You Found a Deepfake of Your Child. Here Is Exactly What to Do.

Take a breath. What you found is illegal, the law is firmly on your child's side, and there is a clear sequence of steps that works. A sexualised AI image of a minor is a federal crime under the TAKE IT DOWN Act, platforms are required to remove it within 48 hours of a valid report, and NCMEC runs a free tool built for exactly this moment. Here is the sequence, in order.

First: what not to do

Two warnings before anything else, because well-meaning parents get caught by both. Do not download, save, screenshot, or forward the imagery itself. Possessing or sharing sexualised imagery of a minor can itself be unlawful, even with protective intent, and every copy widens the harm. And do not confront the suspected creator first, especially a classmate or their family: it tips them to delete evidence and escalates conflict before the formal channels have done their work.

Step 1: record around the image, not the image

Open a note and write down, calmly and completely: the exact URLs where it appears, the usernames and display names of the accounts posting it, the platform, dates and times you found it, and who told you about it. Screenshot threats, captions and messages that do not themselves contain the imagery. This record is what every later step, platform, NCMEC, school, police, will ask you for.

Step 2: report to NCMEC, both doors

NCMEC, the US National Center for Missing & Exploited Children, has two channels and this situation calls for both:

• Take It Down (takeitdown.ncmec.org): creates a digital fingerprint of the image on your device, without uploading it, and distributes the fingerprint to participating public platforms so matching uploads are blocked. It serves anyone who was under 18 when the image was made. One honest note: its materials are written around real photos and AI coverage is not spelled out, which is exactly why you also use the second door.
• The CyberTipline: NCMEC's formal report, which routes the case toward the appropriate authorities. AI-generated sexual imagery of a minor belongs there regardless of how the tool's marketing describes itself.

The differences between the hash tools are mapped in StopNCII vs Take It Down.

Step 3: report on every platform, citing the law

Report the content directly on each platform where it appears, through the safety or intimate-image reporting route, stating plainly: this is AI-generated sexual imagery of a minor. Under the TAKE IT DOWN Act, covered platforms must remove reported non-consensual intimate imagery, explicitly including AI "digital forgeries", within 48 hours of a valid request, and the Act carries enhanced penalties when the person depicted is a minor. Platform-by-platform routes are in the social media reporting guide, and Google de-indexing keeps it out of search results.

Step 4: involve law enforcement, and the school if it is a school matter

File a police report with your recorded URLs and account names, especially if you know or suspect who made it. If the creator appears to be a classmate, contact the school in parallel: this sits squarely inside safeguarding and disciplinary processes, and schools increasingly have a playbook for it. You decide, with them and if needed a lawyer, how far the formal route goes; the takedown machinery above runs regardless. For civil options against an identifiable creator, see can you sue for a deepfake.

Step 5: your child, before everything

The takedown work is yours to carry, not theirs. What they need from you, in roughly this order: the explicit words "this is not your fault"; the fact that it is being handled, by you, with real legal tools; their routines staying as normal as possible; and an open offer of professional support, because this is a recognised form of abuse and distress is the expected response to it. If anything they say touches on self-harm, that becomes the only priority, today, through your doctor or an emergency service.

What honest success looks like

Hash-blocking prevents re-uploads on participating platforms; the 48-hour rule clears covered platforms; de-indexing makes the rest hard to find. What no tool can promise is erasing every copy from every server on earth, and anyone selling that is selling false comfort. The realistic goal, content gone where your child actually lives online, blocked from coming back, and a legal record built, is achievable, and the Takedown Action Plan will sequence it for your exact platforms and location, entirely in your browser. Information current as of June 2026; this is general guidance, not legal advice.