Exiled Hong Kong pro-democracy activists in the UK and Australia have been targeted by a transnational harassment campaign involving AI-generated deepfake images. The materials, which include sexually explicit content and fake advertisements portraying activists as sex workers, were mailed to neighbors and associates. Victims described the campaign as psychological warfare intended to intimidate critics of the Chinese government, with police investigating the incidents as malicious communications.
Purported deepfake images of exiled Hong Kong pro-democracy activists were reportedly mailed to neighbors and others in the UK and Australia in late 2025. The letters allegedly depicted altered sexual images and false advertisements portraying activists, including Carmen Lau, as sex workers. Police described the materials as malicious communications. The incidents were described by victims and officials as an escalation of transnational harassment and intimidation.
Risk classification
- Primary risk domain: 4 Malicious actors
- Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation
The incident involves the targeted creation and distribution of humiliating, sexually explicit synthetic imagery of specific victims to intimidate and harass them.
Additional risk subdomains
- 1.2 Exposure to toxic content: The neighbors and employers of the activists were involuntarily exposed to highly explicit, offensive, and toxic synthetic pornographic content.
Causal factors
- Entity: Human
- Intent: Intentional
- Timing: Post-deployment
The harm was caused by human actors who intentionally used deployed AI deepfake tools to generate explicit images for the purpose of harassing and intimidating the activists.
EU AI Act risk tier
- Risk tier: 3 Limited Risk
Limited Risk: The incident involves 'digitally altered images' and 'deepfaked images', which are explicitly categorized under Risk Level 3 as AI-generated content requiring transparency obligations.
AI system and alleged parties
- AI system: None named
- AI purpose: Deepfake Image Generation; Image Generation
- Behaviour type: Tool
- Alleged developer: Unknown AI image generator technology developers
- Alleged deployer: Unknown malicious actors, Unknown actors, Unidentified harassment campaign, Suspected transnational repression actors
- Alleged harmed parties: Ted Hui's wife, Ted Hui, Neighbors of Hong Kong pro-democracy activists, National security and intelligence stakeholders, Hong Kong pro-democracy activists, Family members of Hong Kong pro-democracy activists, Epistemic integrity, Democracy, Carmen Lau, Associates of Hong Kong pro-democracy activists
Harm severity
Severity ratings are based on this scale.
Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.
- Physical: direct Negligible, indirect Negligible
- Infrastructure: direct Negligible, indirect Negligible
- Property: direct Negligible, indirect Negligible
- Financial: direct Negligible, indirect Negligible
- Environmental: direct Negligible, indirect Negligible
- Malicious content: direct Minor, indirect Minor
- Differential treatment: direct Minor, indirect Negligible
- Civil rights: direct Minor, indirect Minor
- Democracy: direct Negligible, indirect Minor
- Privacy: direct Negligible, indirect Minor
- Psychological: direct Minor, indirect Minor
- Epistemic: direct Minor, indirect Minor
- Child sexual exploitation and abuse: direct Negligible, indirect Negligible
Malicious content
Reported: The report explicitly describes the creation and distribution of toxic, sexually explicit synthetic content.
Directly caused: The AI system was used to generate five sexually explicit deepfake images of [PERSON_002] and a highly offensive poster depicting [PERSON_004]'s wife with a menu of sexual services.
Indirectly caused: These explicit materials were physically distributed to neighbors' doorsteps and emailed directly to an employer.
Differential treatment
Reported: The report explicitly describes gender-based differential treatment in the harassment of female activists.
Directly caused: The harassment campaign specifically targeted female activists and wives of activists with sexualized deepfakes, representing a gendered form of intimidation.
Inferred additional harm: Female dissidents face a disproportionate risk of highly sexualized and degrading digital harassment compared to their male counterparts.
Civil rights
Reported: The report explicitly describes violations of human and civil rights, specifically targeting freedom of expression and safety.
Directly caused: The targeted harassment campaign directly violated the victims' rights to safety and freedom from harassment, aiming to silence their political activism.
Indirectly caused: The campaign is described as 'transnational repression' by state-aligned actors to quash political dissent outside of Hong Kong.
Democracy
Reported: The report explicitly describes the erosion of democratic norms through the intimidation of political dissidents.
Indirectly caused: The use of AI-generated harassment to intimidate exiled pro-democracy activists undermines free speech, political participation, and the safety of dissidents in democratic nations.
Privacy
Reported: The report describes privacy violations, though the AI itself did not leak the information.
Directly caused: No direct privacy violation was caused by the AI system itself, as the personal details (address, measurements) were added to the letters by the human perpetrators.
Indirectly caused: The victims' non-public personal information, including home addresses, was exposed to their neighbors alongside the deepfake images.
Psychological
Reported: The report explicitly describes psychological harm, including severe distress and anxiety, experienced by the targeted individuals and their families.
Directly caused: The primary victim, [PERSON_002], reported being 'shocked and terrified' and carrying a heavy 'psychological burden' that made her hesitant to go out in public. [PERSON_004]'s wife was left 'speechless' by the targeted poster.
Indirectly caused: A neighbor's wife in Australia was reported to be 'scared' after receiving the explicit poster in her letterbox.
Inferred additional harm: Other exiled Hong Kong activists on the government's bounty list likely experience heightened anxiety, paranoia, and psychological distress due to the threat of similar targeted campaigns.
Epistemic
Reported: The report explicitly describes epistemic harm through the creation of fabricated, misleading information.
Directly caused: The AI was used to fabricate realistic, digitally altered images falsely depicting the victims engaging in sexual acts.
Indirectly caused: Neighbors and employers were presented with false advertisements and fake claims designed to deceive them about the victims' personal lives.
People affected
- Occurrences reported: 2
- People reportedly harmed: 10
- People reportedly exposed: 15
Potential causes
Management
- Lack of AI Safety Guardrails: AI developers failing to prevent generation of non-consensual images.
- State-Backed Campaigning: Coordinated orchestration of intimidation using digital tools.
Technology
- AI Deepfake Generation: AI tools used to superimpose target's face onto explicit bodies.
- Realistic Image Synthesis: Advanced AI making fake explicit images look highly convincing.
Data Inputs
- Publicly Available Photos: Using target's public photos as input for AI face-swapping.
- Exposed Personal Data: Target's real address and details paired with the AI images.
Human Factors
- Malicious Intent to Repress: Perpetrators weaponizing AI to intimidate political dissidents.
- Targeting Female Activists: Exploiting gender-based harassment to maximize psychological harm.
Process and Methods
- Anonymized Distribution: Mailing printed deepfakes from abroad to evade digital detection.
- Inadequate Police Response: Law enforcement struggling to trace the foreign origin of AI media.
Regulatory Environment
- Weak Transnational Laws: Lack of global laws to prosecute cross-border AI-driven harassment.
- Lax Generative AI Controls: Absence of strict legal mandates forcing AI tools to block NCII.
Information quality
- Classification confidence: High
- Reason for confidence: The reports from reputable news organizations provide clear, consistent, and detailed accounts of the harassment campaign, the specific nature of the deepfaked materials, and the psychological impact on the victims. The lack of a specific model name does not hinder the classification of the safety risks or harms.
- Ambiguities identified: The specific AI model or platform used to generate the deepfakes is not identified in the reports.
- Alternative interpretations: None. The intent to harass and intimidate using synthetic media is unambiguous.
Exiled Hong Kong pro-democracy activists in the UK and Australia were targeted by a transnational harassment campaign using AI-generated explicit deepfakes. This incident represents a substantial national security concern, highlighting how foreign state-aligned actors leverage synthetic media for transnational repression, violating state sovereignty and undermining democratic protections on human rights.
- Overall national security impact: Substantial
- Scope: Multiple nations
- Primary target: United Kingdom
- Other affected: Australia
- Alleged perpetrator: Chinese state-aligned actors
Threat characteristics
- Imminence: Long-term. This represents an ongoing strategic threat of foreign interference and digital harassment rather than an active, fast-moving kinetic crisis.
- Autonomy: Human-controlled. The AI systems functioned strictly as tools to generate synthetic media under direct human prompt and execution.
- Novelty: Evolved capability. While deepfake harassment is an established threat, adapting it as a coordinated tool of transnational political repression represents a significant evolution in foreign interference tactics.
Impact by dimension
- Physical security: Negligible. No physical systems, critical infrastructure, or kinetic targeting systems were involved or compromised in this incident.
- Information security: Substantial. The systematic deployment of AI-generated sexual deepfakes against political dissidents constitutes a sophisticated, state-aligned information operation aimed at silencing opposition.
- Sovereignty: Substantial. Transnational repression operations conducted by foreign-aligned actors on UK and Australian soil directly challenge state sovereignty and the protection of residents' legal rights.
- Economic security: Negligible. The incident does not involve threats to financial systems, strategic technologies, supply chains, or national economic competitive advantages.
- Societal stability: Substantial. The targeted harassment severely violates the human rights and civil liberties of pro-democracy activists, using gendered digital violence to suppress free speech.