Purported AI-Generated Nude Images Reportedly Used to Extort Wichita Man in Kansas

A Wichita, Kansas man reported that scammers sent him purported AI-generated nude images depicting his face on another body in his home and threatened to send them to his Facebook contacts unless he paid money. Police said a report was filed.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The incident involves criminals using AI-generated deepfakes to blackmail and extort a specific individual for financial gain, which directly constitutes targeted manipulation and fraud.

Additional risk subdomains

• 1.2 Exposure to toxic content: The AI tool was used to generate non-consensual sexually explicit (nude) imagery of the victim, which is a form of toxic and abusive content.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The harm was directly caused by human criminals intentionally using a deployed AI image generation tool to commit extortion.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The AI system used was an image generator capable of creating deepfakes, which falls under Risk Level 3 due to transparency obligations for AI-generated content.

AI system and alleged parties

• AI system: None named
• AI purpose: Deepfake Image Generation; Image Generation
• Behaviour type: Tool
• Alleged developer: Unknown image generator developers, Unknown deepfake technology developers
• Alleged deployer: Unknown scammers
• Alleged harmed parties: Neal Zoglmann, Epistemic integrity

Harm severity

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Minor, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Minor, indirect Negligible
• Psychological: direct Minor, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Malicious content

Reported: Yes, the report describes the creation of fake nude photos of the victim.

Directly caused: The criminals generated non-consensual synthetic nude images featuring the victim's face to use as leverage for blackmail.

Indirectly caused: N/A

Inferred additional harm: N/A

Privacy

Reported: Yes, the report describes the unauthorized use of the victim's face and likeness to generate fake intimate images.

Directly caused: The victim's public social media photos were harvested and manipulated without his consent to create highly personal, synthetic nude images.

Indirectly caused: N/A

Inferred additional harm: N/A

Psychological

Reported: Yes, the report explicitly describes psychological distress and fear experienced by the victim.

Directly caused: The victim experienced significant fear and anxiety regarding the potential ruin of his career, employment, and personal relationships if the fake photos were distributed.

Indirectly caused: N/A

Inferred additional harm: N/A

People affected

• Occurrences reported: 1
• People reportedly harmed: 1
• People reportedly exposed: 1

Potential causes

Management

• Platform Data Protection Failures: Social media platforms failed to prevent bad actors from scraping photos.
• Inadequate AI Risk Management: AI developers failed to prevent their tools from being used for extortion.

Technology

• AI Deepfake Generation: AI tools used to generate realistic nude photos using victim's face.
• Contextual Background Synthesis: AI realistically placed the victim's face into his own house background.

Data Inputs

• Harvested Social Media Photos: Victim's face and home interior photos were scraped from social media.

Human Factors

• Public Sharing of Personal Media: Posting photos online makes them vulnerable to being harvested by criminals.
• Criminal Exploitation: Bad actors use synthetic media to blackmail and extort money from victims.

Process and Methods

• Inadequate Account Privacy: Failure to secure social media accounts allowed unauthorized photo access.
• Weak AI Tool Safeguards: AI generation platforms lacked controls to block non-consensual nudes.

Regulatory Environment

• Unprepared Law Enforcement: Local police lacked experience and procedures for AI-driven extortion.
• Lack of AI Safety Regulations: Absence of strict legal frameworks governing synthetic media generation.

Information quality

• Classification confidence: High
• Reason for confidence: The report provides clear, unambiguous details about a single, specific incident of AI-enabled extortion. The victim's direct quotes and the police department's statements confirm the facts of the case, leaving no room for alternative interpretations.

A localized criminal extortion incident in Wichita, Kansas, where criminals used AI-generated synthetic nude images to blackmail a private citizen. The incident represents a minor national security threat, primarily impacting individual privacy and highlighting the evolving capabilities of criminals using consumer AI tools, manageable under standard local law enforcement procedures.

• Overall national security impact: Minor
• Response level: Moderate
• Scope: Single nation
• Primary target: United States
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. The immediate crisis for the victim has resolved, but the underlying threat of AI-enabled extortion represents an ongoing strategic concern.
• Autonomy: Human-controlled. The AI system was used as a tool directly controlled and prompted by human criminals to generate synthetic images.
• Novelty: Evolved capability. While a novel occurrence for local law enforcement, AI-generated deepfake extortion represents an evolved capability of existing financial scam methods.

Impact by dimension

• Physical security: Negligible. No physical systems, infrastructure, or human safety threats were involved in this localized cyber extortion incident.
• Information security: Negligible. The incident was a localized criminal extortion attempt targeting a private citizen, with no impact on intelligence capabilities or national-scale information operations.
• Sovereignty: Negligible. No state authority, electoral processes, or core government functions were disrupted or threatened by this local criminal activity.
• Economic security: Negligible. The incident represents a localized financial extortion scam targeting an individual, posing no threat to strategic industries or national economic stability.
• Societal stability: Minor. Represents a localized violation of individual privacy and civil rights through non-consensual synthetic media, manageable by local law enforcement with minimal threat to broader social cohesion.