Mugshot Aggregation Sites Are a Money Extraction Machine
Lexington, Kentucky has a public booking system. Any arrest gets logged, any photo gets taken, and any website with enough time can scrape it. I spent about three weeks last year trying to map out exactly how mugshot sites operate after a neighbor asked me why some guy who got charged with DUI kept showing up on the front page of every search for his name. What I found wasn't particularly surprising, but the mechanics are worth understanding if you ever need to deal with one. The term is dramatic, but the underlying system is straightforward. Police departments publish arrest records. Third-party websites harvest those records automatically using scripts that check the county jail's booking page every few minutes. Once a record is pulled, the site hosts it permanently and creates a separate URL for each individual. That URL is what shows up in Google results before the actual news story or official record would. The revenue model is simple. These sites make money from two directions. Advertisements run on every page, which generates pennies per view at scale. More importantly, they offer "removal services" where the subject of the photo pays between $50 and $500 to get the listing taken down. Some companies explicitly advertise this as "reputation management." I paid attention to the pricing pages while compiling my research. The average cost was $199 for a single mugshot removal, with discounts for bulk packages.
I ran into a real edge case that took me a while to solve. My neighbor's booking record had been picked up by at least fourteen different sites, each one hosting a slightly different version of the same photo with different metadata. When I tried to request removal from all of them, most of the contact forms were automated dead ends. The workaround was to find the specific domain registration through WHOIS lookup, identify the actual operating company behind each site, and send formal written requests via certified mail instead of relying on their web forms. Two sites responded to the forms. All four that I sent physical mail to removed the listings within six to ten business days. The remaining ten were either parked domains with no active hosting or shell companies that dissolved after a year or two. Here is something most people do not realize about mugshot scraping. The sites are not always using official sources. A lot of them also pull from local newspaper articles, social media posts, and court documents that get indexed independently. This means even if your arrest record gets sealed or expunged, the mugshot might still exist on a site because it originally came from a news report that mentioned the booking. The data trail is messy and rarely follows legal outcomes. There is also a technical detail that matters for removal attempts. Many of these sites use Cloudflare or similar CDNs for DDoS protection, which means their actual server infrastructure is hidden behind proxy layers. When I needed to verify whether a listing was still live or had been silently dropped without confirmation, I used a combination of archive.org and third-party uptime monitoring tools rather than trusting the site's own response. About a third of the sites I checked were returning 404 errors or redirecting to unrelated content without actually removing the listing. They just made it harder to find, which is functionally different from removal but often good enough for people who do not know how to dig deeper.
The legal landscape has shifted recently. Several states have passed laws restricting how mugshot sites can operate, and Kentucky added its own provisions in 2023 that require these sites to remove records upon request without charging a fee if the charge was dismissed, reduced, or resulted in a not-guilty verdict. The problem is that enforcement is slow and most people never know these laws exist. The removal process under Kentucky law still requires submitting proof of the case outcome, which means getting copies of court documents and matching them to the correct listing. I spent about four hours gathering documents for my neighbor's case across three different jurisdictions before I could file the first formal request. If you need to handle this yourself, the practical steps are: search your full legal name plus variations on Google, note every URL that appears, use WHOIS lookups to identify operators, submit removal requests through official channels if eligible under state law, and keep detailed records of every interaction. The whole process typically takes two to four weeks for straightforward cases with clean records. Cases involving multiple arrests, sealed records, or out-of-state charges can stretch to several months. The sites themselves are not going away soon. They generate consistent revenue with minimal operational costs, and the legal penalties for noncompliance are usually small enough that continuing to operate is cheaper than paying fines. The people who benefit from this system are the domain holders and the advertising networks, not the law enforcement agencies whose data gets harvested. Lexington's booking system functions exactly as it should from a transparency standpoint. The problem is what gets built on top of that transparency.
Get the Full Details
