Australian Schools Grappling with Significant Spread of Non-Consensual Spread of Deepfake Pornography of Students

Schools across Australia are experiencing a surge in the use of AI-powered 'nudify' apps to create and circulate non-consensual deepfake pornography of students and teachers. Perpetrators, often students themselves, use these tools to generate graphic images from social media photos, leading to severe psychological trauma for victims. The incident at Bacchus Marsh Grammar, where a student was arrested for creating images of 50 classmates, highlights the widespread nature of this abuse. Regulators and the government are now working to implement stricter laws and standards to hold platforms and users accountable for this form of image-based abuse.

Throughout 2024, schools in Australia dealt with a significant rise and proliferation of non-consensual deepfake pornography of students. Often, male students are reported to use "nudify" apps such as Undress AI with images of their classmates and teachers. Many of the sites have remained legal and accessible to minors, who in turn are using the sites to generate pornography of their peers.

Source: AI Incident Database

Risk classification

  • Primary risk domain: 4 Malicious actors
  • Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The incident involves the targeted creation of humiliating and sexual deepfake imagery of specific victims for personal harassment and abuse.

Additional risk subdomains

  • 1.2 Exposure to toxic content: The incident involved the generation and circulation of highly graphic, non-consensual sexual imagery depicting minors (CSAM).
  • 2.1 Compromise of privacy by obtaining, leaking or correctly inferring sensitive information: The perpetrator bypassed private social media settings to harvest photos and generate intimate, non-consensual depictions of the victims.

Causal factors

  • Entity: Human
  • Intent: Intentional
  • Timing: Post-deployment

The harm was driven by the intentional actions of human users utilizing a deployed AI tool to target and humiliate specific individuals.

EU AI Act risk tier

  • Risk tier: 3 Limited Risk

Limited Risk: The system is used to generate AI-generated content such as deepfakes, which falls under Limited Risk and carries specific transparency obligations under the EU AI Act.

AI system and alleged parties

  • AI system: Undress AI
  • AI purpose: Deepfake Image Generation; Image Generation
  • Behaviour type: Tool
  • Alleged developer: Unknown deepfake technology developers, Undress AI
  • Alleged deployer: Unknown deepfake creators, Australian students
  • Alleged harmed parties: Australian students, Australian children

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Substantial. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

  • Physical: direct Negligible, indirect Negligible
  • Infrastructure: direct Negligible, indirect Negligible
  • Property: direct Negligible, indirect Negligible
  • Financial: direct Negligible, indirect Negligible
  • Environmental: direct Negligible, indirect Negligible
  • Malicious content: direct Substantial, indirect Substantial
  • Differential treatment: direct Minor, indirect Negligible
  • Civil rights: direct Minor, indirect Negligible
  • Democracy: direct Negligible, indirect Negligible
  • Privacy: direct Minor, indirect Negligible
  • Psychological: direct Minor, indirect Minor
  • Epistemic: direct Minor, indirect Negligible
  • Child sexual exploitation and abuse: direct Substantial, indirect Severe

Malicious content

Reported: The report explicitly describes toxic and malicious content created and spread directly and indirectly by the incident.

Directly caused: The AI system was used to generate highly graphic, realistic fake pornographic images ('deepnudes') of around 50 female students and a teacher.

Indirectly caused: The generated explicit images were circulated to others via social media platforms like Instagram and Snapchat.

Inferred additional harm: Thousands of other deepnude images of children and adults are likely generated daily by the app's 100,000+ daily users.

Differential treatment

Reported: The report explicitly describes differential treatment of individuals or groups caused directly by the incident.

Directly caused: The abuse overwhelmingly targeted female students and a female teacher, subjecting them to gender-based harassment and degradation.

Inferred additional harm: Widespread gender-based targeting in schools creates an unequal and hostile educational environment for female students.

Civil rights

Reported: The report explicitly describes violations of human and civil rights caused directly by the incident.

Directly caused: The incident violated the victims' fundamental rights to safety, personal dignity, and freedom from non-consensual sexual exploitation.

Inferred additional harm: The easy availability of these tools leads to systemic violations of children's rights to protection from sexual abuse and exploitation.

Privacy

Reported: The report explicitly describes privacy violations caused directly by the incident.

Directly caused: The perpetrator harvested photos from the victims' social media accounts (some of which were private) to generate intimate, non-consensual deepfakes.

Inferred additional harm: The training of Undress AI relied on scraping millions of real images and data from across the internet without the subjects' consent.

Psychological

Reported: The report explicitly describes severe psychological and mental-health harm to people caused directly and indirectly by the incident.

Directly caused: The report describes severe psychological trauma and distress among the 50 female victims at Bacchus Marsh Grammar and a teacher at Salesian College.

Indirectly caused: Parents and families experienced significant distress, anxiety, and worry regarding the ongoing safety of their children.

Inferred additional harm: Many of the 51 victims likely suffered long-term anxiety, depression, and social difficulties that were not fully detailed in the report.

Epistemic

Reported: The report explicitly describes epistemic harm caused directly by the incident.

Directly caused: The AI system fabricated highly realistic but entirely false visual evidence depicting the victims in explicit sexual scenarios.

Inferred additional harm: The proliferation of realistic deepfakes erodes public trust in visual media and personal photos.

Child sexual exploitation and abuse

Reported: The report explicitly describes a CSEA incident caused directly and indirectly by the technology.

Directly caused: The incident involved the generation of child sexual abuse material (CSAM) depicting around 50 schoolgirls who are minors.

Indirectly caused: The report notes that paedophiles are using such apps to create and share child sexual abuse material.

Inferred additional harm: Widespread, unquantified generation of CSAM by users exploiting the lack of age-verification or content controls on deepnude platforms.

People affected

  • Occurrences reported: 2
  • People reportedly harmed: 51
  • People reportedly exposed: 51

Potential causes

Management

  • Negligent App Operators: Parent companies fail to implement age or consent verification.
  • Pipeline Accountability Failure: Search engines and payment processors facilitate deepnude distribution.
  • Lack of Risk Assessment: AI developers fail to assess risks of child exploitation before launch.

Technology

  • Rapid Generation Speed: AI generates realistic deepnudes in less than 30 seconds.
  • Low Technical Barrier: No advanced skills or computing power needed compared to Photoshop.
  • Lack of Safeguards: Undress AI apps lack controls to block generating child images.

Data Inputs

  • Social Media Harvesting: Photos are easily harvested from public or private social media accounts.
  • Scraped Training Data: AI models are trained on real images scraped from across the internet.

Human Factors

  • Malicious User Intent: Students and predators intentionally creating non-consensual deepnudes.
  • Lack of Ethical Awareness: Schoolboys generating explicit images of classmates without understanding harm.

Process and Methods

  • Easy Online Accessibility: Deepnude apps are readily available via simple Google searches.
  • Social Media Distribution: Generated images are easily shared via Instagram and Snapchat.
  • Ineffective Removal Processes: Difficulties in quickly removing distributed explicit content online.

Regulatory Environment

  • Gaps in Existing Laws: Federal laws did not adequately cover adult deepfake sexual material.
  • Lagging Legal Frameworks: Legislation is catching up slowly to rapid AI technological advances.
  • Lack of Deplatforming Powers: Regulators lacked immediate standards to take offending apps offline.

Information quality

  • Classification confidence: High
  • Reason for confidence: The reports provide clear, detailed accounts of the specific incidents at Bacchus Marsh Grammar and Salesian College, including the number of victims, the specific AI tool used, and the psychological impacts. The role of the AI system is explicitly stated.
  • Ambiguities identified: The exact method the perpetrator used to access photos from private Instagram accounts is not fully detailed.

The incident involves the widespread use of AI-powered 'nudify' apps by students to generate non-consensual explicit imagery of classmates and teachers in Australia. While causing severe psychological trauma and prompting legislative reforms, it remains a domestic law enforcement and regulatory issue rather than a threat to national security.

  • Overall national security impact: Minor
  • Scope: Single nation
  • Primary target: Australia
  • Alleged perpetrator: Individual students

Threat characteristics

  • Imminence: Near-term. The surge in deepfake abuse in schools represents a rapidly developing situation requiring near-term legislative and regulatory action.
  • Autonomy: Human-controlled. The AI tool acts entirely on direct user inputs, with humans making all decisions regarding targeting and generation.
  • Novelty: Evolved capability. Represents an evolution of deepfake technology, making highly realistic image manipulation easily accessible to non-technical users.

Impact by dimension

  • Physical security: Negligible. No physical infrastructure, kinetic systems, or human safety in a physical sense were targeted or compromised.
  • Information security: Negligible. The incident does not involve state-sponsored disinformation campaigns, intelligence compromise, or national information warfare.
  • Sovereignty: Negligible. No core government operations, electoral systems, or sovereign decision-making processes were disrupted or compromised.
  • Economic security: Negligible. The activity does not threaten strategic industries, financial systems, or national technological advantages.
  • Societal stability: Minor. The incident caused severe psychological harm and violated the privacy rights of students and teachers, but remains a localized criminal and regulatory matter.
Explore in the interactive Incident Tracker