What to Do If Your Nudes Are Leaked: A Strategic, Professional Guide

If your nudes have been leaked, here is what matters right now: this is removable, it is not your fault, and fast action in the first hours dramatically limits the spread. Federal law is on your side — the TAKE IT DOWN Act now makes publishing non-consensual intimate images a federal crime and requires major platforms to remove reported NCII within 48 hours. Free tools exist that block images across platforms before they’re even posted. And if someone is demanding money, do not pay — payment funds escalation, not deletion. Take a breath, then work the checklist below in order. If the situation is moving fast, our 72-hour emergency removal team handles exactly this.

The first hour: stabilize and preserve

1. Do not engage with the person spreading them. No pleading, no threats, no payment, no negotiation. Every message you send confirms the images have power over you and becomes leverage. If there are demands attached, this is sextortion — a crime with its own playbook, covered in our sextortion help guide.
2. Preserve evidence before anything disappears. Screenshot every post, message, profile, and URL — including the threats, if any. Capture usernames and dates. This feels backwards when all you want is deletion, but evidence drives every takedown, platform escalation, and police report that follows. Store copies somewhere the other person can’t reach.
3. Create your StopNCII case. StopNCII.org — operated by the Revenge Porn Helpline — generates a digital fingerprint (hash) of your images on your device; the images never leave your phone. Participating platforms, including Facebook, Instagram, TikTok, Reddit, Snapchat, Pornhub, and OnlyFans, then block matching uploads automatically. It is free, private, and works proactively — hash images you fear will leak, not just ones already posted. For anyone under 18, use NCMEC’s Take It Down service instead, which works the same way for minors.
4. Lock down your accounts. Change passwords on email, cloud storage, and social accounts, and enable two-factor authentication — leaks often start with account access, and stopping the source matters as much as chasing copies.

The first week: takedowns across every surface

1. Report to each platform under its NCII policy — not generic “inappropriate content.” Every major platform has a dedicated non-consensual intimate imagery category with priority queues and, under the TAKE IT DOWN Act, a 48-hour removal obligation. Report the content, then report the accounts posting it.
2. Remove it from Google. Google’s dedicated NCII removal form delists intimate images shared without consent from search results for your name — approvals typically land within days. This doesn’t delete the source page, but it severs the path most people would use to find it.
3. Hit the source sites. For adult sites, use their content-removal forms — our Pornhub removal guide walks the largest one — and escalate to hosting providers where sites don’t respond. Copyright is a parallel lever: if you took the photos yourself, you own them, and DMCA notices bind hosts and search engines regardless of a site’s cooperation.
4. Report the crime. NCII publication is now a federal crime and criminal in nearly every state. A police report creates the paper trail that accelerates platform escalations and preserves your options; the FBI’s IC3 takes reports where extortion or interstate distribution is involved.
5. Monitor for reappearance. Set alerts on your name and usernames. Copies surface in waves; each one gets the same treatment, faster, because your evidence file and case numbers already exist.

Get a Free, Confidential Exposure Scan

Why you should never pay — and never panic-delete

Never pay. Whether it’s an ex, an anonymous account, or an organized sextortion operation, payment does not buy deletion — it identifies you as someone who pays. Demands resume, often larger, and reporting shows paid victims are re-targeted. The FBI’s guidance is unambiguous: don’t pay, preserve evidence, report. The same applies to shady “removal services” that demand crypto or contact you unsolicited after a leak; legitimate firms don’t find you, you find them.

Don’t delete your own accounts in panic. Deactivating your profiles destroys evidence, breaks the report trails platforms need, and cedes your name’s search results to the leak. Lock down, don’t tear down.

You don’t have to do this alone. The emotional weight of a leak is real and heavy. The Cyber Civil Rights Initiative runs a crisis helpline (1-844-878-2274) with counselors who handle this every day. Telling one trusted person converts a secret into a problem being solved.

Honest timelines and expectations

Hash-matching protection begins immediately upon case creation. Major-platform NCII removals typically complete within 48 hours of a proper report. Google delisting usually resolves in under a week. Adult-site and rogue-site removals run from days to several weeks depending on the operator, with host-level escalation as the enforcement path. Full containment of a widely-shared leak — every copy, every mirror — is a weeks-long campaign, and stragglers may resurface for months, which is why monitoring is part of any serious response rather than an afterthought.

What honest professionals will tell you: no one can promise that zero copies will ever exist anywhere. What is consistently achievable is making the content unfindable — removed from every major platform and adult site, delisted from search, hash-blocked from re-upload — which is the outcome that actually protects your life and career. That’s the standard we work to in our revenge porn removal practice, and our revenge porn case study shows what the full arc looks like.

Frequently asked questions

Someone is threatening to leak my nudes unless I pay. What do I do?

Don’t pay and don’t negotiate — payment triggers more demands, not deletion. Stop responding, preserve every message, hash your images with StopNCII so uploads are blocked preemptively, and report to the FBI’s IC3 and local police. Our sextortion help page covers the full protocol. Most sextortion operations move on quickly when a target stops engaging.

Does StopNCII see my photos?

No. The hash is computed on your own device and only the fingerprint — a string of characters that can’t be reversed into the image — is shared with platforms. It’s run by a victim-support nonprofit, it’s free, and it works for images and videos, including ones not yet leaked anywhere.

The images are on a site that ignores removal requests. Is that the end?

No. Uncooperative sites sit on cooperative infrastructure: hosting providers, CDNs, registrars, and payment processors all act on NCII and copyright complaints. Google delisting removes the site’s audience regardless. Hard sites take longer, not forever — this is exactly where professional escalation earns its place.

My face isn’t visible. Can I still get them removed?

Yes. Platform NCII policies don’t require facial identification if you can reasonably establish the images are you (context, identifiable features, the account that posted them). StopNCII hashing works regardless. Deepfaked or AI-generated intimate images of you are also covered — by the TAKE IT DOWN Act and platform policy alike — see our deepfake removal practice.

Should I tell my employer before someone else does?

If there’s real risk of workplace discovery, a brief, controlled heads-up to HR or a trusted senior person — “I’m the victim of a crime, it’s being handled” — beats an ambush. You are the victim here, legally and factually, and framing it that way first is protective. We help clients script exactly this conversation.

If this is happening to you right now, speed is the variable you control. Request a free, confidential Exposure Scan — we’ll find every copy, run the takedowns in parallel, and stay on it until the content is gone, following our process. For active emergencies, our 72-hour emergency removal service starts immediately.