When a customer crosses into stalking or harassment: a guide for small business owners

There is almost nothing written specifically for small business owners who find themselves on the receiving end of harassment or obsessive behaviour from a customer. There are guides for employees dealing with workplace harassment, plenty written about domestic situations, and a growing body of material on online harassment generally.

But the specific experience of a sole trader, a small team, or a self-employed professional whose customer has crossed a line sits in a gap that most published resources simply don’t cover.

That gap matters, because the situation is genuinely different. You can’t call HR. You often can’t hand the matter to anyone else in the organisation. Your business contact details, and sometimes your home address, may be publicly listed. The person harassing you may know exactly where to find you. And because you are running a business, you have obligations to remain reachable to legitimate customers that make simply blocking the person more complicated than it sounds.

This guide is for that situation: the business owner who has a customer, former client, or member of the public whose behaviour has shifted from difficult to alarming, and who is trying to work out what their options are.

How customer harassment typically escalates

Customer harassment rarely announces itself clearly at the start. It tends to follow a pattern of gradual escalation that can make it hard to identify the point at which normal difficult-customer behaviour became something more serious. Recognising the pattern is important both for your own assessment of the situation and for the documentation that will matter later.

Stage one: excessive and out-of-hours contact

The first sign is usually volume and timing. A customer begins contacting you far more often than the business relationship warrants: multiple messages in a single day, contact on weekends or late at night, follow-up messages before you have had a reasonable opportunity to respond. The content at this stage may be entirely about the business relationship, but the frequency signals something has shifted in how the person relates to you. Document these from the beginning. Timestamps matter.

Stage two: boundary-testing and entitlement

The next phase often involves testing your responses to limit-setting. If you ask the person to contact you only during business hours, they continue outside those hours. If you decline to meet in person, they suggest alternative ways to make contact. The tone begins to shift: a sense of grievance, special demands, the suggestion that you owe them something beyond the ordinary business relationship. Some people at this stage begin to express a personal interest that goes beyond the service or product you provide.

Stage three: hostility and threats

When their expectations are not met, the behaviour often turns hostile. This might be angry, abusive, or threatening messages. It might be threats to damage your reputation through reviews, social media posts, or complaints. It might be threats of physical harm. At this stage the situation is clearly serious, but the earlier stages of documentation are what give police and solicitors the context they need to understand what is happening and how long it has been going on.

Stage four: showing up

In some cases the behaviour escalates to physical presence: appearing at your business premises, your home, or places you regularly go. This is the most frightening stage and the one most likely to be treated as stalking under Australian law. But it is worth noting that reaching this stage is not a requirement for taking action. You do not have to wait for someone to show up at your door before the situation is treated seriously.

Legal protections available to you

Australian law provides meaningful protection against harassment and stalking by anyone, including customers and former clients. The specific provisions vary between states and territories, but the underlying framework is consistent.

State stalking and harassment laws

Every Australian state and territory has laws about stalking and harassment, and US states do too. These laws can cover repeated unwanted contact by any means, following someone, and behaviour that makes a person afraid.

Critically, these laws are not limited to intimate partner contexts. A customer, former client, or member of the public whose conduct meets the threshold can be subject to the same protections. The relationship between you and the person is not the deciding factor: the nature and effect of their conduct is.

Personal safety intervention orders and AVOs

In addition to criminal charges, there are civil orders that prohibit specific conduct. In Victoria this is a personal safety intervention order (PSIO). In NSW it is an apprehended personal violence order (APVO). Other states have equivalent mechanisms. These orders can prohibit contact, restrict the person from coming near your home or business premises, and include conditions about online communication.

Police can apply for these orders on your behalf, or you can apply directly at your local Magistrates Court. Applications can be made on an urgent basis if the situation warrants it. A lawyer is not required to make an application, though legal advice about the strength of your evidence and the process in your specific state is worthwhile.

Online harassment and the eSafety Commissioner

Where harassment occurs online, the eSafety Commissioner can require platforms to remove seriously harmful content and to investigate complaints about cyber abuse targeting adults. If the harassment includes threatening or humiliating content posted about you on social media or review platforms, the eSafety Commissioner is a relevant avenue alongside state-based legal options.

Protecting your business’s reputation

Where harassment includes conduct designed to damage your business reputation through false reviews or coordinated complaints, laws about misleading conduct and defamation may also be relevant. A lawyer can tell you whether conduct targeting your business reputation crosses those thresholds.

In the US, stalking and harassment laws vary by state, and the civil order is usually called a protective order, restraining order or order of protection. Our US guide explains the basics, and free legal aid (LawHelp.org) can point you to help in your state.

Why documentation is critical before you take action

Every legal avenue available to you, whether a police complaint, an application for a protection order, a cease and desist letter, or a civil claim, depends on evidence. The quality and completeness of your documentation often affects how much help you can get and how quickly.

This is where many people find themselves in difficulty. By the time they reach out to police or a solicitor, they have deleted some messages, lost track of dates, and have screenshots scattered across multiple devices that do not tell a coherent story. The person they are complaining about may deny everything or claim the contact was welcomed. Without organised records, it becomes their account against yours.

What to preserve from the start

For every piece of contact from the person you are concerned about, preserve:

• The message or communication in its original form, not paraphrased
• The date and time it was received
• The sender’s name, number, or account identifier
• The platform or channel it arrived through (email, SMS, social media, voicemail)
• Any preceding context: what triggered the contact, whether you had responded to earlier messages, whether you had asked them to stop

Keep a running incident log

Alongside preserved messages, keep a written log in chronological order. Each entry should note: the date, the nature of the contact or incident, a brief factual description of what occurred, and any action you took in response. Include in-person incidents, phone calls, and any contact through third parties or intermediaries. This log is not a diary: keep it factual, specific, and dated. It becomes the spine of any case you need to make.

Back up in multiple places

Store evidence in at least two locations, at least one of which is not solely on a phone that could be lost, stolen, or broken. Cloud storage with automatic backup, a dedicated email folder that exports regularly, or a purpose-built archive are all better than relying on screenshots on a single device.

How to separate your business contact from your personal life

For many small business owners, particularly sole traders, the boundary between business contact and personal contact is thin or non-existent. A personal mobile number listed on a business website. A Gmail address that also receives family correspondence. A home address registered as the business address with ASIC or the Australian Business Register.

This exposure is normal for small businesses, but it creates real risk when a customer’s behaviour crosses a line. The more a harassing customer knows about your personal life and whereabouts, the harder the situation is to manage.

Business email and phone separation

If you do not already have a dedicated business email address and phone number, getting them is a practical first step regardless of whether you are currently dealing with harassment. A relay service that sits between your public contact point and your real inbox gives you additional options: the ability to filter what reaches you, the ability to archive everything that arrives, and the ability to change your public contact point without having to update dozens of customers if a situation becomes untenable.

A relay address gives you something else: a buffer between what a harassing customer sends and what you are directly exposed to. Reading a threatening message is not a neutral experience. A system that filters hostile content before it reaches you, while still archiving the original, means you are not required to absorb every message in real time while still maintaining a complete record.

Address exposure and the ABN register

If your home address appears in public business records, take steps to reduce that exposure. Consider using a post office box or a registered agent address as your public business address. Update your Australian Business Register listing and your ASIC records if applicable. Review whether your home address appears on your website, Google Business Profile, or any directory listings. If you are in the US, check what your state business filings show publicly as well. This will not solve an immediate situation, but it reduces the information available to someone whose behaviour you are concerned about.

Separate social media presence

If you use personal social media and also have business profiles, review what personal information is visible from your business-facing accounts. In a harassment situation, personal details visible on social media can become a vector for unwanted contact and, in more serious cases, for physical tracking.

Building an evidence archive: what format matters

There is a meaningful difference between having records and having records in a format that is useful when you need them. Solicitors and police see a wide range of documentation quality from people who come to them for help. Understanding what they need changes how you should be preserving records from the start.

What police need

When you make a complaint to police, they need to be able to assess whether conduct meets the threshold for a criminal matter and, if so, to build a file that could support charges or an application for a protection order. That requires:

• Evidence of the specific conduct (messages, call logs, records of in-person incidents)
• Evidence of repetition over time (a pattern, not a single incident)
• Evidence that the contact was unwanted and that this was communicated (that you asked the person to stop, or that the nature of the messages made it clear no response was invited)
• Identifying information for the person responsible

Bring your incident log and your organised evidence to the police station. Call ahead to ask for an appointment with a detective rather than a counter inquiry if the matter is serious. Front counter staff may have limited capacity to engage with a complex harassment case.

What a solicitor needs

A solicitor advising on civil options or preparing for formal proceedings needs records they can rely on and that they may need to put before a court or tribunal. The questions they are likely to ask are: Were the records captured in a way that preserves their integrity? Is there a risk they were altered? Is the archive complete, or are there gaps that the other side could exploit?

A PDF export from a purpose-built archive, with an attestation page describing how records were captured, the date of export, and the completeness of the archive, is usually more useful to a solicitor than a folder of screenshots, and can be harder to challenge. If you are using FenceChat’s Legal plan, the PDF export is designed with this in mind: it includes an attestation page describing how the records were captured, so a lawyer can see how the record was kept. Whether any record is accepted is always up to the court.

Timestamping and continuity

The single most important characteristic of a useful evidence archive is continuity: an unbroken record showing every communication received, in order, with accurate timestamps. Gaps in a record invite questions. A complete record tells the story without requiring you to fill in the blanks from memory.

When to involve police, a solicitor, or both

One of the most common questions people in this situation ask is whether to go to police, engage a solicitor, or do both at the same time. The answer depends on where the situation sits and what you need from the response.

When to go to police first

Contact police when the conduct includes: explicit threats of physical harm, physical approaches to your home or business, escalating contact despite repeated requests to stop, or anything that makes you genuinely fearful for your safety. Police can act on criminal conduct, apply for protection orders on your behalf, and in serious cases arrest a person. If you are at immediate risk, call 000 in Australia or 911 in the US. For a non-urgent complaint, contact your local police station and ask to speak with a detective.

Do not wait until you are certain the conduct is criminal before approaching police. They can advise you on whether what you are experiencing meets any threshold and what options exist. Going early with an organised set of records is far better than going late with incomplete documentation after the situation has escalated further.

When to engage a solicitor first

A solicitor can help when: you want to send a formal cease and desist letter, you are considering a civil application for a restraining order, you are unsure whether specific conduct crosses a legal threshold and want advice, you are approaching formal proceedings of any kind, or you want to know whether your archived records are in the right format to be useful in court.

A solicitor can also advise on whether approaching police is likely to be productive in your specific circumstances and what evidence standard would be needed.

Using both at the same time

In serious situations, many people involve police and a solicitor at the same time. They address different dimensions of the problem: police handle the criminal and safety side, a solicitor handles civil options and the formal legal record. Your incident log and evidence archive are useful to both.