Remove stolen phone images content from iMessage

Why this happens on iMessage

• iMessage group chats can include up to 32 participants and content can be forwarded to additional chats with one tap. Read receipts and typing indicators provide attribution that supports law enforcement subpoenas.
• Phone theft rings frequently extract personal content from devices before resetting them for resale. Specialized buyers exist for content extracted from devices belonging to specific demographics.
• Stolen phones are typically reset within 72 hours of theft, which destroys most local evidence. The distribution online may occur weeks later through buyers in the secondary market.
• Cross platform spread is the rule, not the exception. Content first appearing on iMessage typically reaches between four and twelve additional platforms within 72 hours through reposts, mirrors, and screenshot redistribution.

The takedown process

What to do, step by step

1. 01
   Document every instance before reporting Capture full page screenshots with the URL bar visible, the posting account handle, and the upload timestamp. The police report for the original phone theft
2. 02
   Run a biometric scan to find every copy across platforms Content first appearing on iMessage rarely stays there. ScanErase indexes 2.4 billion face embeddings across 200 plus platforms and identifies every current hosting location in a single scan, including AI generated derivatives.
3. 03
   Dispatch the takedown notice to iMessage Apple accepts iMessage NCII reports through its Communication Safety reporting flow. The iOS 17 sensitive content warning system can also be used to flag content for review.
4. 04
   Preserve identification metadata for subpoena Even anonymous accounts produce identifiable metadata through iMessage. Account creation IP, device fingerprint, and posting history support law enforcement subpoena to identify the perpetrator. Doe defendant filings preserve civil claims while identification proceeds.
5. 05
   Notify Google and Bing for search deindexing Search engine deindexing runs in parallel to platform removal. Even after the original is removed, search engines retain cached thumbnails and snippets for weeks. File NCII removal requests with both Google and Bing alongside the platform notice.
6. 06
   File a police report and preserve the legal record 47 USC 223a TAKE IT DOWN Act for platform removal provides the federal basis for the takedown. Document every notice sent, every platform response, and every removal confirmation in a single evidence file. ScanErase produces this Verified Removal Package automatically as your case progresses.

Legal context

• Apple is a covered platform under 47 USC 223a and operates the Communication Safety program for sensitive content reporting. iCloud subpoenas through Apple's law enforcement portal are typically responded to within 30 days.
• 47 USC 223a TAKE IT DOWN Act for platform removal
• 18 USC 2261A federal cyberstalking if the distribution included identifying information
• Capture the message thread, the sender's phone number or Apple ID, and the timestamp. iCloud backups retain message history for 180 days which is subject to law enforcement subpoena through Apple Privacy and Law Enforcement Compliance.