Quebec Man Sentenced for Having Used Deepfake Technology to Create Synthetic Child Pornography

A 61-year-old Quebec man was sentenced to eight years in prison for multiple sex crimes, including the creation of at least seven AI-generated deepfake videos of child sexual abuse. The judge noted that this was the first case of its kind in Canada and highlighted how the technology allows criminals to use images scraped from social media to create new, untraceable illicit material. This case underscores the severe risks posed by deepfake technology in facilitating the exploitation of children and hindering law enforcement efforts.

A Quebec man was sentenced to over three years in prison for using AI deepfake technology to produce synthetic child pornography. He created videos by superimposing children's faces onto other bodies, adding to the challenge of policing digital sexual exploitation. This case marks a disturbing use of AI in criminal activities, raising concerns about digital safety and the vulnerability of children's images online.

Source: AI Incident Database

Risk classification

  • Primary risk domain: 1 Discrimination & Toxicity
  • Primary risk subdomain: 1.2 Exposure to toxic content

The incident involves the creation and possession of AI-generated child sexual abuse material, which is explicitly classified under exposure to toxic and illegal content.

Additional risk subdomains

  • 4.3 Fraud, scams, and targeted manipulation: The perpetrator targeted a specific child by scraping her social media photos and personal information to facilitate the creation of humiliating sexual imagery.

Causal factors

  • Entity: Human
  • Intent: Intentional
  • Timing: Post-deployment

The incident was caused by a human user intentionally utilizing deployed deepfake AI software to generate illicit child sexual abuse material.

EU AI Act risk tier

  • Risk tier: 1 Unacceptable

Unacceptable Risk: The AI system was used to generate child sexual abuse material, which represents an exploitative system targeting vulnerable minors and violating fundamental rights, placing it under prohibited AI practices.

AI system and alleged parties

  • AI system: unspecified
  • AI purpose: Deepfake Video Generation; Deepfake Image Generation
  • Behaviour type: Tool
  • Alleged developer: Unnamed deepfake technology developers
  • Alleged deployer: Steven Larouche
  • Alleged harmed parties: Victims of child sexual abuse (bodies used in videos), General public, Children (faces used in deepfakes)

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Substantial. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

  • Physical: direct Negligible, indirect Negligible
  • Infrastructure: direct Negligible, indirect Negligible
  • Property: direct Negligible, indirect Negligible
  • Financial: direct Negligible, indirect Negligible
  • Environmental: direct Negligible, indirect Negligible
  • Malicious content: direct Minor, indirect Substantial
  • Differential treatment: direct Negligible, indirect Negligible
  • Civil rights: direct Minor, indirect Negligible
  • Democracy: direct Negligible, indirect Negligible
  • Privacy: direct Minor, indirect Minor
  • Psychological: direct Minor, indirect Minor
  • Epistemic: direct Negligible, indirect Negligible
  • Child sexual exploitation and abuse: direct Substantial, indirect Substantial

Malicious content

Reported: The report explicitly describes the creation of toxic and malicious content in the form of AI-generated child sexual abuse material.

Directly caused: The perpetrator created at least seven synthetic deepfake videos of child pornography.

Indirectly caused: The creation of these synthetic images fuels fantasies that incite sexual offenses against children and encourages the illicit market for child pornography.

Inferred additional harm: It is likely that additional synthetic files were created or shared among the 545,000 computer files possessed by the perpetrator, potentially reaching other malicious actors.

Civil rights

Reported: The report explicitly describes violations of human rights, specifically the violation of children's sexual integrity, dignity, and privacy.

Directly caused: The perpetrator violated the fundamental human rights, dignity, and sexual integrity of the children depicted in the seven deepfake videos.

Inferred additional harm: The widespread availability of deepfake technology threatens the fundamental right to safety and privacy for all children in the digital space.

Privacy

Reported: The report explicitly describes privacy violations, including the scraping of a child's social media photos and personal information.

Directly caused: The perpetrator violated the privacy of a specific girl by obtaining her photos from social media along with her real name, town, and school details.

Indirectly caused: The use of deepfake technology violates the privacy of individuals by using their likenesses without consent.

Inferred additional harm: It is likely that the likenesses of other children were scraped and used without consent to generate synthetic pornography, violating their privacy on a larger scale.

Psychological

Reported: The report explicitly describes psychological harm, noting that the victims' dignity and sexual integrity were violated, causing them to feel helpless and powerless.

Directly caused: The children whose likenesses and bodies were used in the deepfake videos had their sexual integrity and dignity violated, causing severe psychological distress.

Indirectly caused: The families of the victims and the broader community experienced distress and anxiety due to the chilling nature of the technology's potential.

Inferred additional harm: It is highly likely that the targeted girl and other unidentified children depicted in the videos suffered long-term trauma, anxiety, and depression similar to victims of in-person sexual assault.

Child sexual exploitation and abuse

Reported: The report explicitly describes a CSEA incident involving the creation of AI-generated child sexual abuse material.

Directly caused: The perpetrator created at least seven synthetic deepfake videos of child pornography and possessed over 545,000 files of child sexual abuse material.

Indirectly caused: The creation of synthetic CSAM fuels the market for child pornography and complicates law enforcement efforts to identify and protect victims due to the lack of digital fingerprints.

Inferred additional harm: The ease of generating synthetic CSAM using deepfake technology likely leads to an increase in the volume of untraceable abuse material circulating globally, exacerbating the exploitation of children.

People affected

  • Occurrences reported: 1
  • People reportedly harmed: 8
  • People reportedly exposed: 8

Potential causes

Management

  • Poor Platform Data Management: Social platforms allowed easy harvesting of children's photos and info.

Technology

  • Accessible Deepfake Software: Algorithms allow easy face-swapping to create synthetic illicit media.
  • Lower Technological Bar: The tech is getting easier to use, requiring fewer source images.
  • Loss of Digital Fingerprints: Synthetic images lack digital fingerprints, hindering law enforcement tracking.

Data Inputs

  • Social Media Image Scraping: Publicly available photos of children were scraped from social media.
  • Fewer Images Required: Deepfake models now require very few input images to perform face swaps.
  • Personal Data Exposure: Personal info like real names and schools was linked to the source images.

Human Factors

  • Malicious Criminal Intent: Larouche intentionally created synthetic child sexual abuse material.
  • Fantasies Inciting Offences: Novel synthetic media fuels fantasies that incite sexual crimes.
  • Disregard for Consent: Using children's likenesses without consent, violating their dignity.

Process and Methods

  • Inadequate Image Protections: Social media platforms lack methods to prevent scraping of children's photos.
  • Photoshop and Manual Editing: Rudimentary manual methods paved the way for automated deepfake creation.

Regulatory Environment

  • Lack of Federal Deepfake Laws: Gaps in federal legislation fail to protect against non-consensual deepfakes.
  • Evolving Legal Definitions: Courts are only now establishing precedents for AI-generated child abuse media.

Information quality

  • Classification confidence: High
  • Reason for confidence: The reports provide consistent, detailed coverage of the court ruling, the perpetrator's actions, the specific charges, the sentence, and the societal implications of the technology. There are no conflicting accounts of the primary events.
  • Ambiguities identified: The specific AI software or platform used by the perpetrator is not named in the reports.
  • Alternative interpretations: None. The legal and factual nature of the crimes is clear and uncontested.

This incident involves the first Canadian prosecution for creating AI-generated child sexual abuse material. While representing a severe violation of human rights and privacy, its national security impact is minor, primarily posing a long-term challenge to law enforcement tracking systems due to the bypassing of standard digital fingerprints.

  • Overall national security impact: Minor
  • Scope: Single nation
  • Primary target: Canada
  • Alleged perpetrator: Steven Larouche

Threat characteristics

  • Imminence: Long-term. The threat represents an ongoing, strategic capability concern for law enforcement rather than an active, immediate national security crisis.
  • Autonomy: Human-controlled. The AI system was used strictly as a tool, with the human perpetrator making all decisions regarding target selection and content generation.
  • Novelty: First-of-its-kind. The court noted this as the first case of its kind in Canada involving AI-generated deepfakes of child sexual exploitation, establishing a new legal and technological precedent.

Impact by dimension

  • Physical security: Negligible. No physical threat to critical infrastructure or kinetic systems was identified in the incident.
  • Information security: Minor. The use of synthetic media bypassed standard digital fingerprints, posing a minor challenge to law enforcement and intelligence tracking capabilities.
  • Sovereignty: Negligible. No disruption to core government operations, sovereignty, or constitutional processes was reported.
  • Economic security: Negligible. No direct threats to financial systems, critical supply chains, or strategic technological advantages were indicated.
  • Societal stability: Minor. The incident represents a severe violation of individual human rights and privacy, though it remains a localized criminal matter rather than a population-scale threat.
Explore in the interactive Incident Tracker