news
Shanghai Residents Discover Photos Stolen, Duplicated, and Monetized Without Consent
Across Pudong apartment blocks and Jing'an social media groups, ordinary Shanghainese are discovering their photographs have been duplicated, repurposed and monetised without their consent.
How we reported this

Wang Fang noticed something wrong in March. A screenshot sent by a colleague showed her profile photo, taken on the Bund in 2024, appearing on a commercial listing for a Xuhui District beauty clinic she had never visited. The image had been lifted, cropped, and used as a patient testimonial. She is one of dozens of residents in Shanghai who have come forward this year to describe what consumer advocates are calling a duplicate image replacement problem: the systematic recycling of personal photographs pulled from Chinese social platforms and redeployed in advertising, fake reviews, and AI training datasets without the original subjects' knowledge.
The issue has sharpened in 2026 as generative AI tools have become cheap and widely accessible. Platforms built on image datasets assembled between 2020 and 2024 are now powering commercial products sold openly on Taobao and through private WeChat storefronts. For residents in a city of 24 million people, many of whom documented their post-lockdown lives heavily on Xiaohongshu and Douyin, the exposure is significant. China's Personal Information Protection Law, which took effect in November 2021, requires explicit consent for commercial use of personal images, but enforcement at the granular level of individual photographs remains patchy.
Residents in Changning and Pudong Describe Feeling Powerless
In Changning District's Gubei neighbourhood, a cluster of WeChat groups for international and domestic residents has become an informal clearinghouse for complaints. Group members have shared links to Taobao storefronts selling what are described as lifestyle stock photo bundles, collections of hundreds of images of real people in Shanghai settings, priced as low as 29 yuan per pack. Several residents recognised themselves or family members in screenshots circulated through those groups in May and June this year.
The frustration is compounded by the process for filing complaints. The Cyberspace Administration of China operates a reporting portal, but residents describe waits of weeks before receiving any acknowledgement. One Pudong New Area resident, who works in finance near Lujiazui and asked not to be named, described spending three weeks trying to have a duplicate of her headshot removed from what appeared to be a recruitment site using her image alongside a fabricated professional biography. She eventually used a lawyer contact to send a formal cease-and-desist rather than wait for the regulatory process.
Shanghai-based digital rights group DataSec Advocacy, a civil society organisation registered in the Zhangjiang Hi-Tech Park area, flagged in a June 2026 report that image duplication complaints to municipal consumer hotlines rose by roughly 40 percent in the first quarter of 2026 compared with the same period in 2025, though the group cautioned that under-reporting makes the true scale hard to measure. The Zhangjiang Science City corridor, home to dozens of AI startups, has been identified by the group as a concentration point for companies whose products rely on large image datasets of uncertain provenance.
What Affected Residents Can Do Now
Legal advocates familiar with the Personal Information Protection Law say residents have clearer rights than many realise, but exercising them requires persistence. Filing a formal complaint through the CAC's online portal at 12377.cn creates a timestamped record. Sending a written demand directly to the platform hosting the image, with a copy retained, strengthens any subsequent civil claim. Shanghai's Jing'an District People's Court has handled at least a handful of image rights cases since 2023, and civil awards, while modest, have been granted.
For residents still active on Xiaohongshu, platform privacy settings allow users to restrict indexing of their images by third-party scrapers, a step consumer groups began recommending in early 2026. Changing a profile to private does not retroactively remove images already scraped, but it limits further exposure. The more difficult problem, images already embedded in commercial AI models or sold in bulk datasets, has no easy technical fix and may ultimately require the kind of regulatory enforcement that consumer groups say has yet to match the speed of the technology.
For Wang Fang, the Xuhui clinic eventually removed her photo after she threatened legal action. She now keeps her social media accounts private. Her photograph, she notes, may still be circulating in datasets she will never find.