Deepfakes created from Facebook tagged photographs on Mastodon

The combined situation

Photographs of you from Facebook, including tagged photos posted by other users, have been used as input to AI deepfake tools. The Facebook tagging system creates a wide attack surface that no individual user can fully restrict. When this scenario plays out on Mastodon specifically, removal proceeds through the statutory takedown process under 47 USC 223a combined with the scenario specific response that source cases require.

Why this combination is high risk

Federated content spreads across multiple instances through reposts and replies. Removing from the originating instance does not remove from the cached copies on every instance that federated the post. For facebook source deepfake cases, facebook tagged photographs are accessible to a much wider audience than individual privacy settings suggest because the tagging system is governed by the original poster's settings.

How removal proceeds

Mastodon is federated across thousands of independent instances. Removal requires identifying the specific instance hosting the content and contacting that instance's admin directly. Facebook tag history is preserved in Meta records and is recoverable through subpoena even after untagging, which preserves the source connection evidence.