DMCA Takedown Guide — How to Remove Stolen Images From the Web
Find every unauthorized copy, document the evidence, and file takedown notices that get results. A step-by-step process for photographers, designers, and legal teams.
What Is a DMCA Takedown and When Should You File One?
The Digital Millennium Copyright Act (DMCA), codified at 17 USC §512, is the primary legal mechanism for removing copyrighted content from the internet in the United States. It establishes a "notice and takedown" system that allows copyright owners to request that hosting providers remove infringing material — without going to court and without needing a lawyer.
The system works because of a legal bargain called "safe harbor." Under §512(c), hosting providers are shielded from liability for their users' copyright infringement, as long as they respond to valid takedown notices by promptly removing the infringing content. This gives hosting companies a strong financial incentive to process takedowns quickly: if they ignore valid notices, they lose their safe harbor protection and become directly liable for the infringement themselves.
A DMCA takedown is appropriate whenever you discover an unauthorized copy of your copyrighted image on a website, social media platform, or online marketplace. You do not need a copyright registration to file a takedown — copyright protection exists from the moment of creation under US law. However, registration with the US Copyright Office becomes important if the infringer ignores the takedown or if you want to pursue statutory damages in court, since 17 USC §411 requires registration before filing a federal copyright infringement lawsuit.
The first step in any DMCA takedown is documenting the infringement. This means identifying exactly where the unauthorized copies appear, establishing your ownership of the original, and creating records that prove when you discovered the infringement. This is where reverse image search becomes essential: a systematic search finds copies you might miss manually, and a forensic report from a service like Berify documents everything in a format that satisfies the notice requirements.
The Six-Step DMCA Takedown Process
From discovering infringement to getting content removed, here is the complete process.
Document the Infringement
Before contacting anyone, gather evidence. Run a reverse image search on your original image to find every unauthorized copy across the web. Document each infringing URL, the date you discovered it, and how the copy compares to your original. With Berify, this step generates a timestamped forensic report automatically — no manual screenshotting required. This evidence becomes the foundation of your takedown notice and, if needed, any future legal action.
Contact the Website Directly (Optional but Recommended)
Many infringement cases are resolved at this stage without formal legal process. Send a polite but firm email to the website owner explaining that the image is your copyrighted work and requesting removal. Include a link to your original and the specific URL of the infringing copy. Some site owners will remove the content immediately — they may not have known the image was copyrighted, or they may have obtained it from a third party who misrepresented the licensing. Keep copies of all correspondence. If the site owner does not respond within 5 to 7 business days, proceed to the formal DMCA process.
Identify the Hosting Provider via WHOIS
The DMCA takedown notice goes to the website's hosting provider, not to the website owner. This is a critical distinction that many people get wrong. Use a WHOIS lookup tool to identify the hosting company for the infringing domain. Look at the nameservers and IP address to determine the host. Common hosting providers include Cloudflare, Amazon Web Services, GoDaddy, Bluehost, and DigitalOcean. Each has its own abuse reporting process and designated DMCA agent.
Locate the DMCA Agent
Every hosting provider that wants safe harbor protection under §512 must designate a DMCA agent and register them with the US Copyright Office. You can find the agent through the hosting provider's terms of service or abuse page, or through the Copyright Office's online directory at dmca.copyright.gov. The DMCA agent is the person or department legally responsible for receiving and processing takedown notices. Sending your notice to the right contact is essential — notices sent to general customer support or unrelated departments may be delayed or ignored.
Draft the Takedown Notice With All Required Elements
Your notice must contain the five elements required by §512(c)(3) to be legally valid. An incomplete notice does not trigger the hosting provider's obligation to act. The five required elements are: identification of the copyrighted work (URL, registration number, or description); identification of the infringing material with specific URLs; your contact information (name, address, phone, email); a good-faith statement that the use is not authorized; and a statement under penalty of perjury that the information is accurate and you are the copyright owner or authorized representative. Be specific with URLs — "somewhere on example.com" is not sufficient. Provide the exact page URL where the infringing image appears.
Submit and Follow Up
Send the notice to the DMCA agent via their preferred method — usually email or an online abuse form. Keep a copy of everything you sent and the date you sent it. Most hosting providers acknowledge receipt and process the request within 24 to 72 hours. If the content has not been removed after 14 business days and you have not received a response, follow up with the hosting provider and consider escalating to the search engines directly. Google, Bing, and other search engines accept DMCA reports independently and will remove infringing URLs from their search results even if the hosting provider has not acted.
The Five Required Elements of a Valid DMCA Notice
Section 512(c)(3) of the DMCA specifies the exact contents a takedown notice must include. If any of these elements is missing, the hosting provider has no legal obligation to act — and many providers will reject incomplete notices outright. Here is what you need to include.
1. Identification of the copyrighted work. Describe the work you own that is being infringed. The strongest approach is to provide a URL where your original is published, combined with a Copyright Office registration number if you have one. If you do not have a registration, describe the work in enough detail that the provider can identify it — and include your original file or a link to it. Berify's forensic reports include the original image alongside matched copies, making this identification straightforward.
2. Identification of the infringing material. This must include specific URLs — not just the domain name. "My image is on example.com" is insufficient. You need to provide the exact page URL (e.g., example.com/blog/post-title/) where the infringing copy appears. If the same image appears on multiple pages, list every URL. This is one area where a reverse image search is invaluable — it finds URLs you would never discover through manual browsing, and documents them with exact locations.
3. Your contact information. Include your full legal name, physical mailing address, telephone number, and email address. If you are acting as an agent for the copyright owner (for example, an attorney filing on behalf of a client), state the relationship and include authorization.
4. Good-faith statement. Include a statement that you have a good-faith belief that the use of the material in the manner complained of is not authorized by the copyright owner, its agent, or the law. This language comes directly from the statute and should be included verbatim or in substantially similar form.
5. Perjury statement and signature. Include a statement, under penalty of perjury, that the information in your notice is accurate and that you are the copyright owner or are authorized to act on the copyright owner's behalf. This requirement exists because filing a false DMCA notice carries legal consequences under §512(f) — you can be held liable for damages, costs, and attorney's fees if you knowingly misrepresent that material is infringing. Sign the notice with your physical or electronic signature.
Timelines, Counter-Notices, and What Happens Next
Once you submit a valid DMCA takedown notice, the hosting provider must act "expeditiously" to remove or disable access to the infringing content. The statute does not define "expeditiously" with a specific number of days, but case law and industry practice have established general expectations. Most major hosting providers process takedowns within 24 to 72 hours. Smaller providers may take 5 to 14 business days. If a provider consistently takes weeks or ignores notices entirely, they risk a court finding that they did not act expeditiously, which jeopardizes their safe harbor protection.
The more complex scenario arises when the alleged infringer fights back with a counter-notification. Under §512(g), the person whose content was removed can file a counter-notice asserting that the takedown was made in error or that the material does not actually infringe. A valid counter-notice must include the subscriber's name, address, and phone number; identification of the material that was removed; a statement under penalty of perjury that the removal was a mistake or misidentification; consent to the jurisdiction of a federal district court; and a physical or electronic signature.
When a counter-notice is filed, the hosting provider must forward it to you — the original complainant — and then wait 10 to 14 business days. During this window, you have a decision to make: file a federal copyright infringement lawsuit to keep the content down, or let the 10-14 day period expire, at which point the hosting provider must restore the content. This is where having strong, well-documented evidence matters most. If your original search and documentation were thorough — with timestamped forensic reports showing the infringement — you and your attorney are in a much stronger position to proceed with litigation if necessary.
There is also a risk of abuse in the counter-notice process. Some infringers file counter-notices as a delay tactic, knowing that many copyright owners — especially individual photographers and small businesses — cannot afford to file a federal lawsuit within the 10-14 day window. If you anticipate this possibility, consult with an IP attorney early in the process so you are prepared to act quickly if a counter-notice is filed.
International Takedowns: When the DMCA Does Not Apply
The DMCA is a United States statute. It applies to service providers operating under US jurisdiction, including US-based hosting companies, platforms like Google, Facebook, YouTube, and Amazon, and any company that benefits from Section 512 safe harbor protection. But the internet is global, and a significant percentage of image theft occurs on websites hosted outside the United States.
When the infringing content is hosted by a non-US provider, the DMCA notice may not carry legal weight. However, several alternative mechanisms exist. The European Union's Copyright Directive (EUCD), particularly Article 17 (formerly Article 13), requires online content-sharing platforms to obtain authorization from rights holders or take measures to prevent unauthorized uploads. The UK's Copyright, Designs and Patents Act (CDPA) provides its own framework for addressing infringement. Many other countries have signed the Berne Convention, which establishes minimum copyright protections across member nations.
In practice, many international hosting providers voluntarily honor DMCA-style takedown requests, even though they are not legally obligated to do so. This is partly because many of these companies serve US customers and want to maintain good relationships with US rights holders, and partly because copyright protection is recognized in most countries through international treaties. When sending a takedown request to an international provider, include the same five elements you would in a US DMCA notice, but also reference the applicable local law if you can identify it.
Even when the hosting provider is outside the US and will not cooperate, you can still take action through search engines. Google's DMCA reporting system processes takedown requests for search results worldwide. Getting infringing URLs removed from Google Search does not delete the content, but it makes it significantly harder for people to find — which reduces the practical harm of the infringement. Most intellectual property enforcement strategies include search engine takedowns as a parallel track alongside host-level removal.
Common Mistakes That Weaken DMCA Takedown Notices
Filing an effective DMCA takedown is straightforward if you follow the process correctly, but several common mistakes can delay or derail your request. Understanding these pitfalls before you file will save time and improve your success rate.
Sending the notice to the wrong party. The takedown goes to the hosting provider's DMCA agent, not to the website owner. Many people send angry emails to the site operator, which has no legal force under the DMCA. If the site owner does not cooperate, the hosting provider is the entity with the legal obligation and incentive to act.
Failing to provide specific URLs. "My photo is somewhere on example.com" is not a valid identification of infringing material. The hosting provider needs exact page URLs to locate and remove the content. If an image appears on five different pages, list all five URLs. Berify's search results provide these URLs automatically.
Omitting the perjury statement. Without the statement under penalty of perjury, your notice is technically incomplete and the hosting provider is not obligated to process it. Use the statutory language or a close equivalent.
Not considering fair use. Before filing, you should consider whether the use might qualify as fair use under 17 USC §107. The Ninth Circuit's decision in Lenz v. Universal Music Corp. established that copyright owners must consider fair use before sending a takedown notice. Uses that are clearly transformative, educational, or for commentary may be protected. Filing a takedown against legitimate fair use can expose you to liability under §512(f) and damage your credibility in future enforcement actions.
Relying on screenshots as evidence. Screenshots are better than nothing, but they are weak evidence. They lack verifiable timestamps, have no chain of custody, and can be easily edited. A forensic report with server-generated timestamps, image hashes, and systematic methodology is significantly more credible — both for the takedown itself and for any subsequent legal proceedings.
Evidence That Supports Every Takedown
The Business plan ($49.99/mo) provides the documentation tools that make DMCA takedowns faster and more effective.
- Forensic PDF reports for takedown notices
- Batch search via CSV for multiple images
- 5,000 search tokens per month
- Full API access
- Automated DMCA takedown assistance
- Up to 5 team member seats
- Priority processing
- Dedicated support with SLA
Disclaimer: The information on this page is provided for general educational purposes only and does not constitute legal advice. Berify is a search and documentation tool, not a law firm. DMCA procedures, copyright law, and evidence standards vary by jurisdiction and are subject to change. Filing a false DMCA takedown notice can result in legal liability under 17 USC §512(f). For advice specific to your situation, consult a qualified intellectual property attorney.
Frequently Asked Questions
What evidence do I need for a DMCA takedown?
A valid DMCA takedown notice under 17 USC Section 512(c)(3) requires five elements: (1) identification of the copyrighted work being infringed — this can be a URL to your original, a registration number, or a description of the work; (2) identification of the infringing material with specific URLs, not just the website domain; (3) your contact information including name, address, phone number, and email; (4) a good-faith statement that the use is not authorized by the copyright owner, its agent, or the law; and (5) a statement under penalty of perjury that the information is accurate and you are the copyright owner or authorized to act on their behalf. Berify's forensic reports provide elements 1 and 2 with timestamped documentation — the exact URLs where infringing copies appear, visual comparisons to your original, and discovery dates.
How long does a DMCA takedown take?
Timelines vary by provider. The DMCA statute requires hosting providers to act 'expeditiously' to remove or disable access to infringing material after receiving a valid notice, but it does not define a specific number of days. In practice, most reputable hosting companies process takedown requests within 24 to 72 hours. Major platforms like Google, YouTube, Facebook, and Instagram typically respond within 24 to 48 hours because they have dedicated abuse teams and automated intake systems. Smaller hosting providers may take 5 to 14 business days. If a provider ignores your notice entirely, they risk losing their safe harbor protection under Section 512, which exposes them to direct liability for the infringement.
What if the site owner files a counter-notice?
If the alleged infringer files a counter-notification under 17 USC Section 512(g), the hosting provider must forward it to you and wait 10 to 14 business days. During this window, you must file a federal lawsuit seeking a court order to restrain the infringer — if you do not file suit within the 10-14 day period, the hosting provider is required to restore the content. The counter-notice must include the subscriber's contact information, a statement under penalty of perjury that the material was removed by mistake or misidentification, consent to federal court jurisdiction, and a physical or electronic signature. Filing a false counter-notice carries the same legal risk as filing a false takedown notice — liability for damages including costs and attorney's fees under Section 512(f).
Can I file a DMCA takedown without a lawyer?
Yes. The DMCA takedown process was designed to be accessible to individual copyright owners, and many photographers, illustrators, and small businesses file their own notices successfully. You do not need an attorney to send a takedown notice to a hosting provider or to file a report through a platform's online abuse form. However, you should understand the legal implications — particularly the penalty of perjury clause. Filing a false or materially misleading takedown notice can result in liability for damages, costs, and attorney's fees under Section 512(f). If you are unsure whether your claim qualifies, or if you are dealing with a counter-notice situation that may require litigation, consulting an intellectual property attorney is advisable.
What if the infringing site is outside the United States?
The DMCA is a United States statute, and it only applies to service providers that operate under US jurisdiction or that rely on US-based infrastructure. If the infringing website is hosted outside the US, the DMCA may not apply directly. However, several options remain. Many international hosting providers voluntarily comply with DMCA-style notices as a matter of policy. The European Union's Copyright Directive (EUCD) and the UK's Copyright, Designs and Patents Act (CDPA) have their own takedown mechanisms. You can also report the infringing URLs to search engines like Google, which will remove them from search results even if the hosting provider does not act. For significant cases involving cross-border infringement, working with an IP attorney who has international experience is recommended.
What is the penalty for filing a false DMCA takedown notice?
Under 17 USC Section 512(f), anyone who knowingly materially misrepresents that material is infringing, or that it was removed by mistake, can be held liable for damages including costs and attorney's fees incurred by the alleged infringer, the hosting provider, or the copyright owner. Courts have interpreted 'knowingly materially misrepresents' to require a showing of bad faith — meaning you must have known, or should have known, that the material was not infringing. Honest mistakes generally do not trigger Section 512(f) liability. However, the Ninth Circuit's decision in Lenz v. Universal Music Corp. established that copyright owners must consider fair use before sending a takedown notice, and failure to do so can constitute a material misrepresentation.
Document Infringement. File Takedowns. Protect Your Work.
Timestamped evidence, forensic PDF reports, and batch search. Start your Business trial and take control of your copyright enforcement.
Free searches available. No credit card required.