AI · · 8 min read

Radnor Deepfake Case Exposes Systemic Failure in AI Safety Infrastructure

A Pennsylvania high school incident reveals how accessible deepfake tools, app store failures, and legal gaps enable child sexual abuse material creation at scale.

Five freshman girls at Radnor High School in Pennsylvania became victims of AI-generated child sexual abuse material in December 2025, created by a classmate using a $250-per-month app purchased through Apple’s App Store—exposing catastrophic failures across platform governance, school safeguarding, and legal enforcement.

The student used Movely, a deepfake application available in mainstream app stores with minimal age verification, to create sexually explicit images of classmates. Charges weren’t filed until late January 2026—more than 50 days after the incident. The case demonstrates how AI democratization without technical guardrails enables real-world harm while every institutional layer—from tech platforms to schools to prosecutors—struggles to respond.

AI-CSAM Epidemic
Reports to NCMEC (2023-2024)
+1,325%
Total reports by June 2025
440,419
Nudify app downloads (lifetime)
483 million
Apps rated suitable for minors
31

Platform Governance Collapsed

The National Center for Missing & Exploited Children documented a 6,345% surge in AI-generated child sexual abuse material reports by June 2025. Yet app stores continue hosting the tools enabling this explosion. An April 2026 investigation by the Tech Transparency Project found nudify apps generated $122 million in lifetime revenue across 483 million downloads. Thirty-one apps were rated suitable for minors. Apple’s and Google’s algorithms actively promoted these applications in search results.

Movely remained available for purchase through Apple’s App Store at the time of the Radnor incident despite stated prohibitions on non-consensual intimate imagery tools. The subscription fee—$250 monthly—posed no barrier to a high school student with access to payment methods. Age verification mechanisms proved entirely ineffective.

“Oftentimes it’s incredibly, incredibly difficult to know what technology, what service, what platform the person is using … unless we get access to their devices or their browser history.”

— Kolina Koltai, Senior Researcher, Bellingcat

Legal Frameworks Lag Behind Technology

Pennsylvania criminalized malicious Deepfakes in 2024, yet the Radnor perpetrator faced only harassment charges—not child pornography offenses. The juvenile’s case reveals prosecutorial challenges under existing legislation, which was drafted before generative AI tools became widely accessible to minors.

Federal intervention arrived with the TAKE IT DOWN Act, signed May 19, 2025. Criminal provisions took effect immediately, while platforms received a one-year deadline—today, May 22, 2026—to establish notice-and-removal processes for non-consensual intimate imagery. The first federal conviction under the statute came in April 2026, when according to NPR, an Ohio man pleaded guilty to using dozens of AI platforms and more than 100 models to create 700+ illicit images for a child sexual abuse material website.

But enforcement remains fragmented. Forty-eight states have enacted deepfake legislation as of May 2026, per Multistate Associates, yet most address either adult non-consensual deepfakes or AI-generated child sexual abuse material—not both. The DEFIANCE Act, which would provide civil damages to victims, passed the Senate unanimously in January 2026 but remains stalled in the House.

Dec 2025
Radnor incident occurs
Student creates AI-generated CSAM targeting five classmates using Movely app.

23 Jan 2026
Charges filed (50+ days later)
Juvenile charged with harassment under Pennsylvania law.

19 Mar 2026
Governor Shapiro intervenes
Requests statewide standards for school deepfake response protocols.

22 Apr 2026
Radnor board adopts policy
New harassment policy includes AI-generated content, but enforcement guidelines pending.

22 May 2026
Federal deadline arrives
Platforms must implement TAKE IT DOWN Act notice-and-removal processes.

Schools Caught in Jurisdictional Gray Zones

Radnor Township School District initially resisted Title IX investigation by classifying the incident as outside-school conduct, despite victims facing their perpetrator daily in hallways and classrooms. Pennsylvania law permits schools to investigate off-campus behavior when it “materially and substantially disrupts” school operations—a standard the district appeared to ignore for weeks.

“In cases like this, where the harm shows up in school every day, the distinction matters,” Audrey Greenberg, parent of a Radnor victim, told the Philadelphia Inquirer. “We were victimized more by the school than this kid who made the video.”

The district adopted a revised harassment policy on April 22, 2026, explicitly covering AI-generated content. But Greenberg noted the policy “identifies the issue” without ensuring “accountability or protection.” Administrative regulations governing enforcement remain unpublished. Governor Josh Shapiro requested the Pennsylvania Department of Education create statewide standards in March 2026 after meeting with Radnor families, acknowledging the absence of coordinated protocols.

Radnor is not isolated. The nearby Council Rock School District reported nearly a dozen girls victimized by deepfakes in fall 2025, resulting in charges against two boys for unlawful dissemination of sexually explicit material by minors. At an unnamed Pennsylvania private school, two teenage boys received felony adjudications in March 2026 after creating 350 images and videos of 60 girls—all but one minors. They received two years’ probation, community service, and restitution orders.

Detection Gap

An academic evaluation of 37 web-based deepfake detection tools found photo detection “most reliable” at 80%+ accuracy, video detection “moderate,” and audio detection “underdeveloped” with “significant weaknesses.” Platform compression defeats lab-trained detectors, creating a cat-and-mouse dynamic where creation tools outpace identification capabilities.

Psychological Toll on Victims

Clinical research from the American Academy of Pediatrics documents victims experiencing humiliation, shame, social withdrawal, and suicidal ideation. Educational disruption compounds the harm—victims miss school to avoid perpetrators, while bullying amplifies as deepfakes circulate across platforms.

“The technology is so sophisticated that it looks like it is my client, and the harm can be just as profound as if it was actually my client’s body,” Lindsay Lieberman, an attorney representing deepfake victims, told CNN. For adolescents still developing identity and self-concept, the permanence of digital content creates long-term psychological damage. Content resurfaces across platforms despite takedown requests, prolonging trauma.

Luciana Librandi, another Radnor parent, testified before the school board that “for a teenager, the emotional and psychological effects can be profound.” Her daughter and the other victims continue attending Radnor High School while awaiting administrative action on enforcement guidelines.

What to Watch

Platform compliance with today’s TAKE IT DOWN Act deadline will determine whether tech companies can operationalise notice-and-removal at scale or if enforcement requires regulatory intervention. The DEFIANCE Act’s House status remains the critical variable for civil remedies—victims currently lack federal standing to sue perpetrators or platforms for damages.

Pennsylvania’s Department of Education is drafting statewide school response standards, which could become a national template if adopted. Monitor whether protocols address jurisdictional gaps for off-campus creation with on-campus impact. The Ohio conviction represents the first federal TAKE IT DOWN Act prosecution; sentencing guidelines will signal whether penalties deter creation or merely punish distribution.

Apple and Google face mounting pressure to explain how nudify apps generating $122 million in revenue remained available despite stated prohibitions. Congressional hearings on app store governance are likely if either platform fails to demonstrate substantive moderation improvements. The technical arms race between detection tools and generation models continues—any breakthrough in real-time deepfake identification would reshape enforcement capabilities, but current detection accuracy gaps suggest this remains years away.