You own the photo the instant you press the shutter. Under US law, copyright attaches the moment an image exists in fixed form, no registration, no notice, no fee, and most other countries follow the same rule under the Berne Convention. So when you find stolen photos of your work on someone else's page, ownership is already settled. What to do about them is the only open question, and the answer is a sequence, not a mystery.

Preserve the evidence before the infringer knows you are looking. Send a notice to whoever actually controls the page, platform, host, or marketplace. Delist the copies from image search in parallel. Photographers hold the strongest evidence of any creator group, the original file with its metadata, and that advantage carries the case from the first screenshot to the final removal.

First, confirm it's actually infringement

Three checks, five minutes, before any notice goes out. Is the image really yours? Similar scenes fool people constantly; zoom in on details only your original would contain. Was it licensed? If the photo came from a client shoot or a stock agreement, read the contract, usage rights often reach further than photographers remember, and a takedown against your own licensee is an awkward conversation. Could the use be lawful anyway? Commentary, criticism, parody and news reporting can qualify as fair use under 17 U.S.C. § 107, and US law cuts both ways: § 512(f) lets the accused recover damages when a takedown notice knowingly misrepresents infringement. If your case sits in that gray zone, read up on when a DMCA notice is the wrong tool before you file.

One boundary worth drawing: this page covers copyright theft, your creative work used without permission. If what was taken are private, intimate images of you, a different set of laws and removal paths applies, and the revenge-porn removal guide is the right starting point.

Whatever you conclude, don't open with an angry message or a public callout. It buys nothing, and it warns the infringer to delete the copy or relocate it before you have captured proof of anything.

Build the evidence pack before you send anything

Removal requests fail on evidence more often than on law, so assemble the pack while the copy is still live.

Start with the infringing page. Full-window screenshots with the URL bar and date visible, one set per copy, then a save to a public archive service so an independent, timestamped record survives even if the page vanishes overnight. Then assemble your side: the RAW file straight off the card or out of your catalog, the full-resolution original, delivery records, client emails, and your dated portfolio listing.

The RAW file is the anchor. What EXIF metadata proves in a copyright dispute is a longer story, but the short version is this: the camera writes a creation timestamp and capture settings into the file itself, and that data will almost always predate the infringer's upload. Two cautions keep the evidence sound. Platforms strip most metadata from uploaded copies, so the copy's empty metadata counts against you not at all. And metadata can be edited, which is why corroboration wins, RAW plus edit history plus dated delivery records forms a chain nobody serious argues with. When a dispute turns on who published first, the full method for proving content ownership, what to gather, how to date it, how to present it, completes the picture.

Route the notice to whoever controls the copy

Where the copy lives decides where you file, and sending the notice to the wrong party is the most common way to lose a week.

Removal and delisting are different actions, and that last bullet deserves its own paragraph. A host deleting the page eventually clears the search result; a host ignoring you does not. Delisting takes the URL out of the index either way, so new visitors stop finding the copy even while the page survives. One practical note: notices sent to Google are published in public transparency databases such as Lumen, contact details included. That is normal practice. File from an address you don't mind the infringer, and the world, seeing.

Filing with social platforms

Instagram, Facebook, TikTok, X and Pinterest all accept copyright reports through their own forms, and those forms do more work than people realize. A valid notice under 17 U.S.C. § 512(c)(3) requires six elements: your signature, identification of the copyrighted work, identification of the infringing material, your contact information, a good-faith statement that the use is unauthorized, and a statement of accuracy under penalty of perjury. The platform form prewrites the last two and structures the rest, which is a large part of why form-based reports succeed more often than hand-typed emails to a no-reply address.

Two behaviors to expect. Every accepted report counts as a strike, and keeping safe harbor under § 512(i) requires platforms to reasonably implement repeat infringer policies, serial photo thieves lose whole accounts this way. And assume your identity travels: the person you report is notified and often sees the details of the notice, so file from a business address you are comfortable with. The steps also differ in small ways per platform, and both Facebook copyright reporting and Pinterest copyright reports have quirks worth a minute before you submit.

Filing with a host when the copy is on a website

When the image sits on an ordinary site, you have two jobs: find the right recipient, then send a notice they can act on without follow-up questions.

Finding the recipient is its own small procedure. A WHOIS lookup on the domain usually surfaces the registrar and often the host; the guide to finding out who actually hosts a site covers the edge cases, including sites behind CDNs, which typically forward copyright complaints to the host behind them. Once you know the provider, address the notice to its designated copyright agent, keeping safe harbor under § 512(c)(2) requires US providers to register one with the Copyright Office and publish the details, and the public DMCA agent directory lists them all.

The notice itself is a page of boilerplate you fill in. The notice template, explained clause by clause, shows what each statutory statement means, nothing in it requires a lawyer. Batch every infringing URL into a single notice rather than one email per page; batching is what makes a whole stolen shoot manageable. You can file them yourself at no cost, or hand a stack to a service once volume stops being a one-person job.

If the host sits outside the US, keep going anyway. The DMCA is American law, but most providers worldwide process copyright complaints regardless, some voluntarily, some because the EU's Digital Services Act obliges online platforms to run notice systems, and Canada's hosts at least forward notices to site owners under a notice-and-notice regime. How takedowns work across borders is worth ten minutes before you write off a foreign copy.

What happens after the notice goes out

Timing depends on the recipient. Platforms typically act within days, because sitting on valid copyright notices risks their safe harbor. Hosts run anywhere from hours to weeks; the statute asks only for "expeditious" removal, with no fixed deadline. If nothing moves after ten business days, escalate rather than resend, the playbook for when a takedown gets ignored or rejected covers second contacts, upstream providers, and the lawyer-letter route.

The one response that changes your calculus is a counter notice. Under § 512(g), once the provider receives one, it must restore the material within 10 to 14 business days unless you file a court action first. Few photo infringers send them, since doing so requires their own statement under penalty of perjury and hands you their name and address, but when one arrives, you stand at a fork: pursue the matter in court or accept the image going back up. The counter notice timeline is worth understanding before you need it.

Keep records throughout. Dated screenshots of every exchange are worth nearly as much as the RAW file if this ever reaches a lawyer.

Find the rest, then make the next theft cheaper

The copy you stumbled on is rarely the only one. Photos travel from a portfolio into wallpaper sites, Pinterest boards, marketplace listings and, increasingly, AI training datasets without a single notification, so run discovery before and after every removal. Manual discovery is a habit: push your hero images through reverse image search, Google Lens and TinEye are the standard pair, on a monthly rhythm, and again two weeks after any takedown, because removals flush copies to new hosts. Reverse search has a real weakness: crops, mirrors, overlays and heavy compression defeat it. Perceptual fingerprinting does not have that problem. Our photography protection plans store a fingerprint of each image that still matches after resizing, cropping and re-encoding, then watch for candidate pages automatically, the difference between hearing about theft from a client and catching it the week it happens.

Prevention has three levers. Watermark the public versions and keep clean originals for delivery and licensing only; the free watermark tool takes about a minute per batch. Keep the portfolio dated and public, it is standing proof of first publication. And register the work that earns money: the Copyright Office's group registration covers many photographs in a single application for one modest fee, and whether registration is worth the fee has a photographer-specific answer. The short version is that registering before the infringement, or within three months of first publication, makes statutory damages and attorney's fees available, and how statutory damages work is what turns a takedown into leverage. When theft arrives at volume, a whole shoot mirrored across a dozen wallpaper domains, stop filing one-by-one. Managed takedown cases exist for exactly that.

Common questions about stolen photos

Do I need to register my photos before sending a takedown?

No. Copyright exists from the moment the photo is taken, and neither the DMCA nor any platform form asks for a registration number. Registration matters at exactly one point: filing an infringement lawsuit in a US court, where it also opens the door to statutory damages and attorney's fees if you registered before the infringement or within three months of first publication.

Is it still infringement if the photo was cropped or edited?

Yes. Cropping, filters, mirroring and color changes create what copyright law calls a derivative work, and preparing derivative works is one of the exclusive rights under 17 U.S.C. § 106. Only the copyright owner can authorize one, so the infringer's edits do not dilute your claim, they add a second violation to it. Edited copies also still match under perceptual fingerprinting.

Does giving me credit make the repost legal?

No. Credit is attribution, not a license, and attribution is not a defense under US copyright law. Only a license from you, or an exception like fair use, makes the use lawful. The test is whether the person asked permission. If they didn't, the credit line on the page is a confession, not a permission slip.

What happens if the infringer files a counter notice?

The provider must restore the content within 10 to 14 business days of receiving it, unless you file a court action first, that is the statutory rule under 17 U.S.C. § 512(g). A counter notice is therefore a fork in the road: sue, or accept the restoration. They are rare in photo cases, because sending one requires a statement under penalty of perjury and discloses the sender's details to you.

How long do photo takedowns usually take?

Platform removals typically resolve within days, because delaying valid notices risks a platform's safe harbor. Host removals run from hours to weeks, the DMCA sets no takedown deadline, only counter-notice timelines. If nothing has moved in two weeks, escalate rather than resend the same notice; typical takedown timelines, broken down by channel, are worth a look before you set expectations.

Your next hour, in order

  1. Screenshot every infringing URL with the address bar and date visible, and save each page to a public archive.
  2. Pull your original, the RAW file, its EXIF data, and any dated portfolio listing or delivery record.
  3. File through the platform's copyright form or, for a website, the host's designated agent, with a complete § 512 notice listing every URL in one batch.
  4. Submit the Google delisting request in parallel so the copies stop surfacing in image search.
  5. Two weeks later, run reverse image search again to catch mirrors and re-hosts.
  6. For anything bigger than a stray image, a shoot, a series, a whole portfolio, batch the URLs once and escalate instead of drip-filing.