The Federal Trade Commission has published new consumer guidance spelling out exactly how people can get intimate images removed from the internet when those images were shared, altered or fabricated without consent. The alert, issued this month, arrives as enforcement of a federal law targeting nonconsensual intimate imagery, including AI-generated deepfakes, ramps up across major platforms. Rather than leaving victims to guess at scattered reporting forms spread across dozens of different services, the agency lays out a specific sequence of steps, along with a legal deadline platforms must now meet. The guidance treats the problem as a solvable administrative process rather than an unavoidable cost of being online.
What the Take It Down Act Actually Covers
The guidance centers on the Take It Down Act, a federal law that applies to platforms hosting user-generated content and covers two distinct situations: images shared without the subject’s consent, and images that have been digitally altered or entirely fabricated to depict someone in an intimate way. Covered platforms are legally required to provide a mechanism for reporting this kind of content, separate from ordinary community-guidelines complaints, and the law sets a firm timeline for what happens once a report is filed. That combination, a specific legal category plus an enforceable deadline, is what distinguishes this process from the takedown requests people have long been able to file under a platform’s general terms of service.
A Law With a Built-In Runway Before Enforcement
The Take It Down Act itself became law on May 19, 2025, and its criminal provisions targeting the distribution of nonconsensual intimate imagery, including AI-generated deepfakes, took effect immediately upon signing. The platform-facing obligations behind this month’s guidance came with a longer runway: covered services had a full year to build a compliant reporting process before the notice-and-removal requirement, and the 48-hour deadline attached to it, actually took effect on May 19, 2026. That same month, the FTC sent formal compliance letters to fifteen major platforms, including Alphabet, Amazon, Apple, Meta, Microsoft, Reddit, Snapchat, TikTok and X, reminding each of its new legal obligations before enforcement began in earnest. Platforms that now fail to meet the 48-hour deadline face potential civil penalties of more than $53,000 per violation, on top of remedies such as restitution, disgorgement and mandatory compliance programs the agency can pursue in a law enforcement action.
The 48-Hour Removal Window
Once a valid report is submitted, platforms covered by the Take It Down Act must remove the image, along with any copies of it circulating on the same service, within 48 hours. Reports can typically be filed directly from the post where the image appears, often by opening a menu near the content and selecting a reporting option, or by going through a platform’s dedicated help or support pages. Because interfaces vary widely between services, tracking down the correct reporting path on an unfamiliar platform can be one of the more time-consuming parts of the process, which is part of why the FTC’s guidance points people toward a directory of contacts for major platforms rather than assuming everyone will find the right menu on their own.
A Digital Fingerprint That Blocks Reposting
Beyond reporting a single instance of an image, the FTC guidance highlights StopNCII.org, a free tool operated by the Revenge Porn Helpline that is designed to stop an image from resurfacing after it has already been removed once. Someone can select the image from a phone, tablet or computer, and the tool converts it into a “digital fingerprint” without uploading the image itself to the service’s servers. That fingerprint is then shared with participating platforms, which scan uploads for matches and block the image before it is posted rather than waiting for another report after the fact. The approach is aimed squarely at the pattern of images resurfacing on new accounts or different platforms after an initial takedown.
What Happens if a Platform Ignores the Deadline
The Take It Down Act’s requirements are not merely a suggestion for platforms to consider. If a covered service fails to remove a reported image within the 48-hour window, the FTC’s guidance directs affected individuals to escalate the complaint directly to the agency through its TakeItDown.ftc.gov portal. That escalation path gives the commission visibility into which platforms are complying with the law and which are not, information that could factor into future enforcement action. The agency has previously outlined what enforcement of the law will mean in practice, and this new alert functions as the practical companion to that broader explanation, translating a legal requirement into a specific set of actions someone can take today.
How This Alert Fits a Broader Enforcement Push
This month’s guidance builds on an earlier alert the FTC published in May, explaining what enforcement of the Take It Down Act would mean once the law’s platform obligations took effect. Read together, the two alerts trace a shift from explaining a new legal requirement to walking people through how to actually use it, complete with links to a partner directory, a dedicated tool for pre-emptively blocking reposts, and a direct line to the FTC when a platform does not comply. For anyone dealing with an image shared or fabricated without consent, that progression means the practical questions, where to report, how fast a platform must act, and what recourse exists if it does not, now have documented answers rather than a patchwork of platform-specific policies to sort through individually.
This article was created with the assistance of AI and reviewed by an editor.
More from Morning Overview
