The TAKE IT DOWN Act and OnlyFans: what creators and their managers should do now

A federal takedown law is now fully in force

On 19 May 2026, the last and most operational part of the TAKE IT DOWN Act took effect. That was the deadline for “covered platforms” to have a working notice-and-removal system for non-consensual intimate images, and the Federal Trade Commission marked the date by opening enforcement and sending warning letters to platforms National Law Review.

The law itself is not new. It was signed on 19 May 2025, and its criminal provisions took effect immediately; platforms were given one year to build the takedown machinery Congressional Research Service. That year is now up, which is why this matters to creators today rather than in the abstract.

For OnlyFans creators, this is one of the few recent legal changes that works in their favor. It gives a faster, federally backed way to remove leaked and faked intimate content, and it hands creators a concrete new thing to expect from anyone managing their account.

What the law actually requires

The TAKE IT DOWN Act does two separate things.

First, it makes it a federal crime to knowingly publish non-consensual intimate images of an identifiable person. Crucially, that includes “digital forgeries,” the law’s term for AI-generated or edited deepfakes that depict a real person in content they never created Congressional Research Service.

Second, it puts a duty on platforms. A covered platform, meaning a public-facing service that primarily hosts user-generated content, must give users “clear-and-conspicuous notice” of how to report this content in plain language National Law Review. Once it receives a valid request, it must:

• Remove the content within 48 hours, and
• Make reasonable efforts to identify and remove known identical copies of it National Law Review.

The FTC enforces this, and non-compliance is treated as an unfair or deceptive practice under Section 5 of the FTC Act Latham & Watkins. A valid request has to include a signature, enough information to locate the content, a good-faith statement that it is non-consensual, and the requester’s contact details National Law Review.

Why this closes a real gap for creators

Most creators already know the DMCA takedown, the copyright tool used to pull leaked photos and clips off tube sites and forums. It works, but it has a blind spot: it only covers content you hold the copyright in. A deepfake that pastes your face onto someone else’s body is not your copyrighted work, so DMCA notices have historically been a weak instrument against it.

The TAKE IT DOWN Act targets the image of the person, not the ownership of the file. That means the same tool now reaches both your genuinely leaked content and a fabricated deepfake, and it puts a hard 48-hour clock on the platform. In practice, most creators facing a leak or a fake will file both a DMCA notice and a TAKE IT DOWN request, because the two cover different ground.

This sits alongside OnlyFans’ own reporting tools rather than replacing them. The platform already offers ways to report content and flag accounts, and it verifies that account holders are real, identifiable people OnlyFans Help. The new law raises the floor across every covered site where your content might resurface, not just the one you post on.

The question this puts to your manager

Leak monitoring and takedown filing is a normal, valuable part of what a full-service agency does. So the arrival of a stronger takedown law is a good moment to ask a manager how they actually handle it.

The distinction that matters is the same one that runs through everything on this site: a real, accountable, contactable operator can answer these questions, and an anonymous one cannot. The agencies that score highest in our directory do so on named leadership and public identity, such as Creators Inc., rather than a handle you can only reach through direct messages. Content protection is exactly the kind of promise that is worthless from someone you cannot hold to it.

Concrete questions worth asking:

• Who monitors for leaks, and how often? “We check sometimes” is not a process.
• Do your takedowns cover deepfakes, or only copyright reposts? After this law, there is no reason to stop at DMCA.
• Who is named on the takedown request? A valid TAKE IT DOWN request needs the depicted person’s signature and contact information, so you should be involved, not cut out of your own removal.
• What do you do with my identity documents and content archive? The answer should sound like the practices in our account security guide, not a shrug.

A note on AI content and disclosure

The law’s focus on “digital forgeries” lands in the same year that regulators are tightening up on AI more broadly, including FTC scrutiny of undisclosed or misleading AI use. That is worth keeping in mind because AI now runs through the management industry itself, from AI-assisted chatting to AI-generated promotional images.

None of that is illegal, and plenty of it is legitimate. But it makes disclosure a fair expectation. If a manager uses AI to chat with your fans or to generate content in your likeness, you should know, approve it, and understand where the human oversight sits. An AI image of you that you never agreed to is not so far from the harm the deepfake law was written to address.

What to do this week

You do not need to wait for a leak to prepare. Two moves are worth making now.

First, keep your own identity and access intact, because you are the person a valid takedown request has to come from. That means holding your own login, two-factor authentication, and payout details, and granting help through OnlyFans’ native manager permissions rather than a shared password. This is the same discipline that protected creators in the BBC’s investigation into coercive managers: the ones who kept control stayed safe.

Second, if you are choosing or reviewing an agency, fold content protection into the checklist. Our guide to choosing an agency and the glossary cover the terms, and the point is simple. A stronger takedown law is only as useful as the person willing to file on your behalf, and whether that person is nameable is something you can check before you ever need them.