Identifying an Anonymous Poster

What research on the public page actually produces

The honest output of open-source work on an anonymous account is a hypothesis with a confidence level attached. It narrows the field and tells you whether a formal route is worth the cost. It does not put a name on a page, and any description that says otherwise is selling something.

Take writing style, the technique people most often assume works. Narayanan and colleagues, at the IEEE Symposium on Security and Privacy in 2012, tested authorship identification at internet scale: 100,000 blogs, 2,443,808 posts, roughly a billion words. Given three test posts, the correct author ranked first about 20% of the time; with a single post, 7.5%. The authors' own caveat decides the question here — the method "is unlikely to work if the victim intentionally obfuscates their writing style." Now apply that to what a business has. A negative review is two sentences, and that research needed thousands of words per candidate to get one in five.

The other public signals behave the same way. A distinctive username reused across sites is a real link; a common one is nothing. Posting times suggest a time zone until you account for scheduling tools and relative timestamps. All of it is equally consistent with coincidence, with one agency running many accounts, and with deliberate framing. Correlation of artifacts identifies a cluster, not a hand.

Where a name actually comes from

Everything above operates on what the poster chose to publish. A name comes from records held by parties who publish nothing: the platform's account records, an internet provider's subscriber records. Getting those is a legal process, and its shape is worth knowing before anyone spends money. A suit is filed naming Doe defendants, because in most states the subpoena power exists only because a case exists, and the court is asked for permission to take discovery early. A subpoena then goes to the platform, which typically holds an account email address, a creation date and addresses with timestamps, and which will usually notify the account holder first — giving the anonymous speaker a chance to fight. A second subpoena goes to the provider that held that address at that moment.

Then the under-stated part. What comes back is a billing account: a household, an office, a campus, or a mobile carrier's pool shared by thousands of subscribers at once. It is not a person. Add a VPN or a phone on cellular data and it is not even a household. Add retention windows measured in weeks or months rather than years, and the most common ending to a contested, expensive subpoena is that the records no longer exist. Private message content is further out of reach: under 18 U.S.C. § 2702 a provider "shall not knowingly divulge … the contents of a communication while in electronic storage," and civil discovery is not among the exceptions.

The boundary, where it matters most. I am not an attorney. This page describes what these standards require and what the process costs. Whether a statement is legally defamatory, and whether to bring a Doe action at all, are questions for a defamation attorney.

The standard Arizona applies, and why it asks for more than the others

Courts do not simply issue these subpoenas. Anonymous speech has First Amendment protection, and since 2001 a screening test has come first. Dendrite International, Inc. v. Doe No. 3 (N.J. App. Div. 2001) requires notice to the poster, the exact statements identified one by one, evidence rather than allegations, and a balancing step; John Doe No. 1 v. Cahill (Del. 2005) requires enough to defeat summary judgment and declined the balancing step. For a business fighting a complaint-site report, a third standard governs — Arizona's, which Ripoff Report quotes on its own legal page as the test it applies to every subpoena seeking an author's identity:

"We hold that to obtain a court order compelling discovery of an anonymous internet speaker's identity, the requesting party (i.e., the Plaintiff in an action) must show that: (1) the speaker has been given adequate notice and a reasonable opportunity to respond to the discovery request, (2) the requesting party's cause of action could survive a motion for summary judgment on the elements of the claim not dependent on the identity of the anonymous speaker, and (3) a balance of the parties' competing interests favors disclosure."

— Mobilisa, Inc. v. Doe, 217 Ariz. 103, 170 P.3d 712 (App. 2007), quoted on Ripoff Report's legal page, read 12 August 2026

Prong two is Cahill's summary-judgment showing; prong three is Dendrite's balancing step, the requirement Cahill called unnecessary. Mobilisa puts it back on top, which makes it the most demanding of the three — and it is the one waiting for anyone whose target posted on a site run out of Arizona.

One operator's published checklist, step by step

Those tests are abstract. Ripoff Report, operated by Xcentric Ventures, LLC, publishes a numbered list of what a subpoena must do before it will release an author's identity — the clearest worked example available, because it comes from the party that has to comply.

• Personal service on the statutory agent, under Ariz. R. Civ. P. 45; the current agent is identified through the Arizona Corporation Commission.
• Issued by the right court. Unless it comes from a United States Federal District Court, it "must be issued from an Arizona Court (preferably the Superior Court of Arizona, Maricopa County in Phoenix, Arizona)" — because "a state court subpoena is void outside the territorial boundaries of the state."
• Notice to the author "via the same medium used by that party" — so notice may be posted on Ripoff Report itself, and the operator supplies the required language as a fill-in template. The screening test's first prong, turned into a form.
• A showing that survives summary judgment "beyond making a mere prima facie case," supported by a declaration under penalty of perjury explaining "what statement(s) is/are false and why" — signed under oath by somebody at the business, before anyone is identified.
• Provably false statements of fact: "opinions are protected by the First Amendment and cannot form the basis for a defamation claim."

If nobody objects and the operator "determines in its sole discretion" that the burden is met, it states that "the requested author information will be produced." Otherwise the requester "must bring a motion in the issuing court." Why it will not decide the dispute itself:

"… not in a position to determine which party is telling the truth, so we cannot and will not dissolve the First Amendment rights of our users based on a unilateral allegation that something in a Report is false."

— Ripoff Report legal page, Xcentric Ventures, LLC, ripoffreport.com/legal, read 12 August 2026

The one-year clock that ends most of these before they start

Buried in that checklist is the item that decides more of these matters than everything else combined: the subpoena has to be filed within the limitations period, and Arizona's defamation period is one year, A.R.S. § 12-541.

One year, running from publication — not from the day the business found the report, and not from the day it started affecting sales.

Think about how a business discovers this content: a sales lead mentions it, an employee sees it, a quarterly look at search results turns it up. Those routes take months, and complaint-site reports often surface a year or more after posting because their search visibility builds slowly. By the time the business is angry enough to act, the clock has frequently run, and nothing restarts it.

So the first question about an old report is not "how do we unmask this" but "when was it published, and what does that leave." Which limitations period applies is for a defamation attorney; the publication date a business can establish for itself in an hour.

What gets paid before anything is released

Ripoff Report also publishes what it charges to handle a subpoena, and the figures matter because they are the small end of the bill. There is $150 to process a subpoena; $150 for each hour of work, with a one-hour minimum, where a subpoena is a repeat request or otherwise burdensome; and a minimum of $500 where the request reaches records held by third-party vendors — all payable, the operator states, "prior to the release of information."

Those are administrative charges from one operator, and the cheapest line in the exercise. They sit on top of what has to exist first — a filed lawsuit, a motion for early discovery, a declaration under oath, service in the right state, and whatever follows if the author moves to quash — and they are payable whether or not the records produce a name. What makes unmasking expensive is never one charge. It is a lawsuit with a screening test in front of it, a records chain ending at a billing account, and retention windows that delete the answer while the motion is pending.

What the platforms say they will do if you go looking

Operators are not neutral parties here. Glassdoor, operated by Indeed, Inc., tells employers that it "will not tell you who wrote a review," and that if you take legal action against its users and request their identities, it "will object and often fight in court to protect their anonymity" (Glassdoor employer FAQ, updated 6 April 2026, read 12 August 2026). The same page warns that legal action "often draws more attention to the negative reviews."

There is also a trap in the paperwork. Glassdoor's default venue for a subpoena is San Francisco County or the Northern District of California — but its guidance on service sends anyone who has created an account to a different clause in its Terms of Use:

"You agree to waive your right to file a pre-suit discovery proceeding … seeking a user's identifying information from Glassdoor. If you intend to propound discovery seeking a user's identifying information, you agree to do so pursuant to a valid California subpoena, properly issued in connection with an active lawsuit … all such subpoenas and discovery proceedings … shall be issued from, brought, and resolved exclusively in the state courts located within Marin County, California or the federal courts in the Northern District of California."

— Glassdoor Terms of Use § 11, quoted on Glassdoor's page on serving legal documents, updated 1 July 2026, read 12 August 2026

Creating a free employer account to respond to reviews is routine, usually done within a day of finding a bad review. On the operator's reading, that act waives the pre-suit discovery route and fixes the venue for any identity fight. Whether it binds a particular company is a question for that company's attorney; that a free account triggers it at all is worth knowing before somebody signs up in a hurry.

The one place where this question does not arise

There is one exception. The Better Business Bureau publishes a list of complaints it will not accept, and that list includes "Anonymously filed complaints" (BBB, process of complaints and reviews, read 12 August 2026). A BBB complaint arrives with a named complainant by construction. The attribution problem this page describes does not arise there — not because it was solved, but because it was never created. The work is the response and the closing status, not an investigation into who filed it.

Everywhere else the summary is uncomfortable. Public signals produce leads, not names. Names come from third-party records, released through a court process with a screening test plaintiffs regularly fail, ending at an account rather than a person — often after the retention window has closed. Platform policies change: read the operator's current page before relying on any wording above, all of which was read on 12 August 2026. Whether any of this is worth starting is a decision for a defamation attorney, not for me.

Frequently Asked Questions

Published 2026-08-12