Kevin Bollaert Case and the Rise of Revenge Porn Laws

The prosecution and sentencing of Kevin Christopher Bollaert, operator of a notorious revenge porn website, marked a major turning point in how the law confronts online sexual exploitation and extortion. This case not only illustrated the devastating impact of non-consensual image sharing, but also pushed courts and lawmakers to clarify how existing criminal statutes apply in the digital age.

Instead of being charged simply for hosting explicit content, Bollaert was prosecuted for a combination of identity theft and extortion, revealing how cyber-exploitation can intersect with more traditional forms of criminal conduct. His 18-year prison sentence became a reference point in discussions about online privacy, free expression, and the responsibilities of website operators.

From UGotPosted to Courtroom: Overview of the Case

At the center of the case was a website called UGotPosted.com, which allowed users to upload nude or sexually explicit images of other people, commonly ex-partners, without their consent. The posts typically included personal information such as full names, ages, locations, and links to social media profiles. This combination of intimate imagery and identifying data made it easier for strangers, employers, and acquaintances to locate and harass the victims.

Evidence presented in court showed that Bollaert operated the site from San Diego and actively managed the content, including approving submissions and organizing user-generated material. The site was part of a broader scheme involving a second platform: ChangeMyReputation.com, where victims were directed when they wanted their images removed.

Key elements of the criminal case included:

• Operation of a website that published intimate images and identifying information without consent.
• Creation of a linked removal service that charged victims hundreds of dollars to delete their content.
• Use of personal data provided by users to facilitate cyber-exploitation and harassment.
• Financial gain estimated at tens of thousands of dollars from the removal scheme.

These facts formed the basis for multiple felony charges and made the case a first-of-its-kind criminal prosecution of a revenge porn site operator in the United States.

The Extortion Model Behind ChangeMyReputation

Bollaert’s conduct went beyond simply hosting offensive content. Prosecutors emphasized that the combination of UGotPosted and ChangeMyReputation functioned as a deliberate extortion enterprise. Victims discovered their nude images online, accompanied by their personal details, and were then told that removal required a payment.

According to court filings and press statements:

• Victims were charged between $250 and $350 to have their content removed from UGotPosted.
• The removal site was controlled by Bollaert, despite being presented as an independent service.
• Prosecutors estimated that Bollaert earned roughly $30,000 from the scheme.

In criminal law, extortion generally involves obtaining money or property from another through threats or coercion. In this case, the implicit threat was the continued publication of humiliating, sexually explicit images and identifying information. The choice victims faced — pay a substantial fee or suffer ongoing reputational damage, harassment, and emotional harm — was central to the extortion charges.

This structure also highlighted a broader pattern seen in certain online abuses: a person or organization both creates and monetizes a problem by offering paid solutions to the harm they themselves cause.

Identity Theft and Cyber-Exploitation

In addition to extortion, Bollaert was convicted of multiple counts of identity theft. The state attorney general’s office argued that Bollaert knowingly used victims’ personal identifying information without consent, including names, ages, locations, and social media links.

Under California law, identity theft can include using another person’s identifying information for an unlawful purpose or without authorization. By publishing profiles that combined nude images with detailed personal data, the website effectively turned victims’ identities into tools for abuse and financial gain.

The charges reflected several important points about cyber-exploitation:

• Non-consensual image sharing is often intertwined with misuse of personal data, not just the images themselves.
• Public exposure of intimate photos can damage employment, relationships, and physical safety, especially when paired with location or contact information.
• Identity theft statutes may apply even when the primary harm is reputational or emotional, rather than direct financial fraud.

By framing the conduct as identity theft and extortion, prosecutors used existing legal tools to tackle online abuse in the absence of comprehensive, specific revenge porn legislation.

Sentencing: Why 18 Years in Prison?

In February 2015, a California jury found Bollaert guilty of six counts of extortion and 21 counts of identity theft, totaling 27 felonies. The judge later imposed an 18-year prison sentence, along with restitution and fines.

News organizations reported that Bollaert faced a potential sentence well over 20 years, but the judge settled on 18 years while still emphasizing the gravity of the harm. In addition to prison time, the court ordered restitution payments to victims and imposed fines, reinforcing that financial accountability accompanies criminal punishment.

The California attorney general described the case as the first criminal prosecution of a cyber-exploitation website operator in the United States. That characterization underscores its significance: it signaled that law enforcement would treat operators of such sites not as neutral intermediaries, but as active participants in harmful conduct.

Impact on Victims: Emotional, Social, and Economic Harm

While the legal charges focused on extortion and identity theft, the human consequences extended far beyond the courtroom. Victims of revenge porn frequently report intense psychological distress, social isolation, and economic loss.

In the context of the Bollaert case, victims described experiences such as:

• Persistent harassment and stalking after their images and personal details appeared online.
• Fear that employers, family members, or children would discover the content.
• Pressure to pay substantial sums solely to regain some privacy and dignity.

Research on non-consensual pornography and cyber-exploitation has documented comparable harms, including symptoms of anxiety, depression, and post-traumatic stress. Several academic studies note that victims may face systemic barriers when seeking remedies, because content can be duplicated or mirrored across platforms even after removal from the original site.

The case highlighted how public exposure of sexual images can function as a form of coercion and control, particularly against women and marginalized groups, and helped expand public understanding of cyber-violence beyond traditional notions of “online bullying.”

Legal Landscape: Revenge Porn and Existing Statutes

When Bollaert’s case was prosecuted, legal frameworks specific to revenge porn were still developing. California had moved toward addressing cyber-exploitation, but prosecutors in this case relied primarily on extortion and identity theft laws combined with consumer protection and privacy principles.

Broader trends in the U.S. legal landscape include:

• Several states enacting laws explicitly targeting non-consensual pornography.
• Use of existing statutes (such as harassment, stalking, extortion, and identity theft) when newer revenge porn laws are absent or limited.
• Ongoing debate about how to balance free speech protections with the need to curb severe privacy violations.

The Bollaert case demonstrated that, even without a dedicated revenge porn statute, courts can treat operators who intentionally facilitate and monetize cyber-exploitation as criminal actors. At the same time, the case sparked discussion about whether more precise legal definitions and remedies are necessary to address emerging forms of online abuse.

Responsibilities of Website Operators and Platforms

A central question raised by the prosecution was how to distinguish between passive hosting and active participation in harmful content. Bollaert was not merely providing a platform; he curated submissions, structured the site to invite identifying information, and set up a removal service that profited from victims’ desperation.

Key issues regarding platform responsibility include:

• Whether site operators encourage or facilitate the posting of non-consensual images and data.
• How monetization models may incentivize exploitation, such as charging for removal or prioritizing sensational content for traffic.
• The extent to which operators respond to complaints, removal requests, and law enforcement inquiries.
• Interaction with laws governing intermediary liability and safe harbor protections.

The case signaled that courts may look closely at the design and business model of a site when determining criminal liability. A platform that is structured from the outset to exploit victims and generate revenue from their suffering is far less likely to be viewed as a neutral intermediary.

Lessons for Law, Policy, and Individuals

The prosecution of Kevin Bollaert offers several lessons for lawmakers, law enforcement agencies, technology companies, and individuals seeking to protect themselves online.

For policymakers and regulators, the case underscores the need to:

• Clarify legal definitions surrounding cyber-exploitation, revenge porn, and identity misuse.
• Ensure that laws address both image-based abuse and the improper use of personal data.
• Consider criminal and civil remedies, including restitution and injunctive relief to help victims have content removed.
• Develop victim-centered procedures that reduce the burdens of reporting and investigation.

For individuals, while the responsibility for abuse lies with perpetrators and exploitative platforms, awareness of certain digital risks can be useful. These may include careful control of intimate images, understanding privacy settings, and knowing how to seek legal or nonprofit assistance if victimized.

At the same time, experts caution against placing the burden solely on victims to prevent abuse. The Bollaert case illustrates that systemic responses — from law enforcement, courts, and technology platforms — are essential to meaningfully address cyber-exploitation.

Frequently Asked Questions (FAQ)

Who is Kevin Christopher Bollaert?

Kevin Christopher Bollaert is a California man who operated the revenge porn website UGotPosted.com and the related removal site ChangeMyReputation.com. He was convicted of multiple counts of extortion and identity theft for his role in publishing nude images with personal information and charging victims to remove them.

What made this case legally significant?

The case was described by the California attorney general as the first criminal prosecution of a cyber-exploitation website operator in the United States. It showed how existing statutes on extortion and identity theft could be used to address online revenge porn, even in the absence of specific laws targeting non-consensual pornography.

How much was Bollaert sentenced to?

Bollaert received an 18-year prison sentence after being found guilty of six extortion counts and 21 identity theft counts. In addition to imprisonment, he was ordered to pay restitution to victims and fines imposed by the court.

How did the extortion scheme work?

Users uploaded nude or sexually explicit photos of others to UGotPosted.com, often with names and other personal details. When victims discovered the posts, they were directed to ChangeMyReputation.com, where they were required to pay hundreds of dollars for removal. Authorities characterized this as an extortion scheme because victims were pressured to pay to halt ongoing harm.

What does this case mean for future revenge porn prosecutions?

The Bollaert case provides a template for prosecutors looking to hold site operators accountable when they actively facilitate and profit from non-consensual image sharing. It also reinforces the notion that identity theft and extortion laws can apply to digital abuses, encouraging lawmakers to craft clearer statutes and victims to seek legal redress.

Similar Articles

Your First Credit Card: How to Avoid Costly Fine‑Print Traps

Smart Student Borrowing: A Financial Literacy Guide

Brendlin v. California and the Fourth Amendment Passenger Rule

Miranda v. Arizona and the Birth of Modern Police Warnings

Bankruptcy Glossary: Plain-Language Guide To Common Terms Now

Understanding Bankruptcy Noticing in Federal Courts

Author

medha deb

 

Medha Deb is an editor with a master's degree in Applied Linguistics from the University of Hyderabad. She believes that her qualification has helped her develop a deep understanding of language and its application in various contexts.

Read full bio of medha deb