Legal Guide · 14 min read · March 6, 2026

DMCA Takedown Request: Step-by-Step Guide to Remove Photos

Learn how to file a DMCA takedown request to remove leaked or stolen photos from any website. Free template, step-by-step process, and common mistakes to avoid.

A DMCA takedown request is a formal legal notice that demands a website or hosting provider remove content that infringes your copyright — including intimate photos or videos posted without your permission. If your private images have been uploaded to a website you didn’t authorize, the Digital Millennium Copyright Act (DMCA) gives you the legal power to force their removal, even if the website is hosted overseas.

This guide walks you through exactly how to file a DMCA takedown notice yourself, what information you need, which platforms to send it to, and what to do if the site ignores your request. We also cover a critical risk most guides don’t mention: filing a DMCA yourself exposes your real name and contact information to the website — and often to the person who uploaded your content.

In this guide:

What Is a DMCA Takedown and Why Does It Matter?

The DMCA is a United States federal law that protects copyright holders from having their work distributed without permission online.

Here’s why it matters for leaked photos: if you took a photo or video of yourself, you own the copyright to that image — automatically, without needing to register it. This means any website hosting that image without your authorization is committing copyright infringement, and you have the legal right to demand its removal.

When a website receives a valid DMCA takedown notice, U.S. law requires them to remove the content “expeditiously” to maintain their legal protection (known as “safe harbor”). Most legitimate platforms comply within 24–72 hours. Even websites hosted outside the United States often comply because their hosting providers, CDN services, and domain registrars are frequently U.S.-based and subject to DMCA obligations.

The DMCA is not the only legal tool available. The Take It Down Act — signed into law in May 2025 — specifically addresses non-consensual intimate images (including deepfakes) and doesn’t require copyright ownership. The EU’s GDPR provides a “right to erasure.” But for copyright-holding victims, the DMCA remains one of the fastest and most widely recognized removal mechanisms on the internet.

What You Need Before Filing

Before drafting your DMCA takedown notice, gather the following:

Proof you own the copyright. If you took the photo or video yourself (including selfies, photos taken on your phone, or content you created for platforms like OnlyFans), you are the copyright holder. You don’t need a formal registration — copyright exists from the moment of creation. However, if someone else took the photo (an ex-partner, a photographer), they may hold the copyright, which complicates your DMCA claim. In that case, the Take It Down Act may be a better path.

The exact URLs of the infringing content. You need the specific page URL where each infringing image or video appears — not just the website’s homepage. Right-click the image, copy the image address, and also copy the page URL from your browser’s address bar. Save both.

Your own evidence of original ownership (optional but helpful). If you have the original image file on your phone or camera roll with metadata intact (date taken, device information), save it. This strengthens your claim if the website challenges your notice.

Your contact information. This is where the critical trade-off comes in. A valid DMCA notice requires your full legal name, physical address (or mailing address), email address, and a signature (electronic is fine). This information is shared with the website operator and is often forwarded to the uploader. For victims of revenge porn or sextortion, this exposure can be dangerous.

A secure folder for documentation. Save copies of every notice you send, every response you receive, timestamps, and screenshots showing the content before and after removal. This evidence matters if you need to escalate.

How to File a DMCA Takedown Request — Step by Step

Step 1: Identify who to contact

Your DMCA notice should go to the party most likely to act quickly. The order of priority:

The website itself. Most websites have a designated DMCA agent or abuse contact. Look for links labeled “DMCA,” “Copyright,” “Legal,” or “Report Abuse” — usually in the site footer. Many adult sites have dedicated removal forms.

The hosting provider. If the website has no DMCA contact or doesn’t respond, find their hosting provider. Use a WHOIS lookup tool to find the hosting company, then locate the host’s abuse contact email.

The CDN provider. If the site uses a content delivery network like Cloudflare, you can also file with the CDN. Cloudflare’s abuse form is at cloudflare.com/abuse. Note that CDN providers typically forward your notice to the site operator rather than removing content directly.

The domain registrar. As a last resort, contact the domain registrar (also visible in WHOIS results) to report the infringing domain.

Step 2: Draft your DMCA takedown notice

A valid DMCA notice under 17 U.S.C. § 512©(3) must contain six specific elements. Here is what to include:

1. Identification of the copyrighted work. Describe the photo or video you own. Example: “A photograph of myself taken on [date] with [device], stored in my personal camera roll.”

2. Identification of the infringing material with specific URLs. List every URL where the infringing content appears. Be specific — provide the exact page URL and, if possible, the direct image URL.

3. Your contact information. Your full legal name, mailing address, email address, and phone number.

4. A good faith statement. Include this sentence: “I have a good faith belief that the use of the copyrighted material described above is not authorized by the copyright owner, its agent, or the law.”

5. An accuracy statement under penalty of perjury. Include this sentence: “I swear, under penalty of perjury, that the information in this notification is accurate and that I am the copyright owner or am authorized to act on behalf of the owner.”

6. Your signature. A physical or electronic signature. Typing your full name with “/s/” before it is accepted as an electronic signature (e.g., “/s/ Jane Smith”).

Step 3: Send the notice

Send your completed notice to the website’s DMCA agent via email. Use a clear subject line like “DMCA Takedown Notice — Unauthorized Intimate Images.” If the site has a web form, use that instead — it often reaches the right person faster.

Keep a copy of everything you send, including the date and time.

Step 4: Wait for the response

Most platforms respond within 1–5 business days. If the content is removed, verify by visiting the URL directly. If the platform acknowledges your notice but hasn’t removed the content within a week, send a follow-up referencing your original notice.

Step 5: If the site doesn’t comply — escalate

If the website ignores your notice:

Escalate to their hosting provider. Re-send your DMCA notice to the hosting company’s abuse contact. Hosting providers have their own legal obligation to act on valid DMCA notices.

File with Google. Even if the source site won’t remove content, you can request Google de-index the page so it doesn’t appear in search results. Use Google’s legal removal request tool.

Escalate through the infrastructure chain. If the hosting provider also ignores you, escalate to the CDN provider, then the domain registrar. Each layer of infrastructure has an abuse process.

Consider legal action. If all else fails, consult an attorney who specializes in internet law or contact the Cyber Civil Rights Initiative (844-878-CCRI) for guidance.

Where to Send Your DMCA Notice

Here are the DMCA/removal contact points for the most common platforms where leaked content appears:

Platform How to Report
Pornhub pornhub.com/content-removal
XVideos xvideos.com/contact (select “Content removal”)
xHamster xhamster.com/content-removal
Reddit reddit.com/report (select “Intimate content”)
Google Search Google Legal Removal
Facebook / Instagram In-app reporting → “Intimate images shared without consent”
Twitter / X help.twitter.com/forms/dmca
Telegram telegram.org/dmca
Cloudflare (CDN) cloudflare.com/abuse

For sites not listed here, use a WHOIS lookup to find the hosting provider’s abuse contact, then send your DMCA notice there.

How Privacy Leak Simplifies This Process

Filing a DMCA yourself works — but it has two significant drawbacks.

First, your personal information is exposed. Your real name, email, and mailing address are shared with the platform and typically forwarded to the uploader. For victims of revenge porn, sextortion, or stalking, this creates real safety risks.

Second, you have to find every copy yourself. Leaked images rarely stay on one site. They get scraped, re-uploaded, and shared across dozens of platforms — many of which you’ve never heard of and that search engines don’t index.

Privacy Leak solves both problems:

Discovery. Privacy Leak’s facial recognition scans your face across hundreds of millions of indexed images on adult platforms, finding copies on obscure sites that manual searching would never reach. The scan takes approximately 30 seconds.

Anonymous removal. Privacy Leak’s Legal Takedown Service files DMCA and Take It Down Act notices on your behalf as your legal proxy. Your name, email, and address are never shared with the platform or the uploader. Most content is removed within 24–72 hours. If a platform doesn’t comply, they escalate through hosting providers, domain registrars, CDN services, and if necessary, regulatory bodies.

→ Try a free scan at privacyleak.ai

Common Problems and How to Solve Them

“The site has no DMCA contact information.” Use a WHOIS lookup (who.is) to find the hosting provider, then send your notice to the host’s abuse email. If the site uses Cloudflare, file through Cloudflare’s abuse form — they’ll forward your notice and reveal the origin server’s hosting provider.

“The site is hosted in a country that doesn’t recognize the DMCA.” Even if the website is overseas, their hosting provider, CDN, domain registrar, or payment processor is often U.S.-based. Send your DMCA notice up the infrastructure chain. Additionally, the Take It Down Act applies to any platform accessible from the United States, regardless of where the platform is headquartered.

“I didn’t take the photo — someone else did.” If someone else took the photo (for example, an ex-partner took it), they technically hold the copyright — and you can’t file a DMCA on their behalf. In this case, use the Take It Down Act instead, which requires no copyright ownership and covers any non-consensual intimate image. Or report directly to the platform under their non-consensual content policies.

“The uploader filed a counter-notice.” Under the DMCA, the person who uploaded the content can file a counter-notice disputing your claim. If they do, the platform may restore the content after 10–14 business days unless you file a court action. This is rare for intimate image cases, but if it happens, consult a lawyer or use a legal takedown service.

“I’m afraid the uploader will see my personal information.” This is the most common and most valid concern. DMCA notices are legal documents — your identifying information is required and is shared with the opposing party. The only way to avoid this is to have a legal representative file on your behalf, which is exactly what Privacy Leak’s Legal Takedown Service does.

“The content was removed but showed up on another site.” Leaked images spread. After initial removal, set up monitoring to catch re-uploads early. StopNCII.org creates a hash of your images that participating platforms use to auto-block re-uploads. For broader coverage, facial recognition monitoring alerts catch new appearances across adult platforms.

FAQ

What is a DMCA takedown request?

A DMCA takedown request is a formal legal notice sent to a website or hosting provider demanding the removal of content that infringes your copyright. Under U.S. law, platforms must remove infringing content “expeditiously” after receiving a valid notice to maintain their safe harbor protection.

Can I file a DMCA takedown for free?

Yes. Filing a DMCA notice costs nothing — you draft it yourself and send it via email or web form. The main cost is your time and the risk of exposing your personal information, since your legal name and contact details are required and shared with the website operator.

What information do I need to file a DMCA?

You need six elements: identification of the copyrighted work, specific URLs of the infringing content, your contact information (name, address, email, phone), a good faith belief statement, an accuracy statement under penalty of perjury, and your signature.

Does a DMCA work on websites outside the United States?

Often yes. Even if a website is hosted overseas, its hosting provider, CDN, domain registrar, or payment processor is frequently U.S.-based and subject to DMCA obligations. The infrastructure chain gives you multiple escalation points even for foreign-hosted sites.

What’s the difference between DMCA and the Take It Down Act?

The DMCA requires copyright ownership — you must own the photo or video to file. The Take It Down Act (signed into law May 2025) covers any non-consensual intimate image regardless of who holds the copyright, and explicitly includes AI-generated deepfakes. If you didn’t take the photo, the Take It Down Act is typically the better path.

How long does DMCA removal take?

Most platforms remove content within 1–5 business days after receiving a valid notice. Some respond within hours. If a site ignores your notice, escalating to their hosting provider typically adds another 3–7 business days. Professional legal takedown services like Privacy Leak typically achieve removal within 24–72 hours.

Will the person who uploaded my photos find out I filed a DMCA?

Yes, in most cases. Your DMCA notice — including your name and contact information — is typically shared with the person who uploaded the content. This is required under DMCA counter-notice procedures. To keep your identity hidden, you can use a legal proxy service like Privacy Leak’s Legal Takedown Service, which files on your behalf without revealing your information.

Can Privacy Leak file DMCA notices for me?

Yes. Privacy Leak’s Legal Takedown Service handles the entire process as your legal representative. They file through both DMCA and Take It Down Act channels, keeping your identity completely hidden from platforms and uploaders. Most content is removed within 24–72 hours, with escalation to hosting providers and registrars for non-compliant sites.

Key Takeaways

  • A DMCA takedown request is a free, legal tool to force websites to remove your copyrighted photos — and you don’t need to register your copyright first.
  • A valid DMCA notice requires six specific elements, including your real name and contact information — which is shared with the website and often the uploader.
  • Send your notice to the website first, then escalate to hosting provider, CDN, domain registrar, and Google if needed.
  • If you didn’t take the photo, the Take It Down Act is a better option — it covers non-consensual intimate images regardless of copyright ownership.
  • To keep your identity hidden during the removal process, use a legal proxy service that files on your behalf.
  • After removal, set up monitoring and use StopNCII.org to prevent re-uploads.

Your photos are your property. If they’ve been posted without your permission, the law gives you the power to demand their removal — and you can start right now.

→ Start your free scan at privacyleak.ai