Female Celebrities' Faces Shown in Sexually Suggestive Ads for Deepfake App

The Facemega app, developed by Ufoto Limited, was used to run hundreds of sexually suggestive advertisements on Meta platforms and other apps. These ads featured deepfake face-swaps of celebrities like Emma Watson and Scarlett Johansson to promote the app's ability to generate nonconsensual sexual content. Following public outcry and media reports, the app was removed from the Apple App Store and Meta's advertising services, though it remained available on Google Play for a period.

Sexually suggestive videos featuring faces of female celebrities such as Emma Watson and Scarlett Johansson were rolled out as ads on social media for an app allowing users to create deepfakes.

Source: AI Incident Database

Risk classification

  • Primary risk domain: 1 Discrimination & Toxicity
  • Primary risk subdomain: 1.2 Exposure to toxic content

The incident involved running hundreds of public advertisements featuring sexually suggestive deepfakes of celebrities, exposing millions of social media users to toxic and inappropriate content.

Additional risk subdomains

  • 4.3 Fraud, scams, and targeted manipulation: The app was marketed and used to generate humiliating, nonconsensual sexual imagery of specific individuals for personal or commercial advantage.

Causal factors

  • Entity: Human
  • Intent: Intentional
  • Timing: Post-deployment

The incident was caused by human developers intentionally creating and running suggestive deepfake ad campaigns to promote their deployed AI application.

EU AI Act risk tier

  • Risk tier: 3 Limited Risk

Limited Risk: The report describes an AI system used to generate deepfakes, which falls under the Limited Risk category of the EU AI Act, requiring specific transparency obligations to inform users.

AI system and alleged parties

  • AI system: Facemega (Wondershare)
  • AI purpose: Deepfake Video Generation; Deepfake Image Generation
  • Behaviour type: Tool
  • Alleged developer: Facemega
  • Alleged deployer: Facemega
  • Alleged harmed parties: Scarlett Johansson, female celebrities, Emma Watson

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

  • Physical: direct Negligible, indirect Negligible
  • Infrastructure: direct Negligible, indirect Negligible
  • Property: direct Negligible, indirect Negligible
  • Financial: direct Negligible, indirect Negligible
  • Environmental: direct Negligible, indirect Negligible
  • Malicious content: direct Minor, indirect Substantial
  • Differential treatment: direct Minor, indirect Substantial
  • Civil rights: direct Minor, indirect Substantial
  • Democracy: direct Negligible, indirect Negligible
  • Privacy: direct Minor, indirect Substantial
  • Psychological: direct Minor, indirect Substantial
  • Epistemic: direct Minor, indirect Substantial
  • Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Malicious content

Reported: The reports explicitly describe the creation and distribution of toxic and sexually suggestive deepfake content.

Directly caused: Over 230 suggestive deepfake ads featuring celebrity face-swaps were distributed across Meta platforms, with one viral tweet of the ad reaching over 10 million views.

Indirectly caused: The app facilitates and encourages users to generate their own nonconsensual sexually explicit or suggestive deepfake videos.

Inferred additional harm: Thousands of additional toxic, nonconsensual sexual videos generated by the app's user base.

Differential treatment

Reported: The reports explicitly describe how deepfake technology is disproportionately used as a weapon to target and harass women and girls.

Directly caused: The promotional campaign specifically targeted and sexualized prominent female celebrities.

Indirectly caused: The proliferation of easy-to-use deepfake apps disproportionately subjects women and girls to nonconsensual sexualization and online harassment.

Inferred additional harm: Systemic increase in gender-based harassment and unequal safety outcomes for women online.

Civil rights

Reported: The reports explicitly describe violations of personal autonomy and consent.

Directly caused: The nonconsensual sexualization of Emma Watson and Scarlett Johansson violated their basic rights to bodily autonomy and personal dignity.

Indirectly caused: The app enables mass violations of individual consent by allowing users to generate sexual content of anyone without permission.

Inferred additional harm: Widespread violations of civil rights and personal dignity for thousands of individuals targeted by users of the app.

Privacy

Reported: The reports explicitly describe privacy concerns arising from the nonconsensual use of personal likenesses.

Directly caused: The unauthorized use of celebrity faces in suggestive promotional videos violated their personal privacy.

Indirectly caused: The app allows users to upload photos of any private individual without consent, facilitating severe privacy violations.

Inferred additional harm: Widespread privacy violations of private citizens whose personal photos are uploaded and manipulated without their knowledge.

Psychological

Reported: The reports explicitly describe psychological harm, including humiliation, distress, and violation of bodily autonomy.

Directly caused: The nonconsensual sexualization of Emma Watson and Scarlett Johansson in public ads caused reputational damage and distress.

Indirectly caused: The widespread availability of the app causes anxiety, disgust, and fear of harassment among women and girls who worry about being targeted.

Inferred additional harm: Widespread psychological trauma and distress for numerous unnamed victims whose likenesses have been exploited using this app.

Epistemic

Reported: The reports explicitly describe concerns regarding the erosion of shared reality and the difficulty of distinguishing fact from fiction.

Directly caused: The ads presented highly realistic but entirely fabricated videos of celebrities in suggestive scenarios.

Indirectly caused: The proliferation of highly convincing deepfakes undermines public trust in video evidence and visual media.

Inferred additional harm: Broader societal degradation of trust in digital media as deepfake technology becomes indistinguishable from reality.

People affected

  • Occurrences reported: 1
  • People reportedly harmed: 2
  • People reportedly exposed: 10000000

Potential causes

Management

  • Reactive Safety Enforcement: Platforms only removed ads and apps after media exposure by journalists.
  • Profitization of Harmful Apps: Developers prioritized weekly subscription revenue over safety safeguards.
  • Lack of Proactive Risk Audits: Management failed to assess risks of deepfake tech before deployment.

Technology

  • Rapid AI Face-Swap Accessibility: Users can generate realistic deepfakes in seconds using just one photo.
  • Realistic Synthetic Media: Advanced algorithms make fake videos look convincingly real, blurring reality.
  • Low Barrier to Tech Access: The technology is easily available via free or cheap smartphone apps.

Data Inputs

  • Unrestricted Photo Inputs: The app allows uploading any single photo of anyone without consent.
  • Pre-existing Video Templates: App provides ready-made templates, including suggestive or 'hot' videos.
  • Exploitation of Public Images: Celebrity promotional photos are easily harvested to seed deepfakes.

Human Factors

  • Malicious User Intent: Users deliberately use the tech to harass, humiliate, and violate women.
  • Exploding Consumer Demand: High demand for nonconsensual porn fuels the spread of these apps.
  • Disregard for Consent: Users readily create sexual content of others without their permission.

Process and Methods

  • Flawed Ad Moderation Systems: Meta, Apple, and Google algorithms failed to block sexually suggestive ads.
  • Inadequate App Store Vetting: App stores hosted the deepfake app despite policies against harmful content.
  • Ineffective App-Level Controls: The app failed to enforce its own terms prohibiting explicit content.

Regulatory Environment

  • Fragmented Legal Frameworks: Only a few jurisdictions explicitly outlaw nonconsensual deepfakes.
  • Jurisdictional Hurdles: Taking legal action against Chinese parent companies is practically difficult.
  • Slow Pace of Legislation: Technology advances much faster than the creation of protective laws.

Information quality

  • Classification confidence: High
  • Reason for confidence: The incident is documented consistently across multiple reputable investigative reports. The details regarding the ad campaign, the platforms involved, the specific celebrities targeted, and the subsequent platform removals are clear and unambiguous.
  • Ambiguities identified: None of significance; the role of the AI app and the nature of the ads are clearly described.
  • Alternative interpretations: None.

A commercial deepfake application, Facemega, ran aggressive ad campaigns featuring nonconsensual celebrity face-swaps on major social platforms. While highlighting the rapid commercialization and accessibility of realistic synthetic media tools, the incident represents a minor national security threat, primarily impacting digital privacy, platform safety, and consumer protection rather than critical state infrastructure or functions.

  • Overall national security impact: Minor
  • Scope: Multiple nations
  • Primary target: No clear primary
  • Other affected: United States, global
  • Alleged perpetrator: Ufoto Limited

Threat characteristics

  • Imminence: Long-term. Represents an ongoing strategic concern regarding synthetic media proliferation rather than an active national security crisis.
  • Autonomy: Human-controlled. The AI model functions strictly as a tool, requiring direct human inputs and selections to generate the synthetic media.
  • Novelty: Evolved capability. While deepfake technology is established, the aggressive, commercialized scale of advertising easy-to-use tools represents an evolved threat vector.

Impact by dimension

  • Physical security: Negligible. No physical systems, critical infrastructure, or kinetic capabilities were affected or targeted in this commercial deepfake incident.
  • Information security: Minor. Demonstrates the commercialization and rapid deployment of highly realistic deepfake technology, though utilized for advertising rather than state-sponsored information operations.
  • Sovereignty: Negligible. No impact on state authority, government decision-making, or democratic electoral processes.
  • Economic security: Negligible. No theft of strategic national technology, critical financial systems compromise, or disruption of key supply chains.
  • Societal stability: Minor. Facilitates nonconsensual synthetic media generation, threatening individual privacy and digital safety, but remains a localized consumer platform violation rather than a threat to national social cohesion.
Explore in the interactive Incident Tracker