If you are reading this, it is likely because intimate images of you exist online without your consent. That is a violation — not a fact about you. The Cyber Civil Rights Initiative's 2017 nationwide study found that 1 in 12 American adult social media users have been victims, and the UK Revenge Porn Helpline received 22,275 reports in 2024, the highest caseload in its history. None of that is okay, and none of it is your fault.
This guide walks you through the steps survivors actually use to remove NCII, in the order that keeps you safest and most effective. It is paired with our practitioner DMCA workflow — that piece is written for operators; this one is written for you.
If you are in immediate danger (threats to publish, physical safety concerns, ongoing intimate-partner violence), stop reading this and contact the CCRI Crisis Helpline (844-878-2274), call 911, or — in the UK — call 999. Below is for non-emergency NCII removal.
Step 1 — Stabilize: take care of yourself first
This sounds counter-intuitive when the panic is "the photos are up right now," but the first hour is the most important. Three things matter:
- Don't engage the uploader. No messages, no negotiation, no threats, no "I'll pay you to remove it." Engagement escalates in 60–80% of cases we've seen.
- Tell one safe person. A friend, a family member, a therapist, the CCRI helpline. You don't need to go through this alone, and you should not.
- Decide your scope. Are you trying to remove one URL, or are you trying to remove every existing and future copy of you? Different scopes require different tools. The rest of this guide assumes you want the broadest possible protection.
Step 2 — Preserve evidence before you remove anything
This step feels paradoxical — why would you preserve the images that hurt you? Because:
- You need a record of every URL, timestamp, and visual match to file valid takedowns.
- If the uploader counter-notices under DMCA § 512(g), you have 10 business days to file a federal action — you cannot do that without evidence.
- Law enforcement investigations and any future restraining order depend on a documented history of distribution.
Preservation kit — what to capture right now:
- For every URL where your images appear: a full-page screenshot with timestamp, the URL, the uploader account name, the upload date if shown, and any commentary attached.
- An MHTML file (Chrome / Firefox can save full pages as .mhtml) so the evidence retains its formatting and assets in one file.
- The original message or context in which the imagery was shared (an ex-partner's text, a stolen phone's last known unlock, a leaked cloud folder URL).
- SHA-256 hashes of every original media file you control.
Store these in a single encrypted folder (VeraCrypt, 7-Zip with AES-256, or a password manager's secure notes). Keep custody records — even a simple log like "2026-07-01 14:32 UTC: screenshot taken from Chrome on macOS, file moved to encrypted vault."
Step 3 — Submit your hashes to the proactive hash registries
This is the single highest-leverage action you can take, because it prevents re-uploads before they happen.
StopNCII.org (for adults 18+)
Operated by the UK Revenge Porn Helpline with funding from Meta and 50+ partner NGOs. You hash your images on-device (your files never leave your phone or laptop), and the hashes are shared with 16 participating platforms — Facebook, Instagram, Reddit, OnlyFans, TikTok, Bumble, Bing, Google, and others. Any future upload of a matching hash is auto-flagged before it can be distributed. Create your case at stopncii.org.
NCMEC Take It Down (for minors)
Operated by the National Center for Missing & Exploited Children. Same hash-based mechanism, applied to a smaller set of platforms. If you are a minor, or the images are of a minor, start here: takeitdown.ncmec.org.
Step 4 — File takedowns with every platform that hosts your images
For each URL you found in Step 2, you have three options, in order of preference:
- Use the platform's intimate-imagery reporting flow. Facebook, Instagram, Twitter/X, TikTok, Reddit, Snapchat, and most major platforms have a dedicated "non-consensual intimate imagery" form. These reports are routed to specialized trust & safety teams with the highest priority.
- Use the platform's DMCA notice form. Faster if the platform lumps NCII into copyright (most platforms do — your intimate images are also your copyrighted images). Required for less-responsive sites.
- Use StopNCII.org's reporting links. For platforms on the partner list, StopNCII.org hands off your case to that platform's review team directly.
For websites outside the major platforms (small forums, hosting on Cloudflare or offshore providers) you can file directly with the host under DMCA § 512(c). Look up the host via Whois.com, send the notice to the abuse@ email, and CC the platform operator if you can find a contact.
Don't want to do this alone?
Shield runs the full preserve-and-takedown pipeline with chain-of-custody packets, per-URL signed notices, and continuous monitoring. See the survivors workflow → · Get confidential help →
Step 5 — Report to the right authorities
You are not required to involve law enforcement, but doing so unlocks tools you do not have as a private party:
- United States: Report to your local police, the FBI's Internet Crime Complaint Center (ic3.gov), and (if there are threats or sextortion) the FTC. Since May 19, 2025, NCII publication is a federal crime under the TAKE IT DOWN Act.
- United Kingdom: Report to your local police and the Revenge Porn Helpline (open Mon–Fri 10am–4pm). Sexual Offences Act 2003 § 33 makes NCII publication a criminal offense in England and Wales.
- Australia: Report to the eSafety Commissioner, who can issue takedown notices with statutory force.
- EU: Under EU Directive 2024/1385 (transposition deadline June 2027), every member state must have an NCII reporting portal. Use the national CERT or your country's data protection authority.
Step 6 — Set up continuous monitoring
Removal without monitoring is temporary. Industry data shows 30–60% of removed NCII reappears within 90 days. Proactive hash matching is the most durable defense — it lives at the platform level and persists through takedowns.
DIY monitoring: set Google Alerts for your real name and any usernames; check StopNCII.org's "track your case" periodically; re-run reverse-image searches monthly. Automated monitoring: services like Shield scan continuously and re-dispatch at the first new match.
Step 7 — Take care of your mental health
NCII victimization is associated with elevated rates of depression, anxiety, PTSD, and (in extreme cases) suicidical ideation. This is well documented in CCRI's research. You do not have to handle the emotional load in addition to the operational load.
- CCRI's Safety Center (cybercivilrights.org/safety-center) lists trauma-informed therapists, advocates, and legal aid.
- Rainn Sexual Assault Hotline (800-656-HOPE) — free, confidential, 24/7.
- VictimConnect (855-4-VICTIM) — DOJ-funded resource hotline for all crime victims.
- International directory: the Revenge Porn Helpline maintains a global list of equivalent services.
Reach out even if you're not sure you "deserve" help. You do.
What to do when self-help isn't enough
Some cases require a lawyer. Specifically:
- If the uploader counter-notices and you want the removal to be permanent.
- If the images are being used to extort or harass you.
- If you need a restraining order, an unmasking order under DMCA § 512(h), or a foreign enforcement action.
CCRI maintains a pro bono and reduced-fee attorney network. Many state bar associations have lawyer-referral panels for privacy and tech matters.
What Shield does for survivors
When you sign up, you import your reference media, we hash it on-device (no raw files leave your pipeline), submit to StopNCII.org on your behalf, surface every public copy we can find, dispatch signed takedown notices, and re-scan continuously. Your case file is end-to-end encrypted and you can revoke access at any time. See /for-survivors for the full scope.
Frequently asked questions
Is it my fault that my images got out there?
No. NCII is the uploader's crime, not yours. Every U.S. state plus DC, every UK jurisdiction, and federal law under the TAKE IT DOWN Act (2025) make non-consensual publication a crime. You are the victim of a crime, not the author of one. The shame belongs to the person who shared the images, not to you.
Should I pay a "reputation management" company that contacted me?
Be very careful. Many services that cold-contact survivors charge thousands of dollars for work you can do for free via StopNCII.org, a CCRI-endorsed attorney, or your local law enforcement. If someone promises "guaranteed removal" or pressures you to pay immediately, that is a red flag. The CCRI Safety Center vets service providers and can refer you to trustworthy legal aid.
Will filing a takedown tell the uploader who I am?
Possibly, depending on the channel. StopNCII.org's notice system is designed to keep your identity confidential from the uploader. A direct DMCA notice to a website exposes your name as the complainant unless you file through a state attorney general or use an authorized agent. If you have safety concerns (stalking, doxxing threats), discuss the channel choice with an advocate before you file.
How long until my images are gone?
On covered platforms (most social networks), the federal deadline since May 19, 2026 is 48 hours. For less responsive sites it can take 2–4 weeks. Proactive hash submission to StopNCII.org prevents re-uploads at 16 major platforms and is the most durable defense.
I'm a minor, or the images are of a minor. What changes?
Different law applies. NCMEC's Take It Down service (https://takeitdown.ncmec.org) is the federal reporting pathway for minors. Child Sexual Abuse Material (CSAM) is a felony in every jurisdiction and is reported via CyberTipline (https://report.cybertip.org). Adult-victim tools (StopNCII.org) only serve adults.
