Take It Down Act: How to Get a Deepfake of Your Kid Removed

Here is how to report under the Take It Down Act, in one paragraph. If a sexual deepfake of your child appears on a social media site, the platform must remove it within 48 hours of a valid removal request, and make reasonable efforts to remove known identical copies. You, as a parent, can submit that request on your child’s behalf. If the platform misses the deadline, you can report it to the Federal Trade Commission at TakeItDown.ftc.gov. Separately, NCMEC’s similarly named Take It Down tool can fingerprint the image on your own device so participating platforms block copies. And you should report the image to the CyberTipline and police.

The two “Take It Down” names confuse almost everyone, and confusion costs time when a child is hurting. This guide walks through each step in order, what to put in the request, what not to do, and what the law’s first conviction tells you.

Key Takeaways

• The Take It Down Act, signed May 19, 2025, makes publishing non-consensual intimate images, including AI “digital forgeries,” a federal crime, with up to 3 years in prison when the victim is a minor.
• Since May 19, 2026, covered platforms must remove such images within 48 hours of a valid request. The FTC enforces this.
• A valid request is in writing and includes a signature, enough information to locate the image, a good-faith statement that it is non-consensual, and contact details. A parent or other authorized person can submit it.
• NCMEC’s Take It Down (takeitdown.ncmec.org) is a separate, free tool that creates a hash of the image on your device so participating platforms can find and remove copies without anyone seeing it.
• Never download, forward or share the image, even to report it. The first conviction under the law came April 9, 2026.

If your child is in crisis: in the U.S., call or text 988 (Suicide & Crisis Lifeline) or text HOME to 741741. Outside the U.S., find a line at findahelpline.com. To report sexual images of a minor: NCMEC’s CyberTipline at report.cybertip.org or 1-800-843-5678.

What the Take It Down Act requires

The Take It Down Act is a federal law with two halves: a criminal ban on publishing non-consensual intimate images, and a notice-and-removal duty for online platforms. Its full name, per the enacted text (Public Law 119-12), is the Tools to Address Known Exploitation by Immobilizing Technological Deepfakes on Websites and Networks Act.

The criminal half. It is unlawful to knowingly publish an intimate image of an identifiable minor, real or a “digital forgery,” through an online service, with limited exceptions such as good-faith reports to police. The law defines a digital forgery as an intimate image “created through the use of software, machine learning, artificial intelligence, or any other computer-generated or technological means” that a reasonable person would find “indistinguishable from an authentic visual depiction.” Offenses involving minors carry fines and up to 3 years in prison. Federal child sexual abuse material laws also apply; the FBI notes they cover “realistic computer-generated images.”

The removal half. Covered platforms had one year to set up a removal process, and since May 19, 2026, the FTC has been enforcing it. On receiving a valid request, a platform must, “as soon as possible, but not later than 48 hours after receiving such request,” remove the image and “make reasonable efforts to identify and remove any known identical copies.” Failing to comply is treated as an unfair or deceptive practice under the FTC Act. The FTC sent reminder letters to 15 companies, including Alphabet, Apple, Discord, Meta, Microsoft, Reddit, Snapchat, TikTok and X.

Who is covered. A “covered platform” is a public website or app that primarily hosts user-generated content, “including messages, videos, images, games, and audio files,” or one whose business is hosting such images. The law excludes broadband providers and email, and services that mostly offer their own preselected content.

Step by step: getting a deepfake of your child removed

Step	What to do	Where	Keep a record of
1. Care for your child	Tell them it’s not their fault; check for safety	At home; 988 if worried	How they’re doing
2. Document, don’t download	Note platform, account names, URLs, dates; do not save or forward the image	A private notes file	URLs, usernames, times
3. Report to NCMEC and police	Report the sexual image of a minor	report.cybertip.org, 1-800-843-5678; local police	Report numbers
4. File a removal request	Use the platform’s Take It Down Act removal form, or its reporting tools	On each platform	Date and time submitted, confirmation
5. Use NCMEC’s Take It Down	Hash the image on the device where your child already has it, so platforms can block copies	takeitdown.ncmec.org	Confirmation that the hash was submitted
6. Escalate if the 48 hours pass	Report the platform to the FTC	TakeItDown.ftc.gov	Your original request and timeline
7. Tell the school	Describe what happened without sending the image	Principal, counselor	Who you told, when

What a valid removal request must include

The law spells it out. A request must be in writing and include:

1. “a physical or electronic signature of the identifiable individual (or an authorized person acting on behalf of such individual)”;
2. “an identification of, and information reasonably sufficient for the covered platform to locate” the image, which in practice means the URL or account and post details;
3. “a brief statement that the identifiable individual has a good faith belief” that the image is not consensual, with any relevant information; and
4. contact information.

Notice what is not required: you do not attach the image. A link and description are enough. As a parent of a minor, you are the “authorized person acting on behalf” of your child.

Start the 48-hour clock carefully

Platforms must post a “clear and conspicuous notice” of how to submit requests. Look for a link labeled something like “intimate image removal” or “Take It Down Act” in the help or safety center. Submit through that process, take a screenshot of the confirmation page (not of the image), and note the time. That timestamp is what the FTC will look at if the platform misses the deadline.

NCMEC’s Take It Down vs. the FTC’s TakeItDown.ftc.gov

These are different things, and you may use both.

NCMEC’s Take It Down is a free service for nude, partially nude or sexually explicit images taken of someone under 18. It works by “assigning a unique digital fingerprint, called a hash value,” on your own device. Only the hash is sent: “This all happens without the image or video ever leaving your device or anyone viewing it.” Participating platforms use the hash to find and remove exact copies on public or unencrypted services. You can remain anonymous. NCMEC is emphatic: “Please do NOT send, share, or download any image or video in order to submit.” It is meant for images you or your child already have on a device.

As an engineer, one caveat is worth knowing: a hash identifies an exact copy. If someone crops, recompresses or edits the image, the fingerprint may no longer match. That is why the platform removal request and reports to NCMEC and police still matter.

TakeItDown.ftc.gov is the FTC’s complaint site. It does not remove anything itself. Its own description: “Only platforms can take images down.” You use it after asking the platform, to report a platform that failed to remove an image within 48 hours or never set up a removal process. The site also points to NCMEC for images of minors.

What the first conviction tells parents

The Senate Commerce Committee reported that the first conviction under the Act came on April 9, 2026, after an Ohio man pleaded guilty to using AI to create and distribute non-consensual intimate images, “including of minors.” Sen. Ted Cruz described the law as “criminalizing the publication of real and deepfake revenge porn.”

Two practical lessons. First, prosecutors are using it, including for AI-generated images. Second, teens need to hear plainly that making or sharing a fake nude of a classmate is not a prank. Under this law, and under child sexual abuse material laws, it can be a federal crime. Many states add their own penalties and school rules, which we cover in the Illinois deepfake cyberbullying law.

The limits you should expect

The law is strong on paper and slower in practice. Some limits:

• Overseas tools. Apps that create these images are often run from abroad, as the pending ClothOff lawsuit shows. The removal duty applies to the platforms where images are posted, not necessarily to the app that made them. See the ClothOff lawsuit and what to do.
• Private and encrypted spaces. NCMEC’s hash matching works only on public or unencrypted services that participate. Images in private group chats may need reports to the app and police.
• Edited copies. “Known identical copies” may not cover altered versions. Submit new requests for new copies.
• Time. Forty-eight hours can feel like forever to a teenager. Keep your child’s focus on people and routines, not on refreshing the page.

What not to do

Do not view, download, screenshot or forward the image, including to the school, other parents or even police by text. The law’s exceptions protect good-faith disclosures to law enforcement, but the safest approach is to give investigators the location and let them collect it. Do not confront the suspected poster publicly. Do not tell your child to stay off the internet as punishment. And do not pay anyone who threatens to release images; report extortion to police and the CyberTipline.

What to Watch For Over the Next 3 Months

• Week 4: Watch for the first FTC enforcement actions against platforms that miss the 48-hour deadline. They will show how strictly “valid request” and “reasonable efforts” are read.
• Month 2 red flags: In your home, signs of image-based abuse or sextortion: sudden school avoidance, deleting accounts, fear of the phone, secrecy about messages, talk of hopelessness. Ask directly and gently.
• Month 3 self-check: Does your child know they can tell you, that you won’t be angry, and that there is a 48-hour removal right? Have you bookmarked takeitdown.ncmec.org and report.cybertip.org?

Frequently Asked Questions

How do I report a deepfake of my child under the Take It Down Act?

Submit a written removal request through the platform’s process, including your signature as the parent, the image’s location, a good-faith statement that it is non-consensual, and your contact details. The platform must remove it within 48 hours. Also report to NCMEC’s CyberTipline and police. If the platform misses the deadline, report it at TakeItDown.ftc.gov.

Do I need to send the image to the platform or NCMEC?

No. The law requires information “reasonably sufficient” to locate the image, such as a URL, not the image itself. NCMEC’s Take It Down creates a fingerprint on your device so the image is never uploaded. Do not download, send or forward the image; doing so can itself be illegal.

What is the difference between NCMEC’s Take It Down and TakeItDown.ftc.gov?

NCMEC’s Take It Down is a free tool that hashes an image of a minor on your device so participating platforms can find and remove copies. TakeItDown.ftc.gov is the FTC’s site for reporting platforms that fail to remove images within 48 hours. One helps remove images; the other holds platforms accountable.

Does the law apply if the image is AI-generated?

Yes. The Act covers “digital forgeries,” defined as intimate images created with software, machine learning or AI that a reasonable person would find indistinguishable from real. Federal child sexual abuse material laws also cover realistic computer-generated images of minors. The first conviction, in April 2026, involved AI-created images.

What if the image is in a private group chat?

Report it to the messaging app using its tools, and to police and the CyberTipline. NCMEC’s hash matching works only on public or unencrypted participating services, so private or encrypted chats may not be reached automatically. Tell the school what happened without sharing the image, so staff can address it with students.

---

About the author

Ricky Flores is the founder of HiWave Makers and an electrical engineer with 15+ years of experience building consumer technology at Apple, Samsung, and Texas Instruments. He writes about how kids learn to build, think, and create in a tech-saturated world. Read more at hiwavemakers.com.

---

Sources

1. U.S. Government Publishing Office. (2025, May 19). Public Law 119-12, “TAKE IT DOWN Act.” https://www.govinfo.gov/content/pkg/PLAW-119publ12/html/PLAW-119publ12.htm
2. Federal Trade Commission. (2026, May). “FTC begins enforcing Take It Down Act.” https://www.ftc.gov/news-events/news/press-releases/2026/05/ftc-begins-enforcing-take-it-down-act
3. Federal Trade Commission. “TakeItDown.ftc.gov: Report platforms that fail to remove intimate images.” https://takeitdown.ftc.gov/
4. National Center for Missing & Exploited Children. “Take It Down.” https://takeitdown.ncmec.org/
5. National Center for Missing & Exploited Children. “CyberTipline.” https://report.cybertip.org/
6. U.S. Senate Committee on Commerce, Science, and Transportation. (2026). “Cruz, Klobuchar mark one year of Take It Down Act as FTC enforcement begins.” https://www.commerce.senate.gov/press/rep/release/cruz-klobuchar-mark-one-year-of-take-it-down-act-as-ftc-enforcement-begins/
7. Federal Bureau of Investigation, IC3. (2024, March 29). Public service announcement on AI-generated child sexual abuse material. https://www.ic3.gov/PSA/2024/PSA240329
8. 988 Suicide & Crisis Lifeline. https://988lifeline.org/