Skip to content
English
By RightEuropean rights, in situation
ODERSA association · Taking Part programmeIndependent educational site. Not an official website of the European Union.

The written walkthrough

Reporting illegal content: the written walkthrough

Your flat is up for rent on a listings platform, except the person renting it out is not you. The Digital Services Act arms you: an electronic notice that produces legal effects, an acknowledgement of receipt, a reasoned decision, and remedies all the way up to your own country's coordinator.

Law as verified onJuly 29, 2026

This walkthrough contains the answers. It is here so you can read the situation without playing it, print it, and so the content stays complete without JavaScript.

Item no. 1 · Your living room, for rent by someone else

A friend sends you a link with three question marks. On a large listings platform, your flat is up for rent: your photos, your floorboards, your bookshelves, taken from your own listing last year.

The price is attractive, payment is upfront, and the “owner” replies very fast. Everything is there, except the real owner: you.

Listings platformListing no. AN-4471
Property offered
your flat, photos included
Rent asked
780 € a month, paid upfront
Advertiser's account
created eleven days ago
Your connection to this listing
none

Somebody is renting out your living room in your place. Where does the counter-attack start?

Correct answer · With the platform's notice mechanism: it exists for exactly this, and it produces legal effects.

The “report” button is not a symbolic gesture: it is a mechanism of the Regulation The Digital Services Act requires providers of hosting services to put in place mechanisms allowing any individual to notify them of information they consider to be illegal content. And it sets their form: easy to access, user-friendly, submitted exclusively by electronic means. That form is the official door, not a venting box.

“1. Providers of hosting services shall put mechanisms in place to allow any individual or entity to notify them of the presence on their service of specific items of information that the individual or entity considers to be illegal content. Those mechanisms shall be easy to access and user-friendly, and shall allow for the submission of notices exclusively by electronic means.”

In plain words: the electronic notice is a right organised by the Regulation, open to any individual. The platform must hand you that form, and it commits what follows.

Article 16(1) · Regulation (EU) 2022/2065 (Digital Services Act), Article 16 (Notice and action mechanisms), paragraph 1 · https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2065

Myth · An online form goes nowhere: I will send a registered letter to the head office instead, that is more official.

The myth: “paper is more official than the form” The Regulation organised the exact opposite: the notice mechanisms allow submission EXCLUSIVELY by electronic means, and it is that notice that triggers the text's obligations, acknowledgement of receipt, notified decision, redress information. The despised form is precisely the legal channel; the reassuring registered letter is not one.

“Those mechanisms shall be easy to access and user-friendly, and shall allow for the submission of notices exclusively by electronic means.”

In plain words: the electronic route is not the budget version of the registered letter, it is the channel the Regulation chose and equipped. Use it, and keep a screenshot of the submission.

Article 16(1) · Regulation (EU) 2022/2065 (Digital Services Act), Article 16 (Notice and action mechanisms), paragraph 1 · https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2065

No effect · I reply to the listing in a public comment: “SCAM, this is MY flat”, with seven siren emojis.

Shouting in the comments notifies nothing to anyone The scammer moderates his own comments, not the platform. What the Regulation offers you lives elsewhere: a notice mechanism, easy to access and user-friendly, that goes up to the hosting provider itself and triggers written obligations. The anger is understandable; the notice, meanwhile, gets processed.

“Providers of hosting services shall put mechanisms in place to allow any individual or entity to notify them of the presence on their service of specific items of information that the individual or entity considers to be illegal content.”

In plain words: the addressee of your alert must be the hosting provider, through its mechanism. A comment talks to the scammer, and he deletes it.

Article 16(1) · Regulation (EU) 2022/2065 (Digital Services Act), Article 16 (Notice and action mechanisms), paragraph 1 · https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2065

Item no. 2 · What makes a report carry weight

The form is in front of you. Four fields, and one real question: what separates a report that binds the platform from a cry in the wilderness?

Report formListing no. AN-4471
Location of the content
field for the exact URL
Ground and explanation
free text field
Your contact details
name and email address
Statement
box: “I believe in good faith that this information is accurate and complete”

How do you fill in those four fields?

Correct answer · Exact URL, substantiated explanation with evidence attached, my contact details, and the good-faith statement ticked in full knowledge.

A precise, substantiated notice changes the platform's legal position The Regulation lists what a mechanism must allow you to submit: the explanation of the reasons, the exact electronic location, such as the URL, your name and email address, and the good-faith statement. That is not paperwork: a sufficiently precise and substantiated notice gives the hosting provider actual knowledge of the content, and it is that knowledge that engages its liability if it fails to act.

“(a) a sufficiently substantiated explanation of the reasons why the individual or entity alleges the information in question to be illegal content; (b) a clear indication of the exact electronic location of that information, such as the exact URL or URLs […] (c) the name and email address of the individual or entity submitting the notice […] (d) a statement confirming the bona fide belief of the individual or entity submitting the notice that the information and allegations contained therein are accurate and complete.”

In plain words: the exact address, the explanation, your identity, your good faith. Those four pieces turn your report into a legal fact the platform can no longer ignore.

Article 16(2) · Regulation (EU) 2022/2065, Article 16(2): the elements of a notice · https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2065

Myth · I stay vague and anonymous: “suspicious listing, please check”. Investigating is their job.

The myth: “a vague report is enough, they will investigate” The text's lever works the other way round: notices are considered to give actual knowledge of the content where they allow a diligent provider to identify the illegality WITHOUT a detailed legal examination. A vague report does not give that knowledge, so it does not arm the mechanism. Precision is not politeness: it is what triggers the obligation.

“3. Notices referred to in this Article shall be considered to give rise to actual knowledge or awareness for the purposes of Article 6 in respect of the specific item of information concerned where they allow a diligent provider of hosting services to identify the illegality of the relevant activity or information without a detailed legal examination.”

In plain words: the more your report makes the illegality obvious, the more the platform is legally bound. Vagueness disarms you.

Article 16(3) · Regulation (EU) 2022/2065, Article 16(3): actual knowledge · https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2065

Myth · I pile it on to be safe: I tick “terrorist content”, that always goes to the front of the queue.

The myth: “exaggerating speeds things up” The good-faith statement is not a decorative box: you confirm that the information and allegations in your notice are accurate and complete. A deliberately false classification contradicts that statement, scrambles the processing and weakens exactly what you are trying to obtain. Your true classification, impersonation for fraud, is more than enough: state it as it is.

“(d) a statement confirming the bona fide belief of the individual or entity submitting the notice that the information and allegations contained therein are accurate and complete.”

In plain words: the strength of your file comes from its accuracy. The good faith you declare is also the one you will be held to.

Article 16(2) · Regulation (EU) 2022/2065, Article 16(2): the elements of a notice · https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2065

Item no. 3 · And now, what do they owe you?

Report sent at 2:12 pm. A confirmation screen, then the silence of interfaces. The question is no longer what you can do, but what they owe you, and when.

Submission confirmationReport recorded
Your report
forwarded to our teams
Acknowledgement of receipt
due: you left your contact details
Decision
to be notified, with the possibilities for redress
Numbered deadline promised by the Regulation
none: “in a timely manner”

What does the text impose on the platform after your submission?

Correct answer · An acknowledgement of receipt without undue delay, then their decision notified, with the possibilities for redress.

Two letters are owed to you: the receipt, then the reasoned decision to act or not As soon as your notice carries your electronic contact details, the hosting provider sends you, without undue delay, a confirmation of receipt. Then it notifies you of its decision on the reported content, providing information on the possibilities for redress. Silence is therefore not an option in the text: every identified report calls for an answer in two stages.

“4. Where the notice contains the electronic contact information of the individual or entity that submitted it, the provider of hosting services shall, without undue delay, send a confirmation of receipt of the notice to that individual or entity. 5. The provider shall also, without undue delay, notify that individual or entity of its decision in respect of the information to which the notice relates, providing information on the possibilities for redress in respect of that decision.”

In plain words: a confirmation of receipt, then a decision that itself tells you how to challenge it. Keep both: they are the exhibits of the next remedies.

Article 16(4) and (5) · Regulation (EU) 2022/2065, Article 16(4) and (5): the acknowledgement of receipt and the notified decision · https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2065

Myth · No numbered deadline exists in the text, so nothing really binds them: it can drag on for months in complete legality.

The myth: “no numbered deadline, no obligation” The Regulation does not set an hour, but it sets a manner, and it is enforceable: notices are processed in a timely, diligent, non-arbitrary and objective manner, and the use of automated means must be disclosed to you. A documented fraud left online for weeks gets measured against those words, before the internal complaint and then before the coordinator.

“6. Providers of hosting services shall process any notices that they receive under the mechanisms referred to in paragraph 1 and take their decisions in respect of the information to which the notices relate, in a timely, diligent, non-arbitrary and objective manner. Where they use automated means for that processing or decision-making, they shall include information on such use in the notification referred to in paragraph 5.”

In plain words: “timely” and “diligent” are written obligations, not wishes. The absence of a stopwatch is not an absence of rules.

Article 16(6) · Regulation (EU) 2022/2065, Article 16(6): the processing of notices · https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2065

Myth · The law gives them 24 hours to take it down, everybody knows that: tomorrow at 2:12 pm, I have them.

The myth: “removal within 24 hours is the law” This Regulation sets no numbered deadline for handling a notice: it requires processing in a timely, diligent, non-arbitrary and objective manner. Waving an invented countdown weakens an otherwise solid file: your lever is not an imaginary clock, it is the written diligence, measured against the gravity of a documented fraud.

“Providers of hosting services shall process any notices that they receive under the mechanisms referred to in paragraph 1 and take their decisions in respect of the information to which the notices relate, in a timely, diligent, non-arbitrary and objective manner.”

In plain words: do not invent a number, the text gives none. Demand the diligence, which is written in black and white.

Article 16(6) · Regulation (EU) 2022/2065, Article 16(6): the processing of notices · https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2065

Item no. 4 · “No infringement found”

The decision lands two days later, with the elegance of automatic bad news.

The platform's decisionReport file AN-4471

After review, this content does not breach our rules. No action will be taken.

This decision was generated through automated processing of your report.

You may challenge this decision through our complaint system.

An automatic refusal for a documented fraud. How do you answer?

Correct answer · Through their internal complaint system: it is free, electronic, and open to me for at least six months.

The refusal is not the end: it opens a written route, free, of at least six months Providers of online platforms must give access, including to individuals who submitted a notice, to an internal complaint-handling system: electronic, free of charge, for at least six months after the decision. And the text provides the outcome you care about: where your complaint shows that the decision not to act was unfounded, the platform reverses it without undue delay.

“1. Providers of online platforms shall provide recipients of the service, including individuals or entities that have submitted a notice, for a period of at least six months following the decision referred to in this paragraph, with access to an effective internal complaint-handling system that enables them to lodge complaints, electronically and free of charge, against the decision taken by the provider of the online platform upon the receipt of a notice […]”

In plain words: the person who reports also gets the internal complaint, at no cost, for at least six months. The first refusal exhausts nothing.

Article 20(1) · Regulation (EU) 2022/2065, Article 20 (Internal complaint-handling system), paragraph 1 · https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2065

Myth · An algorithm has ruled, and against an algorithm you never win: final decision.

The myth: “the machine said no, it is over” The text imposes exactly the opposite for the complaint stage: decisions are taken under the supervision of appropriately qualified staff, and NOT SOLELY on the basis of automated means. Your complaint forces the file in front of qualified human eyes. That is precisely the weakness of the automatic refusal: it has not yet met your file.

“6. Providers of online platforms shall ensure that the decisions, referred to in paragraph 5, are taken under the supervision of appropriately qualified staff, and not solely on the basis of automated means.”

In plain words: at the complaint stage, the qualified human is an obligation. The algorithm never had the right to the last word.

Article 20(6) · Regulation (EU) 2022/2065, Article 20(6): qualified human supervision · https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2065

Myth · Challenge it, fine, but these procedures cost money: I will save mine for a lawyer.

The myth: “every challenge has a price” The word sits in the very sentence that creates the system: complaints are lodged electronically and FREE OF CHARGE. And the platform must handle them in a timely, non-discriminatory, diligent and non-arbitrary manner. The lawyer remains an option for other battles; this one starts without him, and without an invoice.

“4. Providers of online platforms shall handle complaints submitted through their internal complaint-handling system in a timely, non-discriminatory, diligent and non-arbitrary manner.”

In plain words: the internal complaint is free and its handling is framed by four written requirements. Your wallet is not an exhibit in this file.

Article 20(4) · Regulation (EU) 2022/2065, Article 20(4): the handling of complaints · https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2065

Item no. 5 · Beyond the platform

The internal complaint confirms the refusal, this time with a human signature. The listing is still online, and somebody, somewhere, may be about to wire 780 € for your living room.

The platform has run out of counters. You have not.

Case noteState of remedies

Report: sent, acknowledgement archived. Decision: automated refusal, then refusal confirmed on internal complaint.

Exhibits: your original dated listing, screenshots of the fraudulent one, both refusals.

Remaining routes: outside the platform, and they are written.

The platform has said no twice. Who can still say yes?

Correct answer · The Digital Services Coordinator of MY country: I lodge a complaint against the platform for infringing the Regulation.

A right to lodge a complaint, from your own country, against the provider The article is literally called “Right to lodge a complaint”: recipients of the service may go to the Digital Services Coordinator of the Member State where they are located, alleging an infringement of the Regulation. The coordinator assesses the complaint, transmits it to the coordinator of the country of establishment where appropriate, and both parties have the right to be heard and kept informed of the complaint's status.

“Recipients of the service and any body, organisation or association mandated to exercise the rights conferred by this Regulation on their behalf shall have the right to lodge a complaint against providers of intermediary services alleging an infringement of this Regulation with the Digital Services Coordinator of the Member State where the recipient of the service is located or established.”

In plain words: every Union country has its coordinator, and you lodge your complaint with yours, in your language. The platform's geography is its transmission problem, not your obstacle.

Article 53 · Regulation (EU) 2022/2065, Article 53 (Right to lodge a complaint) · https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2065

Myth · A platform established abroad gets attacked in its country, in its language, with its lawyers: mission impossible.

The myth: “foreign platform, foreign complaint” The Regulation organised the opposite: the complaint is lodged with the coordinator of the Member State WHERE YOU ARE. It is then that coordinator who assesses it and transmits it, where appropriate, to the coordinator of the Member State of establishment, accompanied by an opinion where considered appropriate. Cross-border cooperation is their internal machinery, not your burden.

“The Digital Services Coordinator shall assess the complaint and, where appropriate, transmit it to the Digital Services Coordinator of establishment, accompanied, where considered appropriate, by an opinion.”

In plain words: you file at home, the transmission between authorities makes the journey in your place. The platform's head office does not move your counter.

Article 53 · Regulation (EU) 2022/2065, Article 53 (Right to lodge a complaint) · https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2065

Myth · There are also these “out-of-court dispute settlement bodies”, but a private court paid by the case, no thank you.

The myth: “out-of-court means the strongest wins” These bodies are not chosen by the platform: YOU are entitled to select any body certified by a coordinator to resolve the dispute, including for complaints the internal system did not resolve. Certification requires impartiality and independence, financial independence included, and information about this route must be easily accessible on the platform. Its limit is written too: it cannot impose a binding settlement. It is a step, not a dead end.

“1. Recipients of the service, including individuals or entities that have submitted notices, addressed by the decisions referred to in Article 20(1) shall be entitled to select any out-of-court dispute settlement body that has been certified in accordance with paragraph 3 of this Article in order to resolve disputes relating to those decisions, including complaints that have not been resolved by means of the internal complaint-handling system referred to in that Article.”

In plain words: the certified out-of-court body is a choice that belongs to you, open to the person who reported. It does not rule like a judge, but it moves frozen files.

Article 21(1) · Regulation (EU) 2022/2065, Article 21 (Out-of-court dispute settlement), paragraph 1 · https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2065

Verdict · What a “report” button was worth

A fraudulent listing with your photos, a form filled in with precision, an automatic refusal overturned by written routes, and seven rights that depended neither on your patience nor on their goodwill.