Remove catfish stole photos content from Mastodon
A catfish or romance scammer has used your public photos to build a fake identity and is posting intimate content alongside those photos. Mastodon typically responds to NCII notices within the statutory 48 hour window.
Tldr
A catfish or romance scammer has used your public photos to build a fake identity and is posting intimate content alongside those photos. This combines impersonation, NCII, and scammer activity targeting third parties. Mastodon is a social platform with approximately 9 million monthly users. Mastodon typically responds to NCII notices within the statutory 48 hour window. Removal from Mastodon requires a properly formatted statutory notice and may benefit from parallel filing through a dedicated NCII portal.
Why this happens on Mastodon
- Federated content spreads across multiple instances through reposts and replies. Removing from the originating instance does not remove from the cached copies on every instance that federated the post.
- Romance scam operations frequently use stolen photos of attractive real people to lend credibility to fake personas. The catfish accounts are typically used to defraud third parties through romance scams.
- The intimate content posted alongside the stolen photos may be AI generated, lifted from other sources, or composited. The composite identity targets your reputation along with the third party victims of the scam.
- Cross platform spread is the rule, not the exception. Content first appearing on Mastodon typically reaches between four and twelve additional platforms within 72 hours through reposts, mirrors, and screenshot redistribution.
The takedown process
What to do, step by step
-
01
Document every instance before reporting Capture full page screenshots with the URL bar visible, the posting account handle, and the upload timestamp. The catfish account's profile and posting history
-
02
Run a biometric scan to find every copy across platforms Content first appearing on Mastodon rarely stays there. ScanErase indexes 2.4 billion face embeddings across 200 plus platforms and identifies every current hosting location in a single scan, including AI generated derivatives.
-
03
Dispatch the takedown notice to Mastodon Mastodon is federated across thousands of independent instances. Removal requires identifying the specific instance hosting the content and contacting that instance's admin directly.
-
04
Report to the FBI Internet Crime Complaint Center File at ic3.gov immediately with full evidence of the scam communications. The FBI maintains active investigations against organized sextortion and romance scam rings and can coordinate with international law enforcement.
-
05
Escalate through hosting and CDN if required Each Mastodon instance has its own admin. Most instance admins are responsive to NCII reports. The fediverse operates a shared block list which can prevent the originating instance from federating with mainstream instances.
-
06
File a police report and preserve the legal record 47 USC 223a TAKE IT DOWN Act for the NCII content provides the federal basis for the takedown. Document every notice sent, every platform response, and every removal confirmation in a single evidence file. ScanErase produces this Verified Removal Package automatically as your case progresses.
Legal context
- Most Mastodon instance admins comply quickly with NCII reports. The Mastodon Server Covenant explicitly prohibits NCII content, which gives leverage even with instances outside US jurisdiction.
- 47 USC 223a TAKE IT DOWN Act for the NCII content
- Right of publicity claims for the unauthorized use of your photos and likeness
- Capture the full federated URL including the instance domain, the original post URL, and any reblogs from other instances. Each instance must be reported separately for full removal.
Frequently asked questions
How long will Mastodon actually take to remove the content?
Mastodon typically responds in approximately 48 hours when a properly formatted statutory notice is filed. ScanErase files the notice within 5 minutes of authorization and tracks compliance through your Verified Removal Package.
What if the perpetrator re uploads the content after removal?
Mastodon retains hash signatures of removed NCII content which prevents identical re uploads to the same platform. A follow-up ScanErase scan checks for re uploads across all 200 plus indexed platforms, so you can file a new notice as soon as matches reappear.
I searched catfish using my photos for nudes and found this guide. Will using ScanErase reveal my identity to Mastodon or anyone else?
ScanErase processes all data confidentially. Notices to Mastodon contain only the information required by 47 USC 223a, which does not include details beyond the affected URLs and your verified identity. Your scan and removal process is not disclosed to employers, family, or any third parties.
See where else your face appears
Free scan in under 60 seconds. $15 to unlock your full report.
Start your free scan