Safety, ethics and risk

Deepfake

In short

A deepfake is a learned imitation that makes a real person appear to say or do something they did not. Narrowly it is a face swapped into a video. More broadly it includes realistic fake images, video and audio.

Also called
Deep fake
Topic
Safety, ethics and risk
Level
Beginner
First described
Nguyen and colleagues write that the first deepfake video emerged in 2017, when a celebrity's face was swapped onto a porn actor, and that the first tool of this kind was FakeApp, released by an online user.2 Chesney and Citron say that celebrity face-swaps in sex videos gave rise to the label, which they then use more broadly for hyper-realistic digital falsification of images, video and audio.1

In a narrow definition, a deepfake superimposes a target person's face on a source video so the target appears to do or say what the source person does.2 A broader definition in the same survey adds lip-sync, where the mouth is changed to match a recording, and puppet-master video, where one face follows another person's expressions.2 Chesney and Citron use the label more broadly still, as shorthand for hyper-realistic digital falsification of images, video and audio.1

Some deepfakes use older visual effects, but the recent common method uses autoencoders and generative adversarial networks.2 The first deepfake video emerged in 2017, with a celebrity's face swapped onto a porn actor, and an online user released a face-swapping tool called FakeApp.2 Making one can take as little as an identity photo or a short video, and some methods need only a single still image.2

The same survey reports that a voice deepfake was used to scam a chief executive out of $243,000.2 Chesney and Citron say machine learning is making these impersonations more realistic and increasingly resistant to detection, and that they find no single remedy.1 Nguyen and colleagues add that a detector trained on one forgery needs to work against an unknown type, because the type is not normally known in real cases, and that a viewer should judge who distributed a clip and what they said about it.2

NIST says multimodal models can generate highly realistic deepfakes, meaning synthetic audiovisual content and photorealistic images.3 It also says generated imagery used as propaganda may not be photorealistic and can still help a campaign gain reach on social media.3

Example

A survey of deepfake methods reports that a voice deepfake was used to scam a chief executive out of $243,000. The report does not say the voice came from a family member.2

Why it matters

Chesney and Citron say these impersonations are increasingly resistant to detection, and that there is no single remedy. A viewer still has to judge who distributed a clip.12

Questions people ask

Are deepfakes only videos of swapped faces?

The narrow definition is a face swapped into a video.2 Nguyen and colleagues also include lip-sync and puppet-master video.2 Chesney and Citron include hyper-realistic falsification of images and audio as well as video.1

Can a detector prove a clip is genuine?

Nguyen and colleagues say a model trained on one forgery needs to handle an unknown type, because real cases do not announce the method.2 They expect detection software to lag creation, and they say the viewer should judge who distributed the clip and what that person said about it.2

Are deepfakes illegal in the United States?

Chesney and Citron read United States v. Alvarez as seeming to preclude a sweeping ban, while leaving room for tailored prohibitions.1 They include defamation of private persons, fraud, true threats, and imminent likely incitement.1 Targeting someone with a deepfake may also fall under the federal cyberstalking statute, 18 U.S.C. section 2261A, and some states criminalise knowing online impersonation intended to harm, intimidate, threaten or defraud.1

Related terms

Sources

  1. Chesney and Citron (2019), Deep Fakes: A Looming Challenge for Privacy, Democracy, and National Security, 107 California Law Review 1753
  2. Nguyen, Nguyen, Nguyen, Nguyen et al., Deep Learning for Deepfakes Creation and Detection: A Survey, arXiv:1909.11573v5
  3. NIST AI 600-1 (26 July 2024), Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile, section 2.8

Back to the glossary