Your content got leaked. Here's exactly what to do

You found your content somewhere it’s not supposed to be. Maybe a fan sent you a link, maybe you searched your own name. Either way, your stomach just dropped.

First: this happens to a lot of creators, and it is not your fault. Second: you have real tools here. Copyright law is on your side, most websites and hosting companies have a process for removing stolen content, and Google has one for pulling it out of search results.

Here’s the plan, in order.

Step 1: Don’t panic, and don’t engage the leaker

Your first instinct might be to message whoever posted it, comment on the post, or call them out publicly. Don’t.

Engaging tends to backfire. It can tip them off to mirror the content before you’ve documented it, draw more attention to the leak, or invite harassment. Treat this like a paperwork problem, not a fight. Paperwork is what gets things removed.

Step 2: Document everything before you do anything else

Before you file a single request, build your evidence file. Links can disappear and reappear, and you’ll want proof of what was where and when.

For every place your content appears, save:

The exact URL of the page (not just the homepage of the site)
Direct URLs of the images or videos if you can get them (right-click, copy image or video address)
Full-page screenshots that show the URL bar and the date and time on your screen
The date you found it
Any username of the person who uploaded it
Your original: where and when you first posted it, so you can prove it’s yours

Keep it all in one spreadsheet and one folder. Columns can be simple: URL, site, date found, screenshot filename, date takedown sent, response, status.

If looking at it is too much, ask a trusted friend to help with this part.

Step 3: Send a DMCA takedown to the website

If you created the content, you generally own the copyright to it. The Digital Millennium Copyright Act (DMCA) gives US copyright owners a way to demand that websites remove infringing material, and sites that want to keep their legal protections have to respond.

Look for a “DMCA,” “Copyright,” “Abuse,” or “Contact” link, usually in the site’s footer. Some sites have a form; others list an email address for their designated copyright agent.

A valid DMCA notice includes these elements. Here’s an outline you can adapt:

Subject: DMCA Takedown Notice

Your identification and contact info: your name (or business name), mailing address, email, phone.

The copyrighted work: “I am the copyright owner of the original photos and videos published at [link to your original profile or post].”

The infringing material and where it is: “The following URLs display my copyrighted work without authorization: [list each URL].”

Good-faith statement: “I have a good faith belief that use of the material in the manner complained of is not authorized by the copyright owner, its agent, or the law.”

Accuracy statement: “The information in this notice is accurate, and under penalty of perjury, I am the owner, or authorized to act on behalf of the owner, of the copyright that is allegedly infringed.”

Signature: your physical or electronic signature (typing your full name usually works).

A few notes:

Only file for content you actually own. Google’s own DMCA page warns that you can be liable for damages if you materially misrepresent that something is infringing. If you’re unsure, ask a lawyer first.
Your contact details may be shared with the uploader in some cases. If that worries you, a lawyer or a takedown service can file on your behalf.
Log everything. Date sent, who you sent it to, any response.

Step 4: Go over their head to the hosting company

Some sites ignore takedown requests. That’s when you contact the company that actually hosts the site. Hosting providers usually have abuse departments, and they don’t want to be on the hook for copyright infringement either.

To find the host:

Look up the domain with the ICANN Lookup tool. This shows registration data like the registrar and nameservers.
Look up the site’s IP address with a hosting lookup tool (search “who is hosting this website”). This usually tells you which company runs the server.
Find that company’s abuse or DMCA contact on its website, and send the same notice.

If the lookup points to a content delivery network (a service that sits in front of websites, like Cloudflare), those companies typically have an abuse reporting process that can pass your complaint along to the actual host.

The registrar (where the domain was bought) is another place to report, though registrars vary a lot in how they handle copyright complaints.

Step 5: Get it out of Google Search

Even if a site drags its feet, you can stop people from finding it through Google. Google says it complies with DMCA notices and explains the process on its copyright removal page, which walks you into its legal troubleshooter. Choose Google Search as the product, choose copyright as the issue, and submit the URLs.

Keep in mind: Google removing a result doesn’t delete the content from the site. It just makes it much harder to find. That’s why you do this alongside Steps 3 and 4, not instead of them.

If intimate content of you was shared without your consent and it was never something you sold or posted commercially, Google has a separate process for removing non-consensual intimate imagery from Search. Read the eligibility criteria carefully, because content you distributed commercially may not qualify under that policy. For that, the copyright route is the one to use.

Step 6: Consider registering your copyright

You own the copyright the moment you create your content. Registration is optional. But it can matter a lot if things escalate.

According to the US Copyright Office, you have to register before you can file a lawsuit for infringement of a US work, and registered works may be eligible for statutory damages and attorney’s fees if you win. The Copyright Office’s guidance says those remedies are available when registration happens before the infringement or within three months after publication.

Translation: if you ever want the option to sue, registering early gives you more leverage. The Copyright Office has group registration options for photographs that can make this more manageable than registering one image at a time. A lawyer can tell you if it’s worth it for your situation.

Step 7: Watermark going forward

Watermarks don’t stop leaks, but they make stolen content less useful and easier to trace.

Put your handle somewhere on the image or video that’s hard to crop out without ruining it
Use a semi-transparent mark rather than a tiny corner logo
Some creators use slightly different watermarks on different platforms, so if something leaks, they can tell where it came from

Whatever you do, keep your original, unwatermarked files and their metadata stored safely. They help prove ownership.

Should you pay a takedown service?

Paid takedown services exist. They monitor the web for your content and file removal requests for you. If leaks are ongoing, handing this off can save you hours a week and a lot of emotional energy.

Before paying, ask:

What do you monitor, and how often?
Do you file with sites, hosts, and Google, or only some of them?
Do I get reports showing what was found and removed?
Is there a contract length or cancellation fee?

Some creator management agencies include leak monitoring in their service. If you’re considering one, here’s how to vet a creator management agency before you sign anything.

When to talk to a lawyer

DIY takedowns work for a lot of situations. Talk to a lawyer if:

You know who leaked it, especially if it’s someone you know personally
A site or host keeps ignoring valid notices
Someone is threatening you, demanding money, or using the content to harass you
You’re thinking about suing
You received a counter-notice claiming the content isn’t yours

If money is tight, look for a Volunteer Lawyers for the Arts group or a law school clinic in your state that handles intellectual property.

Protect your mental health, too

A leak can feel like a violation, because it is one. It’s normal to feel angry, embarrassed, anxious, or numb.

Limit how often you search for it. Set specific times to check, or hand monitoring off to someone else.
Tell someone you trust. You don’t have to handle this alone.
Take a break from posting if you need to. Your audience will survive a few days.
Talk to a therapist if it’s affecting your sleep, your work, or your relationships.