Full Report
Whether you’re a victim, the parent of a victim, or just concerned, here’s what you can do about fake nude images
Analysis Summary
# Best Practices: Combatting AI-Generated Non-Consensual Intimate Imagery (NCII)
## Overview
These practices address the growing threat of "nudification" or "nudify" apps—generative AI tools used to create fake nude images from clothed photos. The goal is to minimize the digital footprint available to attackers, secure accounts against compromise, and provide a clear incident response framework for victims.
## Key Recommendations
### Immediate Actions
1. **Lock Down Social Privacy:** Restrict social media profiles to "Private" and audit followers to ensure only trusted individuals can view photos.
2. **Cease Communication:** If targeted by a harasser or extortionist, do not engage or pay. Interaction often emboldens the attacker.
3. **Preserve Evidence:** Save screenshots of the fake imagery, URLs where it is hosted, and logs of any threatening messages or usernames.
4. **Initiate Takedowns:** Contact platforms directly to report the content. Use the **Take It Down** (for minors) or **StopNCII.org** (for adults) services to hash and block images across participating platforms.
### Short-term Improvements (1-3 months)
1. **Digital Footprint Audit:** Conduct a search for publicly available images of yourself or family members beyond social media and request removals where possible.
2. **Credential Hygiene:** Implement unique, complex passwords for all accounts and enable Multi-Factor Authentication (MFA/2FA) to prevent account takeovers that provide access to private galleries.
3. **Search Engine De-indexing:** Submit requests to Google Search and other engines to remove URLs containing the fake imagery from search results.
### Long-term Strategy (3+ months)
1. **Educational Advocacy:** Implement regular household or organizational discussions regarding the risks of "oversharing" and the psychological impact of AI-generated deepfakes.
2. **App Governance:** Establish a policy of not uploading personal images to unknown or "trending" AI photo-editing apps, as their data handling practices are often opaque.
3. **Legislative Monitoring:** Stay informed on local laws (e.g., U.S. TAKE IT DOWN Act or EU Directives) to understand specific legal avenues for civil lawsuits or criminal reporting.
## Implementation Guidance
### For Small Organizations (e.g., Families/Small Groups)
* **Open Communication:** Ensure children feel safe approaching parents without fear of punishment.
* **Device Management:** Enable automatic OS and app updates to patch vulnerabilities that could lead to data theft.
### For Medium Organizations (e.g., Schools/Community Groups)
* **Awareness Programs:** Distribute guidance on the "nudify" ecosystem to parents and students.
* **Reporting Pathways:** Establish a clear point of contact for members who have been victimized to receive resources and support.
### For Large Enterprises
* **Content Filtering:** Ensure corporate networks block access to known nudification domains (over 180 identified globally).
* **Employee Assistance:** Include NCII support resources within digital wellness or employee assistance programs (EAP).
## Configuration Examples
* **Google Search De-indexing:** Use the [Google Search Console/Help](https://support.google.com/websearch/answer/6349986) to request removal of non-consensual explicit imagery.
* **Reporting Apps (iOS/Android):**
* *iOS:* App Store > App Page > Report a Problem > Explain violation.
* *Android:* Google Play > App Page > Three-dot menu > Flag as inappropriate.
## Compliance Alignment
* **US Title 18 (US Code):** Governs Child Sexual Abuse Material (CSAM); AI-generated nudes of minors fall under this jurisdiction.
* **EU Directive 2024/1385:** Specifically targets violence against women and criminalizes the distribution of NCII, including AI-generated content.
* **NIST Privacy Framework:** Aligning with data minimization principles to reduce the "surface area" of available personal imagery.
## Common Pitfalls to Avoid
* **Retaliation:** Do not attempt to "hack back" or harass the perpetrator, as this complicates legal standing.
* **Assuming Safety:** Do not assume an app is safe just because it is available on the Apple App Store or Google Play Store.
* **Deleting Evidence Prematurely:** Do not delete the source of the fake image before capturing screenshots and metadata for law enforcement.
## Resources
* **StopNCII[.]org:** Tool for adults to stop the spread of non-consensual intimate images.
* **TakeItDown[.]ncmec[.]org:** NCMEC service for removing/preventing the spread of intimate images of minors.
* **CyberTipline:** For reporting AI-generated CSAM to the National Center for Missing & Exploited Children.
* **ISD Global Report:** "Mapping the Nudify Tools Ecosystem" for threat intelligence.