A deepfake is AI-generated synthetic media — fake video, audio, or images made to look real. A deepfake of your CEO, your brand, or your product can be live on five platforms before lunch. Answer 4 questions and this page builds you a tailored deepfake incident response plan — detection, containment, takedown templates, escalation, post-mortem — ready to download and print.
A deepfake incident response plan needs five parts: detection and triage within the first hour, containment through platform takedown requests and evidence preservation, pre-written communications including a holding statement, clear escalation roles with timelines, and a post-mortem to close gaps. Answer four questions below and this page generates a tailored plan you can download and print.
What this page does NOT do: it does not detect deepfakes, file takedowns for you, or replace professional legal/PR advice. It gives you the plan; executing it is your team's job.
Five parts: detection and triage within the first hour, containment through platform takedown requests and evidence preservation, pre-written communications including a holding statement, clear escalation roles with timelines, and a post-mortem to close gaps.
Under the US TAKE IT DOWN Act, covered platforms must remove flagged intimate deepfakes as soon as possible and no later than 48 hours after a valid notice. The FTC began enforcing these platform requirements on May 19, 2026, with fines up to about $53,000 per violation.
Only if the deepfake has reached public visibility. A pre-written holding statement lets you respond fast without amplifying the content — never link to or repost the fake. If it is contained to a few inboxes, quiet takedowns beat a public announcement.
Preserve evidence and file takedown requests in parallel. Screenshot every instance with URLs and timestamps before content disappears, and submit platform removal requests immediately — the 48-hour clock under the TAKE IT DOWN Act starts when the platform receives your valid notice.