Federal Agents Shut Down Two Deepfake Porn Sites. Here Is What It Took.

Two deepfake porn sites went dark this June, and reading about it felt different than most stories I cover for this blog. Usually the news here is another scam that worked: another company or grandmother who lost money to a cloned voice. This time the story ended with federal agents seizing the servers instead of someone writing a check they will never get back.

CFake.com and SOCFake.com had spent months hosting digitally forged nude images of real women who never sat for those photos: politicians, athletes, journalists, royalty, entertainers, according to the seizure warrants. In June, the Department of Justice and Homeland Security Investigations seized both domains under the TAKE IT DOWN Act, the federal law that criminalizes publishing nonconsensual intimate images, including ones built with AI. It is the first time those forfeiture powers have been used against a deepfake site this way, and the Justice Department laid out the case in a public announcement.

The scale is what stopped me. French investigators who helped build the case counted roughly 300,000 images and 7,000 videos on CFake.com alone, depicting some 14,000 people, pulling in four million visits a month from 200,000 accounts. An IT professional in Nice, with no prior criminal record, is accused of running the site and is set to stand trial in Paris on July 7. Investigators found about 64,000 dollars in cryptocurrency at his home, allegedly revenue from advertising. The whole case reportedly started with a tip from Italian police before French and American investigators built it out together.

The TAKE IT DOWN Act's criminal provisions took effect the moment it was signed in May 2025. The part requiring platforms to remove flagged images within 48 hours had a full year to phase in, and that window closed in May 2026. Two other men, one in New Jersey and one in Texas, were already charged under the same law back in May for running smaller versions of the same operation: one with roughly 360 albums targeting 90 women, the other with 113 albums targeting 50 women. This case is the first time the law reached all the way to a site's owner and its domain, not just the people posting to it.

I spend a lot of time on this site writing about the gap between what the law says and what it can actually reach. The state-by-state map I put together shows how uneven that protection still is depending on where you live, and the NO FAKES Act working through Congress right now is trying to close some of the same gaps for licensing your own voice and face. I have also written about what actually happens if you try to sue someone for a deepfake made of you, and how much slower and more expensive that path usually is compared to a federal seizure with two governments behind it. This case matters because it shows the criminal side of the law working exactly as written: fast, cross-border, and with real consequences for the person running the site.

None of that means the underlying problem is solved. Seizing a distribution point removes a storefront. It does not remove the tools that generate this material, the hosting providers waiting to pick up the next domain, or the demand that built the audience in the first place. The full text of the TAKE IT DOWN Act reads like it was written for exactly this kind of case, and it is good to see it used that way. It is also one tool, aimed at one kind of harm, in a fight that keeps finding new shapes.

I think about this the same way I think about what happens when someone steals your face for a scam instead of exploitation. The violation takes a different shape, and the powerlessness still feels familiar. Somebody used a likeness without asking, and by the time the person finds out, the images have already traveled somewhere they cannot follow. The DOJ case is proof that the law can reach into that space and pull something back out. It cannot do it fast enough to feel like protection ahead of time, and that gap between after-the-fact justice and before-the-fact awareness is the whole reason I built this site.

I do not think a story like this should make anyone feel safe, and I do not think it should make anyone feel hopeless either. A law worked. An international team of investigators followed the money. A person who thought a French apartment and a cryptocurrency wallet would keep him anonymous is standing trial in Paris in a few days. That is real progress, and it is also a fair nudge to look at your own exposure before you become someone else's case study.

If you want a clearer picture of where your own face, voice, and identity sit online right now, take our free two-minute Deepfake Risk Assessment. It will not seize any domains, but it will show you where you stand, and that is a good place to start.