Forensically preserve the deepfake evidence for friends shared deepfake on Mastodon
People in your social network have shared AI deepfake intimate imagery believing it to be authentic. Mastodon typically responds to NCII notices within the statutory 48 hour window.
Tldr
People in your social network have shared AI deepfake intimate imagery believing it to be authentic. Their good faith belief does not change the underlying illegality of the content but may inform the response to the individual sharers. Mastodon is a social platform with approximately 9 million monthly users. Mastodon typically responds to NCII notices within the statutory 48 hour window. Captures and preserves all deepfake content in a forensically sound manner that supports both criminal prosecution and civil litigation. Evidence preservation must occur before any takedown action because removed content cannot always be recovered.
Why this matters for friends shared deepfake on Mastodon
- AI deepfake quality has reached a level where even close friends and family members cannot reliably distinguish synthetic from authentic imagery without specialized analysis.
- Federated content spreads across multiple instances through reposts and replies. Removing from the originating instance does not remove from the cached copies on every instance that federated the post.
- Discovery scenarios produce a documented secondary harm beyond the original distribution. The relationship strain, professional disruption, and family impact are foreseeable consequences that strengthen the civil claim against any identifiable perpetrator.
- Social platform distribution drives the majority of secondary discovery because account based interactions surface content to the victim's existing network within hours.
- Inadvertent sharer scenarios benefit from a written statement that confirms the deepfake nature and asks for cooperation with the legal removal effort. Most good faith sharers comply immediately. This is particularly relevant when the action you are pursuing is preserve the evidence, because first action in nearly every case. evidence preservation must precede platform notices, law enforcement reports, and any communication with the perpetrator.
How removal works
What to do, step by step
-
01
Forensically preserve every instance before any other action Capture full page screenshots with the URL bar visible, save the highest resolution copy of the inadvertently shared deepfakes available, and document any visible AI generator fingerprints including watermarks, edge blending artifacts, and skin texture inconsistencies. All deepfake content with URL preservation
-
02
Run a biometric scan to find every copy across platforms friends shared deepfake content distributed on Mastodon rarely stays there. ScanErase indexes 2.4 billion face embeddings across 200 plus platforms and identifies every current hosting location in a single scan, including mirror copies and AI generated variants.
-
03
Complete the forensic preservation record Captures and preserves all deepfake content in a forensically sound manner that supports both criminal prosecution and civil litigation. Evidence preservation must occur before any takedown action because removed content cannot always be recovered. For friends shared deepfake cases on Mastodon specifically, capture the platform unique identifiers including post id, account handle, and timestamp. Capture the full federated URL including the instance domain, the original post URL, and any reblogs from other instances. Each instance must be reported separately for full removal.
-
04
Preserve identification metadata for subpoena Even anonymous accounts produce identifiable metadata through Mastodon. Account creation IP, device fingerprint, and posting history support law enforcement subpoena to identify the perpetrator. Doe defendant filings preserve civil claims while identification proceeds.
-
05
Coordinate the Mastodon platform removal pipeline Mastodon is federated across thousands of independent instances. Removal requires identifying the specific instance hosting the content and contacting that instance's admin directly.
-
06
Escalate through hosting and CDN if required Each Mastodon instance has its own admin. Most instance admins are responsive to NCII reports. The fediverse operates a shared block list which can prevent the originating instance from federating with mainstream instances.
-
07
File the complete evidence record for the legal track Federal Rules of Evidence 902 for self authenticating digital evidence provides the foundational legal basis for this action. Document every notice sent, every platform response, and every confirmation in a single evidence file. ScanErase produces this Verified Removal Package automatically as your case progresses.
The 48 hour statutory deadline
Legal context
- Federal Rules of Evidence 902 for self authenticating digital evidence
- State evidence preservation requirements for NCII criminal prosecutions
- Most Mastodon instance admins comply quickly with NCII reports. The Mastodon Server Covenant explicitly prohibits NCII content, which gives leverage even with instances outside US jurisdiction.
- friends shared deepfake statutory basis: 47 USC 223a TAKE IT DOWN Act for the underlying deepfake content
- State NCII criminal statutes, with prosecutorial discretion typically applied to good faith sharers
Frequently asked questions
What should I tell people who have already seen the deepfake content?
A simple written statement confirming the content is AI generated and that legal action is underway addresses most questions while preserving your legal options. Detailed personal explanation can produce statements that complicate any subsequent civil or criminal proceeding.
How long will Mastodon actually take to remove the deepfake content?
Mastodon typically responds in approximately 48 hours when a properly formatted statutory notice is filed. ScanErase files the notice within 5 minutes of authorization and tracks compliance through your Verified Removal Package.
What if the deepfake content is removed before I can complete the evidence preservation?
Even removed content typically remains recoverable through Internet Archive captures, search engine cached copies, and witness reproduction. The platform itself retains records that are recoverable through subpoena. Document everything you can about the URL, posting account, and timing even if the content itself is no longer accessible.
What if the perpetrator re uploads the deepfake to Mastodon after removal?
Mastodon retains hash signatures of removed NCII content which prevents identical re uploads to the same platform. A follow-up ScanErase scan checks for re uploads across all 200 plus indexed platforms, including AI generated variant versions, so you can file a new notice as soon as matches reappear.
Will the preserve the evidence action reveal my identity to Mastodon or the perpetrator?
Complete forensic record of the deepfake content with chain of custody documentation that supports admissibility in both criminal and civil proceedings. The disclosure scope is limited to what the action requires. Your scan and removal process is not disclosed to employers, family, or any third parties beyond the recipients required by the specific legal procedure.
I searched my friends shared ai deepfakes of me thinking they were real and found this guide. What is the very first thing I should do right now?
Before any other action, forensically preserve the evidence with full page screenshots and the highest resolution file copies you can obtain. Do not engage social network members in extensive private discussion of the legal action. A simple written statement directing them to legal counsel preserves both your privacy and any legal options against the original source. Once evidence is preserved, the Mastodon takedown notice and the preserve the evidence action can proceed in parallel.
Scan for deepfakes of yourself across 200+ platforms
Free biometric scan in under 60 seconds. $15 to unlock your full report.
Start your free scan