Australian Federal Court orders man to pay A$343,500 for posting AI-generated deepfake intimate images of six women, in eSafety's first civil penalty case
On 26 September 2025 the Federal Court of Australia ordered a man to pay civil penalties of A$343,500 plus costs, in what the eSafety Commissioner said was the first proceeding to impose a civil penalty under the Online Safety Act 2021. On facts he admitted, he posted 12 non-consensual deepfake intimate images of six women ordinarily resident in Australia to a deepfake website between November 2022 and May 2023. He made each one by uploading a photo of the woman found online to a webpage that created semi-naked or naked images and saving the generated image. He refused eSafety's removal notice, so two images stayed online for almost a year, and he admitted posting some later images in retaliation against people involved in issuing the notice. Each woman complained to eSafety, and the court found the posts were likely to have caused them hurt and distress. The eSafety Commissioner called this kind of deepfake abuse a misuse of easily accessible AI tools.
- AI system
- Unidentified video tool
- Occurred
- 15 Nov 2022 to 27 May 2023
- Reported
- 26 September 2025
- Event location
- Unknown
- What the AI did
- Depicted or impersonated the person
- Reported harm
- Exploitation or AbusePsychological Distress
- Whose AI use
- Someone else’s AI use
- Setting
- Privacy · Justice
- Evidence
- AI involvement supported · Causal attribution established · 5 sources
- 8 claims: 5 documented, 3 reported. 4 open questions
- People reported harmed
- 6 people
AI system as recorded: Unidentified web tool to which the poster uploaded a photo of each woman and which generated semi-naked or naked images (agreed facts in the judgment); the eSafety Commissioner called this kind of deepfake abuse a misuse of easily accessible AI tools
What Happened
The images. According to the agreed facts and admissions that the Federal Court accepted as true, between 15 November 2022 and 27 May 2023 the respondent posted 12 deepfake intimate images, described as moving visual images, of six people ordinarily resident in Australia to a website that hosts deepfakes and is accessible worldwide. He made each by locating an image of the person online, uploading it to a webpage that allowed him to create semi-naked or naked images of the person, and saving the generated image. None of the six consented. (The judgment's introduction gives 19 May 2023 as the end of the posting period; its agreed facts and penalty orders include an image posted on 27 May 2023.) ABC, The Guardian and Information Age describe the six as prominent Australian women; their names are suppressed.
The removal notice. eSafety sent him a removal notice and a remedial direction on 5 May 2023 concerning the first two images. He replied that the notice meant nothing to him because he was not a resident of Australia, did not comply, and did not comply with two infringement notices that followed. He admitted that some images posted after the notice were retaliation against people involved in issuing it. He was arrested by Queensland police on 27 October 2023 on other matters, and from about 3 November 2023 he gave eSafety his log-in details so its investigators could remove the images. The first two had remained online for almost a year. ABC and Information Age report that he was fined A$25,000 for contempt in December 2023 after admitting that he breached three orders, including by forwarding the orders to eSafety staff and 49 other email addresses, including media outlets.
The harm. Each of the six complained to eSafety, on her own behalf or through an authorised person. The women gave no evidence about the extent of their loss. The court quoted one complaint: the woman said she was horrified and, although it was clearly a fake video, felt violated, vulnerable and without agency. The court found the posts were likely to have caused the women hurt and distress, likely made worse for the first two by the year the images stayed online. When arrested he acknowledged the images could cause upset and distress, but he called making deepfakes a hobby and fun.
The ruling. On 26 September 2025 Justice Longbottom found the contraventions serious, deliberate and sustained and ordered penalties totalling A$343,500 plus part of the Commissioner's costs. The Commissioner said it was the first proceeding to impose a civil penalty under the Act. The eSafety Commissioner, quoted by Information Age, called this kind of deepfake abuse a misuse of easily accessible AI tools.
A separate case. ABC reported on 2 September 2026 that a Brisbane jury had convicted the same man of 17 offences over photos of women and girls, including students and staff of a Brisbane private school, that he digitally altered to look nude and emailed to the school and others in 2023, and that he had been sentenced to two years in jail, which he had already served. That proceeding is a different case; whether any of its victims are among the six women here is not established.
Limits. The judgment was read through an Internet Archive capture because the court's site refused the fetch. Neither the judgment nor the news reports names the web tool or describes how it generated the images.
Reported harm
According to the Federal Court's findings on admitted facts, six women were depicted without consent in generated deepfake intimate images posted online, two for almost a year, and the posts were likely to have caused them hurt and distress; one complainant said she felt violated, vulnerable and without agency.
Outcome
ResolvedFederal Court of Australia, eSafety Commissioner proceeding [2025] FCA 1191, 26 September 2025 (Longbottom J): declarations of 12 contraventions of s 75 of the Online Safety Act 2021 and of non-compliance with a removal notice (s 80) and a remedial direction (s 83(3)); penalties totalling A$343,500 and an order to pay part of the Commissioner's costs. ABC and Information Age report that in December 2023 he had been fined A$25,000 for contempt after admitting breaches of three orders in the case. No appeal from the penalty judgment is reported in the sources inspected. In a separate criminal proceeding, ABC reported on 2 September 2026 that a Brisbane jury had convicted him of 17 offences over altered images of women and girls, and that he had been sentenced to two years in jail, already served; that case is outside this record.
What remains unknown
- Which web tool generated the images and how it worked.
- How many people viewed the images while they were online.
- Whether any of the six women are among the victims in the separate 2026 Brisbane criminal case.
- The extent of each woman's loss beyond the hurt and distress the court found likely; the women gave no evidence on it.
What the evidence supports
AI involvement: supported. The agreed facts accepted by the Federal Court state that the respondent uploaded each woman's photo to a webpage that allowed him to create semi-naked or naked images of her and saved the generated image, then posted those images; the court found the posts likely caused the women hurt and distress. The images depicted the women (depicted_or_impersonated). The eSafety Commissioner, whose office investigated the case, called this kind of deepfake abuse a misuse of easily accessible AI tools. The tool is not named and its technique is not described.
8 claims: 5 documented, 3 reported. What the statuses mean
Documented Between 15 November 2022 and 27 May 2023 the respondent posted 12 non-consensual deepfake intimate images, described as moving visual images, of six people ordinarily resident in Australia to a website accessible worldwide, without their consent.
Causal attribution. Agreed facts accepted by the court as true; ABC reports the same finding. The judgment introduction gives 19 May 2023 as the end date, while the agreed facts and penalty orders include 27 May 2023.
- judgments.fedcourt.gov.au(opens in new tab) supports · English
'the respondent posted 12 non-consensual deepfake intimate images of six persons ordinarily resident in Australia online'; 'On 15 November 2022, [the respondent] uploaded to [the named website] a moving visual image'; 'On 27 May 2023, [the respondent] uploaded to [the named website] a moving visual image'; 'did not receive (and was aware that he had not received) consent from any of Depicted Persons 1, 2, 3, 4, 5 or 6'
- abc.net.au(opens in new tab) supports · English
'he posted deepfake nude images of six different women to a website'
Documented He made each image by locating a photo of the person online, uploading it to a webpage that allowed him to create semi-naked or naked images of the person, and saving the generated image.
Causal attribution. Agreed facts in the judgment; the tool is not named and its technique is not described.
- judgments.fedcourt.gov.au(opens in new tab) supports · English
'created each of the deepfake images described below by following the same process: a. locating an image of the depicted person online; b. uploading the image to a webpage that allowed him to create semi-naked or naked images of the person; c. saving the generated image'
Reported The eSafety Commissioner called this kind of deepfake abuse a misuse of easily accessible AI tools, and Information Age reported the images as AI-generated deepfakes.
Causal attribution. The regulator that investigated the case, quoted by Information Age; the technical basis for the AI description is not stated beyond the agreed generation steps (c2).
- ia.acs.org.au(opens in new tab) supports · English
'this cruel, destructive and anti-social misuse of easily accessible AI tools'; 'for making a series of AI-generated deepfakes of prominent women'
Documented Each of the six complained to eSafety; one complainant said she was horrified and, although it was clearly a fake video, felt violated, vulnerable and without agency; the court found the posts were likely to have caused the women hurt and distress, exacerbated for two women whose images stayed online for almost a year.
Causal attribution. The court's finding, based on the complaints, the respondent's admission and expert evidence; the women gave no evidence of the extent of their loss.
- judgments.fedcourt.gov.au(opens in new tab) supports · English
'each of the Depicted Persons ordinarily resides in Australia and made a complaint about the images'; 'I am absolutely horrified about being caught up in this. Even though it is clearly a fake video, I feel violated, vulnerable and completely without agency'; 'the contraventions of s 75 are likely to have caused the Depicted Persons’ hurt and distress'; 'likely to have exacerbated that hurt and distress for Depicted Person 1 and Depicted Person 2'
- abc.net.au(opens in new tab) supports · English
'Even though it is clearly a fake video, I feel violated, vulnerable and completely without agency'
Documented He refused eSafety's May 2023 removal notice and remedial direction, saying the notice meant nothing to him as he was not a resident of Australia; he admitted that some later images were retaliation against people involved in issuing the notice; the images were removed only after he gave eSafety his log-in details from about 3 November 2023, following his arrest on other matters.
Causal attribution. Agreed facts in the judgment; AAP reports the same reply.
- judgments.fedcourt.gov.au(opens in new tab) supports · English
'I am not a resident of Australia. The removal notice means nothing to me. Get an arrest warrant if you think you are right.'; 'Some of the images [the respondent] posted online were retaliatory against individuals who were involved in the issuing of the Removal Notice.'; 'From around 3 November 2023, [the respondent] cooperated with eSafety in relation to removing the images'
- theguardian.com(opens in new tab) supports · English
'it meant nothing to him as he was not an Australian resident'
Documented On 26 September 2025 the court ordered penalties totalling A$343,500 and part of the Commissioner's costs, in what the Commissioner said was the first proceeding to impose a civil penalty under the Online Safety Act.
Causal attribution. Court orders in the judgment.
- judgments.fedcourt.gov.au(opens in new tab) supports · English
'This comes to a total of $343,500.'; 'The Commissioner says that this is the first proceeding involving the imposition of a civil penalty under the Act.'
- theguardian.com(opens in new tab) supports · English
'to pay a $343,500 penalty plus costs'
Reported In December 2023 he was fined A$25,000 for contempt after admitting he breached three orders in the case, including by forwarding the orders, which identified the women, to eSafety staff and 49 other email addresses, including media outlets.
Causal attribution. Reported by ABC and Information Age from the court record; the contempt judgment was not inspected.
- abc.net.au(opens in new tab) supports · English
'was fined $25,000 for contempt of court, after admitting he breached three court orders made as part of the case'; 'he forwarded the documents to eSafety Commission staff and 49 other email addresses, including media outlets'
- ia.acs.org.au(opens in new tab) supports · English
'to not publish the orders as they contained the names of the women targeted'
Reported In a separate criminal trial, a Brisbane jury convicted the same man in September 2026 of 17 offences over photos of women and girls, including students and staff of a Brisbane private school, that he digitally altered to depict them nude and emailed to the school and others, and that he was sentenced to two years in jail, which he had already served.
Causal attribution. ABC report of a different proceeding, given as context only; whether its victims overlap with the six women is not established.
- abc.net.au(opens in new tab) supports · English
'was found guilty of 17 offences by a jury on Tuesday'; 'digitally altered photographs of several women and girls he found on public websites in a way that depicted them either entirely or partially nude'; 'has been sentenced to two years in jail, which he has already served'
Sources
5 sources inspected. Sources that repeat one account do not corroborate each other.
- Federal Court of Australia, [2025] FCA 1191 (eSafety Commissioner civil penalty case), judgment of 26 September 2025(opens in new tab)
s1 · judgments.fedcourt.gov.au · Court record · English · Inspected · 26 September 2025 · Primary
- ABC News, 26 September 2025: man fined over deepfake porn in Australian first(opens in new tab)
s2 · abc.net.au · News report · English · Inspected · 26 September 2025
- The Guardian (AAP), 26 September 2025: man fined for deepfake pornography of prominent Australian women(opens in new tab)
s3 · theguardian.com · News report · English · Inspected · 26 September 2025
- Information Age (ACS), 30 September 2025: Australian man fined $350k for making AI deepfakes(opens in new tab)
s4 · ia.acs.org.au · News report · English · Inspected · 30 September 2025
- ABC News, 2 September 2026: man sentenced over deepfakes of Brisbane women and children (separate criminal case)(opens in new tab)
s5 · abc.net.au · News report · English · Inspected · 2 September 2026
How the sources were read, and where the events happened
Read in English on 2026-10-23 through an Internet Archive capture (web.archive.org/web/2025id_/...) because the court site returned HTTP 403; no translation. Full judgment with the agreed facts. Applies to s1.
Read in English on 2026-10-23 (HTTP 200); no translation. ABC report of the hand-down, with the earlier contempt fine. Applies to s2.
Read in English on 2026-10-23 (HTTP 200); no translation. AAP copy published by The Guardian (the Sydney Morning Herald carries the same AAP text). Applies to s3.
Read in English on 2026-10-23 (HTTP 200); no translation. Information Age report, including the eSafety Commissioner's LinkedIn statement. Applies to s4.
Read in English on 2026-10-23 (HTTP 200); no translation. ABC report of the separate 2026 criminal trial; the short URL resolves to the full article. Applies to s5.
Event countries: Unknown. Affected-person countries: Australia. Court countries: Australia.
The judgment says each depicted person ordinarily resides in Australia and the Federal Court of Australia decided the case. Where he was when he posted the images is not stated (he told eSafety he was not resident in Australia), and the website was accessible worldwide, so the event country is left unknown.
Reviewed for publication 2026-10-23: Published as a core case (depicted_or_impersonated): the Federal Court found, on admitted facts, that a man posted 12 non-consensual deepfake intimate images of six women that he generated by uploading their photos to an image-creation webpage, found the posts likely caused them hurt and distress, and imposed A$343,500 in penalties. The court record documents the generation, posting, complaints and penalty; the AI description is the regulator's.
People described
Six women ordinarily resident in Australia, unnamed by order of the court
People reported harmed in this case
6 people
0 AI participants · 6 other people harmed
Six Depicted Persons, each of whom complained to eSafety (judgment, agreed facts and [11]). Exact 6. People who viewed the images are not counted.
Counted once within this case. The same person may appear in other cases. This count does not establish AI causation.
Cite this case
Compiled per our published methodology: verification statuses, sourcing standards, and corrections process.
APA
NOPE. (2026). Australian Federal Court orders man to pay A$343,500 for posting AI-generated deepfake intimate images of six women, in eSafety's first civil penalty case. AI incidents. https://nope.net/incidents/2022-australia-federal-court-civil-penalty-for-ai-generated-deepfake-intimate-images-of-six-women
BibTeX
@misc{2022_australia_federal_court_civil_penalty_for_ai_generated_deepfake_intimate_images_of_six_women,
title = {Australian Federal Court orders man to pay A\$343,500 for posting AI-generated deepfake intimate images of six women, in eSafety's first civil penalty case},
author = {NOPE},
year = {2026},
howpublished = {AI incidents},
url = {https://nope.net/incidents/2022-australia-federal-court-civil-penalty-for-ai-generated-deepfake-intimate-images-of-six-women}
} Related cases
Rajasthan: a social-media influencer's video of a Ganga dip at Haridwar was manipulated with AI into an objectionable reel that went viral; she says she is mentally disturbed and cannot leave her house, and filed a cyber-crime complaint on 16 September 2026
A Rajasthan social-media influencer visited Haridwar with her family in June 2026 and on 6 June uploaded to Instagram a short video, recorded by relatives, of herself taking a dip in the Ganga at Har Ki Pauri wearing a salwar suit. About two months later she found that the video had been manipulated with AI into an objectionable version showing the same movements with her face and body portrayed 'in a shameful manner'; the fake reel went viral in the week before 20 September and drew objectionable comments and re-sharing. In a public appeal she asked whoever uploaded it to remove it, saying it was a matter of her dignity, that she was mentally very disturbed and had reached a point where she could not step out of her house. She filed a complaint with the cyber-crime police on 16 September 2026; the investigating Rajasthan Police Service officer said they were trying to identify who created and circulated the video and to have it removed, and that identifying the accused would take time. Dainik Bhaskar's English edition reported the case on 20 September in a 'Sunday Big Story' that does not name her.
Netherlands: the Public Prosecution Service will prosecute a 74-year-old man from Noord-Holland for making deepfake sex videos of dozens of Dutch public figures, including presenters, politicians and a member of the royal family (images of about sixty people were found on his devices), after the 2024 revelations about the MrDeepFakes platform
In March 2024 the newspaper AD revealed that a large number of Dutch women in public life, including artists, television presenters, Olympic athletes, current and former ministers, mayors and members of the royal family, appeared in manipulated pornographic videos on an online platform with 13 million monthly visitors, later identified as MrDeepFakes. Dozens of women filed police complaints and several spoke publicly: one presenter said she was preparing a complaint, a party leader said the video felt like 'digital rape', another presenter said she would file a complaint 'because tomorrow it could happen to young girls of sixteen', a presenter-entrepreneur did so 'to prevent new, young victims', and a member of parliament, told of a video by the House security service, went public rather than 'keep it small'. On 19 and 20 September 2026 AD, and the Public Prosecution Service (OM) confirming to NOS, reported that after more than a year of investigation the OM will prosecute a 74-year-old man from Noord-Holland, who is not in custody, for making the videos (Hart van Nederland, citing AD, says he is suspected of making and distributing them); images of about sixty well-known Dutch people and politicians were found on his devices, AD reported that he had been the platform's most active Dutch user, and he faces up to two years' imprisonment. The platform's Canadian operator, who removed material at the OM's request and blocked Dutch IP addresses before the site went offline, will not be prosecuted. One of the presenters reported to be among the depicted told AD she was relieved the case would go to court, having experienced the impact of such images herself. No hearing date has been set.
Brazilian police investigate creator over sexualised videos made from congregants' photos he says he animated with AI; two teenage girls filed reports
São Paulo police are investigating a social-media creator over sexualised videos he made from photographs of young women and girls in a church congregation, which he said he animated with AI. Two teenage girls filed police reports, and one described embarrassment and fear about the exposure. The creator, through his lawyer, says the posts were humour and denies criminal intent; no charge has been reported.
Bengaluru: police say a man paid Rs 1.85 lakh after a dating-app contact threatened to circulate an AI-manipulated obscene video of him
Deccan Herald reports, citing Bengaluru police, that a 23-year-old man lost Rs 1.85 lakh in an alleged sextortion scam. He matched with a woman on a dating app on 27 September 2026 and exchanged numbers; he told police that he then received a WhatsApp video call from her number lasting five to six seconds. Police said he then received an obscene video manipulated using AI and the sender threatened to circulate it unless he paid. Fearing exposure, he borrowed money from a friend and transferred Rs 1.85 lakh to several UPI IDs between 27 and 29 September as the threats continued, a police officer said. Police registered a first information report on his online cybercrime complaint and are trying to trace the suspects. The report does not say how police established that the video was AI-manipulated, and the tool is not named.
If you or someone you know is struggling, free and confidential support is available. Find a helpline near you at Signpost.