All incidents

US seizes deepfake porn domains CFake.com and SOCFake.com under TAKE IT DOWN Act

campaignopenJun 12, 2026 — Jun 16, 2026
US seizes deepfake sites CFake.com, SOCFake.com under new law

THE United States has seized the domain names CFake.com and SOCFake.com after determining they hosted nonconsensual intimate deepfakes of prominent women, acting under the newly enacted TAKE IT DOWN Act according to the Justice Department. The operation also led to the arrest of an alleged operator in France, where authorities uncovered roughly three hundred thousand images and seven thousand videos of fabricated explicit content. Investigators say the sites were used to distribute the material to paying customers, often using cryptocurrency to obscure the flow of funds. The seizure marks one of the first major enforcements of the TAKE IT DOWN Act since its passage earlier this year.

Although no CVEs are associated with the seizure, the TAKE IT DOWN Act makes it a criminal offence to publish or distribute sexually explicit digital forgeries without consent, requiring removal within forty‑eight hours and allowing for fines or imprisonment as reported by Malwarebytes. The seized material included manipulated portrayals of actresses, athletes and public figures, often labelled with derogatory terms to facilitate distribution. Technical analysts note that the videos were generated using openly available deepfake frameworks, which swap faces onto existing pornographic clips with minimal technical skill. The act also empowers victims to seek civil redress, allowing them to claim damages for emotional distress and reputational harm. Law‑enforcement officials hope the publicity will deter other operators from launching similar services.

The action resulted from a cooperative effort between the Department of Justice, the Department of Homeland Security, Italian police who first flagged the sites and French authorities who carried out the arrest, leading to the confiscation of several cryptocurrency wallets linked to the scheme SecurityOnline noted. No specific threat actor group has been identified, but the infrastructure resembled other deepfake hosting platforms that have emerged in recent years. Investigators highlighted that the servers were hosted in multiple European countries, complicating jurisdictional reach before the multinational cooperation succeeded. The case illustrates how quickly law‑enforcement can mobilise when a clear legal framework exists to prosecute the abuse.

Despite the takedown, reports of nonconsensual deepfake abuse continue to climb, with a noticeable increase in incidents targeting women and minors over the past twelve months. Industry monitors say the rise is driven by the ease of creating convincing forgeries using mobile apps and cloud‑based rendering services.

The TAKE IT DOWN Act represents the first federal statute in the United States that directly addresses the creation and spread of such synthetic media, signalling a shift toward treating digital forgeries as a distinct class of harm. Advocacy groups warn that without effective technical countermeasures, legal remedies alone may struggle to keep pace with the volume of new content.

Victims are advised to preserve any copies of the offending material, note the URLs where it appeared and file reports with both the hosting platform and the appropriate law‑enforcement agency, while also reaching out to support organisations such as the Cyber Civil Rights Initiative for emotional and legal assistance. In addition, individuals can request expedited removal under the TAKE IT DOWN Act by submitting a formal takedown notice that includes proof of identity and a description of the fabricated content.

Platforms are obliged to act on valid notices within the statutory timeframe, though many victims report delays when the content is mirrored across multiple sites. Experts recommend that those affected also consider registering their likeness with a trusted digital‑rights registry, which can simplify future takedown efforts. Keeping a detailed log of all correspondence and evidence collection can strengthen any potential civil claim.

Organisations should review their acceptable‑use policies to explicitly prohibit the creation or sharing of deepfake pornography, provide training for staff on how to spot manipulated media and consider deploying detection tools that analyse inconsistencies in lighting, blinking patterns or audio‑visual synchronisation. Regular phishing‑style simulations that include synthetic media scenarios can help employees recognise coercion attempts that rely on forged videos.

Cooperation with international partners remains essential, as the infrastructure that enables these abuses often spans multiple jurisdictions and requires a coordinated response to be effective. By combining legal clarity, technical vigilance and public awareness, stakeholders aim to reduce the prevalence of nonconsensual deepfake exploitation.

Intelligence briefing updated Jun 16, 2026

Root sourcewww.justice.gov
Timeline Coverage

Swipe to explore timeline