One year ago, President Trump signed the TAKE IT DOWN Act into law. On May 19, 2026 — the law’s first anniversary — the Federal Trade Commission formally activated its platform-compliance enforcement provisions. The timing was not coincidental. What followed in the next 48 hours was the single largest wave of federal deepfake enforcement in American history.
What the TAKE IT DOWN Act Requires
The law compels online platforms to remove nonconsensual intimate imagery — including AI-generated deepfakes — within 48 hours of a valid complaint. Platforms that fail to comply face civil penalties of $53,088 per violation. On May 19, the FTC sent compliance letters to fifteen major platforms, including Meta, Apple, Microsoft, TikTok, and X, formally placing them on notice that the agency was actively monitoring takedown response times.
The law covers both real images and synthetic content — including AI-generated material that depicts a real person in sexual situations they never actually participated in.
The First Criminal Charges Under the Act
Twenty-four hours after the FTC’s compliance activation, federal prosecutors in Brooklyn unsealed criminal charges against two men:
- Cornelius Shannon, 51, of Hasbrouck Heights, New Jersey
- Arturo Hernandez, 20, of Bedias, Texas
The two were accused of using AI image-generation tools to create deepfake pornographic content depicting approximately 140 named victims, with the resulting material accumulating nearly three million views before takedown requests were processed.
The Brooklyn charges represent the first major prosecutions under the TAKE IT DOWN Act’s criminal provisions — a significant escalation from the statute’s civil enforcement framework. Legal observers noted that the criminal track, brought in parallel to FTC civil action, signals that the Justice Department intends to treat AI-generated nonconsensual imagery as a prosecutable federal offense rather than a regulatory matter left to agencies.
The First Conviction Had Already Come
Shannon and Hernandez were not the first people to face consequences under the law. In April 2026, an Ohio man became the first person convicted under the TAKE IT DOWN Act after creating and distributing nonconsensual intimate imagery of his neighbors — including children. The Ohio conviction established the criminal precedent; the Brooklyn charges applied it at scale.
Why This Matters for Scam Victims
The TAKE IT DOWN Act addresses a category of harm that intersects directly with financial fraud. In romance scams, deepfake intimate imagery is increasingly used as a coercion tool: scammers generate or threaten to generate AI-fabricated material and use it to extract money from victims, particularly after establishing trust in long-running online relationships. The FBI has documented multiple cases where pig-butchering operations used deepfake imagery as a secondary extortion layer once the initial investment scheme failed.
The FBI’s Internet Crime Complaint Center recorded nearly $893 million in AI-related fraud losses in 2025 — the first year the agency tracked that category separately. Voice cloning, deepfake imagery, and AI-generated impersonation messages were the primary vectors.
Platform Accountability
The FTC’s May 19 compliance letters to fifteen platforms were not requests — they were notices. The agency’s framework now requires platforms to:
- Maintain a clear, accessible reporting mechanism for nonconsensual intimate imagery
- Acknowledge valid complaints within 48 hours
- Remove the content within 48 hours of acknowledgment
- Implement reasonable measures to prevent re-upload of removed content
Platforms that fail at any step face per-violation civil penalties. With three million views on the material in the Brooklyn case alone, the potential liability exposure for a non-compliant platform is substantial.
What Comes Next
Legal analysts expect additional criminal filings in the coming weeks as the DOJ works through referrals from the FTC’s initial compliance sweep. Platforms are scrambling to upgrade their automated detection and takedown pipelines — a process that cybersecurity researchers warn is technically harder than it sounds, given the volume of content and the improving realism of AI-generated imagery.
For individuals who have been targeted by deepfake abuse, the TAKE IT DOWN Act now provides a federal legal pathway that did not exist 18 months ago. The 48-hour takedown requirement, paired with criminal referral authority, gives victims tools that previously required state-by-state action with inconsistent results.
The enforcement window just opened. Federal prosecutors have made clear they intend to use it.
