TAKE IT DOWN Act: What Every Creator Needs to Know Before May 2026

Starting May 2026, Instagram, TikTok, and OnlyFans will have 48 hours to remove your leaked nudes — or face FTC fines.
Here’s what changed, what didn’t, and why you still need protection. ⚖️

The core points of the law

• Criminalizes knowingly publishing intimate images or “digital forgeries” (deepfakes) without consent, with higher penalties for minors.

• Creates platform obligations enforced by the FTC, on top of existing state NCII laws and VAWA remedies.

• Passed Senate unanimously (Feb 2025) and House 409–2 (Apr 28, 2025); signed May 19, 2025.

What platforms now have to do

• Build a formal notice-and-removal process and respond quickly to victim reports; the law’s implementation deadline is May 19, 2026.

• Remove flagged NCII and prevent duplicates from reappearing (expect hash-matching and similar tooling).

• Expect FTC oversight; nonprofits can also be in scope for enforcement.

The controversial bits (why some groups are worried) 😬

• Language breadth: risk of over-removal or pressure on encrypted/private spaces if platforms feel forced to scan more aggressively.

• Process abuse: takedown systems can be misused by bad-faith actors, similar to DMCA experiences.

• First Amendment and Section 230 questions: courts will likely be asked to sort conflicts between speech protections, 230, and the Act’s removal rules.

If you’re a victim of NCII or deepfakes — what to do now 🧩

• Capture evidence safely (URLs, timestamps, page screenshots).
• File a report through the platform’s NCII process (keep the ticket ID).
• File a search removal request to hide links on Google while site takedowns are pending.
• If there’s a credible threat or a minor involved — contact law enforcement.
• Run continuous checks, because reuploads are common and often appear on mirror sites/forums.

So… does the new law mean you can skip using a protection service?

Technically — yes, you could rely on the new platform systems once they’re live in 2026.
But let’s be honest: NCII doesn’t only live on Instagram or OnlyFans. It spreads fast — through forums, Telegram, Discord, and thousands of small sites that don’t rush to take things down.

So yeah, you can skip a protection service.
But our team at Takedown.co scans more than 420,000 websites every single day. 🌐

Can you check that many yourself?

We’ll keep tracking agency guidance, platform rule updates, and early enforcement cases — and update this page as the 2026 deadline approaches.

Sources: Senate Commerce releases; House vote record; CRS Legal Sidebar (law overview, effective dates); major outlets on the signing and platform obligations.