Finding your own content on a leak site is a violation, and it is normal to feel angry or exposed. It is also a problem with a known process. You do not need to find all of it today. What helps most in the first day is a short list, done in order.
Step 1: Do not engage with the people sharing it
Skip the replies, the DMs and the comments asking someone to take it down. A reply tells the uploader the content is getting attention, it brings more people to the thread, and screenshots of your message can travel further than the original post.
- No public callouts that name the site. A post saying "my content is on noodleek.to, report it" sends traffic to the exact page you want gone.
- If a fan tipped you off, thank them privately and ask them not to share the link any further.
- Be wary of strangers who message you offering removal for a fee. The routes in this guide all start from official forms and published contacts, not from a DM.
Step 2: Document it without spreading it
Before you report anything, write down where each copy lives. Pages get deleted, renamed and mirrored, and a record made today saves you guessing later.
- For each copy: the full URL, the site name, what it is (a photo set, a video, a single image), the date you found it, and a screenshot with the address bar visible.
- Keep one simple sheet with those columns plus "reported on" and "status". That sheet becomes your whole project.
- Do not download the leaked files or forward them to friends to show them. A takedown needs the location of the copy, not the copy. Keep your screenshots in a private folder, not a shared album.
- Gather your proof of ownership: the original files from your phone or camera, and a link or date for where you first published them. That is what turns "this is mine" into something a reviewer can check.
- List the names you post under: your stage name, current and old handles, common misspellings. Leak pages are usually filed by name.
Step 3: Separate the three layers
A leak almost never lives in one place. It usually sits on three layers, and each one has a different party who can act on it.
| Layer | Who can act | Usual route |
|---|---|---|
| The site hosting the file | The site, or the company hosting its server | A copyright (DMCA) notice to the site's DMCA or abuse contact, then to its hosting provider if the site does not answer |
| Search engines showing the page | Google, Bing | Their copyright removal forms. They remove the result from search, not the file from the site |
| Social posts pointing to it | The platform (Reddit, X and others) | Each platform's own copyright or safety report |
Keeping the layers apart matters because progress on one does not show on the others. A page that drops out of Google can still be live on the site, and a deleted post can leave the file untouched. Track each layer separately in your sheet.
Step 4: Report in the right order
- Safety first. If anything in the "When it is not a copyright problem" section below applies to you, start there.
- The site. Look for a DMCA, copyright, abuse or contact page (try adding /dmca or /contact to the address). Send a copyright notice that lists each exact URL. Our free DMCA templates include the elements a notice needs.
- Search engines, at the same time. Do not wait for the site to answer. Google's copyright removal form can drop the page from results even when the site ignores you. Our guide on removing leaked content from Google walks through it.
- Social platforms. Report posts that share or link your content with the platform's copyright form. See our step by step guides for Reddit and X.
- Write down what you sent and when, and check back in a few days. Copies tend to come in waves.
One thing to know before you file: a copyright notice goes out under a real legal name and contact details. X says it forwards the full notice, including name, address, phone number and email, to the account it removes content from. Reddit says it may share basic details such as the copyright owner's name and email with the reported user on request. If that worries you, both platforms point to the same option: an authorized agent can file on your behalf.
Step 5: Protect your personal information
If the leak comes with your real name, home address, phone number or details about your family, that is doxxing. It is a different report from copyright, and it is worth doing early.
- Google: the Remove my private info from Google Search page covers home addresses, phone numbers, email addresses and content shared to harm you, such as personal details posted alongside threats.
- X: use the private information report form.
- Reddit and other platforms: use the report button on the post itself.
- Your own accounts: change passwords on your creator and email accounts, turn on two-factor authentication, and check who has access to any shared folders or drives.
When it is not a copyright problem
Copyright is the right tool for content you made and sell. Some situations need a different channel, and they take priority.
- Anyone in the images was under 18, including you at a younger age. Use NCMEC's Take It Down service and the CyberTipline. Do not forward or upload the images anywhere else, including to a removal service.
- Someone is threatening you or asking for money to stop sharing or to remove content. That is extortion. Stop replying, do not pay, keep the messages, and report it to your local police. In the US you can also report it to the FBI at tips.fbi.gov. The FBI's sextortion guidance is clear that paying does not make the demands stop.
- Images you never agreed to make or share, such as private photos sent to one person, a hidden camera recording or a fake. Platform safety policies, StopNCII and the US Take It Down Act are built for this. See StopNCII and the Take It Down Act.
- You feel unsafe where you live. Contact local emergency services first. Takedowns can wait.
What the next days usually look like
Search engines tend to act on complete requests faster than sites do. Some sites answer a notice within days, some take longer, and some never reply, which is when the hosting provider and the search engines matter more. New copies can appear after the first ones come down. That does not mean the earlier reports failed; it means the sheet keeps going. Checking your name in search once a week is enough to follow progress, and it is easier on you than checking all day.