the “best” method from a far more legally active jurisdiction (US) which has a similar legal system to our own is to watermark your images before they go online, as any cropping to remove said watermark acts as proof of knowledge of breach, obviously not particularly helpful to your friend’s situation, but in general see this recent decision for an insight as to how ruthless it can be, even in a cut and dried situation