The Setup
Chloe was shown a nude photo of herself that never existed. The face was real, hers. Everything else was painted in by a neural net in five minutes. Twenty years on the job, and I still thought I was hard to surprise. I wasn’t. How are you even supposed to live with that?
The Case
Chloe, a college student. Name changed, story real.
She came in pale, holding her phone like it was burning her hand. Someone took her ordinary social media photos, the most harmless ones, and molded them into explicit fakes. I poured her some water, opened a clean file, and listened.
And it was hard to listen to. The fakes were already spreading through group chats. They’d been sent to her friends, her classmates, some of her relatives, and her phone wouldn’t stop: some wrote “is that really you?”, others just stared, and someone was already forwarding them on. The worst part, she kept saying, was that the fake looked real. Not a crude collage, but a convincing, living picture of a body no one had ever seen, because it never existed. How do you prove it isn’t you, when the thing on the screen looks like you? And you can’t wipe it with one button: you delete it in one place, it pops up in three others. Chloe stopped going to class. Couldn’t sleep. Afraid to open her phone and afraid not to. She thought about dropping out and leaving town. She said they hadn’t stolen her photos, they’d stolen her, and that it would be like this forever now.
That right there is the real problem. Not pixels on a screen, but a person losing their sense of safety in their own life overnight. I knew the reaction before she said a word, I’d seen it a hundred times: shame, panic, a feeling of total helplessness. And here I always say the same thing. This isn’t your fault. And you’re not powerless.
And what was done to her now has a name, not just in plain words but in the law. In May 2025, the federal TAKE IT DOWN Act took effect in the US against posting intimate images without consent, deepfakes included. Platforms have to remove that content within 48 hours of a victim’s request, and the FTC enforces it (Wikipedia, TAKE IT DOWN Act). The push came from a real case involving schoolkids in Aledo, Texas. So this stopped being “her private trouble” a long time ago. It’s a mass problem the government finally admitted to.
Then we went step by step, no rushing. First Chloe saved everything: screenshots, links, the name of the account the fakes crawled out of, dates. Then she filed removal requests. And in parallel we went after the “anonymous” one himself. That’s where it got interesting.
The account was new, no photo, no history, looked like a dead end. But it had a handle. I ran that handle across other sites, and it turned up in a couple more places: an old forum, an abandoned gaming profile. There the guy had been less careful. The handle was tied to an email. The email, in turn, showed up in a couple of old sign-ups where a real name and city were already sitting right next to it. After that it was mechanical: same handle, same habits, same interests, only now with a face and a last name. The circle closed.
The “anonymous” guy turned out not to be so anonymous. Her ex-classmate. He’d taken offense, decided to get even, and was sure no one could reach him behind an empty profile. Classic. With that dossier, where you can trace who and from where step by step, Chloe went to the police. The conversation is a whole different thing when you walk in with the material in hand.
The Takeaway
Remember one thing. You have the right to demand removal, and you have something to back that right up. Shame has nothing to do with it. The blame lies with the one who hit the button, not the one whose face got stolen.
How OSINT Keeps You Safe
Order beats emotion. Here it is, point by point.
- Don’t delete anything in a panic. Evidence first: screenshots, links, account names, dates. Wipe it in a panic and there’s nothing left to report.
- File a removal request. Cite the platform’s own rules and the law (that same TAKE IT DOWN Act, 48 hours).
- Figure out the source. The distributor’s handle, the linked email, repeating traces. People drag the same handle around for years and slip up on the little things.
- Go to the police and to dedicated support organizations. With the material collected, the conversation is a whole different thing.
You have to do all of this in your most vulnerable state, and the anonymous one’s traces are scattered across a dozen places. Truth AI helps where you need to pull the trail together: you enter a handle, email, or number, and the app searches for connected profiles and mentions. Sometimes the “anonymous” one stops being anonymous on the very first step. And the AI chat helps you fold the findings into clear material for a complaint and a police report.
And one last thing, now on a first-name basis. This is a hard story, but you’re not alone in it. Don’t go through it by yourself. You have the right to support and protection, and you have something to answer back with to the one who thought he’d stay in the shadows.
