In August 2024, South Korea experienced a massive surge in non-consensual sexually explicit deepfake imagery targeting women and minors. Perpetrators, often teenagers, used AI tools to manipulate social media photos of classmates, teachers, and neighbors into pornographic content, distributing them through Telegram chat groups. The incident has caused widespread panic, leading many women to delete their social media presence, and has prompted government investigations and calls for stricter regulation of both AI tools and messaging platforms.
At the end of August 2024, South Korean authorities began investigating a significant surge in the creation and dissemination, often via Telegram, of explicit deepfake pornography created without consent from the stolen social media content of female classmates, teachers, and neighbors.
Risk classification
- Primary risk domain: 4 Malicious actors
- Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation
The incident involves the targeted creation of humiliating and sexually explicit synthetic imagery of specific victims (classmates, teachers, and acquaintances) for harassment and exploitation.
Additional risk subdomains
- 1.2 Exposure to toxic content: The AI tools were used to generate highly toxic, non-consensual sexually explicit content, including synthetic pornographic images of minors.
Causal factors
- Entity: Human
- Intent: Intentional
- Timing: Post-deployment
The incident was caused by human perpetrators who intentionally used deployed AI deepfake tools to generate non-consensual sexually explicit images of women and minors.
EU AI Act risk tier
- Risk tier: 3 Limited Risk
Limited Risk: The report describes AI-generated content such as deepfakes, which under the EU AI Act are classified as limited risk, requiring specific transparency obligations to ensure users are aware the content is AI-generated.
AI system and alleged parties
- AI system: Deepfake apps
- AI purpose: Deepfake Image Generation; Deepfake Video Generation
- Behaviour type: Tool
- Alleged developer: Unnamed deepfake technology developers
- Alleged deployer: Unnamed deepfake creators
- Alleged harmed parties: South Korean women
Harm severity
Severity ratings are based on this scale.
Highest direct severity in any category: Substantial. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.
- Physical: direct Negligible, indirect Negligible
- Infrastructure: direct Negligible, indirect Negligible
- Property: direct Negligible, indirect Negligible
- Financial: direct Negligible, indirect Negligible
- Environmental: direct Negligible, indirect Negligible
- Malicious content: direct Substantial, indirect Substantial
- Differential treatment: direct Minor, indirect Minor
- Civil rights: direct Substantial, indirect Substantial
- Democracy: direct Negligible, indirect Negligible
- Privacy: direct Substantial, indirect Substantial
- Psychological: direct Minor, indirect Substantial
- Epistemic: direct Minor, indirect Minor
- Child sexual exploitation and abuse: direct Substantial, indirect Severe
Malicious content
Reported: The report explicitly describes the generation and distribution of highly toxic and sexually explicit deepfake images and videos.
Directly caused: AI tools were used to generate thousands of non-consensual pornographic deepfake images and videos of women and minors.
Indirectly caused: These explicit images were shared and discussed in Telegram 'humiliation rooms' to facilitate verbal abuse and harassment.
Inferred additional harm: A massive volume of synthetic pornographic content continues to circulate in private, encrypted digital spaces beyond the reach of law enforcement.
Differential treatment
Reported: The report explicitly describes systematic differential treatment and targeting of women and girls.
Directly caused: AI deepfake tools were used to systematically target, sexualize, and humiliate female students, teachers, and military personnel.
Indirectly caused: The crisis forced women and girls to self-censor, delete their social media photos, and restrict their online behavior, a burden not shared by their male peers.
Inferred additional harm: The incident reinforces systemic gender-based discrimination and unequal safety expectations for women in digital environments.
Civil rights
Reported: The report explicitly describes violations of victims' rights to dignity, privacy, and freedom from sexual exploitation.
Directly caused: The non-consensual sexualization of women and minors violated their fundamental rights to personal dignity and bodily autonomy.
Indirectly caused: The pervasive threat of deepfakes restricted women's freedom of expression and digital participation on social media platforms.
Inferred additional harm: Widespread, ongoing violations of civil rights and digital safety for female citizens due to inadequate legal protections.
Privacy
Reported: The report explicitly describes privacy violations through the unauthorized use of personal photos and information.
Directly caused: Personal photos (selfies, school photos) and personal details (names, ages, school locations) were harvested from social media without consent to generate deepfakes.
Indirectly caused: Victims' personal contact details and locations were leaked alongside the explicit images in Telegram chatrooms.
Inferred additional harm: Systematic harvesting of public and semi-private personal data of thousands of women and minors for malicious exploitation.
Psychological
Reported: The report explicitly describes severe psychological distress, anxiety, panic, and trauma among the victims.
Directly caused: Victims reported feeling 'petrified', 'so alone', and experiencing severe anxiety and trauma, with one victim describing racing heartbeats upon receiving phone notifications.
Indirectly caused: Widespread panic and anxiety spread among young women and schoolgirls across South Korea, leading to hyper-vigilance and fear of male acquaintances.
Inferred additional harm: Thousands of undetected victims likely suffer from unaddressed psychological trauma, anxiety, and depression due to the non-consensual sexualization of their likenesses.
Epistemic
Reported: The report explicitly describes epistemic harm caused by the highly realistic nature of the deepfakes.
Directly caused: AI tools generated highly realistic synthetic images that combined real faces with fake bodies, fabricating false visual evidence of sexual acts.
Indirectly caused: The realism of the deepfakes caused confusion, making it difficult for victims to prove the images were fabricated, with some police initially dismissing cases because 'the photos were fake'.
Inferred additional harm: A broader erosion of trust in digital media and personal photography, as any image can be convincingly manipulated to create false narratives.
Child sexual exploitation and abuse
Reported: The report explicitly describes the generation and distribution of sexually explicit deepfake images targeting underage schoolgirls.
Directly caused: AI tools were used to generate sexually explicit deepfake images of minors, some of whom were under the age of 16.
Indirectly caused: These explicit images of minors were shared and distributed in Telegram groups, some of which had thousands of members.
Inferred additional harm: Widespread, undetected creation and distribution of synthetic child sexual abuse material (CSAM) targeting school-aged girls.
People affected
- Occurrences reported: 1
- People reportedly harmed: 781
- People reportedly exposed: 220000
Potential causes
Management
- Prioritizing Profit Over Safety: Tech companies cut ethical AI teams to reduce operational costs.
- Neglecting Responsible AI Rollout: Industry failed to deploy proactive safety solutions during AI rollouts.
- Platform Accountability Failure: Management failed to police illegal activities occurring on their app.
Technology
- Sophisticated AI Deepfake Tools: GAN-based apps generate highly realistic explicit images in seconds.
- Lack of AI Manipulation Safeguards: Insufficient technical barriers to prevent misuse of image generation tools.
- Anonymity of AI Distribution Platforms: Encrypted messaging platforms allow anonymous sharing of harmful media.
Data Inputs
- Unprotected Social Media Photos: Public selfies and school photos were easily harvested for deepfake models.
- Lack of Image Protection Tools: Absence of active tools to prevent AI manipulation of uploaded photos.
- Use of Real Faces with Fake Bodies: Combining real faces with explicit pornographic bodies to create fakes.
Human Factors
- Perception of Deepfakes as a Prank: Teenagers viewed the creation of harmful deepfakes as a game or joke.
- Deep-Rooted Online Misogyny: A digital culture that normalizes the sexual humiliation of women.
- Lack of Digital Ethics Education: School systems focused on exams rather than teaching ethical tech use.
Process and Methods
- Light-Touch Moderation Policies: Messaging apps failed to proactively moderate harmful public chatrooms.
- Slow Investigative Approval Processes: Police required slow court approvals to access and shut chatrooms.
- Inadequate Platform Cooperation: Platforms historically ignored police requests for investigative help.
Regulatory Environment
- Gaps in Deepfake Legislation: No laws existed to punish buying, storing, or watching deepfake porn.
- Lax Punishment for Teen Offenders: Most teen perpetrators received lenient sentences in youth courts.
- Denial of Structural Sexism: Government leadership downplayed systemic gender-based discrimination.
Information quality
- Classification confidence: High
- Reason for confidence: The reports from multiple reputable sources (Bloomberg, BBC, NYT) provide consistent, detailed accounts of the deepfake wave in South Korea, including statistics from the National Police Agency and the Ministry of Education, as well as direct testimonies from victims and activists.
- Ambiguities identified: The exact AI models or software programs used are not named individually, referred to generally as 'deepfake apps' or 'AI software'.
A massive wave of AI-generated non-consensual sexually explicit deepfakes in South Korea targeted women and minors, distributed via Telegram. The incident caused widespread societal panic, prompt government and police intervention, and highlighted significant human rights, privacy, and digital safety challenges, representing a substantial impact on societal stability.
- Overall national security impact: Substantial
- Scope: Single nation
- Primary target: South Korea
- Alleged perpetrator: Individual
Threat characteristics
- Imminence: Near-term. The situation represents an active, developing societal crisis requiring ongoing policy, law enforcement, and regulatory responses within a 30-day window.
- Autonomy: Human-controlled. The AI deepfake generation tools were directly operated by human users who uploaded specific target images to generate explicit content.
- Novelty: Evolved capability. Deepfake technology is established, but the integration of automated Telegram bots and easy-to-use consumer apps dramatically lowered technical barriers, scaling the threat.
Impact by dimension
- Physical security: Negligible. The incident involved digital generation of synthetic media and did not target physical systems, critical infrastructure, or cause kinetic harm.
- Information security: Minor. While involving massive digital manipulation and deepfakes, the activity was peer-to-peer harassment rather than state-sponsored information warfare or compromise of intelligence assets.
- Sovereignty: Minor. The crisis prompted high-level government intervention, including statements from President Yoon Suk Yeol and a National Police Agency crackdown, but did not disrupt core constitutional processes.
- Economic security: Negligible. There was no reported impact on strategic industries, financial systems, or national technological competitiveness.
- Societal stability: Substantial. The widespread generation of non-consensual explicit deepfakes of women and minors caused national panic, systemic gender-based harassment, and significant violations of privacy and human rights.