Deepfake nude sites exploited Sign in with Apple
Deepfake websites designed to generate non-consensual nude images were discovered using sign-in systems from Apple, Google, Discord, and other major tech platforms to gain credibility. After investigation revealed the abuse, Apple and other companies blocked access to their sign-in infrastructure.
What happened
A Wired investigation revealed that 16 major deepfake websites designed to generate non-consensual nude images were using sign-in infrastructure from major tech companies, including Google, Apple, Discord, Twitter, Patreon, and Line. Six of these sites specifically offered Sign in with Apple, giving the unethical sites an appearance of legitimacy.
After learning about the abuse, Apple quickly blocked API access for deepfake website developers, removing their access to the Sign in with Apple feature. Discord, Google, and Patreon also took steps to address the issue by blocking or restricting accounts that violated their terms.
Reported impact
The deepfake sites enable users to upload photos and digitally alter them to remove clothing without consent. Cases have been documented where such technology was used to create explicit content involving high school students.
Index analysis
The abuse demonstrates how authentication services designed for user convenience and privacy can be misused by bad actors to lend credibility to harmful services. The availability of trusted sign-in options made it easier for users to create accounts on these deepfake sites without recognizing their dubious nature.
Governance controls
Apple's swift action to block API access reduced the sites' legitimacy and operational ease. Mastercard stated that its network does not allow purchases of non-consensual deepfake content and indicated readiness for further action.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.