Best guess would be using the database that sites like tumblr and twitter use to automatically identify known CSAM. I’m not sure how it works, I just know that sites use a database to quickly shut down any uploads