Legal rights and removal

How to remove deepfake nudes and other synthetic images of you

The law has caught up with synthetic media. Under the TAKE IT DOWN Act and federal cyber laws, you have enforceable legal mechanisms to get hosts, search engines and social platforms to remove non-consensual AI imagery.

§

The 48-Hour Removal Mandate (TAKE IT DOWN Act)

Platforms operating within U.S. jurisdiction are legally required to remove reported non-consensual AI-generated explicit media within 48 hours of receiving formal notice. Platforms that don't comply can face enforcement by the Federal Trade Commission.

The step-by-step takedown roadmap

Step 1

Preserve cryptographic evidence with SHA-256 hash

Save full URLs, timestamped screenshots of extortion messages, and calculate a local SHA-256 hash of the media file. Archive public web pages via archive.today so digital evidence is immutably preserved for law enforcement without redistributing the illicit imagery.

Step 2

Generate on-device hashes via StopNCII.org and Take It Down

Visit StopNCII.org (for adults) or Take It Down (for minors) to generate cryptographic hashes of the explicit images directly in your browser. The images never leave your device. Participating platforms (including Meta, TikTok, Reddit, and adult subscription platforms) cross-match these hashes to block distribution before images are posted.

Step 3

Issue 48-Hour TAKE IT DOWN Act and DMCA demands

Serve formal statutory removal demands under the federal TAKE IT DOWN Act and 17 U.S.C. § 512(c) notices to web hosting providers and online platforms specifying the infringing URLs. Covered platforms are required to remove reported non-consensual explicit media after receiving notice, and hosting providers must act upon notice to maintain statutory liability protections.

Step 4

Request emergency de-indexing from Google and Bing

Submit an expedited removal request through Google’s Personal Information Removal Request and Bing's Report NCII portal. Once a request is approved, the search engine removes the URLs from its results.

Frequently asked questions

What is the federal TAKE IT DOWN Act?

The federal TAKE IT DOWN Act criminalizes the publication of non-consensual intimate imagery (NCII) including AI-generated deepfakes and requires online platforms and search engines to remove reported synthetic intimate media within 48 hours of receiving notice.

How does StopNCII.org protect my images without uploading them?

StopNCII operates via cryptographic perceptual hashing directly on your device. Only numerical digital fingerprints (hashes) are submitted to participating tech platforms (including Meta, TikTok, Reddit, and major hosting networks), preventing the visual files from ever leaving your device while blocking re-uploads across the web.

Can search engines like Google remove deepfake images from search results?

Yes. Google provides an expedited removal process for non-consensual synthetic explicit images. Once approved, Google removes the URLs from search results globally and applies automated safeguards to prevent identical queries from returning the media.

What if a website hosting deepfakes ignores DMCA or removal requests?

Websites hosted overseas or that operate anonymously can be targeted via hosting providers (Cloudflare, AWS, OVH), domain registrars, and search engine delisting. Civil litigation under state deepfake statutes and federal criminal complaints through IC3 are also available.

How do I take down AI deepfake nudes within 48 hours under the TAKE IT DOWN Act?

Under the federal TAKE IT DOWN Act, covered online platforms are required to remove reported non-consensual explicit deepfakes after receiving formal notification. Serve a written notice specifying the exact infringing URLs, attaching proof of identity and a description of the synthetic manipulation. If a host or platform fails to act, they may face regulatory enforcement and lose statutory liability protections.

How do I preserve evidence of a deepfake without possessing or spreading explicit media?

Calculate a cryptographic SHA-256 hash of the media locally on your device, record all source URLs, capture full-page web archives via archive.today, and save uncropped chat logs and payment extortion demands. Never redistribute or forward the explicit imagery itself.

What should I do in the first 24 hours if someone threatens to leak a deepfake of me?

Do not pay the extortionist under any circumstances, as payments lead to escalating demands. Immediately capture screenshots of the threat message, sender account handles, phone numbers, and payment addresses. Submit client-side image hashes to StopNCII.org or Take It Down (for minors), block the extortionist across all channels, and contact the 988 Lifeline if feeling overwhelmed.

Can I sue someone for creating or sharing deepfakes of me, and what damages can I get?

Available damages vary by state and by claim. Talk to a lawyer about your options.

Does StopNCII or Take It Down ever see, store, or share my private intimate photos?

No. Both StopNCII.org and Take It Down utilize client-side perceptual hashing algorithms (PhotoDNA / PDQ) that execute entirely inside your local web browser. Your device generates a mathematical fingerprint string and uploads only that non-reversible hash. The actual visual images never touch any server or third-party network.