Since 19 May 2026, there has been a federal law in the US that gives anyone whose intimate images are shared without consent a hard, enforceable deadline for getting them taken down: 48 hours. It’s called the TAKE IT DOWN Act, the FTC began actively enforcing it this year, and — quietly — it may be one of the more useful tools an OnlyFans creator now has for dealing with leaked or stolen content circulating anywhere on the wider internet, not just on OnlyFans itself.
What changed on 19 May
Section 3 of the Act requires covered platforms — broadly, any website, app or online service that “primarily provides a forum for user-generated content” — to build a clear, easy-to-find process letting people request removal of non-consensual intimate images, and to actually remove that content, along with known identical copies, within 48 hours of a valid request. FTC Chairman Andrew Ferguson framed the reasoning bluntly: “in the age of AI, anyone can be targeted, and that becomes even more appalling if children are involved.” The FTC has since sent reminder letters to fifteen major platforms — Alphabet, Amazon, Apple, Automattic, Bumble, Discord, Match Group, Meta, Microsoft, Pinterest, Reddit, SmugMug, Snapchat, TikTok and X — as an early signal of who it’s watching first, though the law’s coverage is written more broadly than that initial list.
How the process is supposed to work
- A platform must provide a “clear and conspicuous” way to submit a takedown request — not buried in a general contact form.
- Each request should get an identifying reference number, so both the requester and the platform can track its progress.
- The platform has 48 hours from a valid request to remove the reported content and any identical copies it can identify.
- The platform is expected to notify the requester whether the content was removed, or explain why it wasn’t.
The FTC has also launched a dedicated complaints portal, TakeItDown.ftc.gov, where someone can report a platform that fails to act on a valid request — giving the law an enforcement channel beyond just hoping the platform complies. Non-compliant platforms risk civil penalties of up to $53,088 per violation.
Where this fits for OnlyFans creators specifically
The law isn’t aimed at OnlyFans, and it doesn’t need to be — OnlyFans already operates its own internal reporting tools for leaked content. What it changes is everywhere else. Leaked or screen-recorded OnlyFans content that resurfaces on X, Reddit, Discord, a fan-leak forum hosted through Automattic, or is manipulated with an AI tool and reposted elsewhere, now falls under a platform’s legal obligation to act within two days, provided that platform meets the law’s definition of a covered service. That’s a meaningfully faster and more binding standard than the informal, often slow “report abuse” processes creators have historically had to rely on when content spreads beyond the platform they actually work on. It arrives at a moment when tools capable of generating enormous volumes of non-consensual synthetic imagery are themselves under scrutiny, and when apps built specifically to strip clothing from real photos have faced their own crackdown, as seen when San Francisco gave Apple and Google 28 days to remove “nudify” apps from their stores. The Act gives creators a second, faster line of defence that sits alongside those enforcement efforts, rather than replacing platform-level protections already in place, including the kind of impersonation and scam reporting covered in our guide to the Snapchat and Cash App impersonation scam.
What it doesn’t do
- It doesn’t cover content you posted and monetised yourself with consent — this is specifically for non-consensual intimate imagery.
- It doesn’t guarantee removal from platforms outside US jurisdiction, or from private messaging apps and closed groups that fall outside the “user-generated content” definition.
- It doesn’t stop the content being copied and re-uploaded elsewhere — the 48-hour clock resets with each new valid request to a new platform, so ongoing monitoring still matters.
How to actually file a request
- Start with the platform’s own reporting tool if it has one — most of the fifteen platforms named by the FTC now have a specific non-consensual-imagery form, separate from general copyright or harassment reports.
- If a platform has no visible process, or ignores a valid request past 48 hours, file a complaint at TakeItDown.ftc.gov.
- Keep records: screenshots, URLs, and the date you submitted each request, in case you need to escalate or involve a solicitor later.
- Consider also filing with StopNCII.org, which works by hashing your images so participating platforms can proactively block re-uploads, rather than waiting for you to find and report each copy individually.
This article is for information only and is not legal advice. If you are dealing with leaked or non-consensual intimate content, consider contacting a solicitor experienced in image rights, or your national data protection or victim-support services, for guidance specific to your situation.
