'My Face Was Everywhere — And I Never Agreed to That': SF Residents Speak Out on Duplicate Image Replacement

Maria, a 34-year-old restaurant worker in the Mission District, found her portrait on three separate food-delivery apps last spring — none of which she had ever signed up for. Her headshot, originally posted to a neighborhood Facebook group run by Calle 24 Latino Cultural District, had been lifted, resized, and dropped into fake reviewer profiles. She is not alone. Across San Francisco, residents are reporting a sharp rise in what digital-rights advocates are calling "duplicate image replacement" — the automated scraping and redeployment of personal photographs into new contexts without the subject's knowledge or permission.

The issue has urgency right now because of the convergence of two forces reshaping the city's digital environment: the post-layoff AI boom that has flooded the Bay Area with startups building image-synthesis and content-generation tools, and the collapse of several moderation teams at major platforms following rounds of cuts in 2024 and 2025. The result is a gap between what technology can do and what any individual can practically stop.

Tenderloin resident James, 58, said he discovered his photo — taken at a San Francisco Department of Public Health outreach event on Turk Street — had been duplicated into what appeared to be a stock-photo marketplace. He only found out because a friend saw the image used in a health-services brochure distributed by a nonprofit in Portland. "I never gave anyone permission," he said, declining to provide his last name. He has since filed a complaint with the California Privacy Protection Agency, which began accepting consumer complaints under the California Consumer Privacy Act after the agency's enforcement authority expanded in 2023.

Where the Problem Is Landing Hardest

Community organizations in neighborhoods with high foot traffic and active social-media cultures are seeing the most cases. The Tenderloin Neighborhood Development Corporation, which operates housing and social services on Leavenworth Street, has fielded multiple inquiries from tenants in recent months asking what to do when their images appear somewhere unexpected. The SF-Marin Food Bank, which photographs volunteers for its newsletter and social channels, updated its image-consent policy in early 2026 after a volunteer noticed her photo had been cloned onto an unrelated charitable-giving website.

Sunset District resident Priya, a tech contractor, ran a reverse-image search on a headshot she posted to LinkedIn in 2023 and found 11 distinct copies deployed across seven different domains. She contacted the Electronic Frontier Foundation's San Francisco office on Mission Street, which has published guidance on submitting takedown requests under the Digital Millennium Copyright Act. The EFF guidance notes that DMCA requests can take weeks and offer no guarantee of removal when the hosting server sits outside U.S. jurisdiction.

What the Data Suggests — and What Comes Next

The California Consumer Privacy Act gives residents the right to request deletion of personal data held by businesses doing business in the state, but enforcement actions against image-scraping operations have been limited. The California Privacy Protection Agency levied its first formal enforcement fines in 2024, and advocates say the agency's current investigative capacity has not kept pace with the volume of complaints.

Reverse-image searches remain the most accessible first step. Google's reverse-image tool and the nonprofit-adjacent service TinEye allow anyone to upload a photo and scan for copies; neither charges individual users. For residents who find unauthorized duplicates, the California Privacy Protection Agency accepts complaints at its Sacramento office and online, and the San Francisco City Attorney's Office has a consumer-protection intake process at its Civic Center headquarters on Van Ness Avenue.

Digital-rights attorneys advise documenting every instance with a screenshot and URL before filing any request, since infringing pages are sometimes taken down quickly once discovered — destroying the evidence trail. Community members in the Mission and Tenderloin have begun sharing informal guides through WhatsApp groups, circulating step-by-step instructions in English and Spanish for submitting DMCA notices and CCPA deletion requests. For many residents, those peer networks are proving faster and more navigable than any official channel.