Something is spreading right now → Talk to a person →
Do these three things in the next twenty minutes
Screenshot the page, set up StopNCII, then file the Google removal. In that order. All three are free.
1. Screenshot the URL, not the content.
Screenshot the whole browser window so the address bar shows. Copy each URL into a plain text file, one per line. Every later step needs it.
Don't save the files, don't repost, don't message the uploader. All three send traffic to a page that sells traffic.
2. Set up StopNCII.org.
StopNCII is free, run by SWGfL, the UK charity behind the Revenge Porn Helpline. You select the files on your own device, and only a hash of each one leaves it.
Participating platforms match new uploads against that hash and block them before they post. The published list includes Meta, TikTok, Reddit, Snap, Bumble, OnlyFans and Google Search VERIFY. It blocks the next upload, not the copies already live.
Not NCMEC. NCMEC runs a consumer tool called Take It Down, and it only covers imagery of someone who was under 18 when it was made. That is a different thing from the TAKE IT DOWN Act, which is the adult law. StopNCII is the adult route.
3. File the Google in-SERP removal.
Search your stage name. Use the three dots beside the listing, or on the image.
Google runs a removal route for personal explicit imagery published without consent. Google's published description of this route says it asks for no proof of ownership and opens an opt-in that removes future duplicates from results VERIFY. Submit the URLs in a batch. That is why this step outranks the copyright notice.
Bing does not inherit Google's decisions. Run the same URLs through Bing's own forms VERIFY.
Removed and delisted are two results, not one. Removed means the URL returns 404 or 410, or is no longer served. Delisted means it stops appearing on Google and Bing for your name while the file keeps existing. Your report counts them in separate columns and so does your contract. We don't control anyone else's servers, so we never tell you a file has been deleted.
The hard stop
If any content involves someone under 18, this stops being a business matter. Preserve it. Don't download or forward it. Report it to the NCMEC CyberTipline and call a lawyer the same hour.
Or we do the finding part
Our detection maps the copies it can find under your names, and a person verifies every one. Free report in 48 hours. Two fields, no card, no account.
The rest of the playbook, free
This is what we do, written so you can do it without us. The first site takes an afternoon.
Who to send the notice to
The US Copyright Office keeps a public directory of designated agents at dmca.copyright.gov. Search the site's operating name. If it isn't there:
No agent for this site appears in the US Copyright Office directory. What follows from that for this operator is not something we can tell you. Send the notice to the host instead.
WHOIS gives the registrar. A DNS lookup gives the host. Cloudflare name servers mean the host is hidden.
The notice itself has six required elements under the US copyright takedown law (17 U.S.C. § 512(c)). Two are sworn statements you write yourself, and we don't draft those for anyone.
Cloudflare forwards your name
Cloudflare does not host the content and will not remove it. Its abuse form forwards your complaint to the origin host and names it. Expect 3–7 days.
Its published policy says the complaint reaches the site operator, your name and contact details attached. Reporting a leak site can hand your name to the person running it.
Telegram
Telegram takes reports in-app, at an abuse address, and at a copyright address VERIFY. Channels rebuild within hours. It is the hardest surface anyone works, including us.
These windows are what hosts, search engines and platforms publish, or what the published procedure commonly takes. They are not our results, and they are not a commitment. We do not publish a removal rate or an average turnaround, and we will not quote you one.
Before you file under your own name
A notice you file under your own name becomes a public record. Google forwards copyright removal notices to the Lumen Database, which is public, searchable, and Harvard-hosted. The record reads, in substance, "[legal name] asked Google to remove these URLs", with the URLs attached. That is a directory of your leaks with your real name on it.
We file under our name, never yours. How we keep your name out of public records →
What is actually happening
One scraper with a paying session pulls the whole library, and mirrors appear within hours. The sites sell ads and harvest card details from your fans, so pressure on their money moves them.
This isn't a one-time event you clean up. It's suppression you maintain. Anyone who kept a copy can re-upload it.
When it stops being an afternoon
Six rungs. The host notice first, after a logged fair-use screen. Search delisting in parallel, because it is the fastest rung and needs nobody's cooperation. Then Cloudflare, which removes nothing but makes the origin host identify itself. Then upstream: the transit provider, the registrar, and the ad networks paying the site. Then the statutory routes, which reach places copyright cannot. Then a handoff to your own attorney, which we refer and never do in-house.
Every timeline lives on one page, so it can only be wrong in one place.
Under about ten URLs and one name, do this yourself. Pay someone when the weekly hours stop being worth what they cost you, not before.