FBI agent explains how easy it is to ID people posting AI porn without consent

The FBI has arrested two men for allegedly creating and distributing non-consensual AI-generated explicit content, highlighting the ease with which individuals can be identified despite attempts at anonymity. Authorities are intensifying efforts to combat this abuse of technology, with increased enforcement and warnings issued to platforms hosting such tools.
The FBI recently arrested two men, Arturo Hernandez and Cornelius "Neil" Shannon, for allegedly creating and distributing non-consensual AI-generated explicit content. These arrests, made under the Take It Down Act (TIDA), demonstrate the relative ease with which perpetrators can be identified, even when attempting to conceal their identities. Investigators accessed porn websites, following hashtags like #AI #Deepfakes, to uncover the illicit activity.
Hernandez, 20, is accused of posting 113 albums containing AI-generated sexualized images and videos of approximately 50 women, some of whom were personal acquaintances. Despite his efforts to use a nickname online, geo-location data and linked accounts, including PayPal and iCloud, helped law enforcement connect him to the content. Shannon, 51, was allegedly less cautious, reportedly using his own photo as a profile picture on the illicit platform, leading to a straightforward identification through public records.
Both men face up to two years in prison if convicted of violating TIDA. Officials, including Joseph Nocella, Jr. and James C. Barnacle, Jr. of the FBI, emphasize their commitment to prosecuting those who exploit technology to harm others, vowing to pursue such cases with the full force of the law.
In a broader effort to combat this issue, the Federal Trade Commission (FTC) has issued warnings to 12 companies offering "nudify" tools, citing violations of TIDA. These companies are mandated to implement victim-request content removal processes within 48 hours or face substantial civil penalties. The FTC has also cautioned major platforms like Amazon, Google, Apple, and Meta to comply with TIDA requirements, indicating a significant increase in enforcement activities to protect individuals from digital exploitation.
Despite these efforts, challenges remain. One individual previously arrested under TIDA reportedly continued to create deepfakes while on pre-trial release, suggesting that current measures may not fully deter offenders. Nevertheless, authorities are stepping up their efforts, with social media platforms like X also implementing reporting mechanisms for users to flag harmful content under TIDA.
Related articles
When the Trump administration cracks down on Anthropic, who benefits?
The Trump administration issued an export control order against Anthropic, forcing the AI company to pull its newest models, Fable 5 and Mythos 5, offline. This move has sparked debate over AI policy and digital sovereignty, with some suggesting political motivations and others questioning Anthropic’s own messaging around AI safety.
Signal’s Meredith Whittaker wants you to remember that AI chatbots ‘are not your friends’
Signal President Meredith Whittaker cautions against the over-reliance on AI chatbots, emphasizing they are not sentient and can pose significant privacy risks. She highlights concerns about pervasive data access when integrating AI into personal and sensitive applications.
Ethics & SocietyCritical Copilot vulnerability allowed hackers to seal 2FA code from users
Microsoft patched a critical vulnerability in its M365 Copilot AI platform that allowed attackers to extract sensitive data, including 2FA codes, from users. This vulnerability, dubbed "SearchLeak," exploited Copilot's inability to distinguish between user instructions and malicious commands embedded in third-party content.
