Sexting and Image Permanence: What Every Parent Should Understand

What to do if an intimate image is being shared

Start with the known post or threat, not a search for every possible copy. Report it through the service where it appears. For suspected sexual exploitation involving a child, contact NCMEC’s CyberTipline as well. If your teen already has an eligible original, Take It Down may help limit further sharing; the age and file requirements are explained below. You do not need that file to report a known account or URL.

1. Keep a safe record. Note the URL, account handle or ID, date, post identifier and non-explicit threatening text. Do not download, screenshot, forward or request a minor’s intimate image as evidence. Do not include it in a screenshot of surrounding messages. eSafety’s evidence guidance explains this distinction.
2. If someone is making demands, stop the exchange. Do not pay or send more images. Report and block the contact while preserving the existing account and messages; do not delete the conversation. FTC guidance and NCMEC’s sextortion guidance support these steps. Our sextortion response guide covers that situation in more detail.
3. Separate the tasks. A platform report, a search-removal request and eligible hash matching can address different parts of the same incident. Keep their confirmations separately so one success does not get mistaken for completion everywhere.

A useful first sentence to your teen is: “Thank you for telling me. We can work out the next step together. You do not need to send me the picture.” Help with forms and links without asking for a transferred copy. The responsibility for sharing an image without consent belongs to the person doing the sharing.

What each removal action can actually change

Each removal action changes a particular location or route to an image. Deleting a post, having a search result removed and creating a hash are different outcomes. The matrix below is an editorial synthesis of documented service rules, not a record of tested takedowns.

For a concrete example of the first and fourth rows, Snapchat documents deleting your own Snap but separately explains that deletion cannot remove a recipient’s export to Camera Roll. Other apps have their own controls; do not assume a button with the same name has the same reach.

Google states that removing a result does not remove the material from the website hosting it. Hash services likewise work through participants, rather than taking control of every copy. That is why the location matrix comes before the choice of service: several rows may apply to one image.

Which reporting or matching route fits?

Choose the route using the age when the image was made, the person’s age now and whether an eligible file is already available. For a real image made before 18, becoming an adult does not change it into adult-at-creation material. Read the current Take It Down FAQ, StopNCII eligibility questions and the platform’s reporting instructions before submitting.

Take It Down: use the original already held

Take It Down generates a digital fingerprint, or hash, on the device; the image itself is not uploaded. Its home page refers to a file already on your device, while its FAQ more specifically says to use the device where the image was originally taken. Follow that more cautious FAQ instruction. If the original device or file is unavailable, use CyberTipline and the platform report instead of downloading, forwarding or moving a copy to make a submission. Take It Down FAQ explains that alternative.

The service is available internationally, not just in the US. Its participating-service list can change, and participation is not a guarantee that every private message or feature is covered. Do not wait for a hash match before reporting an existing post.

StopNCII: the depicted adult submits

StopNCII is the adult route for eligible material made in adulthood. A parent should not submit someone else’s case through it. The StopNCII FAQ describes local hashing, synthetic-image eligibility and matching limits: cropping, filters or video changes can prevent a match. The FAQ uses “over 18” wording. For someone exactly 18, follow the current intake age questions rather than inferring eligibility from our example, which uses 19 at creation.

StopNCII says it works on participating public-facing platforms and excludes encrypted services; its partner page also lists communication and cloud services. That does not establish coverage of every private feature. Report a known message or file directly to the service when the matching coverage is unclear.

Fake images still have reporting routes

NCMEC’s generative-AI guidance describes help through Take It Down for real and AI-created material, and StopNCII explicitly accepts qualifying intimate fakes of the applicant. However, their public rules do not resolve every situation where the current age, age in a source portrait and depicted age differ. Do not assign a newly generated file to the adult route just because it was generated recently. Report suspected child exploitation to CyberTipline and the platform; ask NCMEC about unclear eligibility without sending a new image copy. Our guide to deepfake intimate-image abuse covers the wider response.

Two hypothetical cases: follow the branches

These hypothetical cases apply the published criteria. They are not reports of families we helped or tests of removal success.

Case A: 17 now, image made at 16

Suppose a teen still has their real original on the device that took it. A copy appears on another account and a result links to it in Google. The age-at-creation and original-device conditions point to Take It Down. The known repost also needs a direct platform report; the search result needs Google’s sexual-images-of-minors reporting route. Neither request replaces the other.

The expected documented outcomes are bounded: the platform may act on that post; Google may remove the result; matching participants may act on copies they detect. Record each decision separately. If the teen is now 21 rather than 17, the under-18-at-creation Take It Down branch still applies. If the original device is gone, do not retrieve a copy to satisfy the hash step: report the known locations and suspected exploitation through CyberTipline instead.

Case B: 21 now, image made at 19

For contrast, suppose an adult has their own real intimate file, made at 19, and learns it is being posted without consent. This is the StopNCII age branch, subject to its other eligibility conditions. The depicted adult submits their own case and keeps the case number and password. They can also report the publication directly and use Google’s adult intimate-image reporting instructions if it appears in Google. Those official instructions link to Google’s central NCII request form. The adult or an authorized representative can make this Google adult NCII request; material involving someone under 18 belongs in the child-specific route. Follow the official form’s current requirements.

Take It Down is not the route for an image made at 19. CyberTipline is also not the default for an incident involving only adult material and adult events: its FAQ distinguishes those from childhood exploitation reported later. If the adult does not have the file, they can still report known locations and consult StopNCII’s support resources; a missing file does not make hashing possible.

How to report and check what changed

To check progress, connect each request to the exact post, account or search result it concerns. Keep a small private log of the service, URL or identifier, submission date, report number, response and next supported step. Leave intimate images out of that log.

Use the sexual-image route for Google

For sexual imagery involving someone under 18 when it was created, use Google’s sexual-images-of-minors reporting route and follow any country-specific directions. Anyone can report suspected child sexual abuse material. This is different from Google’s route for ordinary, non-explicit photos of minors. The sexual-content rules also address specified altered and computer-generated images; do not assume every kind of synthetic content has identical eligibility.

Provide the known URLs and the context the official form requests. Google explicitly says not to create or attach screenshots of sexual material involving minors. Do not upload a child’s intimate image to a reverse-image search to locate more copies. If an instruction appears to ask for one, use the child-specific reporting guidance rather than an adult-image screenshot workflow.

With contact details, Google can acknowledge the request and send a decision or ask for further information. Anonymous reporters do not receive those updates. A refusal may be addressed with new relevant information through the official process; it is not a reason to create additional image evidence.

Read the outcome, not just the status label

• Platform: a report receipt means the report arrived. Read whether the service removed the content, restricted an account or took no action. Use its stated review/follow-up options if needed.
• Google: check the decision for the submitted result. A delisting does not mean the source URL has been removed by the host.
• Take It Down: there are no notices telling you where matches were found. Silence does not prove success or failure everywhere.
• StopNCII: check the case with the saved number and password. Its documented process is not a list of every online copy; keep the access details securely.

If another URL comes to your attention, report that known location using the same safe records. You do not need to repeatedly seek out distressing material to prove that a previous request “worked”. Neither a completed report nor an absence from search can certify deletion from every independent device.

What image permanence means for your family

Image permanence means losing certainty about every independent copy, not that every image must remain publicly available forever. A removed post or search result is a useful reduction in exposure. An unlocated copy is an uncertainty, not evidence that your teen’s future is ruined.

Sexting and non-consensual sharing are different actions. Keep the conversation focused on consent, boundaries and asking for help, rather than turning a removal effort into punishment. You can say: “Deleting what we control matters. We cannot promise to control everyone else’s device. If someone shares or threatens something, tell me and we will get help.”

For ongoing privacy work, use our teen digital-footprint guide. For this incident, the concrete next step is smaller: choose the row for each known location, confirm the age/file criteria, send the supported reports and keep track of what each response actually says.

Frequently asked questions