Someone Posted Your Private Photo? Indian Law Now Gives Instagram 2 Hours

You do not have to wait days, and you do not have to go through it alone.

• Indian rules require platforms to remove content that shows a person's private areas, nudity or sexual acts, or impersonates them, including morphed or deepfake images, after a complaint.
• That deadline was 24 hours under the IT Rules, 2021. Amendments in force since 20 February 2026 cut it to 2 hours.
• The complaint can come from you or from someone on your behalf.
• Report in the app, file with Meta's grievance channel, block re-uploads with StopNCII.org, and file a police complaint at cybercrime.gov.in or 1930.

Share this: most people only learn these rights after the worst day of their life. Send it to someone today.

Rule 3(2)(b) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 covers content that, on the face of it:

• exposes the private area of a person
• shows a person in full or partial nudity
• shows or depicts a person in a sexual act or conduct
• is in the nature of impersonation in electronic form, including artificially morphed images

On a complaint by the person, or by anyone on their behalf, the platform must remove or disable access to it. When the rules came in, the Centre described this as a response to revenge porn and morphed imagery (Business Today). After the 2023 deepfake videos, the government reminded platforms that the same clock applies to morphed images (MediaNama).

The Ministry of Electronics and IT notified amendments to the IT Rules on 10 February 2026, in force from 20 February 2026. Among the changes reported by MediaNama:

The same amendments require AI generated or altered content to be labelled, and large platforms must ask users to declare whether what they upload is synthetic (Freshfields analysis).

Before anything is removed, quietly save proof: screenshots showing the post, the account name and the date, and copy the post and profile links. Keep them in a private folder. Never reshare the image, even to "warn" people; that spreads it further.

Then report it inside Instagram:

1. Tap the three dots on the post, Reel, story or profile.
2. Tap Report and choose the option for nudity, sexual content or a fake account pretending to be you.
3. Report the account as well as each post, so the platform sees the pattern.

Instagram's Help Center also has dedicated forms for impersonation and privacy violations that you can use even without an account.

Every large platform serving India must publish the contact details of a Grievance Officer based in India. Meta lists its grievance contact for Instagram users in India in its Help Center.

In your complaint, write clearly:

• that you are making a complaint under Rule 3(2)(b) of the IT Rules, 2021
• the exact links to the posts and the account
• that the content shows you (or the person you represent) and was posted without consent, or is a morphed image

Keep the acknowledgement. Platforms must resolve ordinary grievances within 7 days under the amended rules, and this category within 2 hours.

If you are not satisfied with the platform's decision, you can appeal to the government's Grievance Appellate Committee at gac.gov.in within 30 days of the platform's reply (SCC Online on the GAC).

StopNCII.org lets an adult create a digital fingerprint (a "hash") of an intimate image on their own device. Only the hash is shared with participating platforms, including Facebook and Instagram, so they can detect and block matching uploads. The image itself never leaves your phone.

Meta launched StopNCII in India with local partners including Social Media Matters, the Centre for Social Research and the Red Dot Foundation (Scroll). You must be the person in the image and have been 18 or older when it was taken.

Removal is not justice. Posting someone's private images can be an offence under Section 66E of the IT Act (up to three years, or a fine up to Rs 2 lakh, or both), and sexually explicit material under Sections 67 and 67A.

• File online at the National Cyber Crime Reporting Portal, cybercrime.gov.in, which has a dedicated section for crimes against women and children and lets you report anonymously in some categories.
• Call 1930, the national cyber crime helpline.
• Or visit your nearest police station or cyber cell with your saved evidence.

If someone is demanding money to delete your images, do not pay and do not negotiate. Stop replying, keep the messages, and report the account and the demand.

Does the 2 hour rule cover deepfakes? Yes. Rule 3(2)(b) covers impersonation in electronic form, including artificially morphed images.

Can a friend or parent complain for me? Yes. The rule allows the complaint to be made by the individual or by any person on their behalf.

What if the image is on a private account? Report it anyway. The rule is about the content, not whether the account is public. Your evidence and the account link still help the platform and the police.

Will Instagram see my private photo if I use StopNCII? No. Only a hash, a numeric fingerprint, is shared. The image stays on your device.

What if Instagram rejects my complaint? Appeal to the Grievance Appellate Committee at gac.gov.in within 30 days, and file a police complaint in parallel.

Your account's safety matters more than any growth number. Indiagram never asks for your Instagram password, ever; read why no password is needed.