Someone Put Up a Fake or Real Explicit Photo of You? Here's How to Get It Taken Down in India
If you're reading this because it just happened to you, take a breath first. What you're dealing with — whether it's a real private photo shared without your consent or an AI-made fake — is not something you caused, and it's not something you have to sit with helplessly. India actually has a fairly fast legal machinery for this now, and most platforms are required by law to act within a day. This guide walks through what to do, in the order that gets results fastest.
One thing worth saying upfront: it makes no legal difference whether the image is real or a deepfake. Since February 2026, the IT Rules were amended specifically to cover AI-generated explicit content, and platforms are just as obligated to take it down as they would be for a genuine photo.
Step 1: Collect evidence before you do anything else
Before you report or block anyone, save what you can. This isn't about reliving it — it's about giving the platform, Google, or the police something concrete to act on.
Take screenshots of the image or video, the profile/account that posted it, and the exact URL or post link.
Note the date and time you found it.
If it came with threatening messages, screenshot the full conversation. Don't delete the chat, even if you've blocked the person — police will need it later.
If the same content shows up on multiple sites, save each link separately.
Keep these in a folder somewhere private. You'll need them for almost every step below.
Step 2: Report it directly to the site or app
Every major platform — Instagram, Facebook, X, YouTube, Telegram, Reddit, or a random website — has a "Report" option on the post, profile, or video. Choose the category closest to "nudity," "non-consensual intimate content," or "harassment," and describe what happened in the text box.
This step matters more in India than most people realise. Under Rule 3(2)(b) of the IT Rules, 2021, an intermediary that fails to act on a genuine complaint about non-consensual intimate imagery within 24 hours loses its "safe harbour" protection — meaning it becomes legally liable for the content itself. The Ministry of Electronics and IT formalised this into a standard operating procedure in November 2025, after a Madras High Court order in a case involving a woman lawyer whose private images had been circulated online. So platforms genuinely have a deadline to beat here, and citing it in your complaint ("please action this within 24 hours as required under Rule 3(2)(b)") tends to speed things up.
If the in-app report doesn't move fast enough, look up the platform's Grievance Officer — every significant platform operating in India is required to list one, usually on a "Legal" or "Grievance" page on their website, along with an email address.
Step 3: Use StopNCII.org and Take It Down to stop it spreading further
These two tools don't just remove one link — they help stop the same content from reappearing across multiple sites.
If you're 18 or older: Use StopNCII.org. You upload the image on your own device, and the tool converts it into a "hash" — a unique digital fingerprint — without the image itself ever leaving your phone or laptop. That hash is shared with partner platforms (Meta's apps, TikTok, Reddit, Bumble, Pornhub, OnlyFans, and others), who then automatically detect and block matching content, including future upload attempts. It's free, and you don't need to already know where the image is posted.
If you were under 18 when the image was taken, even if you're an adult now: Use Take It Down, run by the US-based National Center for Missing & Exploited Children. It works the same way — hash-based, nothing uploaded, and you can stay anonymous.
One honest caveat: both tools only work with platforms that have signed up to the scheme. They can't scrub the entire internet, and they won't touch a random standalone website that isn't a partner. For those, you'll need Steps 2, 4, and 5.
Step 4: Get it removed from Google Search results too
Even after the original post is taken down, it can linger in search results and image search for a while. Google now has a dedicated, fairly quick removal path for this, updated in February 2026:
Go to Google Images and find the result.
Click the three-dot menu on the image, then "Remove result."
Choose "It shows a sexual image of me" — you can specify whether it's a real photo shared without consent or an AI-generated fake.
Sign in with your Google account and submit. You can now bundle multiple images into a single request instead of filing one at a time.
You can track the status through Google's "Results about you" page, and Google will also try to proactively filter out similar content from showing up in future searches. This doesn't delete the image from the website hosting it — that still needs a separate takedown request to the site — but it stops it from being one search away from anyone who types your name.
Step 5: File a complaint with the government
This is the step people avoid, usually out of fear of judgment or of their identity becoming public. In practice, India's system is built to protect that.
Go to cybercrime.gov.in, the National Cyber Crime Reporting Portal, and use the section for reporting crimes against women and children. It explicitly covers non-consensual sexual content, and it has an anonymous reporting option — you don't have to give your name if you'd rather not, though providing contact details usually helps investigators follow up faster. You can also call the cybercrime helpline, 1930, for guidance on filing or for urgent cases.
If you'd rather deal with a person than a form, your nearest One Stop Centre (OSC) — set up under the Ministry of Women and Child Development — offers free legal aid, counselling, and help filing the complaint in person. There's usually at least one per district.
Walking into a local police station also works and, for offences like this, they're legally required to register an FIR — the police can't turn you away or tell you to "sort it out privately." If they're reluctant, mention that it's a cognizable offence under Section 173 of the Bharatiya Nagarik Suraksha Sanhita, which makes FIR registration mandatory.
The law is genuinely on your side here
It helps to know what you're actually protected by, especially if a platform or an officer tries to brush you off.
Section 66E of the IT Act covers capturing or publishing images of a person's private parts without consent — this is the core "privacy violation" provision.
Section 67 punishes publishing or transmitting obscene material online — up to 3 years and ₹5 lakh fine for a first offence.
Section 67A covers material showing sexually explicit acts specifically — up to 5 years and ₹10 lakh fine for a first offence. This is usually the section that applies to NCII cases.
Section 67B deals separately, and far more strictly, with any sexual content involving a minor — these overlaps with the POCSO Act, 2012, which mandates reporting and carries much harsher penalties.
Under the Bharatiya Nyaya Sanhita, 2023 (which replaced the IPC), Section 77 covers stalking someone through monitoring their digital activity, Section 79 covers acts intended to insult a woman's modesty, and Section 356 covers defamation — useful if a deepfake is being used to damage someone's reputation rather than just for harassment.
The Indecent Representation of Women (Prohibition) Act, 1986 adds another layer specifically around depicting women indecently in media.
None of this requires you to become an expert in the law yourself — a lawyer at an OSC or a legal aid NGO can translate it into your specific case. But knowing the section numbers exist tends to make platforms and police move faster, because it signals you know your complaint has teeth.
If someone is threatening or blackmailing you with it
Sextortion — someone threatening to release explicit images unless you pay them or send more content — is common enough in India that cybercrime cells deal with it daily. A few things matter here specifically:
Don't pay. It rarely stops the demands and often invites more of them, since paying confirms you're reachable and willing to negotiate. Don't send more images either, however convincing the threat sounds.
Screenshot every message, including usernames, phone numbers, or payment details, before blocking. Then report to 1930 or cybercrime.gov.in immediately — these cases are often flagged for faster action precisely because of the ongoing threat.
If you're a parent and this is happening to your child, report it as CSAM (child sexual abuse material) on the portal rather than as general NCII — it triggers a different, stricter response, and you can also use Take It Down on your child's behalf.
Beyond the takedown
Getting the content removed handles the practical side. What it's done to you emotionally is a separate thing, and it's fine to need support for that too. One Stop Centres offer free counselling alongside legal help, and organisations like the CyberPeace Foundation run helplines specifically for online harassment. If things feel like too much to carry right now, the government's 24x7 mental health helpline, KIRAN (1800-599-0019), is free and available in 13 languages.
Quick answers to common questions
Will the platform tell the person who posted it that I complained?
Generally, no — reports are meant to be confidential, and StopNCII.org and Take It Down never reveal who submitted a hash.
Can I report anonymously to the police?
For CSAM and NCII-type complaints, cybercrime.gov.in does allow anonymous submission. Fully anonymous FIRs are harder, since investigation usually needs some way to follow up, but you can still report without your name attached to flag the content itself.
Does it matter if the image is AI-generated rather than real?
Not for takedown purposes. Platforms, Google, and Indian law all treat non-consensual explicit deepfakes the same way they treat real non-consensual images.
How fast will it actually come down?
Platforms are required to act within 24 hours of a valid complaint under the IT Rules. In practice it can take a bit longer depending on the platform, but 24 hours is the legal benchmark you can hold them to.
What if the site hosting it isn't a big platform, just a random website?
Report it through cybercrime.gov.in regardless — the portal can route the complaint to internet service providers to block access to the specific link even if the site itself doesn't cooperate.
Comments