What If Someone Leaks Your Private Photos? Step-by-Step Guide

Quick Answer (First 60 Minutes)

If someone leaks your private photos, you’re not powerless. In the first hour, focus on four things:

1. Stop the spread: report the content where it’s posted. Many platforms have dedicated policies for non-consensual intimate imagery.
2. Save evidence: capture URLs, screenshots, usernames, timestamps, and any messages or threats.
3. Reduce visibility: request Google Search removal (delisting) for non-consensual explicit imagery so it’s harder to find.
4. Protect yourself: if you’re being threatened (sextortion), don’t pay and seek help; paying often increases demands.

Step 1: Make Sure You’re Safe (Especially If There Are Threats)

If someone is threatening to post your photos unless you pay or comply, that’s sextortion and a form of image-based abuse. The most consistent guidance from safety agencies is: don’t pay, don’t negotiate alone, and get support.

If the person knows your address, workplace, or is escalating to stalking/harassment, prioritize personal safety and involve law enforcement.

Step 2: Preserve Evidence (Do This Before It Disappears)

Takedowns can happen fast—sometimes the content is removed, then reposted elsewhere. Evidence helps with platform escalations, search delisting, legal remedies, and law enforcement.

Capture:

• The exact URL(s) of the page and any image/video file URLs
• Screenshots showing the post, username, date/time, and comments
• Your messages with the poster (threats, blackmail, admissions)
• Any payment requests or handles (Cash App, crypto wallets, etc.)

Platforms explicitly recommend documenting posts before reporting.

Step 3: Find every copy fast

Here’s why this step needs to be early: leaked private photos often get reposted to multiple accounts and sites quickly. Reporting only the first link can feel like “whack-a-mole.”

Your goal: build a list of everywhere your face appears (including re-uploads and cropped versions).

Run a reverse search to identify reposts

Use a reverse face search workflow to locate other pages where your face is being used.

You can use Erasa’s Reverse Face Search page here:

Best practices for higher match accuracy:

• Use a clear face photo (good lighting, minimal blur).
• If the leaked content is heavily cropped, also test: a different selfie from the same time period a profile photo that matches your current look
• Run multiple scans over time (reposts can appear later).

Step 4: Report & request takedowns on social platforms

Most major social platforms have dedicated reporting flows for privacy violations / intimate images. Start here because these removals often happen faster than contacting random websites.

Instagram / Threads

• Use Instagram’s privacy reporting channel for image/video violations.
• Instagram also has guidance on reporting intimate images shared without permission.

Facebook / Meta

• Facebook provides a privacy violation reporting path and recommends using in-product “Report” links.
• Meta also publishes guidance on what to do if someone shares an intimate photo without permission.

Reporting tips that improve outcomes:

• Include multiple URLs in one submission when possible.
• Attach screenshots with URL visible.
• Use clear language: “non-consensual intimate image” / “shared without permission.”

Step 5: Remove It From Google Search

Important: Google delisting does not delete the content from the website. It helps prevent the page from appearing in Google Search, which can dramatically reduce discovery.

Google has a dedicated pathway for:

• Non-consensual explicit imagery
• Involuntary fake pornography (deepfakes)

What you’ll typically need:

• The URL(s) of the offending page(s)
• Search queries where it appears (if known)
• Proof/confirmation you’re the person depicted or an authorized representative

If you don’t know the exact search query, start by using your name, usernames, and reverse image searches to locate indexing pages, then submit those URLs.

Step 6: Remove the Content From the Website Where It’s Hosted

This step is non-negotiable.

• Removing content from social platforms or Google Search only limits visibility.
• To truly stop the spread, you must remove the content at the source — the website that is actually hosting the image or video.

Why source removal matters

• Google cannot delist content that still exists everywhere forever
• Reposts often come from the original hosting site
• Many leak sites quietly comply only when contacted correctly

4A. Identify the hosting website (not just the platform)

Using the URLs you collected in Step 3:

• Open the page and scroll to the footer
• Look for: “DMCA” “Abuse” “Privacy” “Report content” “Contact us”

If the image appears embedded, right-click → Open image in new tab to find the true host domain.

4B. Choose the correct removal method

Option 1: Privacy / Non-consensual intimate imagery request

Many sites explicitly prohibit:

• Non-consensual intimate images
• Image-based abuse
• Revenge porn

When available, use privacy or abuse forms instead of DMCA — they are faster and require less legal wording.

Use language like:

“This image depicts meand was shared without my consent. I am requesting immediate removal under your privacy and non-consensual imagery policy.

Option 2: DMCA takedown (when privacy forms don’t exist)

DMCA can be effective only if:

• You took the photo yourself, or
• You own the copyright (e.g. selfie, private photo)

Include:

• The infringing URL
• A statement of ownership
• A good-faith belief statement
• Your contact email

⚠️ DMCA is not ideal for all cases — use it when privacy removal fails.

Step 6: Get Help (Legal + Support Resources)

In the U.S., federal guidance recognizes that sharing intimate images without consent violates privacy and may be illegal, and encourages victims to seek help and understand their rights. Department of Justice

You also have reputable help options, such as:

• Cyber Civil Rights Legal Project (pro bono legal assistance resources)
• Reporting pathways like the FTC for certain online harms and fraud patterns connected to nonconsensual intimate imagery situations

If you’re outside the U.S., many countries have specialized helplines (e.g., the UK’s Revenge Porn Helpline) that also provide platform removal guidance.

FAQ

What if the leak is a deepfake (AI-generated)?

Many reporting systems explicitly cover involuntary fake pornography and related manipulated content. Google provides an option for this category in its legal removal flows.

Should I file a DMCA request?

DMCA is a copyright tool, not a privacy tool. It can help in some situations (for example, if you own the copyright to the photo), but for non-consensual intimate imagery, platform policy + specialized removal forms are often faster.

Will Google removal delete the images?

No—Google delisting reduces search visibility, but you still need to remove content from the host site whenever possible.

What if someone is threatening to leak my photos unless I pay?

Guidance from safety agencies is consistent: don’t pay, keep evidence, and seek help.