# Take It Down Act: What It Means If Your Image Is Posted The Take It Down Act explained for victims: the 48-hour removal duty, what a valid request contains, the criminal offenses, and where the law stops. --- The Take It Down Act is a United States federal law that does two things about intimate images posted without consent, including images forged by software. It makes publishing them, or threatening to, a federal crime, and it requires covered online platforms to remove a depiction within 48 hours of a valid request from the person shown, and to make reasonable efforts to remove known identical copies. The second part is the one that changes a victim's week. Before it, a platform's removal policy was a promise the platform made to itself. Since the notice-and-removal duty took effect on May 19, 2026, the duty is written in federal law, and the Federal Trade Commission (FTC) enforces it. That does not make every request succeed, and it does not reach every site. This guide explains what the text says, how to write a request that fits it, what the criminal side covers and where the law stops. It is written for the person shown, or for someone helping them, and it is deliberately about the law itself. It gives no detail on how images are made or found. Being targeted is not a failure on your part. Statutes are read by courts and regulators, and this is information, not legal advice: a lawyer in your state decides how it applies to you.

48 hoursthe longest a covered platform has to remove a depiction after a valid request

May 19, 2026when the FTC says its enforcement of the removal duty took effect

$53,088the civil penalty per violation the FTC states for a platform that breaks the duty

Source: the Act as published on govinfo.gov, and the FTC's Take It Down Act page, both read for this guide.

The short version

The Act has a criminal part, which targets the person who publishes or threatens to publish, and a platform part, which gives you a right to ask for removal.
The platform duty covers real intimate images and digital forgeries, and it applies to covered platforms only, so a request to a site outside the definition may be ignored lawfully.
A valid request is in writing and has four parts: a signature, enough information to find the image, a good-faith statement that it was published without your consent, and your contact details.
The 48 hours run from receipt of a valid request. A vague or incomplete message may not start the clock.
The law does not remove anything from search results by itself, does not reach private channels, and does not replace the police, a lawyer or the other routes.

## What the Take It Down Act does and does not do The Act has two working parts. Section 2 adds criminal offenses for knowingly publishing an intimate visual depiction of an identifiable person without consent, and for threatening to do so. Section 3 creates the notice-and-removal process that platforms must run. The two are separate. You can use the platform process without any prosecution, and a prosecution does not depend on a platform acting. It matters what the Act is not. It is not a general right to have lawful content removed. It does not create a national registry of images, and it does not give the FTC power to order one specific post down on your behalf. The FTC enforces the platform duty as a regulator, through penalties for platforms that fail the duty, and the FTC page read for this guide does not say that it resolves individual complaints. The Act sits beside other routes: a platform's own report form, hash matching, a search engine's removal form and a court order each do a different job. What it adds is a federal deadline attached to a written request. ## Which platforms the removal duty covers The duty applies to a "covered platform". The text defines it as a website, online service, application or mobile application that serves the public and either primarily provides a forum for user-generated content, or regularly publishes, curates, hosts or makes available non-consensual intimate depictions as part of its regular trade or business. The definition excludes broadband internet access providers, email services, and services whose content is mostly preselected by the provider, where chat or comment features are incidental to that content. The FTC describes the reach in plainer terms: its page names social media, messaging, image or video sharing, and gaming platforms as examples, and says that sites primarily hosting user-generated content, or sites that publish or host intimate content shared without consent, may fall under the definition. The FTC also states that the Act's protections are not limited to people who hold an account on the platform. You do not need to be a user to ask. Whether a particular service is covered is a fact question. A large social network is plainly inside. A small forum is probably inside if it mainly carries user posts. A personal blog run by one person, an email thread and a closed group chat sit in grayer territory, and a site that is itself built to publish this material is inside the second limb of the definition, although such sites are often the least likely to respond. The table below sorts the usual cases by how well the Act fits. It states general reading of the definition, not a ruling on any service.

Where the image sits	Does the Act fit	Use first	Back-up
Large social or video platform	Yes, plainly a forum for user content	The Section 3 request	The platform's own report form
Forum or image board	Likely, if it mainly hosts user posts	The Section 3 request	Host and registrar abuse contacts
Site built to publish this material	Within the definition, but compliance is doubtful	The request, kept as evidence	Hosting provider, search removal, a lawyer
One person's own website	Unclear, a fact question	A direct request to the owner and host	Search removal, a lawyer
Email or private message	Excluded for email; messaging is a gray area	Police and the platform's report tool	A lawyer, a court order

## What a valid removal request must contain The text sets out what a request must include. It is a notice in writing from the identifiable person or an authorized representative, and it must contain four things. Each one matters, because a platform that receives a message missing one of them can say the 48-hour clock never started.

Build a request that fits the statute

Sign itInclude a physical or electronic signature. If the platform's form has no signature field, ask a lawyer how to supply one.
Identify the exact locationGive information reasonably sufficient to locate the depiction: the full address of each post, the account name and the page title. Describe the content in one plain sentence. Do not attach the image.
State the lack of consentWrite a brief statement of your good-faith belief that the depiction was published without your consent. If it is a forgery, say it is synthetic or manipulated and that you did not consent to its creation or publication.
Add contact informationProvide an address the platform can answer at. Use an email address you can protect from public view, or a lawyer's address if one is acting for you.
Use the platform's noticeA covered platform must publish a clear, plain-language notice of how to submit a request. Use that route and its form. A message to a general support address may not be treated as a valid request.
Log the filingRecord the date and time, the platform, the reference number and the text you sent. The 48 hours are counted from receipt, so the log is your proof of when the clock started.

Two details deserve attention. First, the text allows an authorized representative to file, which means a lawyer, an advocate or a trusted helper can act so that you do not have to handle the material yourself. Second, the text says a depiction's removal must be "as soon as possible" and in any case within 48 hours of receipt. That is a ceiling, not a target. The FTC says platforms should give each request an identifying number so the requester, the platform and law enforcement can refer to the same request. That is a recommendation in the FTC's business guidance, not a requirement the FTC page states, so do not assume you will receive a reply. Keep the number and the screenshot of the confirmation if the platform gives one. ## Real images and digital forgeries: how the law treats each The Act covers two kinds of depiction, and the difference matters when you describe your case. An authentic depiction is a real intimate image. A digital forgery, in the text's terms, is an intimate visual depiction of an identifiable person created through the use of software that, viewed as a whole by a reasonable person, is indistinguishable from an authentic depiction. The identifiable person is someone who appears in it, in whole or in part, and whose face, likeness or other distinguishing characteristic is shown. For criminal purposes the text sets conditions that differ for adults and minors, and they are strict. For an authentic image of an adult, the offense needs, among other elements, that the person publishing knew or should have known there was a reasonable expectation of privacy, that what is shown was not voluntarily exposed in a public or commercial setting, that it is not a matter of public concern, and that publication was intended to cause harm or does cause psychological, financial or reputational harm. The offense for a forgery of an adult has the same last three elements, with publication without the person's consent in place of the privacy element. For a minor, the test turns on intent: to abuse, humiliate, harass or degrade the minor, or to arouse or gratify anyone's sexual desire. The text also says that consent to the creation of a depiction is not consent to its publication, and that sharing with one person is not consent to publication by others. The platform duty is wider than the crime. It asks whether the depiction was published without your consent, and your good-faith statement starts the process. A platform does not have to prove the elements of an offense before it acts. That is why the removal request is usually the faster tool, and why the criminal route belongs with the police and prosecutors.

Situation	Platform request	Criminal offense	Practical note
Real image of an adult, shared without consent	Available	Possible, if the privacy, public-concern and harm elements are met	Report to police if there is a threat or repeated posting
Synthetic image of an adult	Available	Possible, under the digital forgery offense	Say in the request that it is synthetic
Image of a person under 18	Available	Possible, with an intent test	Do not copy it; police and child-protection services come first
You posted it yourself	You can still ask the platform	The Act excludes a person publishing a depiction of themselves	Ask under the platform's policy if a copy was reposted by others
A threat to post, with no post yet	Nothing to remove yet	Threats are separate offenses	Keep the messages, do not pay, contact the police

## The criminal side: offenses, exceptions and penalties Section 2 puts the offenses in federal law, in the communications statute. Publishing must be knowing and must occur through an interactive computer service in interstate or foreign commerce. The statute lists exceptions, including lawful law enforcement and intelligence activity, good-faith disclosures to law enforcement, in legal proceedings, for medical, scientific or educational purposes, to report unlawful content, or to seek help with an unsolicited depiction, and disclosures reasonably intended to help the person shown. A person publishing a depiction of themselves is outside the offense. Child sexual abuse material is handled under other laws, which the Act leaves in place. The maximum prison terms are in the text. Publishing an authentic or forged depiction of an adult carries up to two years, and of a minor up to three years, in each case with a fine. A threat is an offense when it is made to intimidate, coerce, extort or cause mental distress. Threatening to publish an authentic depiction is punished at the same level as the publishing offense. Threatening to publish a digital forgery carries up to 18 months for an adult and up to 30 months for a minor. Courts must also order forfeiture of the material and the proceeds, and restitution in the manner of an existing statute on sexual exploitation.

Maximum prison term in the statute, in monthsUpper bound only, in months, fine not shown

Publish, minor36 months

Threaten forgery, minor30 months

Publish, adult24 months

Threaten forgery, adult18 months

Source: the Act's penalty provisions as published on govinfo.gov. These are maximums; sentencing in a real case depends on the court.

The criminal route has a different pace and purpose. It is run by prosecutors, not by you, and you cannot file a charge yourself. A police report starts the process, creates a record and may open the way to restitution. Many victims use it alongside the platform request, not instead of it, because a removal request is quick and a prosecution is slow and may never be brought. ## What happens after you file: the 48 hours and the timeline The clock starts when a covered platform receives a valid request. Within that window, the platform must remove the depiction and make reasonable efforts to find and remove known identical copies. The FTC states that people do not need to report duplicates themselves. The word "known" is important: copies that have been altered, cropped or re-encoded may not be identical, and a platform is not obliged to hunt for every variant. These timings describe our experience in files of this kind, and they are not statistics or promises. A platform that is well organized usually acts well inside the window. A small or hostile service may not act at all.

Stage	Usually	What you are doing
Hour zero	Same day	Safety check, record the page address, send the signed request through the platform's notice
Within 48 hours	The statutory ceiling	Watch for removal, keep the reference number, note the time of any reply
Day three	If no action	Resend once through the proper channel, then file a complaint with the FTC
First weeks	One to four weeks	New copies, requests to other platforms, search removal, a lawyer if the host refuses
Later	Months	Police progress, restitution, monitoring for reposts

If a platform ignores a valid request, or has no removal process at all, the FTC points individuals to TakeItDown.ftc.gov to report it. The page loads only with JavaScript, so its detailed content could not be read for this guide, and what the FTC does with a complaint is not stated here. The FTC enforces the duty as a regulator, so treat a complaint as a way to put the failure on record, not as a way to get a particular post removed. Keep pursuing the other routes in parallel. ## Where the Act stops: limits, risks and criticism Knowing the limits saves time and avoids false hope. - **It does not touch search results.** A platform removal takes the image off that platform. A search engine still lists whatever it has indexed until it is asked, and each engine has its own form. The Act does not oblige a search engine to act. - **It does not reach everything.** Private chats, encrypted channels, files on a device and sites outside the definition or outside US reach are beyond it in practice. - **It does not guarantee a result.** A platform may reject a request it finds incomplete, or decide that the content is not covered. The statute gives platforms protection from liability for good-faith removal, which pushes them toward removing, but that is not a promise that each request succeeds. - **It does not set out what happens when a platform refuses a valid request** other than FTC enforcement. There is no private right of action in the portions of the text read for this guide, so the route for a refusal is a complaint, a lawyer or another channel. - **Misuse is a live concern.** The Electronic Frontier Foundation argued, in its analysis of the bill, that the takedown provision lacks safeguards against frivolous or bad-faith requests and could be used to remove lawful speech such as satire or journalism, and that short deadlines push smaller services toward automated filters. It also raised unclear treatment of encrypted services. Those are the views of one commentator on the bill, not findings, but they explain why a clear, truthful and specific request is the safest kind to send. ## Choose the right route for each copy A single incident usually involves several kinds of copy. Match each to the tool that fits it.

Copy is on	Lead with	Why	If it fails
A mainstream platform	Section 3 request	A federal deadline and FTC oversight apply	FTC complaint, then a lawyer
A search engine's results	The engine's removal form	The Act does not bind the index	Repeat per engine, then contact the host
A rogue or foreign site	Host and registrar contacts	The site may ignore US law	Court order, search removal as the fallback
A private group or message	Police report	No public page to request against	Platform report tool, a lawyer
Re-uploads on partner platforms	Hash matching	It blocks known files from returning	Direct reports to each new copy

### An invented scenario This scenario is invented, with generic parties. Assume a woman, "Sam", learns that an intimate photo she shared privately with a former partner has been posted by an anonymous account on a large image-sharing platform. The photo is real. The account posted it with her name in the caption. Sam first checks her safety and speaks to a friend by describing, not showing, what she found. She records the post's address, the account name and the date, and she does not download the image. On the platform she finds the notice describing its removal process and fills in the form: her signature, the exact address, a sentence stating that she did not consent to publication, and an email address kept for this purpose. She notes the reference number and the time. The platform removes the post the next morning. Two days later a friend tells her the account has reposted it under a new address. Sam sends a second request for the new post, and she reports the account's remaining posts. In week two she makes a police report with her log, because the caption used her name and the posting was repeated. She then asks the search engines to stop listing the old address. In this invented case the result is removal from the platform, a police record and delisting in search, not removal from every corner of the internet. That is a realistic outcome. ## Get help when you do not want to handle the filings yourself You do not have to file alone. Asking a lawyer or an advocate to act as your authorized representative keeps the material away from you and puts a firm hand on the deadline. A specialist can also check that each request meets the four conditions, track the 48 hours, escalate to hosts and search engines, and keep a record that serves a police report or a court filing. Reputation Partners handles this kind of file, and it starts with a private audit of where the images sit and which route fits each copy.

If this is happening to you now

Record the page addresses without saving the images, send a signed request through each platform's notice, and contact the police if there is a threat or the person shown is under 18. If you want a team to handle the filings and the follow-up, see leak and intimate content removal.

## Questions people ask ### Is the Take It Down Act in force now? Yes, in two stages. The criminal provisions took effect when the Act was signed on May 19, 2025. The platform removal duty had a one-year compliance period, and the FTC states that it enforces the removal section from May 19, 2026. Check the FTC page for any later guidance before you rely on a detail. ### Who can submit a takedown request? The person shown in the depiction, or an authorized representative acting for them. The FTC states that protection is not limited to people with an account on the platform. The request must be in writing, signed, specific about where the content is, include a good-faith statement of non-consent and give contact details. A lawyer or advocate can file for you. ### Does the Act cover AI-generated images? Yes. The text defines a digital forgery as an intimate visual depiction of an identifiable person created through the use of software that a reasonable person would find indistinguishable from an authentic one. Forgeries are covered by parallel offenses and by the platform removal duty. In your request, say plainly that the image is synthetic and that you did not consent to it. ### What if the platform ignores my request? First check that your request met the four conditions and was sent through the platform's notice. If it did, resend once, then report the failure to the FTC through its Take It Down site. Also contact the host, ask search engines to stop listing the page, and speak to a lawyer. The FTC enforces the duty as a regulator and may not act on one case. ### Can I be prosecuted if I share an image to report it? The statute lists exceptions for good-faith disclosures, including to law enforcement, in legal proceedings and to report unlawful content. Even so, do not forward intimate images to friends or post them, and never copy an image of a minor. Describe the content in words and give the page address to the police or the platform. ### Does the Act work outside the United States? The text reaches platforms that serve the public and offenses committed through interstate or foreign commerce, but how it applies to a foreign site or a victim abroad was not settled by the sources read for this guide. Many platforms apply one process worldwide, which helps. For a site beyond reach, host abuse contacts, search removal and local law are the routes.