bleepingcomputer.com web signal

DOJ Seizes CFAKE, SOCFAKE Deepfake Nude Sites

deepfakes regulation ai ethics deepfakes ai-law enforcement

Key insights

  • CFAKE.com and SOCFAKE.com were seized June 15, marking the first publicly announced domain takedown under the TAKE IT DOWN Act.
  • France arrested a suspect in Nice on June 10 and seized cryptocurrency after Italy shared evidence from its October 2025 investigation.
  • The TAKE IT DOWN Act, championed by First Lady Melania Trump, requires platforms to remove reported intimate images within 48 hours.

Why this matters

Acting AG Todd Blanche specifically framed the law as providing 'the tools we need to combat the abuse and exploitation of women and children through these fabricated images,' signaling DOJ will deploy the TAKE IT DOWN Act for domain-level infrastructure seizures, not merely platform content-removal compliance. The Italy-to-France evidence pipeline that produced a live arrest in Nice establishes that a single-country victim complaint can now trigger a coordinated multinational criminal prosecution targeting AI-abuse operations. For platform operators hosting user-generated AI imagery, the law's 48-hour removal mandate creates an operational compliance obligation carrying criminal exposure, not merely civil liability.

Summary

DOJ seized CFAKE.com and SOCFAKE.com on June 15 in the first publicly announced domain seizure under the TAKE IT DOWN Act (signed May 2025). The sites hosted AI deepfake nudes of women in politics, entertainment, and sports. Italy's Postal and Cybersecurity Police opened the investigation in October 2025 after receiving complaints, sharing evidence with France. French authorities arrested a suspect in Nice on June 10 and seized cryptocurrency alleged to be connected to the operation. Essentially: (DOJ, Italian, and French law enforcement) converted victim complaints into a cross-border criminal prosecution. - First Lady Melania Trump championed the TAKE IT DOWN Act under her "Be Best" initiative - An Ohio man separately pleaded guilty under the same statute for creating AI-generated obscene material Nonconsensual deepfake distribution is now a criminal matter across jurisdictions, not just a content-moderation request.

Potential risks and opportunities

Risks

  • Deepfake site operators not yet arrested could re-launch under new domains outside U.S. jurisdiction; domain seizure removes the infrastructure but not the capability or all operators.
  • The unidentified Nice suspect's prosecution could face cross-border jurisdictional challenges, creating uncertainty about how far the TAKE IT DOWN Act reaches against non-U.S. operators.
  • Online platforms hosting AI-generated user content face immediate compliance risk if the 48-hour removal mandate is applied broadly before federal implementation guidance is issued.

Opportunities

  • Digital rights and victim-advocacy organizations gain a concrete enforcement lever: victim complaints filed in one country can now initiate multinational criminal prosecutions against deepfake distribution infrastructure.
  • Compliance technology vendors can market 48-hour intimate-image takedown automation as a newly codified legal requirement under the TAKE IT DOWN Act, opening a defined product category for platform operators.
  • Cryptocurrency tracing firms gain a clear new mandate from the France seizure, as AI-abuse prosecutions now explicitly include financial infrastructure as a target alongside domain takedowns.

What we don't know yet

  • Identity of the Nice suspect: name, nationality, and specific role in operating the sites not disclosed in public reporting.
  • Amount of cryptocurrency seized by French authorities: no figure disclosed in the reporting.
  • Whether Italian courts' blocking order was enforced at the ISP level before the DOJ domain seizure, and for how long CFAKE and SOCFAKE were inaccessible to Italian users before June 15.