On Friday, federal agents shut down two websites that had built their entire business model around generating and distributing nonconsensual AI-generated nude images and videos of women—and the U.S. Department of Justice called it the first domain seizure of its kind under a new federal law designed to stop exactly this crime.
The seizure of CFAKE.com and SOCFAKE.com marks a watershed moment in how the government is treating deepfake sexual abuse material. For years, women have reported discovering synthetic nude images of themselves circulating online with no legal recourse. The TAKE IT DOWN Act, which criminalized the creation and distribution of nonconsensual AI-generated intimate imagery, finally gave federal prosecutors the statutory tool to act. This is what enforcement looks like.
- First Federal Seizure: The DOJ’s shutdown of CFAKE.com and SOCFAKE.com represents the first domain seizure executed under the TAKE IT DOWN Act, establishing a direct criminal enforcement precedent for deepfake pornography platforms.
- Criminal Penalties Now Apply: The TAKE IT DOWN Act carries penalties of up to five years in prison and fines for knowingly producing or distributing nonconsensual AI-generated intimate imagery with intent to harm.
- The Consent Violation Pattern: Both sites allegedly allowed users to upload photographs of real women and generate fake nude images using AI tools—a nonconsensual extraction model that mirrors the data-harvesting architecture exposed in the Cambridge Analytica scandal.
The DOJ’s announcement did not specify how many images were hosted on the two sites, how many women were victimized, or how long the sites had been operating. What is clear is that CFAKE.com and SOCFAKE.com were dedicated platforms—not incidental repositories—built explicitly to generate and host deepfake pornography. The sites allegedly allowed users to upload photographs of women and use AI tools to create fake nude or sexually explicit versions of those images. The victims had no way to consent, no way to know their likenesses were being weaponized, and no legal mechanism to demand removal until now.
The seizure itself is a federal action: the DOJ obtained and executed seizure warrants for both domains, effectively taking control of the websites and rendering them inaccessible. This is not a takedown notice to a hosting provider or a request for voluntary compliance. This is law enforcement seizing the infrastructure itself. The move signals that the government views these sites not as free-speech platforms but as criminal enterprises whose sole purpose is to produce and distribute nonconsensual intimate imagery.
• The TAKE IT DOWN Act imposes penalties of up to five years in federal prison per offense for producing or distributing nonconsensual deepfake intimate imagery
• The CFAKE and SOCFAKE seizures are the first publicly announced domain-level enforcement actions under the statute, meaning prosecutors selected these cases to establish legal precedent
• Prior to this law, victims were forced to rely on general harassment statutes, defamation claims, or platform terms of service—none of which were designed for AI-generated synthetic imagery
What the TAKE IT DOWN Act Actually Does
The TAKE IT DOWN Act, which Congress passed to address the proliferation of deepfake sexual abuse material, created a federal crime for knowingly producing nonconsensual deepfake pornography and for distributing such material with intent to harm or harass. The DOJ’s action against CFAKE and SOCFAKE is the first publicly announced enforcement under that statute, which means prosecutors have been waiting for a clear-cut case to establish precedent. They found it in two sites that made no attempt to hide what they were doing.
The federal legislative response did not emerge in isolation. A White House Task Force report on online harassment and abuse had already documented the inadequacy of existing legal frameworks for addressing nonconsensually distributed deepfake intimate images, laying the groundwork for the statutory authority prosecutors now hold. That report made explicit what victims had long understood: platform-level responses and general harassment laws were structurally insufficient to address AI-generated sexual abuse material at scale.
Is This the Same Extraction Model Cambridge Analytica Used?
The parallel to historical data-abuse scandals is instructive. During the Cambridge Analytica era, the scandal centered on how personal data—Facebook profiles, psychological surveys, behavioral metadata—was harvested at scale and weaponized to manipulate individuals without their knowledge. As documented in analyses of how Cambridge Analytica exposed the business of human data, the defining feature of that operation was not merely the collection of information but the nonconsensual conversion of personal identity into an instrument of harm.
The deepfake porn sites operate on a structurally identical extraction-without-consent model: they take a woman’s photograph, a piece of her digital identity, and use it to create fake intimate imagery designed to humiliate, harass, or destroy her reputation. The data is harvested without permission; the output is weaponized without consent; the victim discovers the abuse only after the damage is done. The mechanism is different—AI synthesis instead of psychographic profiling—but the underlying violation is identical: the nonconsensual use of a person’s identity for someone else’s gain or gratification.
• California’s Attorney General launched a formal investigation into xAI’s Grok system in January 2026, with the AG’s office citing evidence that xAI was facilitating large-scale production of deepfake nonconsensual intimate images—demonstrating that enforcement pressure is expanding beyond dedicated deepfake sites to AI platforms themselves
• Days later, a cease and desist letter was issued to xAI demanding it halt the generation of nonconsensual intimate images and child sexual abuse material, signaling that state-level enforcement is moving in parallel with federal action
• Together, these actions indicate that regulators are no longer treating deepfake sexual abuse material as a platform moderation problem—they are treating it as a law enforcement problem requiring criminal and civil accountability
Why Domain Seizure Matters More Than a Takedown Notice
What makes the CFAKE and SOCFAKE seizures significant is not just that they happened, but that they happened under a law specifically written to address this harm. For years, victims of deepfake pornography had to rely on general harassment laws, defamation claims, or platform terms of service—all inadequate tools. The TAKE IT DOWN Act gave prosecutors a direct statutory path. The DOJ’s decision to use it sends a message: if you build a platform designed to create nonconsensual intimate imagery, federal law enforcement will treat it as a criminal enterprise.
Domain seizure is categorically different from a content removal request. When the DOJ executes a seizure warrant against a domain, it takes direct control of the infrastructure. The site does not go offline because a hosting provider complied with a notice—it goes offline because the government has seized it as evidence of criminal activity. This distinction matters for deterrence. Operators of similar platforms cannot simply migrate to a new host or ignore a notice. They are now on notice that the federal government will treat their infrastructure as contraband.
This enforcement architecture is precisely what was missing during the years when digital campaigning and behavioral microtargeting operated in a regulatory vacuum. The Cambridge Analytica scandal demonstrated what happens when data-extraction operations face no credible enforcement threat: they scale, they normalize, and they cause harm that outlasts the platforms themselves. The DOJ’s seizure of CFAKE and SOCFAKE suggests that regulators have absorbed that lesson, at least in this domain.
What Victims Should Do Now
Women who discover deepfake sexual images of themselves circulating online should know that the legal landscape has shifted. The seizure of CFAKE and SOCFAKE does not erase images already created or distributed elsewhere, but it eliminates two major production and distribution hubs. For victims, the next step is documenting the abuse and reporting it to the FBI’s Internet Crime Complaint Center or local law enforcement. The TAKE IT DOWN Act gives prosecutors the statutory authority to investigate and prosecute. Whether that authority will be deployed consistently and at scale remains an open question—one that will be answered in the cases that follow this first seizure.
