DMCA takedown for stolen product photos

August 16, 2026
Image Management, Shopify Tips
14 min read
a product photo card being lifted off a browser window by a paper notice document, with a small envelope beside it

A DMCA takedown for stolen product photos is free, takes about fifteen minutes, and needs no lawyer and no copyright registration. You send a notice with six specific elements to the platform hosting the copy, and the platform removes it to keep its own legal protection under 17 U.S.C. 512. That is the whole mechanism. The reason most merchants never do it is that nobody explains where to send the thing.

So this post is the addresses. Ten platforms, the exact URL for each, what they demand, and the template you paste in. Written for store owners, not lawyers, and none of it is legal advice.

One warning up front, because it is the mistake that costs people money: a knowingly false notice creates liability under section 512(f) for the other side’s damages and legal fees. Do not fire these off at a competitor whose photos merely look similar to yours.

In this post

Three checks before you send anything

Do you own the photo? If a freelance photographer shot it and never signed an assignment, they own it, not you, and you are not authorised to send the notice. We covered that mess in who owns your Shopify product photos. If the images came from your supplier, you almost certainly cannot act on them at all.

Is it actually your file, or just a similar product? Two stores selling the same white ceramic mug will have similar photos. Copyright protects your specific image, not the idea of photographing a mug on a linen backdrop. Look for the tells: identical shadows, the same dust speck, your crop, your colour grade.

Have you considered fair use? This is not a nicety. In Lenz v. Universal Music Corp. (9th Cir., 14 September 2015), the court held that copyright holders “must consider fair use before sending a takedown notification”, and that ignoring that duty makes you “liable for damages under section 512(f)”. For a competitor reselling your product shots, fair use is not a serious argument. For a reviewer or a news site using one image in commentary, it might be.

Then gather your evidence: the URL of your original photo on your own store, the URL of every infringing page, and screenshots dated today. Do not skip the screenshots. Pages disappear the moment a notice lands.

The six elements a valid notice needs

Section 512(c)(3)(A) lists them. Miss one and the notice is legally invisible: a notice that fails to comply substantially “shall not be considered” in deciding whether the host had knowledge, which means the host can ignore it and keep its safe harbour.

  1. Your physical or electronic signature, as the owner or an authorised agent
  2. Identification of the copyrighted work, or a representative list where there are many at one site
  3. Identification of the infringing material, with enough information for the host to find it
  4. Your contact details: address, phone, email
  5. A statement of good faith belief that the use is not authorised by the owner, its agent, or the law
  6. A statement, under penalty of perjury, that the information is accurate and that you are authorised to act

Two things people get wrong here. You do not need a copyright registration to send a notice: the Copyright Office answers this directly with “No. A copyright registration is not required before sending a takedown notice.” You do need one to sue, because of Fourth Estate v. Wall-Street.com (4 March 2019), and you need it early to claim statutory damages.

A notice you can copy

Paste this into the platform’s form or email, replace the bracketed parts, and keep a copy.

Subject: DMCA Notice of Copyright Infringement

To the Designated Agent,

I am the copyright owner of the photographs identified below, or am
authorised to act on the owner's behalf.

1. Copyrighted work: original product photographs of [PRODUCT NAME],
   published at [YOUR PRODUCT URL] on [DATE]. Additional works at
   [YOUR COLLECTION URL].

2. Infringing material: copies of those photographs appear at
   [INFRINGING URL 1]
   [INFRINGING URL 2]

3. My contact information:
   [FULL LEGAL NAME], [BUSINESS NAME]
   [BUSINESS POSTAL ADDRESS]
   [PHONE]  [EMAIL]

4. I have a good faith belief that the use of the material described
   above is not authorised by the copyright owner, its agent, or the law.
   I have considered whether the use qualifies as fair use.

5. I swear, under penalty of perjury, that the information in this
   notification is accurate and that I am the copyright owner or am
   authorised to act on behalf of the owner of an exclusive right that
   is allegedly infringed.

/s/ [FULL LEGAL NAME]
[DATE]

Use a business address and a role email such as [email protected]. Several platforms forward your notice to the person you reported, name and contact details included. Pinterest says so outright: it may send “a complete copy of the notice, including your full legal name, copyright owner, and contact information”. Meta shares the rights owner’s name and email. Google may pass the notice to Lumen, which publishes it.

Where to send it, platform by platform

Send to the host first, always. De-indexing a page from Google does nothing about the page itself.

PlatformWhere to fileAccount neededNotes
Shopify storeshopify.com/legal/tools/report-an-issue/dmcaNot statedTrademark and trade dress use a separate form. Agent: [email protected]
Amazonamazon.com/report/infringementYes, it redirects to sign inBrand Registry members use the Report a Violation tool, which tracks status
Etsyetsy.com/ipreportingYesRegister your brand once, then search listings and report from the portal
eBaypages.ebay.com/vero (VeRO Portal, or [email protected])Yes for the portalNon US sites and non copyright issues must go through the portal
AliExpress and Alibabaipp.alibabagroup.comYes, or use the online form or [email protected]Covers Taobao, Tmall, 1688, AliExpress and Alibaba. Wants ID plus proof of rights
Instagram and Facebookhelp.meta.com/requests/1523801815366035Not statedOnly the owner or an authorised agent may file
TikToktiktok.com/legal/report/CopyrightNot statedTikTok Shop listings use a separate ecommerce IPR form
Pinterestpinterest.com/about/copyright/dmca-pinNot required to load the formHard cap of 100 URLs per request. Ask to remove all Pins containing the image
Google Searchreportcontent.google.com/forms/dmca_searchYes, Google sign inDe-indexes the page only. Supplement, never a substitute
Cloudflare fronted siteabuse.cloudflare.comNot statedCloudflare does not host. It forwards to the real host, which is the point

Cannot find the host? Every US service provider must register a DMCA agent with the Copyright Office, and the directory is public and searchable at copyright.gov/dmca-directory. That beats guessing an abuse address, and designations expire after three years, so the contact on some old forum post is often dead.

One planning note on Pinterest’s cap. If a copycat has lifted 300 of your photos, that is three separate submissions, and Pinterest can only match identical copies, so a resized or cropped version will not be caught. Budget an hour, not five minutes.

What happens after you send it

The host removes the material and tells the uploader. The uploader can file a counter notice under section 512(g), swearing under penalty of perjury that the removal was a mistake or misidentification, and consenting to federal court jurisdiction.

Then the clock that surprises everyone: the host must restore the material “not less than 10, nor more than 14, business days” after the counter notice, unless you notify them that you have filed a court action. Not “unless you object”, not “unless you reply”. Only an actual lawsuit stops the put back. Shopify restates the same 10 to 14 business day window in its own policy, and Pinterest says reinstatement “can take up to 14 business days”.

How fast do platforms act on the initial notice? The statute says “expeditiously” and gives no number, and here is the honest finding from checking all ten: apart from the statutory 10 to 14 day put back, almost none of them publish a response time. Amazon, Etsy, eBay, Meta, TikTok, AliExpress, Cloudflare, none. Google says only that it endeavours to respond “as soon as we can”. Anyone quoting you a specific turnaround for these platforms is guessing.

The mistakes that get notices ignored

  • Linking the homepage. Google explicitly asks for the specific URL of the content, not the site root. So does every host.
  • Leaving out the perjury statement. It is the element people quietly drop because it reads dramatic. Without it the notice does not substantially comply.
  • Filing a copyright claim about a trademark problem. A copied logo or store name is a different form. Shopify runs them separately.
  • Using the wrong sub form. TikTok has one form for organic videos, another for TikTok Shop listings, another for ads.
  • Reporting an altered copy and expecting a sweep. Pinterest says plainly that resized or altered files will not be found.
  • Overreaching. TikTok warns that a fraudulent report “may lead to liability for damages under section 512(f)”. They all warn about it because they all see it.

Europe and the UK take a different route

The DMCA is US law. In the EU, the Digital Services Act (Regulation (EU) 2022/2065), applicable since 17 February 2024, requires every hosting provider to offer an electronic notice mechanism that is “easy to access and user-friendly”. Article 16(2) wants four things: a substantiated explanation of why the content is illegal, the exact URL or URLs, your name and email, and a statement of your bona fide belief that the notice is accurate and complete.

The teeth are in Article 16(3): a compliant notice gives the provider actual knowledge, which strips its liability shield if it does nothing. There is no fixed deadline, only “without undue delay”, and no counter notice or put back clock like the US one.

The UK is not covered by the DSA. The nearest thing is regulation 19 of the Electronic Commerce (EC Directive) Regulations 2002, which protects a host only while it has no actual knowledge and acts expeditiously once it does. No prescribed format, no put back window.

How to stop doing this every month

Here is the part that changes the economics. Every notice above costs you an hour and gets one URL removed. The copy goes back up on a different site next quarter. If you are sending these regularly, the problem is not your paperwork, it is that your photos travel naked.

Two changes do more than a stack of notices ever will.

First, put your name in the pixels. A mark carrying the owner’s name can count as copyright management information under 17 U.S.C. 1202, and removing it carries its own statutory damages of $2,500 to $25,000 per violation, separate from ordinary copyright damages. It also makes the theft self identifying: a reseller who does not bother to crop is now advertising your brand on their listing. Doing that across a catalog by hand is the reason nobody does it, so bulk it: Viking Watermark applies your logo or store name across a collection, a tag or the whole catalog and keeps every original in Shopify Files for one click restore. Free for the first 100 images, $5 a month above that, 5.0 stars from 6 reviews.

Applying a store logo watermark across an entire Shopify catalog by collection, tag or product status

Second, register the photos that matter. One group filing covers up to 750 photographs for $55 today, and registering within three months of first publication is what keeps statutory damages and attorney’s fees on the table. That is the difference between a takedown notice and a case with teeth.

“Great product, especially if you sell your own designs. I constantly struggle with people stealing and illegally reproducing my designs, so this adds an extra layer of protection and helps reduce the risk. The badges are also a great feature that creates additional opportunities to improve conversions.”

Little Cute Things, Türkiye, June 16, 2026, Viking Watermark on the Shopify App Store

Then do the boring hygiene: keep an exported archive of originals so you can always prove what you shot and when, using our guide to exporting product images from Shopify, and check for gaps with the free product image audit. While you are in there, the bulk image renamer puts your brand in every filename, which is one more breadcrumb a lazy copier leaves intact.

None of this is glamorous. It is also the difference between a store that gets copied once and a store that gets copied forever. And while you are tidying the catalog, remember that protected photos still have to do their job: showing the right shot per colour is a variant image filtering question, and stores splitting colours into separate products usually need combined listings to keep collection pages sane.

FAQ

Do I need to register my copyright before sending a DMCA notice?

No. The US Copyright Office states plainly that registration is not required before sending a takedown notice. Registration is required before suing in court for a US work, and registering early is what keeps statutory damages and attorney’s fees available.

How long does a DMCA takedown take?

The statute says hosts must act expeditiously but sets no deadline, and almost no major platform publishes a response time. The only fixed clock is the counter notice one: material goes back up 10 to 14 business days later unless you file a court action.

Can I file a DMCA notice against a store in another country?

You file with the platform, not the person, so what matters is where the host operates. Shopify, Amazon, Meta and Google all accept notices regardless of where the infringing merchant sits. For EU hosts, the Digital Services Act notice route applies instead.

What if the copycat files a counter notice?

The content is restored between 10 and 14 business days later unless you notify the host that you have filed a court action seeking to restrain the infringement. Replying angrily to the platform does nothing. This is where copyright registration stops being optional.

Can I get in trouble for sending a takedown notice?

Yes, if you knowingly misrepresent that material is infringing. Section 512(f) makes you liable for the other side’s damages and legal fees, and the Ninth Circuit requires you to consider fair use first. Send notices about actual copies of your own photos, and you are fine.

Does removing the page from Google fix the problem?

No. Google de-indexes the page from Search, so the copy stays live for anyone with the link, plus every other search engine. File with the host first and treat the Google form as a follow up that removes the traffic.

Send the first notice today, to the host, with all six elements. Then spend the next fifteen minutes making sure the next copy of your work carries your name on it.

Mark your catalog free →

Co-Founder at Craftshift

You may also like