18 U.S.C. § 2257

The federal law nobody talks about.

Every adult content creator is legally required to maintain records proving performers are 18+, keep them for 7 years, post a compliance statement on every site where their content appears, and make the records available for federal inspection. Most guides skip this entirely. This one doesn't.

7 yr
Minimum record retention
20 hr
Notice before federal inspection
Free
Cost to comply — it's paperwork
↓ Checklist What is 2257? Penalties Custodian Options Statement Template
Background

What is 18 U.S.C. § 2257?

18 U.S.C. § 2257 is a federal record-keeping law that has been on the books since 1988. It was designed to prevent the production of child sexual abuse material by requiring producers of sexually explicit content to verify and document the age of every performer appearing in that content.

The law applies to any "producer" of "sexually explicit conduct" — a category that includes creators on OnlyFans, Fansly, ManyVids, cam sites, and independent platforms. If you produce sexual content and publish it, you are a producer under the statute. "Sexually explicit conduct" under 2257 means actual or simulated explicit sexual acts, as defined in 18 U.S.C. § 2256(2)(A).

Important: even if you are the only performer and you're clearly an adult, the law still applies. It does not make exceptions for solo creators. The compliance burden falls on you as both the performer and the producer.

2257 applies to you if:
You produce adult content on OnlyFans, Fansly, or any platform
You appear in your own content (solo creator)
You film or direct other performers
You publish content created by someone else (secondary producer)
Enforcement

What happens if you don't comply?

First Offense
Up to 2 years federal prison
Plus fines. For failure to maintain compliant records or post required statements.
Subsequent Offenses
Up to 5 years federal prison
The statute treats repeat violations as separate counts.
The realistic enforcement picture: Federal prosecutions under 2257 have historically been rare and focused on large-scale commercial producers rather than individual creators. That said, the statute is still on the books, inspections do occur, and compliance costs you almost nothing — it's paperwork, not money. Do it.
Records Custodian

Who is your records custodian?

The custodian is the person legally responsible for maintaining 2257 records. You can be your own custodian. The custodian's name and a physical address must appear on your site's compliance statement. This address becomes public information — which is why many creators use a records custodian service that provides a mailing address instead of their home.

Solo Creator
Be your own custodian
Designate yourself. Keep records on an encrypted drive or secure cloud folder. Use a P.O. box as your public address if you don't want your home address on file.
Free
Established Creator
Wyoming LLC as custodian
Your LLC can serve as custodian of record. The LLC's registered address becomes the compliance address, keeping your personal information off the statement entirely.
Working with Platforms
Platform-managed records
Some major platforms (OnlyFans, Fansly) maintain performer records and act as secondary producer. This doesn't eliminate your obligation as primary producer — you still need records for content you originated.
Check Platform TOS
A records custodian service that provides an address costs –/yr from various legal service providers. For most solo creators, a P.O. box (–200/yr at USPS) is sufficient and cheaper.
Checklist

The compliance checklist

Progress
0 / 16
What is 2257? 18 U.S.C. § 2257 requires anyone who produces sexually explicit content to verify performers are 18+, keep records proving it, and make those records available for inspection. Applies to you even if you're the only performer. Violations can mean fines or federal charges.
1

Before Every Production

Required before any content is created
Verified every performer is at least 18 years old
Age must be confirmed before shooting begins, not after.
Obtained a government-issued photo ID from every performer
Driver's license, passport, or state ID. Must show date of birth and photo.
Made a legible copy of the ID
Physical or digital copy. Digital scans are fine — keep them organized and secured.
Recorded each performer's full legal name, any aliases used, and date of birth
If they perform under a stage name, both the legal name and stage name must be on file.
Recorded the date of each production
The 7-year retention clock starts from the last date this content was produced.
2

Your Records System

Ongoing storage and organization requirements
Designated a records custodian
Can be yourself. This is the person legally responsible for maintaining the records. Name and business address must be publicly available on your site.
Records are indexed so any performer's file can be found within 20 hours
Inspectors give 20 hours notice. Your records must be findable in that window — not buried in unnamed folders.
Records are stored for a minimum of 7 years after last production date
If you stop producing content, the clock doesn't stop. 7 years from last date produced.
Records are in a secure location with controlled access
Encrypted drive, password-protected cloud folder, or locked physical storage. Not in your downloads folder.
3

Your Website Requirements

What must appear on your site
Compliance statement is posted on your site
Must be on every site where sexually explicit content appears. Use the template below.
Statement includes custodian name and physical address
P.O. boxes are acceptable. This is publicly available information — a records custodian service can provide an address if you prefer not to use your home.
Statement is reachable from every page where content appears
Footer link is the standard approach. The requirement is that a visitor can find it without digging.
4

Secondary Producer Rules

If you use content from other producers
Obtained the primary producer's 2257 records or a certification that they comply
If you publish content where you weren't the original producer, you must either get their records or get written confirmation that they maintain compliant records.
Your compliance statement names the primary producer
Secondary producer statements must identify who the primary producer is and where their records can be found.

Compliance Statement Template

In compliance with 18 U.S.C. § 2257 Record-Keeping Requirements Compliance Statement, all models, actors, actresses, and other persons who appear in any visual depiction of actual or simulated sexual conduct appearing or otherwise contained on this site were over the age of eighteen (18) years at the time of the creation of such depictions. Records required by 18 U.S.C. § 2257 for all content are kept by the Custodian of Records: [Your Full Name or Company Name] [Street Address or P.O. Box] [City, State, ZIP]
5

Quick Sanity Checks

Review these periodically
Compliance statement date is current
No law requires dating the statement, but current year looks better and signals active maintenance.
All old content still has records on file
Content you published years ago still needs records. "I deleted it" doesn't clear the obligation during the 7-year window.
File a DMCA Takedown

Get the full compliance guide

We'll send you the complete 2257 reference guide as a PDF, plus updates when the law changes. Free. No pitch.

Sent. Check your inbox.
Privacy
Keep your name off public records
Wyoming LLC formation keeps your home address and legal name out of public business registries.
Learn about LLC formation →
Content Protection
Your content is being stolen right now
60% of paid content gets re-posted without permission. OwnMyWork sends the takedown, follows up, and escalates. First one free.
File a free takedown →
This checklist is for informational purposes only and does not constitute legal advice. 2257 compliance is complex and the law has been subject to ongoing litigation. Consult a qualified attorney before relying on this checklist for legal decisions.
Monaco CPA 2257 compliance costs — custodian services, storage, legal review — are deductible business expenses on Schedule C. Talk to a creator CPA →