Deepfake Nudes: What to Do If You're a Victim (2026 Removal Guide)

**If you've discovered an AI-generated explicit deepfake of yourself online, the fastest path to getting it removed is: preserve evidence, hash-block it through StopNCII.org, reverse face search for every mirror, then file TAKE IT DOWN Act notices — which legally require covered platforms to remove the content within 48 hours.** The image is fake. The harm is real. The clock matters.

This guide is for adults who have just found AI-generated explicit imagery of themselves circulating online. It covers the exact 24-hour and 7-day playbook, your legal rights under the federal TAKE IT DOWN Act, and where to get free crisis support.

What counts as a deepfake nude, and is it illegal?

A deepfake nude is a sexually explicit image or video that uses AI to superimpose a real person's face onto a fabricated body, or to "undress" a real photo. As of 2026 it is treated the same as a real non-consensual intimate image (NCII) under U.S. federal law.

The TAKE IT DOWN Act (S.146), signed in May 2025, does two things:

1. Criminalizes the knowing publication of non-consensual intimate imagery — including AI-generated deepfakes — of identifiable adults and minors.
2. Requires covered platforms to remove flagged content within 48 hours of a valid victim notice and to make a reasonable effort to remove identical copies.

The notice-and-removal obligation became mandatory in May 2026, one year after enactment, and the Federal Trade Commission (FTC) enforces it. The key practical shift: platforms must remove *duplicates* once notified, not just the single URL you flag — which is exactly why reverse face search matters (see Step 4).

You are not alone, and you have options

Reports of AI-generated NCII have grown faster than any other category of image-based abuse over the past three years, per the Cyber Civil Rights Initiative (CCRI). There is a free crisis helpline, free hash-blocking services, and a federal law on your side. You have legal recourse, technical tools, and human help.

The first 24 hours: a checklist

1. Do not engage with the poster

The most common mistake is contacting the perpetrator. Don't. Engagement signals the threat is working, often escalates demands (especially in sextortion), and can complicate a criminal investigation. Save everything for the report.

2. Preserve evidence before you take anything down

Before requesting any takedown — and before blocking anyone — capture:

• A timestamped screenshot of the image in context (post, comments, URL bar visible).
• The full URL of every page hosting the image.
• The username and profile URL of the poster.
• Any messages, DMs, or emails from the perpetrator.
• The original source photo they used, if you can identify it.

Store copies outside your phone's camera roll. Law enforcement and platforms need provable timestamps.

3. Submit to the hash-sharing services

Two free services stop the image from being re-uploaded across most major platforms:

• StopNCII.org (for adults) — you hash the image *in your own browser*; it never leaves your device. Only the cryptographic hash is shared with participating companies including Meta, TikTok, Reddit, Bumble, OnlyFans, Pornhub, and Snapchat.
• NCMEC's Take It Down — same model, for anyone who was under 18 when the image depicts them.

Both block re-uploads. They do not remove existing copies — for that you need direct notices.

4. Run a reverse face search

Image-based abuse is rarely confined to one site. By the time most victims find the original post, mirrors typically exist on 5–20 other domains: image boards, "leak" forums, scraper sites, archive mirrors.

Upload a *clear, non-explicit photo of your face* to a reverse face search. Document every URL where the deepfake — or the source photo it was built from — appears. You'll need this list for Step 5.

5. File platform takedown notices

For each host, find its TAKE IT DOWN compliance page — most publish a form at `/take-it-down`, `/ncii`, or `/non-consensual-imagery`. Use the form, not general support email; it routes to the trust-and-safety queue with the 48-hour statutory clock attached. Include:

• Your full legal name and contact email.
• A sworn statement that the content depicts you (including in fabricated form).
• The specific URLs.
• The statutory basis: the TAKE IT DOWN Act (for U.S. platforms).

6. Report to law enforcement

• FBI — tips.fbi.gov or 1-800-CALL-FBI.
• IC3 — ic3.gov, the preferred route for sextortion involving crypto or wire-payment demands.
• Local police — many states have their own NCII statutes chargeable in parallel. Bring your evidence folder.

If a minor is depicted (even as a deepfake), this is child sexual abuse material under federal law. Report immediately to NCMEC's CyberTipline at report.cybertip.org or 1-800-843-5678.

The first week: reducing spread

After the initial takedowns, the second-order problem is search. Removed images can persist in cached results and archives for weeks:

• Google removal — request at google.com/webmasters/tools/legal-removal-request → "Personal information" → "Non-consensual explicit or intimate personal images."
• Bing removal — bing.com/webmaster/tools/contentremoval.
• Wayback Machine — email info@archive.org for NCII removal.

Mental health matters as much as the takedowns

Victims of image-based abuse consistently report PTSD-like symptoms: intrusive thoughts, sleep disruption, hypervigilance. This is a normal response to a violation — not weakness. Free support:

• CCRI crisis helpline — 1-844-878-CCRI (2274)
• RAINN — 1-800-656-HOPE (4673)
• Crisis Text Line — text HOME to 741741

What are your legal options against the perpetrator?

• Federal criminal — knowing publication of deepfake NCII is a federal offense under the TAKE IT DOWN Act.
• State criminal — most states have NCII statutes with deepfake provisions added since 2023.
• Civil — you may sue for damages under state law, intentional infliction of emotional distress, or defamation depending on the facts. Note the federal statute does *not* itself create a private right of action against the poster — civil suits rely on state law.

The Electronic Frontier Foundation and CCRI both maintain pro bono referral networks.

Frequently asked questions

Are deepfake nudes illegal in the US? Yes. Under the TAKE IT DOWN Act, knowingly publishing non-consensual intimate imagery — including AI-generated deepfakes — is a federal crime, and platforms must remove flagged content within 48 hours.

How do I find every copy of a deepfake of me? Run a reverse face search using a clear, non-explicit photo of your face. It surfaces mirrors across image boards, leak forums, and scraper sites so you can file takedowns in parallel.

How fast do platforms have to remove it? Covered platforms must remove flagged NCII within 48 hours of a valid notice and make a reasonable effort to remove identical copies.

The bottom line

You did nothing wrong. The image is a forgery, the federal law is on your side, and the tools to remove it are largely free. Document, hash, search, notify, report, monitor — in that order — and lean on the helplines built for exactly this moment. Set a reminder to re-run a reverse face search monthly for six months, because new mirrors do surface.