How to Protect Your Intimate Photos and Report Abuse

Quick answer

If an intimate photo or video of you has been shared — or someone's threatening to share it — without your consent, two moves work together. First, report it to the platform where it's posted. Under the federal TAKE IT DOWN Act, covered platforms must remove a validly reported non-consensual intimate image within 48 hours, deepfakes included. Second, use StopNCII.org to generate a digital fingerprint of the image on your own device, so participating platforms can block it from ever being re-uploaded. Neither step requires handing the actual image to anyone. This is about deciding what stays yours — not something to be afraid to act on.

Step-by-step

Preserve evidence first. Before anything else, screenshot the post, the URL, the account name, and the timestamp. If the content or account disappears, you'll still have the record for your report.

Hash the image with StopNCII (or Take It Down, for minors). StopNCII converts your image into a unique hash right on your device — only that hash, never the photo itself, ever reaches participating companies, which can then block a re-upload without anyone there seeing the picture. You'll need to be the person shown, 18 or older both now and when the image was taken, and still have the original file. If it was taken before you turned 18, NCMEC's Take It Down tool does the same job and is built specifically for that case.

Report it to the platform. Most major services — Instagram, Facebook, Threads, Messenger, and WhatsApp among them — have a dedicated in-app report option for nude or sexual content, reviewed around the clock in dozens of languages. No account where it's posted? Search that platform's help center for its non-account reporting path; nearly all of them have one.

If the source looks like a compromised account, secure it too. Sometimes an image surfaces because an iCloud account was phished, not because anyone chose to share it — worth recognizing the signs of phishing aimed at your iCloud account if you're not sure how it got out.

Common problems and fixes

The platform didn't respond within 48 hours. File directly with the FTC instead — enforcement began May 2026, and platforms that miss the window face civil penalties of up to $53,088 per violation.

I don't know how the image got out. Common paths: a stolen or unlocked phone, a repair shop handoff, a shared family iCloud account. Check what Stolen Device Protection actually locks down if a stolen phone is the likely culprit, or how to keep photos private on a shared or family iCloud account to close that gap for good.

It's a deepfake, not a real photo. Doesn't matter — the TAKE IT DOWN Act covers digitally altered and AI-generated images too, as long as they realistically depict an identifiable person in a nude, semi-nude, or sexually explicit way.

The site won't take it down. Dedicated leak sites, private messaging apps, and some offshore hosts fall outside the law's definition of a "covered platform." That's exactly where hashing earns its keep — StopNCII works across every participating platform going forward, no matter whether any one site cooperates.

Doing this with Privara

Reporting and hashing handle an image that's already out. The other half is making sure fewer sensitive files exist anywhere they could leak from in the first place — that's what Privara is for. It's an iPhone app that hides your private photos, videos, documents, and contacts behind one AES-256-encrypted vault that looks and works exactly like an ordinary calculator; it opens only when you enter your PIN into it. There's no account to create, and nothing uploads anywhere by default, so a stolen phone, a borrowed one, or a repair shop handoff doesn't hand anyone your private photos along with it. And it's not just photos — the same vault covers videos, documents, and contacts too. For a practical next step, see how to back up private photos without relying on a cloud service; Privara's vault takes that further by keeping originals off any server by default. Download Privara on the App Store to get started.

Frequently Asked Questions

What is StopNCII and who can use it?

A free tool that lets adults (18+) generate a digital hash of an intimate photo or video right on their own device. Only that hash — never the image — reaches participating platforms, which use it to block the content from being uploaded. Anyone whose image was taken before they turned 18 should use NCMEC's Take It Down tool instead; same idea, built for minors.

How long does a platform have to remove a reported intimate image?

Under the TAKE IT DOWN Act, covered platforms must remove a validly reported non-consensual intimate image, plus any known identical copies, within 48 hours. FTC enforcement of this requirement began May 19, 2026.

What can I do if a platform doesn't act within 48 hours?

File a report directly with the FTC. Platforms that miss the window can face civil penalties of up to $53,088 per violation. Keep your original report timestamp and any screenshots as evidence when you escalate.

Does the TAKE IT DOWN Act cover AI-generated deepfakes?

Yes. Digitally altered and AI-generated images are covered, not just unaltered photos or videos, as long as the image realistically depicts an identifiable person in a nude, semi-nude, or sexually explicit context.

What's the difference between StopNCII and reporting to a platform directly?

StopNCII is preventive — it stops an image from being re-uploaded once hashed, even on platforms you never individually reported to. Reporting directly, or escalating to the FTC, removes a specific instance that's already live. Most people need both.

Conclusion

Reporting and hashing are the fastest response you have, and the law now backs both: platforms must act within 48 hours, and StopNCII stops an image from resurfacing even on sites that don't cooperate. But the less any sensitive photo, video, document, or contact ever leaves your device unencrypted, the less there is to report in the first place.