Step-by-step takedown procedures for the USA, EU, UK, Canada and Australia, with copy-paste templates, escalation channels (site → host → registrar → search engines → ICANN), field-tested tricks, and the mistakes that get notices rejected.
1. How takedowns actually work, the escalation ladder
Almost every successful takedown climbs the same ladder. Start at the bottom rung, it's fastest and free, and escalate only if ignored:
1
Site owner / uploader. Contact page, abuse@ email, or in-platform report. Works more often than people expect.
2
Hosting provider. Find it via WHOIS/ASN lookup of the site IP. Every real host has an abuse@ address or DMCA form. Hosts act because safe-harbor immunity depends on it.
3
Search engines. Google/Bing delisting doesn't remove the content but removes its traffic. File in parallel with step 2, always.
4
Domain registrar. For repeat-infringer or pirate sites: registrars can suspend domains for ToS/DNS abuse. Slower, but permanent.
5
ICANN. Only for registrar misconduct (fake WHOIS, registrar ignoring abuse). ICANN never removes content itself.
6
Courts. Injunctions, site-blocking orders (EU/UK/AU have streamlined regimes), or litigation. At this point you need counsel.
Evidence first. Before filing anything, capture the infringing page: full-page screenshot with visible URL and date, the page HTML, and an archive.org snapshot. WebDMCA protection plans capture hashed evidence automatically for every detection, courts and hosts both take you more seriously with it.
2. United States, the DMCA (17 U.S.C. §512)
The DMCA is the template the whole industry understands. US-based hosts, platforms, Google, Cloudflare and most registrars process §512 notices even for non-US complainants.
The 6 required elements (§512(c)(3))
#
Element
Practical notes
1
Physical or electronic signature
A typed full legal name counts.
2
Identification of the copyrighted work
Title + link to YOUR original. Register with the Copyright Office if you can (needed for lawsuits, not for notices).
3
Identification of the infringing material + its location
Exact URLs, one per line. "The whole site" gets rejected.
4
Your contact information
Address, phone, email. See the privacy warning below.
5
Good-faith statement
"I have a good faith belief that the use is not authorized by the copyright owner, its agent, or the law."
6
Accuracy + authority statement, under penalty of perjury
"I swear, under penalty of perjury, that the information in this notification is accurate and that I am the copyright owner or authorized to act on the owner's behalf."
Step by step
1
Gather evidence and the exact infringing URLs.
2
File to the site/platform (YouTube, TikTok etc. have built-in copyright forms, use those, they're fastest).
3
File to the host: find the IP's owner via a WHOIS/ASN tool, then their abuse contact.
4
File Google delisting in parallel: Legal Removal Request → "Copyright". Expect 1–7 days.
5
Behind Cloudflare? File at abuse.cloudflare.com, Cloudflare forwards your notice to the real host and site operator, often revealing both.
6
Still up after 7–10 days? Escalate to the registrar (WHOIS → registrar abuse form) citing repeat infringement.
The counter-notice trap
10–14 business days: if the uploader files a valid counter-notice, the host must restore the content unless you file a court action and notify the host within that window. Counter-notices are rare on clear piracy, common on gray-area content. If you get one, decide fast: litigate or let it go.
3. European Union, DSA notice-and-action + E-Commerce Directive
There is no "EU DMCA". Two layers matter now:
E-Commerce Directive (2000/31/EC), hosting providers lose liability protection once they have "actual knowledge" of illegal content and fail to act "expeditiously". Your notice creates that knowledge.
Digital Services Act (Regulation 2022/2065), Art. 16, every hosting provider (and every platform, Art. 16 applies broadly; big platforms have extra duties) must run a notice-and-action mechanism accepting electronic notices. This is your legal lever, and it has teeth: national Digital Services Coordinators can fine non-compliant providers.
What a DSA Art. 16 notice must contain
Element
Notes
A sufficiently substantiated explanation of why the content is illegal
Quote the copyright: your work, the copying, the member-state law or the DSA itself.
Exact location (URLs)
Same as DMCA, precise URLs.
Your name and email
Notices without them don't count as "notices" under Art. 16.
Good-faith accuracy confirmation
Mirror the DMCA sworn statements.
Step by step (EU-hosted infringer)
1
Same ladder as the US: site → host → search. Google forms work for EU cases identically.
2
For the host, frame your letter as a DSA Art. 16 notice and demand a confirmation of receipt (they must send one) plus a decision "without undue delay".
Large-scale piracy: national courts grant site-blocking injunctions against ISPs in most member states (routine in DE, FR, IT, ES, NL).
Germany/France specifics. German hosts respond well to formal notices citing §19 DSA (the German implementation) and the GDPR is not a shield for pirates. In France you can also report to the ARCOM for audiovisual piracy.
4. United Kingdom
No DMCA equivalent. The toolkit:
Copyright, Designs and Patents Act 1988, the underlying right. Section 97A lets rights holders seek High Court injunctions ordering ISPs to block infringing sites (very established, hundreds of pirate sites are blocked in the UK this way).
Notice-and-takedown by practice: UK and offshore hosts respond to DMCA-style notices because the retained E-Commerce Regulations give them the same knowledge-based liability exposure.
Nominet (.uk domains): the Nominet online-safety / DRS route handles domains used for infringement, mostly trademark-flavored, but persistent piracy gets traction.
PIPCU (City of London Police Intellectual Property Crime Unit), for large-scale criminal piracy; they run an "Infringing Website List" that chokes pirate ad revenue.
1
File DMCA-style notices to site, host, Google, same templates, cite the CDPA 1988 instead of §512.
2
For .uk pirate domains: Nominet abuse report.
3
Persistent commercial piracy: a s97A blocking application via counsel, or report to PIPCU.
Canada has NO takedown obligation. The Copyright Modernization Act (ss. 41.25–41.27) created notice-and-notice: ISPs must only forward your notice to the subscriber, they never have to remove anything. Don't waste weeks waiting for a Canadian ISP to act. Go to the site and the host directly (most hosting used by pirate sites is US/EU anyway), and use Google delisting aggressively.
1
Site → host → search engines as usual (DMCA-style notice; hosts in practice honor them).
2
Optional: send a notice-and-notice through the Canadian ISP, it creates a record and sometimes scares uploaders into removing content.
Court route exists (Norwich orders to unmask infringers), but for content removal the host is usually the practical lever.
6. Australia
Copyright Act 1968, direct notices to site/host work by practice (same knowledge-based liability logic).
s115A (2015/2018 amendments), the Federal Court can order ISPs/carriage providers to block access to overseas pirate sites. Rights holders use this constantly for piracy sites; it's the main Australian escalation.
auDA (.au domains): auDA complaints for licence-rule breaches by .au domains.
Safe-harbor for carriage providers exists (Copyright Regulations 2017, extended beyond ISPs in 2018), so Australian hosts do act on proper notices.
7. Copy-paste templates
7.1 DMCA notice (USA / universally accepted)
To: abuse@[host-or-platform].com
Subject: DMCA Copyright Infringement Notice, [YOUR WORK TITLE]
1. Copyrighted work: I am the owner (or authorized agent of the owner) of
the copyrighted work "[TITLE]", first published at [URL OF YOUR ORIGINAL].
2. Infringing material: The following URLs reproduce/distribute my work
without authorization:
- https://[infringing-site]/page1
- https://[infringing-site]/page2
3. Contact: [FULL LEGAL NAME], [MAILING ADDRESS], [COUNTRY],
[EMAIL], [PHONE]
4. I have a good faith belief that the use of the material described above
is not authorized by the copyright owner, its agent, or the law.
5. I swear, under penalty of perjury, that the information in this
notification is accurate and that I am the copyright owner or am authorized to
act on the owner's behalf.
Signature: /[FULL LEGAL NAME]/ Date: [YYYY-MM-DD]
7.2 DSA Art. 16 notice (EU hosts/platforms)
To: [hosting provider notice mechanism / abuse contact]
Subject: Notice under Art. 16 of Regulation (EU) 2022/2065 (DSA)
This is a notice of illegal content under Article 16 of the Digital Services Act.
1. Why the content is illegal: The content at the URLs below reproduces my
copyrighted work "[TITLE]" ([URL OF ORIGINAL]) without any authorization,
infringing copyright under Directive 2001/29/EC and applicable national law.
2. Location:
- https://[infringing-site]/page1
3. My details: [FULL NAME], [EMAIL] (address: [ADDRESS], [COUNTRY])
4. I confirm in good faith that this information is accurate and complete.
Please confirm receipt of this notice and notify me of your decision without
undue delay, as required by Art. 16(4)-(5).
[NAME], [DATE]
7.3 Registrar / ICANN escalation email
Subject: Repeat copyright infringement, domain [example.com]
The domain [example.com], registered through your services, is used for
systematic copyright infringement. Notices to the site and hosting provider on
[DATES] have been ignored (evidence attached).
Please investigate under your anti-abuse / repeat-infringer policies and your
ICANN Registrar Accreditation Agreement obligations. If the domain's
registration data is inaccurate, note that Whois inaccuracy is independently
actionable via ICANN: https://www.icann.org/compliance/complaint
[Your DMCA notice + evidence pack]
8. Pro tricks
Find the real host behind Cloudflare: check historical DNS records (SecurityTrails, ViewDNS) for pre-Cloudflare IPs, search the domain on Censys/Shodan for origin certificates, and file the Cloudflare abuse form, they forward it to the actual host and operator.
Delisting ≠ removal, do both. A Google delisting kills ~90% of a pirate page's traffic within days while you wait out the host.
Batch URLs properly. One notice with 25 precise URLs beats 25 notices. Google allows bulk submission; hosts too.
Re-file on reappearance. Pirates re-upload. Monitoring (weekly scans at minimum) catches reposts before they rank.
Timestamp everything. Hashed evidence + archive.org links make hosts and courts move faster and shut down "we never saw it" defenses.
Escalate in writing, with deadlines. "Please confirm action within 5 business days" gets queues moving.
YouTube/social platforms: always use their native copyright forms, not email, native forms are legally prioritized and tracked.
Register a DMCA agent ($6 at copyright.gov) if YOU host user content, the mirror image of this guide.
9. What to be careful about
§512(f) misrepresentation liability (US). Knowingly false notices can cost you damages + attorney fees. If the use might be licensed, fair use, or not actually yours, don't file.
Privacy: notices are published. Google forwards every notice to the Lumen Database. Use a business address, not your home address. (Google redacts personal street addresses for individuals, but names stay.)
Fair use / exceptions. Reviews, commentary, parody and quotation can be legal. Filing against them wastes your credibility and invites counter-notices.
Proof of ownership. "I found it online first" is not ownership. Have dated originals, project files, or registration numbers ready, hosts ask.
Perjury is real. The sworn statements carry legal weight; only file for content you own or are authorized to enforce.
Counter-notice clock. Once a counter-notice lands, you have 10–14 business days to sue or the content returns (US). Budget the decision upfront.
Don't abuse ICANN. ICANN handles registrar misconduct, not content. Content complaints to ICANN are discarded and make you look amateur to the registrar.
Check a platform's registered agent; register your own
Rather not run this ladder yourself?
WebDMCA files managed takedowns across all these channels: site, host, registrar and search engines, for $99 (urgent priority $199), with a success guarantee. Protection plans from $5/mo watch for re-uploads automatically with hashed evidence capture.
