Sexual Exploitation and Image Abuse: What Survivors Can Actually Claim
Federal law sets a minimum of $150,000 in damages for survivors of child exploitation and puts no time limit on filing. A $120 million platform settlement was filed in August 2026, and California reopened its filing window through 2027. Here is what exists, plainly.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
Four Federal Laws That Matter
Survivors often assume nothing can be done, particularly when years have passed or when the material is still online. In fact several federal statutes create civil claims, and they work differently from one another.
18 U.S.C. § 2255, known as Masha's Law, lets someone who was a minor when victimised by certain federal offences sue for damages. It sets liquidated damages of $150,000 as a minimum — you may claim actual damages instead if they are higher — plus attorney fees, and punitive damages are available. It has no statute of limitations.
18 U.S.C. § 1595, the trafficking civil remedy, allows claims not only against the perpetrator but against those who knowingly benefited from a venture they knew or should have known was trafficking. That beneficiary theory is the basis of most platform and hotel litigation. The limitation period is ten years, or ten years from the survivor's eighteenth birthday.
15 U.S.C. § 6851 creates a federal civil claim for disclosure of intimate images without consent, with statutory damages up to $150,000 plus injunctive relief. It applies to images disclosed on or after October 1, 2022.
Case Details
Recent matters: Fleites v. MindGeek/Aylo — a $120 million class settlement was filed around August 16 to 17, 2026, covering people who were under 18 when recorded and whose material was accessible on the company's sites between February 12, 2011 and December 6, 2024, payable in instalments through 2032; court approval is still pending. Doe 1 v. Twitter/X Corp. — on August 1, 2025 the Ninth Circuit held Section 230 still shields most claims but revived a negligence claim over failure to report to NCMEC.
What Is Open Right Now
California reopened its window. Assembly Bill 250 created a two-year revival period from January 1, 2026 to December 31, 2027 for sexual abuse claims whose deadlines had already expired — and it expressly includes people who were adults when the abuse occurred. That matters here, because many people coerced in production settings were over 18 at the time and had assumed they were long out of time.
The TAKE IT DOWN Act took effect May 19, 2025, and since May 19, 2026 covered platforms must provide a notice-and-removal process with a 48-hour deadline, including for AI-generated images. Important limitation: it creates no private right of action against platforms — enforcement runs through the FTC. The private claim against whoever disclosed the images is the separate § 6851 route.
What Courts Have Actually Awarded
Two documented outcomes give a sense of scale, and both concern the same operation.
In January 2020, after a 99-day trial, a San Diego court awarded $13 million to 22 women who said they were deceived into filming — $9.45 million compensatory and $3.3 million punitive. The court also transferred the copyrights in their own videos to them, an unusual and practically powerful remedy because it enables takedown demands.
In the related federal criminal case, a judge ordered restitution of $75,568,283.47 to more than 100 victims on February 13, 2026 — averaging about $553,000, ranging from $440 to roughly $7 million.
An honest caveat belongs with those figures: an order is not a payment. We found no source confirming how much of either award has actually been collected, and restitution against an incarcerated defendant is frequently recovered only in part. The numbers show what courts consider these harms to be worth, which is not the same as what reaches a survivor's account.
Where Else Support Exists
The Cyber Civil Rights Initiative runs a 24-hour helpline on 844-878-2274 that helps with image documentation, takedown requests and referrals to attorneys, some working pro bono or at reduced rates.
One law that is not yet available: the DEFIANCE Act, which would extend the federal image claim explicitly to AI-generated forgeries and lengthen the filing window, passed the Senate in January 2026 but has not been enacted. Some sites describe it as current law. It is not.
Key Dates
- 1
January 2, 2020 — $13 million civil judgment
After a 99-day trial, 22 plaintiffs are awarded $13 million and given the copyrights to their own videos.
- 2
October 1, 2022 — federal image claim begins
15 U.S.C. § 6851 takes effect, allowing civil claims of up to $150,000 for non-consensual disclosure of intimate images. It applies only to disclosures from this date forward.
- 3
May 19, 2025 — TAKE IT DOWN Act signed
Criminal provisions take effect immediately. The law creates no private right of action against platforms.
- 4
January 1, 2026 — California reopens the window
AB 250 revives expired claims for two years through December 31, 2027, expressly including survivors who were adults at the time.
- 5
February 13, 2026 — $75.6 million restitution ordered
A federal judge orders restitution to more than 100 victims, averaging about $553,000 each.
- 6
August 16 to 17, 2026 — $120 million platform settlement filed
Aylo, Pornhub's parent, agrees to pay $120 million in instalments through 2032 without admitting liability. Court approval is pending and no claims process has been published.
Getting the Law Right Matters Here
Misinformation on this topic is unusually harmful, because it can convince someone with a real claim that they have none — or the reverse.
"The DEFIANCE Act lets you sue for deepfakes"
It is a bill, not law. It passed the Senate in January 2026 and has not been enacted. The existing route is § 6851, which applies to images disclosed from October 1, 2022 onward.
"TAKE IT DOWN means you can sue the platform"
It expressly does not create a private right of action. It obliges platforms to remove reported images within 48 hours, enforced by the FTC. Suing the person who disclosed the images is a different statute.
"It has been too long"
Masha's Law has no statute of limitations at all. The trafficking remedy allows ten years, measured from the survivor's 18th birthday where they were a minor. California's revival window runs through 2027 even for claims that had expired.
Frequently Asked Questions
Is there a minimum amount I can recover?
Under 18 U.S.C. § 2255, someone who was a minor when victimised by covered federal offences may recover liquidated damages of $150,000 as a minimum, or actual damages if higher, plus attorney fees. Punitive damages are also available.
How long do I have to file?
It depends which claim applies. Masha's Law has no time limit. The trafficking remedy under § 1595 allows ten years, running from the 18th birthday for those who were minors. State claims vary widely, and California has reopened expired claims through December 31, 2027.
Can I be part of the $120 million Pornhub settlement?
The class covers people who were under 18 when recorded and whose material was accessible on the company's sites between February 12, 2011 and December 6, 2024. The settlement was filed in August 2026 and still needs court approval; no claims administrator has been published. Class members are notified once a settlement is approved.
The material is still online. What can I do now?
Since May 19, 2026, covered platforms must remove reported non-consensual intimate images within 48 hours under the TAKE IT DOWN Act, including AI-generated ones. The Cyber Civil Rights Initiative helpline on 844-878-2274 assists with documentation and takedown requests, which is worth doing before or alongside any legal claim.
I was over 18 at the time. Does that rule me out?
Not necessarily. Masha's Law is limited to people victimised as minors, but the trafficking remedy under § 1595 turns on force, fraud or coercion rather than age, and § 6851 covers non-consensual image disclosure regardless of age. California's revival window through 2027 expressly includes adults.
Do I have to report to the police first?
A civil claim does not require a criminal case. For state victim compensation programs, rules vary — California's board may not reject an application solely because no police report was made, and other states have exceptions for sexual offences.
Will my name be public?
Many survivors litigate anonymously as Jane or John Doe, and courts frequently permit it in cases of this kind. Whether it is granted depends on the court and the circumstances, and it is one of the first things to raise with a lawyer.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.