FBI and French Authorities Dismantle Deepfake CSAM Websites
Law enforcement agencies in the US and France have seized two websites used to distribute child sexual exploitation material, including AI-generated deepfakes, leading to an arrest.
The FBI, in coordination with French authorities, has successfully dismantled two websites, NudeLeaksTeens and NLTVIDS, which were instrumental in the dissemination of child sexual exploitation material (CSAM). The operation resulted in the arrest of a 25-year-old French resident, believed to be the primary administrator of the sites, and the seizure of critical server and domain information.
According to court documents filed in the Eastern District of Virginia, law enforcement first became aware of the illicit websites in 2024. These sites were found to be advertising and selling hacked, leaked, and stolen CSAM, primarily targeting young girls. The FBI executed a search warrant on VeriSign, the domain registry responsible for the seized websites, to obtain servers, computers, and other pertinent data.
Both NudeLeaksTeens and NLTVIDS advertised a broad spectrum of explicit content, including CSAM, and also violated the TAKE IT DOWN Act. This recent legislation prohibits the non-consensual sharing of intimate images and makes the creation or distribution of non-consensual deepfake media of real individuals a criminal offense. The law empowers the Federal Trade Commission and allows courts to mandate the removal of such content.
Despite posting explicit disclaimers that disavowed child pornography, the websites actively promoted and sold CSAM. One site even implemented its own internal currency system, allowing users to purchase individual images or bundles of content organized by victim. A significant collection, comprising 189GB of material featuring 315 different girls, was reportedly sold for $64.90.
Investigations revealed that a portion of the illicit material originated from victims' social media accounts on platforms like Snapchat, TikTok, Instagram, and Facebook. This content was either directly recorded or stolen through account hacks. Several victims who were identified on the sites reported to law enforcement that their social media accounts had been compromised.
Compounding the severity of the operation, some of the advertised collections were compiled by individuals who are already serving prison sentences for similar crimes. The DOJ highlighted the case of Andrew Venegas, who pleaded guilty to sexual exploitation of children and receipt of CSAM, receiving a 30-year sentence in April 2026. During Venegas's investigation, law enforcement learned he obtained explicit content through extortion and unauthorized access to victim social media accounts.
Further underscoring the deep-rooted nature of these operations, another collection available for sale was named after Reuben Oswaldo Yeverino Rosales, who was convicted and sentenced to over 34 years in prison in 2022 for sexual exploitation of children and cyber stalking. These cases demonstrate a pattern of individuals involved in CSAM distribution facing severe legal consequences.
The websites attempted to obscure their direct involvement by claiming they did not host files themselves but rather linked to "other non-affiliated sites." Administrators often encouraged payments in cryptocurrency and direct personal contact for certain materials, further complicating investigative efforts. This coordinated international effort marks a significant step in combating the online distribution of child sexual exploitation material, particularly its AI-enhanced forms.