal Tool and Environment

Facilitation of Traditional Crime

Social media platforms facilitate traditional criminal activity through multiple mechanisms that exploit the communicative, organizational, and informational capabilities of these platforms. Drug trafficking has adapted extensively to social media: dealers advertise products through Instagram stories, Snapchat streaks, and TikTok videos using coded language and emoji symbols, accept orders through direct messages, and coordinate delivery through real-time messaging. The DEA has documented the use of social media by drug traffickers to market fentanyl-laced pills to adolescent buyers, a phenomenon that has contributed to the overdose crisis by expanding the reach of drug marketing to populations that might not encounter traditional street-level dealers.

Property crime is facilitated when social media users inadvertently broadcast information about their vulnerability. Posts announcing vacations, check-ins at distant locations, and real-time sharing of activities provide potential burglars with information about empty homes. Friedman, Gupta, and Narayanan (2014) demonstrated through analysis of geotagged social media posts that publicly available location data could be used to identify periods of residential absence with significant accuracy. While systematic exploitation of social media for burglary targeting has not been documented at scale, the informational vulnerability created by location sharing represents a routine-activities-theory-consistent increase in target suitability that digital communication enables.

Fraud schemes exploit social media’s trust architecture — the network of personal connections and the social validation that accompanies content shared by known individuals. Romance fraud conducted through social media and dating applications exploits the relationship-formation functions of these platforms to build trust that is subsequently weaponized for financial exploitation. Investment scams promoted through influencer endorsements or fabricated testimonials exploit the social proof mechanisms of social media — the tendency to evaluate opportunities based on the apparent experience of others in one’s social network. The FTC has documented the rapid growth of social media-originated fraud, reporting that consumers reported over $2.7 billion in social media-related fraud losses between 2021 and 2023, with investment scams and romance fraud accounting for the largest shares.

Performance Crime and Digital Self-Incrimination

A distinctive feature of the social media era is the phenomenon of “performance crime” — criminal activity that is committed, documented, and shared for the purpose of social media attention, status, and engagement. Offenders record and post videos of assaults, vandalism, theft, reckless driving, and other criminal acts, motivated by the social rewards of audience attention — likes, shares, comments, follower growth — that social media platforms provide. The phenomenon challenges traditional criminological models that emphasize material or instrumental motivation for offending by highlighting the performative and expressive dimensions of crime in a media-saturated social environment.

The documentation of criminal activity on social media extends beyond intentional performance to encompass inadvertent self-incrimination. Gang members posting photographs displaying weapons and drug proceeds, individuals bragging about fraud schemes in messages that are later disclosed, and suspects whose social media activity contradicts their alibis all contribute to a body of digital evidence that prosecutors increasingly exploit. Patton, Brunton, Dixon, Miller, Leonard, and Hathaway (2017) documented how social media posts by young people in disadvantaged communities — including posts featuring weapons, gang signs, and provocative language — were used by law enforcement as evidence of gang affiliation, criminal intent, and threat assessment, raising questions about the interpretive frameworks applied to digital communication that may carry different meanings than law enforcement assumes.

The viral dynamics of social media can amplify the consequences of criminal behavior in ways that exceed what the offender intended or anticipated. A video of an assault posted to a small audience may be algorithmically amplified by platform recommendation systems, reaching millions of viewers and generating consequences — social media-driven investigations, mass public identification of the offender, employer termination, vigilante harassment — that are disproportionate to the original act. The amplification effect illustrates how the architecture of social media platforms transforms the scale and consequences of criminal behavior in ways that neither offenders nor the criminal justice system may be equipped to anticipate or manage.

Social Media as Evidence

Investigative Uses of Social Media

Law enforcement agencies use social media extensively as an investigative resource, drawing on publicly available content and, with appropriate legal process, non-public content and account data to develop leads, identify suspects, establish timelines, corroborate witness statements, and build cases for prosecution. The International Association of Chiefs of Police (IACP) has documented that over 90 percent of American law enforcement agencies use social media for criminal investigation, though the sophistication and formality of their practices vary widely.

Social media evidence contributes to investigations across the full spectrum of criminal offenses. In homicide investigations, social media may reveal the victim’s last known contacts, establish the movements of suspects, and document conflicts or threats that preceded the killing. In gang investigations, social media provides evidence of membership, hierarchy, territory, and inter-gang conflicts that is difficult to obtain through traditional investigative methods. In drug investigations, social media advertising and communication provide evidence of distribution networks and customer bases. In fraud investigations, social media profiles of suspects may reveal lifestyle indicators inconsistent with reported income, supporting evidence of illicit financial activity.

The legal framework for law enforcement access to social media evidence depends on whether the information is publicly available or requires disclosure by the platform. Publicly posted content — posts visible to all users, public profiles, comments on public pages — is generally accessible to law enforcement without legal process, as users who share information publicly have no reasonable expectation of privacy in that content. Non-public content — private messages, restricted posts, account metadata — requires legal process: subscriber information may be obtained with a subpoena, transactional records with a court order under the SCA, and content with a warrant based on probable cause. Platform companies maintain law enforcement request guides that specify the types of information available and the legal process required, and major platforms publish transparency reports documenting the volume and disposition of government requests.

Evidentiary Challenges and Authentication

The use of social media evidence in criminal proceedings presents authentication challenges that courts are addressing with increasing frequency. The Federal Rules of Evidence require that evidence be authenticated — demonstrated to be what it purports to be — before it is admitted. For social media evidence, authentication requires establishing that the content was actually posted by the attributed user, that it has not been altered since posting, and that it accurately represents what it appears to represent. The ease with which social media content can be fabricated (fake accounts, manipulated screenshots), altered (edited posts, deleted and reposted content), and decontextualized (screenshots that omit relevant surrounding context) creates authentication challenges that exceed those presented by traditional documentary evidence.

Courts have adopted varying approaches to social media evidence authentication. Some require only testimony from a witness with knowledge that the evidence is what it purports to be — the same standard applied to other documentary evidence. Others require corroborating evidence beyond the social media content itself — such as testimony about the defendant’s access to the account, consistency between the content and known facts, or forensic evidence from the platform linking the content to the defendant’s account. The trend in judicial practice is toward a practical approach that evaluates the totality of circumstances rather than imposing categorical requirements, but the absence of uniform standards across jurisdictions creates inconsistency in how social media evidence is treated.

The emergence of deepfake technology and AI-generated content has intensified concerns about the reliability of visual social media evidence. When synthetic video, audio, and images can convincingly depict events that did not occur or attribute statements to individuals who did not make them, the evidentiary value of social media content is diminished across the board. The development of content authentication technologies — digital watermarking, blockchain-based provenance tracking, AI-based deepfake detection — provides potential responses, but these technologies are not yet widely deployed and face the fundamental challenge of maintaining detection capabilities against continuously improving generation techniques.

Platform Design and Criminal Opportunity

Algorithmic Amplification and Harmful Content

The algorithmic systems through which social media platforms curate and distribute content create dynamics that affect criminal behavior in ways that platform designers may not have intended but that the platforms’ commercial incentives make difficult to address. Engagement-optimizing algorithms — which determine what content appears in users’ feeds, what posts are recommended, and what search results are surfaced — tend to amplify content that provokes strong emotional reactions, including content that is provocative, outrageous, frightening, or divisive. This amplification dynamic can promote the spread of extremist content, facilitate the viral distribution of threatening or defamatory material, and create attention incentives that encourage the performance crime discussed above.

The relationship between algorithmic amplification and radicalization has been a subject of particular concern. Research on the “rabbit hole” effect — the tendency of recommendation algorithms to direct users toward increasingly extreme content — has produced mixed findings. Ribeiro, Ottoni, West, Almeida, and Meira (2020) found evidence that YouTube’s recommendation algorithm systematically directed users from mainstream political content to more extreme alternatives, though YouTube has disputed the methodology and reported that changes to its recommendation system have reduced extremist content recommendations. The empirical challenge of establishing a causal relationship between algorithmic recommendations and radicalization outcomes reflects the broader difficulty of isolating platform effects from the complex of individual, social, and contextual factors that contribute to extremism.

Platform design decisions about anonymity, account verification, and content moderation directly shape the opportunity structure for criminal behavior. Platforms that permit anonymous or pseudonymous accounts enable harassment, fraud, and criminal coordination that would be deterred by identity verification. Platforms with minimal content moderation allow the distribution of illegal content — CSAM, terrorist propaganda, fraudulent advertisements — that moderated platforms suppress. Platforms that enable ephemeral content (stories that disappear after 24 hours, messages that auto-delete) create environments in which criminal communication can occur without leaving the persistent records that would support investigation. Each of these design choices reflects a balance between user experience, commercial interests, and safety considerations, and each has consequences for the volume and character of criminal activity that the platform facilitates.

Content Moderation and Crime Prevention

Content moderation — the systems through which platforms identify, review, and remove content that violates their policies — functions as a form of crime prevention that operates at scale exceeding any governmental enforcement capability. Major platforms employ a combination of automated systems (AI-based content classifiers, hash-matching databases for known illegal content) and human reviewers (content moderation teams, often outsourced to low-wage workers in developing countries) to enforce community standards that prohibit criminal solicitation, the distribution of illegal content, fraud, harassment, and other harmful activity. Meta reported removing billions of pieces of content across its platforms in 2023, including content related to terrorism, child exploitation, drug sales, and organized criminal activity.

The effectiveness of content moderation as a crime prevention mechanism is constrained by the volume of content generated (Meta’s platforms process over 100 billion pieces of content daily), the difficulty of contextual interpretation (automated systems struggle with sarcasm, cultural references, coded language, and context-dependent meaning), and the economic pressures that favor engagement over safety in platform design decisions. The moderation of content in languages other than English, on platforms with smaller moderation teams, and in private messaging environments where automated scanning may be technically or legally constrained represents significant gaps in the content moderation safety net.

The regulatory pressure on platforms to improve content moderation has intensified globally. The European Union’s Digital Services Act imposes risk assessment and mitigation obligations on very large online platforms, requiring them to identify and address systemic risks including the dissemination of illegal content and the negative effects of their algorithms on public safety. The United Kingdom’s Online Safety Act imposes duties on platforms to protect users from illegal content and, for services likely to be accessed by children, from content harmful to minors. The United States has not enacted comparable platform regulation, with Section 230 of the Communications Decency Act continuing to provide broad immunity for platforms’ content moderation decisions (and non-decisions). The regulatory trajectory suggests increasing governmental expectations for platform crime prevention, though the specific form that American regulation will take remains uncertain.

Criminal Justice Adaptation

Law Enforcement Social Media Strategies

Law enforcement agencies have developed multi-dimensional social media strategies that encompass investigation, intelligence, community engagement, and public communication. Beyond the investigative uses discussed above, agencies use social media for crime prevention messaging, community policing outreach, fugitive identification, and crisis communication during active incidents. The IACP’s Center for Social Media has developed guidelines and training resources for law enforcement social media use, addressing both the operational benefits and the legal and ethical risks of institutional social media engagement.

The creation of specialized social media investigation units within larger police departments reflects the institutionalization of social media as an investigative resource. The New York Police Department, the Los Angeles Police Department, and other major agencies maintain units that monitor social media for criminal intelligence, develop cases based on social media evidence, and provide social media investigative support to other units. These specialized capabilities enable more systematic and sophisticated use of social media evidence than is possible when social media investigation is conducted ad hoc by investigators without specific training.

The risks of law enforcement social media use include the potential for discriminatory monitoring (targeting communities based on race, religion, or political affiliation), the creation of fake accounts that may violate platform terms of service and raise due process concerns, and the interpretive challenges of drawing conclusions about criminal intent from social media content that may be performative, hyperbolic, or culturally coded. The development of policies that govern the authorized purposes, methods, and oversight of law enforcement social media activities represents an ongoing institutional challenge that balances investigative utility against civil liberties protection.

Prosecution and Judicial Treatment

The presentation of social media evidence in criminal proceedings has become routine across offense categories, and courts have developed practical frameworks for addressing the authentication, relevance, and prejudicial potential of social media content. Prosecutors use social media evidence to establish motive (threatening posts directed at victims), document criminal conduct (photographs and videos of illegal activity), corroborate or impeach testimony (posts inconsistent with trial statements), and demonstrate the defendant’s state of mind (expressions of intent, consciousness of guilt, or attempts to conceal evidence).

Defense attorneys increasingly examine social media evidence for exculpatory content, challenge the authentication of social media exhibits, and raise questions about the interpretive frameworks applied to social media communications. The cultural context of social media expression — particularly in communities where performative displays of toughness, bravado, and confrontation may carry different social meanings than their literal content suggests — has emerged as a significant concern in cases where social media posts are offered as evidence of criminal intent or gang affiliation. Courts have begun to address these interpretive challenges through the admission of expert testimony on social media culture and the exclusion of social media evidence whose prejudicial effect substantially outweighs its probative value, though the application of these doctrines varies across jurisdictions.

Conclusion

Social media and criminal behavior exist in a relationship that is structured by the communicative affordances, algorithmic dynamics, and commercial incentive structures of platforms that were designed for social connection and content sharing rather than for crime facilitation or prevention. The criminal exploitation of social media — for fraud, harassment, drug distribution, radicalization, and the performance and documentation of criminal acts — reflects the adaptation of criminal behavior to the digital social environment that has become the primary medium of public interaction for a majority of Americans. The evidentiary and investigative potential of social media provides law enforcement with a powerful resource that traditional investigation methods did not offer, but its effective use requires specialized training, legal literacy, and interpretive sensitivity to the cultural contexts within which social media communication occurs.

The most consequential dimension of the social media and crime relationship may be the structural one: how platform design decisions — about algorithms, anonymity, content moderation, and commercial incentives — shape the opportunity structure for criminal behavior at a scale that no individual law enforcement intervention can match. The regulation of platform design for crime prevention represents the frontier of policy development in this area, one where the interests of public safety, free expression, commercial innovation, and individual privacy must be balanced through institutional frameworks that the United States has not yet fully developed.

References

Anti-Defamation League. (2024). Online hate and harassment: The American experience 2024. https://www.adl.org/
Boyd, D. (2014). It’s complicated: The social lives of networked teens. Yale University Press.
Brantingham, P. J., Valasik, M., & Tita, G. E. (2019). Competitive dominance, gang size and the directionality of gang violence. Crime Science, 8(1), 7. https://doi.org/10.1186/s40163-019-0101-2
Citron, D. K. (2014). Hate crimes in cyberspace. Harvard University Press.
Federal Trade Commission. (2024). Consumer Sentinel Network data book 2023. https://www.ftc.gov/reports/consumer-sentinel-network-data-book-2023
Friedman, A., Gupta, S., & Narayanan, A. (2014). Privacy aspects of social media. In I. Das, A. Jha, & A. K. Das (Eds.), Handbook of research on securing cloud-based databases with biometric applications (pp. 364–388). IGI Global.
Holt, T. J., & Bossler, A. M. (2016). Cybercrime in progress: Theory and prevention of technology-enabled offenses. Routledge.
International Association of Chiefs of Police. (2023). 2023 law enforcement use of social media survey. https://www.theiacp.org/
Moule, R. K., Pyrooz, D. C., & Decker, S. H. (2014). Internet adoption and online behaviour among American street gangs. British Journal of Criminology, 54(6), 1186–1206. https://doi.org/10.1093/bjc/azu050
Patton, D. U., Brunton, D.-W., Dixon, A., Miller, R. J., Leonard, P., & Hathaway, R. (2017). Stop and frisk online: Theorizing everyday racism in digital policing in the use of social media for identification of criminal conduct and associations. Social Media + Society, 3(3). https://doi.org/10.1177/2056305117733344
Pyrooz, D. C., Decker, S. H., & Moule, R. K. (2015). Criminal and routine activities in online settings: Gangs, offenders, and the Internet. Justice Quarterly, 32(3), 471–499. https://doi.org/10.1080/07418825.2013.778326
Ribeiro, M. H., Ottoni, R., West, R., Almeida, V. A. F., & Meira, W. (2020). Auditing radicalization pathways on YouTube. Proceedings of the 2020 Conference on Fairness, Accountability, and Transparency (pp. 131–141). https://doi.org/10.1145/3351095.3372879
Singer, P. W., & Brooking, E. T. (2018). LikeWar: The weaponization of social media. Houghton Mifflin Harcourt.
Storrod, M. L., & Densley, J. A. (2017). ‘Going viral’ and ‘going country’: The expressive and instrumental activities of Internet-facilitated drug dealers. Deviant Behavior, 38(11), 1227–1242. https://doi.org/10.1080/01639625.2016.1241421
Trottier, D. (2012). Social media as surveillance: Rethinking visibility in a converging world. Ashgate.
U.S. Drug Enforcement Administration. (2022). One pill can kill. https://www.dea.gov/onepill
Vogels, E. A. (2021). The state of online harassment. Pew Research Center. https://www.pewresearch.org/internet/2021/01/13/the-state-of-online-harassment/
Wall, D. S. (2007). Cybercrime: The transformation of crime in the information age. Polity Press.
Williams, M. L., Burnap, P., Javed, A., Liu, H., & Ozalp, S. (2020). Hate in the machine: Anti-Black and anti-Muslim social media posts as predictors of offline racially and religiously aggravated crime. British Journal of Criminology, 60(1), 93–117. https://doi.org/10.1093/bjc/azz049
Yar, M., & Steinmetz, K. F. (2019). Cybercrime and society (3rd ed.). SAGE Publications.

Related Articles