The TAKE IT DOWN Act One Year Later: What Victims Need to Know in 2026

One year ago this week, on May 19, 2025, President Trump signed the TAKE IT DOWN Act into law — the first federal statute in the United States to criminalize the non-consensual publication of intimate imagery, including AI-generated "deepfake" nudes. Twelve months on, the law is reshaping how platforms, victims, and law enforcement respond to image-based abuse.

This guide explains what the law actually requires, where enforcement stands, and how a reverse face search fits into a real-world takedown workflow.

What the TAKE IT DOWN Act Actually Does

The Tools to Address Known Exploitation by Immobilizing Technological Deepfakes on Websites and Networks Act (S.146) does two distinct things:

1. Criminalizes the knowing publication of non-consensual intimate visual depictions — including AI-generated ones — of identifiable adults and minors.
2. Requires covered platforms to remove such content within 48 hours of a valid victim notice and to make a reasonable effort to remove identical copies.

The notice-and-removal obligation took effect one year after enactment — meaning compliance became mandatory in May 2026. The Federal Trade Commission is the primary enforcement body for the takedown provision and treats violations as unfair or deceptive practices.

According to the bill text on Congress.gov, the law applies broadly to any "covered platform" that hosts user-generated content and is accessible to the public, with narrow carve-outs for ISPs, email, and certain cloud-storage services.

Why This Law Matters for Reverse Face Search Users

Before TAKE IT DOWN, victims of non-consensual intimate imagery (NCII) had a patchwork of remedies: a handful of state laws, voluntary platform policies, and the DMCA (which technically only protects copyright holders, not victims). The new federal floor changes the calculus in three ways:

• Identical-copy obligation. Platforms must remove duplicates once notified — not just the URL the victim flagged. That makes reverse-search tooling materially more valuable, because finding every copy is now actionable, not just informational.
• Deepfake parity. AI-generated nudes are treated identically to real photos. A perpetrator can no longer hide behind "it isn't really her."
• Criminal exposure. Knowingly publishing NCII is now a federal crime, with enhanced penalties when minors are involved.

The Electronic Frontier Foundation has flagged free-expression concerns with the law's takedown timeline, and we'd encourage anyone using these tools to read their analysis. Our position: the law is a meaningful step for victims, and we operate within it.

A Practical Takedown Workflow

If you or someone you know is targeted, the following sequence has the highest success rate:

Step 1 — Preserve Evidence Before You Report

Before sending any takedown notice, capture:

• The full URL of the offending page
• A timestamped screenshot (most operating systems embed this automatically)
• The username/handle that posted the content
• Any text accompanying the image

Law enforcement and platform trust-and-safety teams need this to act.

Step 2 — Run a Reverse Face Search

A single takedown rarely solves the problem. Image-based abuse content is typically mirrored across dozens of sites — image boards, "leak" aggregators, telegram-mirror forums. A face search surfaces these mirrors so you can submit notices in parallel rather than playing whack-a-mole over weeks.

Upload the original photo (not the offending one) and review every match. Document each URL.

Step 3 — Submit Notices to Major Platforms

For most victims, three notice channels cover the majority of distribution:

• StopNCII.org — a free service run by the Revenge Porn Helpline that creates a cryptographic hash of an image and shares it with participating platforms (including Meta, TikTok, Reddit, Bumble, OnlyFans, Pornhub) so they can proactively block uploads.
• NCMEC's "Take It Down" service — operates similarly for minors. The image never leaves the victim's device; only a hash is shared.
• Direct platform notices — every major platform now publishes a TAKE IT DOWN compliance URL. Use the form, not a general support email — the form routes directly to the trust-and-safety queue with the 48-hour clock attached.

Step 4 — Report to Law Enforcement

For criminal referrals:

• FBI — file at tips.fbi.gov or call 1-800-CALL-FBI.
• IC3 — the FBI's Internet Crime Complaint Center accepts written reports at ic3.gov.
• Local jurisdiction — most states also have their own NCII statutes that can be charged in parallel.

The FBI's Internet Crime Report consistently shows extortion and "personal data breach" categories among the highest-loss complaint types, and federal prosecutors have increasingly pursued NCII cases under the new statute.

Step 5 — Monitor

After takedowns are processed, set up ongoing monitoring. Reverse face search can be run on a schedule to catch re-uploads.

What's Changed in the First Year

A few patterns have emerged from the first year of compliance:

• Faster removal at the top of the funnel. Major social platforms have hit or beaten the 48-hour SLA in published transparency reports.
• Long-tail mirrors remain the hard problem. Smaller "leak" sites and offshore hosts are slower to comply, which is exactly where automated discovery (face search + hash matching) carries the load.
• Deepfake reports are growing faster than real-photo reports. Open-source tracking by the Cyber Civil Rights Initiative shows AI-generated NCII as the fastest-growing category of new abuse reports.

What the Law Does Not Do

A few important limits to understand:

• It does not create a private right of action against the perpetrator under federal law. Civil suits still rely on state statutes.
• The takedown obligation runs to platforms, not to search engines — so removed images can still surface in cached search results until the underlying host complies.
• It does not override platform editorial discretion for newsworthy or public-interest content involving public figures.

Bottom Line

The TAKE IT DOWN Act is the strongest federal tool U.S. victims of image-based abuse have ever had. Combined with reverse face search to map the full distribution surface, and with hash-sharing services like StopNCII and Take It Down for proactive blocking, the practical odds of getting non-consensual imagery scrubbed from the open web are higher than at any point in the past decade.

If you are a victim, you are not without recourse. Document, search, notify, report, and monitor — in that order.