Learn
A Takedown Isn't the End of the Story — It's One Layer Down
On a site she's never heard of, hosted by a company she's never heard of, making money for a company she's never heard of.
She didn't do anything wrong. The takedown wasn't fake. It's that the internet isn't one thing to regulate. It's seven, stacked on top of each other, and almost every law we have — including the TAKE IT DOWN Act — only reaches the top one.
The Stack
The seven layers
Platforms
The internet everyone's heard of — YouTube, Facebook, X. This is where laws like the TAKE IT DOWN Act focus, because it's the layer the public can see, and the layer most survivors know to report to first.
Fringe & unmoderated sites and forums
Leak sites, hack forums, and corners of platforms like Reddit, Discord, or gaming communities built with far less moderation — sometimes by design. Content that gets removed from a mainstream platform routinely resurfaces here within days.
Search, discovery & distribution
Snap, email, and messaging apps — the layer that moves content person to person, off any public platform entirely, where a takedown notice has nowhere to go.
Access & rendering
Search engines like Google and Bing. A site can be technically “down” and still show up in search results long enough for the damage to keep spreading.
Monetization
Crypto, credit card processors, ad networks. This is the layer that decides whether keeping abuse material online is actually profitable — and often the fastest lever to pull, if anyone's pulling it.
Hosting
Content delivery networks, AWS, Cloudflare — the technical backbone that keeps a site reachable no matter how many times its domain name changes.
Deep infrastructure
Verizon, Comcast, T-Mobile. The layer almost no one thinks about: the physical and network infrastructure everything above it runs through.
Evidence
What our own research found
This isn't theoretical. The Complicit Index — our own program built to name the infrastructure that profits from this abuse — analyzed 111 sampled links to abuse material. Ninety of them relied on a single content delivery network. All 111 were monetized through just six advertising companies.
Seven layers. And the abuse concentrates in a startlingly small number of chokepoints inside them.
sampled links to abuse material analyzed
relied on a single content delivery network
advertising companies monetized all 111
The Gap
Why this matters for the law
Most legislation, including the TAKE IT DOWN Act, requires platforms to remove reported content within 48 hours. That's real progress, and it's necessary. It's not sufficient. A platform can comply completely, on time, every time — and the same content can still be alive one layer down, hosted, distributed, and monetized by companies the law never named.
Deeper is harder to regulate, and easier to hide behind. That gap is exactly where accountability stops working, unless someone is naming who's actually in it.
Keep Learning
More from the Learn Hub
Types & Terms
Every form this abuse takes, and the language to name it.
Read →Books & Reports
The researchers, journalists, and survivors whose work built this field, from the US, UK, and Canada.
Read →Case Studies
Five of the biggest recent cases, and what each one changed.
Read →For Students
Five fast, real reads about what's actually happening to people your age.
Read →Stay Connected
Stay Updated on Survivor Stories and Advocacy
Get notified when we publish new stories and share advocacy updates. A couple emails a month, easy to unsubscribe.
Emails come from the Digital Identity Foundation with a neutral subject line.