Photos are the most-stolen content type on the internet, and it is not close. A single portfolio image can end up in a blog post, a product listing, an ad, and a wallpaper dump within a week of publication, and nobody plans to tell you. The DMCA for photographers is mostly a routing problem: you already hold the strongest proof in copyright law, and the skill is putting it in front of the desk that can pull the page.
This guide runs the sequence in the order you would act: confirm you own the rights, assemble evidence, route the notice to whoever controls the page, file correctly, absorb the pushback, and monitor so the next theft surfaces on a dashboard instead of in a client's email.
Why photographers hold the strongest proof in copyright
Ownership is the first thing any channel checks, and photographers have the shortest path to yes. A RAW file carries EXIF metadata, capture timestamp, camera body, lens, exposure settings, recorded before the image ever touched the internet. Set beside a dated archive and your published version, it ends most ownership arguments. The general mechanics of proving ownership apply everywhere; EXIF metadata as evidence covers how much weight the metadata angle carries. One candid caveat: metadata can be edited after the fact, so the untouched RAW and the dated archive matter together.
Two gates before sending anything. First, the contract check: in the US you own a photo the moment you take it, and payment for the shoot transfers nothing, only a signed writing does, an assignment or a work-made-for-hire clause. If you were on staff or signed work-for-hire terms, the copyright may sit elsewhere. Second, the standing check: the DMCA channel serves the copyright owner or the holder of an exclusive right. A stock license you granted changes nothing; a second shooter on a non-exclusive license can still get a sound complaint rejected on standing alone.
Build the evidence pack before anyone hears from you
What you assemble before first contact decides how fast every later step moves. At minimum: every infringing URL, exactly as it appears, one per line; full-window screenshots showing the address bar and the date; an archived copy of the page, because scraper pages get deleted fast; your original file beside a crop matching the stolen version; and your first-publication date and location. If the image is registered, add the registration number.
A nuance most photographers miss: a DMCA notice is sworn statements, not an exhibit package. Section 512(c)(3) requires no attached proof, so the pack is not a legal prerequisite, but keep it ready, because hosts sometimes ask for the source URL, and it is what you lean on if the poster counter-notices or the dispute grows teeth.
Scraper sites do not negotiate: a wallpaper dump will not answer a polite note, it will move hosts or scrub the page. File first, talk never. The exception is a real business sold a bogus license through an intermediary; a short note plus a licensing offer occasionally turns a thief into a customer. If days pass with no reply, file.
Where to file: route the notice by where the photo lives
The same notice works everywhere; the address is what changes.
- Social platforms. Use the built-in copyright forms, Instagram and TikTok's copyright forms are typical, rather than email. Platforms are the fastest channel, and valid strikes accumulate toward account termination, which safe harbor requires for repeat infringers. If your photos circulate widely across Facebook's networks, Facebook's Rights Manager can match images and act at scale.
- Websites and blogs. The owner's contact form is a dead end. Find the hosting provider, the website detective does the lookup, and send a complete notice to the host's abuse desk, working from a tested template in the do-it-yourself takedown kit. Many sites sit behind a CDN; complaints filed there are often forwarded to the real host, but going direct is faster.
- Stock platforms. A stranger re-uploading your image to a stock site is straight infringement; use the platform's IP channel with your original upload date as the anchor. A buyer exceeding their license is a contract dispute in copyright clothing, some platforms will still act, but describe the licensed use frankly.
- Marketplaces and merch. Stolen photos on print-on-demand gear and listings go through the marketplace programs: Amazon and eBay's IP programs handle listings and sellers, and the Etsy and Shopify takedown channels cover storefront platforms. Some tools require a registered trademark for their extra features; plain copyright reports do not.
- Always, in parallel: search delisting. A Google delisting request pulls the image from search results even where a host refuses to act. It does not delete the copy, but it cuts the discovery traffic that made the theft worthwhile.
File a complete notice, or do not bother filing
Hosts act because safe harbor ties their legal immunity to acting, how safe harbor works explains the bargain, but only a valid notice triggers that duty. Under 17 U.S.C. § 512(c)(3), a valid notice needs six elements: your signature; identification of the copyrighted work; identification of the material to be removed, specific enough to locate; your contact details; a good-faith statement that the use is unauthorized; and a statement under penalty of perjury that your information is accurate and you are authorized to act. Miss one and the notice is void: no obligation, no clock, no penalty for ignoring you.
For photos, describe the work concretely, title, first-publication date, source URL, and list the infringing URLs precisely. Batch by host: one notice per provider, not one sprayed across five networks. If the poster answers with a counter-notice, the host must restore the material after 10 to 14 business days unless you sue, so read what happens after a counter-notice before choosing that fight.
Two cautions. Section 512(f) exposes you to damages for knowingly misrepresenting ownership or infringement, so file when certain, not merely irritated. Some uses are lawful: commentary, criticism, and parody can be fair use, a court held in Perfect 10 v. Amazon that a search engine's thumbnails were likely fair use. Where a use reads as genuine commentary rather than theft, see when not to file first.
When the takedown stalls
Most stalled takedowns are mis-routed ones. The copy moved, the site hides behind a CDN, or the notice went to the registrar instead of the host. Re-verify who actually serves the page, resend with a clear subject line, and climb to the provider's upstream when the desk stays silent, what to do when a takedown gets rejected maps the ladder.
Offshore hosts are the other dead end. The DMCA is US law, but its practical reach is wider: global platforms honor notices because their users touch the US, and several countries run notice systems with similar results, where the DMCA reaches abroad sorts which hosts you can move and which are write-offs. A page that returns after removal usually means a re-upload; treat it as a fresh notice, since documented repeat filings push the account toward termination.
Finding the thefts you were never told about
The theft a client spots is the visible tip. Manual detection, reverse image search on your best images every few weeks, catches exact copies and lazy crops, but misses flipped, filtered, and recompressed versions. Perceptual-hash monitoring closes the gap: each image gets a visual fingerprint that survives resizing, cropping, and recompression, so candidates surface automatically. How image fingerprinting works explains the mechanics; our photography protection service stores the fingerprints and visually verifies candidates so you see confirmed matches, not noise.
Two newer patterns belong on the watchlist. Fake portfolios, accounts presenting your images as their own to win bookings, are plain takedowns, and repeated strikes usually end them. The second is AI slop: blogs padding generated text with stolen photos. Training-set scraping is invisible to takedowns, because there is no page to send a notice against; you act on the output when it republishes. Imitating your style is legal, and generated images carry little copyright, how copyright treats AI-generated images draws the lines.
Prevention that does not cost you the portfolio
Photographer prevention is a balance, because the images you protect are the ones that sell. The working combination: watermark what you publish, not what you deliver. Client proofs and social versions get a tiled watermark through the free watermark tool, tiled, because a corner mark is cropped out in seconds. Paying clients get clean files. Publish at web resolution, capped around 2,000 pixels on the long edge: sharp on screen, useless for print, so you sell the resolution. Skip right-click blockers; they stop nothing that matters.
Two legal footnotes. Removing a watermark or copyright metadata is a separate violation under 17 U.S.C. § 1202, with its own statutory damages if the case reaches court, worth citing when you contact a stripped-copy poster. And keep RAW originals offline and untouched: some platforms strip uploaded metadata anyway, which makes your dated archive the only reliable record.
Registration: the photographer's insurance policy
Registration plays no role in takedowns. What it controls is court: you cannot sue over a US work in a US court without registering first, and timing decides remedies. Register before the infringement begins, or within three months of first publication, and statutory damages run from $750 to $30,000 per work, up to $150,000 for willfulness, with attorney's fees available. Miss the window and actual damages are all you have, often small for a single photo.
Photography makes registering cheap. The Copyright Office's group registration options cover a published batch, a whole shoot, a quarter's output, under one application and one fee, so registering quarterly is a habit, not a project. If a dispute needs a courtroom, the Copyright Claims Board offers a small-claims route with capped recovery and no lawyer required. The economics, including when registering is not worth the fee, are laid out in whether registration is worth it.
Frequently asked questions
Can I file a takedown for a photo I never registered with the Copyright Office?
No. Registration plays no part in DMCA notices, platform forms, or host complaints. It matters only in court, where suing requires registration and timely registration makes statutory damages and attorney's fees available. File the takedown today; register your strongest work on your own schedule.
What if the thief cropped out my watermark and stripped the metadata?
File anyway. Ownership comes from your original file, and no host needs your watermark to act. Stripping a watermark or copyright metadata is a separate violation under 17 U.S.C. § 1202, with its own statutory damages if the case reaches court. Keep your RAW originals untouched and dated.
Can I file when a client paid me for the shoot?
Under US law, payment alone transfers nothing. You own the copyright unless a signed contract assigned it or made the work for hire, then the client owns it, and the notice should come from them or from you with their written authorization. Read the contract before anything else.
Does a DMCA takedown also remove the image from Google?
Not by itself. A takedown removes the copy from the host; the search listing survives until the search engine receives a separate removal request covering the same URLs. Run both the same day: delisting does not delete the page, but it cuts the traffic that made the theft worthwhile.
How long do photo takedowns usually take?
Large platforms often act within days. Web hosts range from a day to two weeks depending on the abuse desk. A counter-notice imposes a hard rule: unless you sue, the host restores the material after 10 to 14 business days. Scraper sites that hop hosts take longest, every move restarts the routing.
Your next moves
The whole sequence, in order:
- Confirm your rights in the exact photos, contracts, work-for-hire clauses, exclusive licenses.
- Assemble the pack: every URL, dated screenshots, a page archive, your original file, the publication record.
- Route by location: platform forms, host abuse desks, marketplace programs, search delisting in parallel.
- File complete notices, one per host, every statutory element accurate.
- Register the quarter's best published work while the window is open.
- Watermark public versions; monitor everything else.
When a whole shoot is scattered across a dozen sites, gather the URLs once and hand the channels to a managed takedown service.