In the United States, the UK, Canada, and the EU, using spyware to intercept someone else’s private communications without consent is a . Under the Electronic Communications Privacy Act (ECPA), you could face fines of up to $10,000 and five years in prison. Civil lawsuits from the target are also common.