200,000 Strangers Just Got Caught Trading Fake Nudes of Real Women. One Was Probably Someone You Know.

On June 10th, a man was arrested in Nice, France. Cryptocurrency was seized. And across the Atlantic, U.S. federal investigators were already coordinating with Italian and French authorities to take down two websites — CFAKE and SOCFAKE — that together had 200,000 registered users and 4 million monthly visitors. The sites existed to turn ordinary photos of real women into fake explicit images. Not Hollywood celebrities with leaked footage. Ordinary people. With ordinary photos.

The shutdown, reported by CyberScoop, is genuinely good news. Law enforcement worked across three countries, tracked the infrastructure, and arrested an operator. That used to be basically impossible for this kind of online abuse. But here's the thing — the real story isn't the arrest. The real story is what those 200,000 accounts tell us about how big this problem has gotten while most of us weren't watching.

This Is Not Some Fringe Corner of the Internet

Four million monthly views. Let that sit for a second. That's not a few creeps in a dark forum. That's a subscriber base the size of a mid-market city, logging on regularly, uploading photos, requesting fake explicit images of specific women. These weren't leaked photos or stolen data. In many cases, the source material was something as simple as a profile picture. A graduation photo. A selfie from someone's public Instagram.

The tools that power these sites — sometimes called "nudifying apps" (software that strips clothing from a real photo and generates a fake explicit version) — have gotten so fast and cheap that a fake image can be produced in seconds. No technical skill required. No hacking. Just a photo that exists somewhere online and a few clicks.

This isn't a new statistic. Researchers have known this for years. What's new is that it's now happening at a scale that requires three governments and coordinated asset seizures to address. That shift — from "disturbing individual incidents" to "organized, profitable, international infrastructure" — is the thing that should change how you think about your own digital photos. And your kids'. This article is part of a series — start with Why Fake Faces Look More Real Than Genuine Photos.

The Law Finally Caught Up — But Only Just

For a long time, creating and sharing a fake explicit image of a real person existed in a legal gray zone in the U.S. Not anymore. The TAKE IT DOWN Act — federal legislation that makes it a crime to publish non-consensual deepfake pornography and requires platforms to remove flagged content within 48 hours — gave investigators the legal foundation to go after these operations at a criminal level, not just a content-moderation level.

The difference matters enormously. Content moderation means sending a takedown request and hoping. Criminal prosecution means seizing servers, arresting operators, and freezing their cryptocurrency wallets. One of these sends a message. The other one just creates a week of paperwork.

"The shutdown wasn't achieved by asking platforms to remove content — it was achieved by arresting an operator and seizing his assets. That is a fundamentally different deterrent." — Expert analysis, SOC Defenders

State laws are moving fast too. According to MultiState AI's tracker, over half of U.S. states have now passed laws specifically criminalizing non-consensual explicit deepfakes. A year ago, many of those states had nothing. That's actually remarkable speed for legislation — which tells you how loud the public outcry has gotten.

And CFAKE and SOCFAKE aren't isolated cases. Earlier this year, CBS News reported the shutdown of another major deepfake pornography site following the TAKE IT DOWN Act's passage. A pattern is forming. Law enforcement is no longer treating this as a content problem for tech companies to handle — it's a crime scene.

The Part That Should Wake You Up at 11pm

Here's the thing nobody says plainly enough: your face does not have to be "leaked" to be at risk. There is no breach, no hack, no stolen phone required. A profile photo on LinkedIn. A family picture on Facebook. A headshot your kid's school put on the team page. Any of those is enough raw material for these tools.

The people running CFAKE and SOCFAKE weren't targeting celebrities with high-value private content. They were running a service — almost like a sick subscription model — where users could upload photos of anyone and receive fake explicit images in return. Your neighbor. Your coworker. Your teenager. Previously in this series: Face Verification Digital Id What To Ask Before You Tap.

So What Do You Actually Do?

This is the question that matters most at 11pm when you're reading this on your phone. If a fake explicit image of you or your child appeared online tomorrow, would you know what to do? Most people's instinct is silence — because shame hits first, and because it feels like going public will make it worse. That instinct is understandable. It is also the thing that helps abusers most.

Here's the order of operations, stated simply:

Step one: Treat it like a crime scene. Screenshot everything. The URL. The image. Any messages. Don't delete. Don't negotiate. Don't pay anyone who threatens to spread it further. Evidence first, decisions second.

Step two: Report before shame makes you go quiet. In the U.S., the National Center for Missing & Exploited Children (NCMEC) operates a reporting system specifically for non-consensual intimate images — including AI-generated ones. The FBI's Internet Crime Complaint Center (IC3) also accepts these reports. Most major platforms now have specific reporting flows for this category of content, and under the TAKE IT DOWN Act, they're legally required to act within 48 hours.

Step three: Get help from someone who understands this space. A victim advocate, a school counselor, a digital safety organization — someone who has handled this before and won't treat it like a tech problem rather than a human one. You don't have to figure this out alone.

If you've ever wondered whether your photos — or your kid's photos — could be used in ways you never consented to, that's not paranoia. That's exactly the right question to be asking. Tools that help you monitor for your image appearing somewhere it shouldn't are real, and knowing what to watch for is a form of protection that doesn't require a crisis to be useful. The right move is to understand your exposure before something happens, not after. Up next: The Most Real Face Youll See Today Was Never Born.

The Warning Hiding in the Good News

Look, the arrest in Nice is a win. The seizure of cryptocurrency, the tri-continental coordination, the fact that operators of these sites now know law enforcement can follow the money across borders — all of it matters. The era of "deepfake porn is too new and too technical to prosecute" is genuinely ending.

But here's the counterpoint worth sitting with: shutting down distribution sites is a bit like draining one flooding room while the water keeps coming in through the walls. The AI tools that generate these images are getting cheaper, faster, and more distributed by the month. Future operations may not require a centralized website at all — just a chat app and a nudifying tool that anyone can download. Arresting the operator of CFAKE was important. What comes next will require something harder: accountability for the tools themselves.

Until then, the 200,000 accounts on CFAKE tell you something very specific. This wasn't a small group of bad actors on the outer edges of the internet. It was a community, operating in the open, with a business model. The people who used that site are still out there. The tools they used still exist. And somewhere tonight, a real person who had no idea their photo was ever uploaded to a site like that is living completely unaware.

The arrest happened in Nice on June 10th. The question is: whose photo was request number 3,999,999?