Filing a report with the FBI's Internet Crime Complaint Center (IC3) is a primary avenue for federal investigation of deepfake intimate image crimes. IC3 accepts reports online at ic3.gov and directs them to appropriate FBI field offices based on the content of the report. A filed report creates a federal record and provides victims with a report number for reference. The reporting process is separate from content discovery, find your face faster through ScanErase while the investigation proceeds in parallel.

What to include in your IC3 report

An effective IC3 report includes: a clear description of the deepfake content and where it appears; the date you discovered it and how; information about any known or suspected perpetrators; documentation of any communications with the perpetrator; and any supporting evidence attached from ScanErase's findings. The more specific and documented the report, the faster it can be routed and investigated.

What happens after you file

IC3 reviews reports and routes substantive ones to FBI field offices. Complex or time-sensitive cases may be routed to the FBI Cyber Division's national operations. You will receive a report number for reference. Field offices prioritize cases based on urgency, evidence quality, and jurisdictional factors. Follow-up on your report can be done through the IC3 portal using your report number.

State law enforcement parallel reporting

In addition to the FBI, state law enforcement can investigate under state NCII statutes. Filing with both federal and state authorities simultaneously increases the likelihood of investigation. Local police departments in major cities have cybercrime units experienced with deepfake cases. Use your findings for both filings.

Frequently asked questions

Is there a cost to file an FBI IC3 report?

No. Filing an IC3 report is completely free. IC3 is a federal government service operated by the FBI.

What if I do not know who created the deepfake?

File the report even without knowing the perpetrator's identity. Law enforcement has tools to subpoena platform data and identify perpetrators through IP addresses, account information, and coordination patterns. The unknown identity does not prevent filing or investigation.