The DMCA takedown playbook for Shopify owners
A step-by-step DMCA playbook for store owners: what the notice needs, where to send it, what proof carries weight, and how to handle hosts that ignore you.
A DMCA takedown is the most useful tool most store owners have never used. It is free, you can file it yourself, and it works more often than people expect, as long as the notice is done properly. This is the practical version, written for someone who runs a Shopify store and just found their product photo on a site that has no right to it.
One note before we start: this is general guidance, not legal advice, and Tilkie does not promise any particular outcome. With that said, here is how the process works.
What a DMCA notice actually is
The DMCA is a piece of US copyright law, but it reaches far beyond the US because most web hosts, content networks, and search engines are US-based or follow the same process. A DMCA notice is a formal request telling a service provider that content they host infringes your copyright and asking them to remove it. Hosts have a strong incentive to comply quickly, because doing so protects their own legal standing.
What a valid notice has to include
A notice that gets ignored is usually a notice that left something out. A complete one contains, in plain terms:
- Identification of the work being infringed (your original photograph).
- Identification of the infringing material, with the exact URL where it appears.
- Your contact information.
- A statement that you believe in good faith the use is not authorized.
- A statement that the information is accurate and that you are the owner or are authorized to act for them, under penalty of perjury.
- Your physical or electronic signature.
Keep the tone factual. You are not writing to persuade or to vent. You are completing a checklist that lets a host act.
Step 1: Find who to send it to
This is where most people go wrong. You do not send a DMCA notice to the thief. You send it to the service hosting the content, because they are the ones who can remove it. To find them:
- Run the site’s domain through a WHOIS lookup and a hosting-identification tool to see who hosts it.
- Look for the host’s designated DMCA agent, usually on a page like “copyright”, “legal”, or “report abuse”.
- Check for an abuse@ address for the hosting company.
- If the site sits behind a content network such as Cloudflare, use that network’s abuse-reporting form, which forwards to the real host.
For a copy that has also been indexed, you can separately ask search engines to remove the infringing URL from their results, which cuts off discovery even while the host processes your request.
Step 2: Have your proof ready
Your notice asserts under penalty of perjury that the work is yours. If the infringer pushes back, the host will want that assertion to hold up. This is the difference between a takedown that sticks and one that bounces.
Originals, source files, and publish dates all help. The strongest position is definitive, technical proof of ownership. If you protected the image with an invisible watermark before it was taken, you can detect your mark in the stolen copy and attach a Chain of Proof certificate, which states ownership in the terms a reviewer is looking for. What makes evidence persuasive in the first place is covered in what makes evidence admissible for a takedown.
Step 3: Write it and send it
Put the required elements above into a short, direct message. Attach or reference your proof. Send it to the host’s designated channel. Keep a copy of everything, including the date you sent it.
Step 4: Know what happens next
One of three things usually follows:
- The host removes the content. Most common when the notice is complete and the host is reputable.
- The host forwards your notice to the infringer, who may take it down voluntarily.
- The infringer files a counter-notice. This is the moment that matters most. If they claim the image is theirs, the content can be restored unless you are prepared to back your ownership, which is exactly why definitive proof is worth having before you file.
If a host simply ignores a complete notice, escalate to their upstream provider or content network, and consider the search-engine removal route to limit the damage in the meantime.
When it is a marketplace, not a website
If your image was stolen onto Amazon, Etsy, eBay, or a similar platform, do not use a generic DMCA notice. Each of these runs its own intellectual-property complaint process that is faster and purpose-built. We cover those routes in beyond DMCA: marketplace and ad-platform takedowns.
When to bring in help
Some infringers hide behind privacy services, ignore notices, or relist the moment one page comes down. At that point the time cost stops being worth it, and a specialist who handles takedowns professionally is the better move. Tilkie partners with IP-protection specialists for these cases, and we cover the decision in when to bring in a takedown specialist.
The thing that decides it
Read back through the steps and one theme repeats: at every point where the process can stall, it stalls over proof. A weak claim gets queued, questioned, or reversed by a counter-notice. A claim backed by definitive ownership gets actioned.
That proof cannot be created after the fact. It has to be in the image before it is stolen. Tilkie watermarks your Shopify product photos invisibly and turns a detection into the kind of evidence a takedown actually needs, so when you file, you file from a position of strength.