Home / Archive / EN-02

PUBLIC RECORDDeepfake removal2026-10-25 updated· about 20 min read· written and reviewed by the SARAZIM LLC response team

Deepfake removal: how to report sexual or defamatory Deepfakes of yourself

A sexual or defamatory Deepfake does not have to be proven fake before it can be taken down. Every major reporting route treats synthetic intimate imagery of an identifiable person as its own removal category, and in the US, UK, EU and Australia there are now statutory duties behind those routes. This page sets out the evidence to capture, the exact routes to use, and what the law currently requires.

ABSTRACT

Conclusion: do not spend your time trying to prove the image is synthetic. Report it under the category each platform already provides for fake or manipulated sexual content, capture the evidence first, and use hash blocking only as a secondary layer because it matches files, not faces.

Based on the United States Public Law 119-12 (TAKE IT DOWN Act, 19 May 2025), the Sexual Offences Act 2003 sections 66B and 66E and Schedule 7 to the Online Safety Act 2023, Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744, Regulation (EU) 2022/2065, the eSafety Commissioner's image-based abuse guidance, and the current help pages of Google, X, TikTok, Reddit and StopNCII.org. Checked 25 October 2026.

01Telling a synthetic image from a real one

In practice you are looking at three kinds of signal, none of them conclusive on its own.

  • Internal signals. Hands, teeth, jewellery, hair against a busy background, text in the frame, and the join line at the neck or jaw are where generators and face-swap tools still fail. In video, look at the mouth during fast speech and at the edge of the face when the head turns.
  • Provenance signals.Google Search's About this image panel can show when Google first saw a similar image, which pages use it, and, where available, whether the file was captured with a camera or generated with AI. Google states plainly that credit and digital source type metadata can be modified by generation and editing tools, so it may not be accurate.
  • Circumstantial signals. The original photograph the forgery was built from is usually still online: a profile picture, a holiday photo, a press shot. Finding the source image and the matching pose is the strongest practical evidence that the sexual version is fabricated.
Note

Do not rely on a consumer AI detector score. Nothing in the reporting routes below asks for one, and a wrong score in your own file is worse than no score at all.

02Why proving it is fake matters less

The removal grounds do not turn on whether the image is real. They turn on whether you are identifiable in it and whether it was published without your consent.

Google's removal policy for personal sexual content says that whether the content is fake or real, you can request that sexual videos and images involving you are removed from search results. The US offence for synthetic material is written around a digital forgery, which Public Law 119-12 defines as an intimate visual depiction of an identifiable individual created through software, machine learning, artificial intelligence or other computer-generated means, including by adapting or altering an authentic depiction, that when viewed as a whole by a reasonable person is indistinguishable from an authentic depiction of that individual.

In England and Wales the sharing offence in section 66B of the Sexual Offences Act 2003 applies to a photograph or film which shows, or appears to show, another person in an intimate state. That wording is what brings Deepfakes inside the offence without any need to classify the file.

So the question you have to answer in a report is not technical. It is: is this me, and did I agree to it being published? Spend your effort on identifiability and on evidence, not on detection.

03Capture the evidence before you report

Successful reports are removed within hours, which destroys the record. Capture first, report second. Capture everything, do not crop to spare yourself, and never re-upload the material anywhere.

Capture list for each item

  • Full page URL of the post, and the direct media URL where you can see it
  • Account handle, display name, profile URL and account creation date if shown
  • Post date and time as the platform displays it, plus your own local time of capture
  • Full-screen screenshot from the top of the screen to the bottom, address bar included, uncropped and unredacted
  • Visible engagement numbers, caption text, hashtags and any comments naming you
  • For video, the running time and the timecodes of the sections that depict you
  • The source photograph you believe was used, with its own URL and date
  • A copy of the file itself, stored offline, so you can generate a hash later
Caution

If the subject is or was under 18 at any point, stop. Do not download, screenshot or hash the material. Report it to the platform and to the police only.

04Report routes for synthetic sexual imagery

Use the route named for fake or manipulated intimate content rather than the general nudity report. The named route is reviewed against a policy that does not require the image to be authentic.

ServiceRoute and what the policy coversPractical notes
Google SearchRemove personal sexual content from Google Search, which has a specific category for fake sexual or nude content, listed as Deepfakes, fake pornography and fake nude photographsYou must be identifiable, the content must falsely depict you nude or in a sexually explicit situation, and it must have been distributed without your consent
XReport post, then Private or Non-Consensual Content. The intimate media policy lists AI-generated, Deepfake or digitally manipulated media that sexualizes, modifies or exposes a specific individualThe policy also covers prompting or attempting to generate such content, and reshares count as separate violations
TikTokIn-app report under the intimate privacy route. Image-Based Sexual Abuse sits inside the Adult Sexual Abuse policyTikTok separately requires creators to label realistic AI-generated or significantly edited content showing people
RedditReport the post, then the non-consensual intimate media option. Rule 3 states: never post or threaten to post intimate or sexually-explicit media of someone without their consentReport the post and the subreddit separately if moderators restore it
Meta servicesIn-app report on the post, then the non-consensual intimate imagery route for Facebook, Instagram and ThreadsReport each surface the item appears on, including reels, stories and any reposting account

Submit one report per item, not one report listing many. Keep the reference number each route returns; it is what you quote when you escalate or when the item reappears.

05Search engines: cutting the discovery path

Removing a page from a search index does not delete the page, but it is often what actually stops the harm, because almost nobody reaches the host site except through a search for your name.

Google describes two outcomes for a granted request. Full removal means the page no longer appears in Google Search at all. Partial removal means the page no longer appears for any search query containing your name or identifier, but may still appear for other queries. Google also states that for sexual imagery removal requests it does its best to find and remove duplicates from Google Search as standard procedure, and that you can opt out of duplicate removal when you submit the form.

Microsoft uses validated StopNCII.org hashes in Bing Search and, as of May 2026, in its hosted consumer services including GroupMe, Teams Free, OneDrive and Xbox, so a StopNCII.org case feeds the Bing side as well as the platform side.

Search removal and host removal are separate tracks. Run both; neither substitutes for the other.

06Hash blocking, and where it stops

StopNCII.org generates a hash of a file on your own device and sends only the hash. Its guidance states that non-consensual intimate image sharing can include manipulated images and Deepfakes, so a synthetic file is eligible. Participating companies compare uploads against the hash bank and act where the content breaches their intimate image abuse policy.

The limits are structural and you should plan around them.

  • It matches files, not faces. The algorithms used are PDQ and PhotoDNA for photographs and MD5 for video. Duplicate copies of the same file share a hash; a newly generated Deepfake of you, or a re-encoded video, does not.
  • It only reaches partner platforms. StopNCII.org states it cannot remove images from the whole internet, only the participating platforms listed on its partners page. That list currently includes Microsoft and a set of adult platforms, not every mainstream social network.
  • It is forward-looking. If the material is already posted, report it to the platforms first and add the hash for future protection.
  • It takes days, not minutes. StopNCII.org says you may need to wait three to five days to see case updates.

Treat hashing as a floor under the problem, not the removal itself.

07United States: the TAKE IT DOWN Act

Public Law 119-12 was enacted on 19 May 2025. It does two separate things.

First, it creates a federal offence. Knowingly publishing a digital forgery of an identifiable adult through an interactive computer service is unlawful where the forgery was published without consent, what is depicted was not voluntarily exposed in a public or commercial setting, it is not a matter of public concern, and publication is intended to cause harm or does cause harm, including psychological, financial or reputational harm. The penalty for an offence involving an adult is a fine, imprisonment for not more than two years, or both; for a minor, not more than three years. Threatening to publish is also an offence.

Second, it imposes a platform duty. A covered platform had to establish a notice and removal process within one year of enactment, that is by 19 May 2026, so the duty is in force now. On receiving a valid removal request from the identifiable individual or an authorised person acting for them, the platform must, as soon as possible and not later than 48 hours, remove the depiction and make reasonable efforts to identify and remove any known identical copies. Failure to comply reasonably is treated as an unfair or deceptive act or practice enforced by the Federal Trade Commission.

A valid request must be in writing and include your signature, physical or electronic; identification of the depiction and information sufficient to locate it; a brief statement of your good faith belief that it is not consensual; and contact details. Write your reports to meet that list even on platforms outside the statute.

Covered platform

The duty applies to a website, online service or application that serves the public and primarily provides a forum for user-generated content, or that publishes, curates, hosts or makes such depictions available in the regular course of business. Broadband providers and email are excluded.

08UK: sharing, creating and platform duties

Three distinct points matter, and they commenced on three different dates.

Sharing and threatening to share

Sections 66B to 66D of the Sexual Offences Act 2003, inserted on 31 January 2024 by section 188 of the Online Safety Act 2023, cover intentionally sharing a photograph or film that shows or appears to show another person in an intimate state without consent, and threatening to share one. For a threat, the prosecution does not have to prove the image exists or that it really shows a person in an intimate state. The basic sharing offence is summary only; the variants involving intent to cause alarm, distress or humiliation, or sexual gratification, and the threat offence, carry up to two years on indictment.

Creating and requesting

Sections 66E to 66H were inserted on 6 February 2026 by section 138 of the Data (Use and Access) Act 2025. Section 66E makes it an offence intentionally to create a purported intimate image of another adult without consent, where a purported intimate image is one that appears to be or include a photograph or film of the person but is not, and appears to show them in an intimate state. Section 66F covers intentionally requesting the creation of such an image, or requesting that a particular feature be included or excluded, and applies whether or not the image is ever created and wherever in the world the person asked is located. Both carry summary conviction penalties and both have a reasonable excuse defence.

What platforms must do

Sections 66B, 66E and 66F are listed as priority offences in Schedule 7 to the Online Safety Act 2023: section 66B was added to that list on 8 January 2026 and sections 66E and 66F on 29 June 2026. Priority status means in-scope services carry proactive illegal content duties for this material, so a UK report can be framed as illegal content rather than as a terms of service complaint.

09EU and Australia

InstrumentWhat it requiresStatus on 25 October 2026
Regulation (EU) 2024/1689, Article 50(4)Deployers of an AI system that generates or manipulates image, audio or video content constituting a deep fake must disclose that the content has been artificially generated or manipulated. Where the content is part of an evidently artistic, satirical or fictional work the duty is limited to disclosing in a way that does not hamper the workIn force. Article 113 applies the Regulation from 2 August 2026, and Regulation (EU) 2026/1744 of 8 July 2026 deferred high-risk deadlines but did not change the Article 50(4) Deepfake duty
Regulation (EU) 2022/2065, Article 16Hosting providers must offer an easy, electronic notice mechanism; a sufficiently substantiated notice gives them actual knowledge, and they must confirm receipt, decide in a timely, diligent, non-arbitrary and objective manner, and tell you the decision and your redress optionsIn force
Australia, image-based abuse schemeeSafety can issue removal notices; its guidance states intimate images can include photos and videos that have been digitally altered, giving Deepfakes as an example, and that removal is required within 24 hours or a longer period eSafety specifiesIn force. Breaching the prohibition, or failing to comply with a removal notice, carries civil penalties of up to 500 penalty units

Article 50(4) is a labelling duty on whoever deploys the generator. It is not a removal route, but a missing disclosure is a useful fact in a complaint and in any claim. The removal route in the EU is the Article 16 notice, which you should file with the exact URL, a substantiated explanation and a good faith statement.

An Australian complaint can be made by the person depicted, or by someone authorised by them, or by a parent or guardian of a child under 16 or a person who cannot manage their own affairs.

10Who made it, re-uploads, and police

Identifying the poster: the realistic limit

Platforms do not disclose subscriber details to a private complainant. They disclose to law enforcement or under a court order. What you can do yourself is build the record that makes either possible: the handle, the account URL and creation date, posting times, the wording and spelling habits in captions, any other accounts posting the same file within minutes, and the host and registrar of any standalone site. Where the material also appeared on a forum, note the thread and the earliest post, since the first uploader is usually the only one worth pursuing.

Stopping re-uploads

Expect the same file and fresh variants. A monitoring cycle that works has four parts: a fixed set of name, handle and misspelling queries run on a schedule across search engines and the platforms themselves; reverse image search on the source photograph, which tends to surface new forgeries built from it; hash cases kept open so partner platforms keep matching; and a record of every report reference so a reappearance is escalated as a repeat rather than filed as a new complaint. Face-matching monitoring is what catches forgeries that share your likeness but not your file hash, and it is the only layer that scales as new variants are generated.

When to go to police

Go to the police, rather than only to the platforms, where any of these is true: the material involves a person under 18; you are being threatened with publication or asked for money or images; the posting is part of a sustained campaign by an identifiable person; there is any contact with your workplace, school or family; or you are in England or Wales and can point to a section 66B, 66E or 66F offence. Bring the captured record, not the files, and ask for the crime reference number. Keep reporting to platforms in parallel, because a police report does not remove anything.

SARAZIM LLC works the removal and monitoring side of this: evidence capture, the platform and search routes, hash cases, and continuous face-matching monitoring for re-uploads. We are not a law firm and do not act as your legal representative.

Frequently asked questions

Must I prove the image is AI-generated?

No. Google's policy applies whether the content is fake or real. The UK sharing offence covers an image that appears to show a person in an intimate state. The US offence is written around a depiction that is indistinguishable from an authentic one. Identifiability and lack of consent are what the routes ask about.

Report rejected as not nudity. What now?

Re-file under the named route for non-consensual or fake intimate content rather than general nudity, and include the four elements the US statute requires: your signature, the exact location of the item, a good faith statement that it is non-consensual, and contact details. Keep both reference numbers.

Is making a sexual Deepfake a UK crime?

Yes in England and Wales. Section 66E of the Sexual Offences Act 2003, in force since 6 February 2026, makes it an offence intentionally to create a purported intimate image of another adult without their consent. Section 66F covers requesting one, whether or not it is ever created.

Does the 48-hour rule apply to every website?

No. It applies to covered platforms under Public Law 119-12, broadly services that serve the public and primarily host user-generated content, or that make such depictions available in the regular course of business. Broadband providers and email are excluded, and the rule is a US duty enforced by the Federal Trade Commission.

Does the EU AI Act force removal?

No. Article 50(4) requires the deployer to disclose that content was artificially generated or manipulated, and it has applied since 2 August 2026. Removal in the EU runs through the Digital Services Act Article 16 notice to the hosting provider.

Will hashing stop new versions appearing?

No. StopNCII.org matches files using PDQ and PhotoDNA for photographs and MD5 for video, so only duplicates of that exact file are caught. A freshly generated forgery of your face produces a different hash and needs face-matching monitoring instead.

Can someone report on my behalf?

Yes, on the routes examined here. The US process accepts a request from an authorised person acting for the individual. An Australian complaint can be made by someone the person depicted has authorised, or by a parent or guardian in defined cases.

Should I contact the host directly?

Usually yes, in parallel. Google states that it can only remove content from search results and that the content may still exist on the web and be reachable through a link or another search engine. Removal at the host is the only thing that takes the file offline.

Published2026-10-25
Last updated2026-10-25
Reading timeabout 20 min

This page is general information, not legal advice. Outcomes depend on the specific facts of each case, on the jurisdiction involved and on the platform concerned, and platform policies and reporting routes change without notice. Google, Bing, Meta, Facebook, Instagram, Threads, X, TikTok, Reddit, Microsoft and StopNCII.org are trademarks of their respective owners, and SARAZIM LLC is not affiliated with, endorsed by or acting for any of them. SARAZIM LLC does not practise law and provides no legal representation; for advice on your rights or on criminal proceedings, consult a qualified lawyer in your jurisdiction.

CASE INTAKE

Bring us the URLs before you report

Send the links, the account handles and the dates, and we will tell you which route applies to each item and what evidence it needs. Consultation is handled anonymously and nothing is submitted without your instruction.

Every consultation is handled anonymously.