Purportedly AI-Generated Deepfake Image Reportedly Falsely Links Canadian Prime Minister Mark Carney to Jeffrey Epstein

A purportedly AI-generated image that reportedly circulated on social media falsely depicted Canadian Prime Minister Mark Carney in a swimming pool with Jeffrey Epstein, implying involvement in Epstein's sex crimes. The manipulated image reportedly spread widely in early 2025, first around the time of Justin Trudeau's announced resignation, then after Carney became Liberal Party leader, and was reportedly promoted by Canadian and U.S. conservative accounts.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.1 Disinformation, surveillance, and influence at scale

The deepfake was intentionally circulated by political accounts to influence public opinion and manipulate political processes during a leadership transition, targeting a population-level audience.

Additional risk subdomains

• 4.3 Fraud, scams, and targeted manipulation: The AI-generated image was used for the targeted humiliation and defamation of Mark Carney by falsely linking him to a sex offender.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident was caused by human actors who intentionally generated and distributed a deepfake image to politically defame Mark Carney after the AI model was deployed.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The incident involves an AI system used to generate synthetic content (a deepfake), which is subject to transparency and disclosure obligations under the Act.

AI system and alleged parties

• AI system: None named
• AI purpose: Deepfake Image Generation; Image Generation
• Behaviour type: Tool
• Alleged developer: Unknown deepfake technology developers, Unknown AI image generator developer
• Alleged deployer: Unknown actor, Social media accounts
• Alleged harmed parties: Mark Carney, Liberal Party of Canada, General public of Canada, General public, Epistemic integrity

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Minor, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Minor, indirect Negligible
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Minor, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Malicious content

Reported: The report explicitly describes malicious content created and spread directly by the incident.

Directly caused: An AI-generated deepfake image falsely depicting Mark Carney with convicted sex offender Jeffrey Epstein was created and spread on social media platforms.

Democracy

Reported: The report explicitly describes the erosion of democratic norms through the spread of political disinformation.

Directly caused: The deepfake was used to manipulate public perception of a political leader during a critical party leadership transition.

Inferred additional harm: The incident likely contributes to a broader erosion of trust in democratic institutions, political candidates, and the integrity of elections.

Epistemic

Reported: The report explicitly describes epistemic harm through the generation and spread of a fabricated image.

Directly caused: The AI-generated image fabricated a meeting between Mark Carney and Jeffrey Epstein, misleading social media users who viewed and liked the posts.

Inferred additional harm: The widespread dissemination of realistic deepfakes of public figures degrades the shared information ecosystem and makes it harder for the public to distinguish real evidence from synthetic fabrications.

People affected

• Occurrences reported: 1
• People reportedly harmed: 1
• People reportedly exposed: 105800

Potential causes

Technology

• AI Image Generation Flaws: Generative tools created anatomical anomalies like misshaped hands.
• High-Fidelity Deepfakes: AI tools can generate highly realistic fake images of public figures.

Data Inputs

• Real Photos Used as Context: A 2013 photo of Carney and Maxwell provided context for the fake image.

Human Factors

• Political Confirmation Bias: Users shared the fake image to support their political narratives.
• Lack of Critical Verification: Social media users accepted and shared the image without checking its source.

Process and Methods

• Ineffective Platform Moderation: Social media platforms failed to detect or flag the AI-generated image.

Regulatory Environment

• Lack of Deepfake Regulations: Absence of strict laws penalizing political deepfake generation.

Information quality

• Classification confidence: High
• Reason for confidence: The report provides clear, verified facts about the origin, spread, and debunking of the deepfake image, including specific social media metrics and visual artifacts.
• Ambiguities identified: The specific AI image generator used to create the deepfake is not identified in the report.
• Alternative interpretations: None. The evidence clearly points to a politically motivated deepfake disinformation campaign.

An AI-generated deepfake depicting Canadian politician Mark Carney with Jeffrey Epstein was circulated during a political leadership transition. The incident represents a minor national security concern, highlighting the ongoing but manageable threat of synthetic media being used for political disinformation and character assassination.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: Canada
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. Represents an ongoing strategic challenge of synthetic media in political campaigns rather than an imminent national security crisis.
• Autonomy: Human-controlled. The AI image generator was used purely as a tool by human actors who directed the generation and dissemination of the content.
• Novelty: Established threat. The use of deepfakes for political defamation and disinformation is a well-documented and established threat vector.

Impact by dimension

• Physical security: Negligible. No physical systems, critical infrastructure, or kinetic assets were targeted or affected by this incident.
• Information security: Minor. An AI-generated deepfake was used in a political disinformation campaign targeting a Canadian politician, but was quickly debunked due to obvious visual artifacts.
• Sovereignty: Minor. The incident attempted to influence public perception during a party leadership transition, but did not compromise core government decision-making or electoral infrastructure.
• Economic security: Negligible. There was no impact on strategic technologies, financial systems, or economic security.
• Societal stability: Minor. The incident contributes to the erosion of public trust in democratic processes and the shared information ecosystem, though the immediate impact was localized.