Key Takeaways
- A 21‑year‑old man received New Zealand’s first conviction for creating and distributing non‑consensual deepfake pornography, sentenced to 24 months of intensive supervision.
- The case involved four young women; one victim, Summer Murphy, waived name suppression to speak publicly about the lasting trauma.
- The offender manipulated hundreds of photos sourced from social media, inserting nude depictions of the victims into otherwise innocent images, which were then shared widely, including on an international pornography site.
- Prosecutors relied on a confession obtained by the victim’s father to prove intent to cause harm under the Harmful Digital Communications Act 2015, a notoriously difficult element to establish.
- Victims and advocates argue that name suppression for the offender undermines accountability, while legal experts call for reform; a new Deepfake Digital Harm and Exploitation Bill has passed its first reading, aiming to criminalise non‑consensual deepfakes without requiring proof of harmful intent.
- The case highlights the growing threat of AI‑generated sexual abuse, the inadequacy of current laws, and the urgent need for clearer legal definitions and stronger victim protections.
Sentencing and Legal Context
In the North Shore District Court, Judge Paul Murray handed down a sentence of 24 months’ intensive supervision to a 21‑year‑old man convicted of sharing pornographic images created with deepfake technology. This marks the first prosecution of its kind in New Zealand under the Harmful Digital Communications Act 2015. The offender faced five charges, each carrying a maximum penalty of two years’ imprisonment or a $50,000 fine. Although the judge could have imposed a custodial sentence, he opted for intensive supervision, which includes strict monitoring, rehabilitation programmes, and the obligation to pay reparations to the victims—amounts still to be determined. The ruling is notable not only for its legal precedent but also for the court’s acknowledgment of the profound harm caused by digitally fabricated sexual content.
Victim Impact Statement – Summer Murphy
Prior to sentencing, Summer Murphy, one of the four victims, delivered a powerful victim impact statement that was read aloud in court. She described how the offender’s actions “did not just hurt me; [they] changed the course of my life.” Summer expressed ongoing fear when strangers handle their phones near her, recurrent panic attacks, reduced social interaction, and a reluctance to post anything online. She revealed that the manipulated images depicted her as young as 14 or 15, showing her in family settings—such as toasting marshmallows on her father’s lap—while appearing naked. The realism of the deepfakes left her feeling violated and powerless, and she stated that seeing her name attached to explicit material felt like a public slander of her identity.
Family Trauma and Paternal Intervention
Summer’s father, Barry Murphy, also submitted a victim impact statement, detailing the anguish of watching his daughter deteriorate from a confident young woman into someone anxious and withdrawn. He described the difficulty of feeling unable to fully protect her despite his professional background as an IT expert. Leveraging his technical skills, Barry traced the source of the deepfakes, obtained a confession from the offender, and forwarded that evidence to police. His intervention was pivotal in establishing the offender’s intent, which prosecutors had struggled to prove otherwise. Barry’s statement underscored how the abuse extended beyond the immediate victims, affecting families who felt helpless in the face of sophisticated digital exploitation.
Nature of the Offending and Distribution
The offending occurred between June and October 2024, when the man was 19. He harvested hundreds of photos from the victims’ public social media accounts, using readily available deepfake applications to digitally remove clothing and insert naked depictions of the women into otherwise innocuous scenes—holiday snaps, gatherings with friends, and family moments. The manipulated images were then disseminated widely: sent to the victims’ friends and family, posted to their own social circles, and uploaded to an international pornography site where they were attached to the victims’ real names. This broad distribution amplified the humiliation and led to unsolicited messages from strangers requesting further explicit content or offering to involve the victims in pornographic productions.
Challenges in Proving Intent
The charges relied on proving intent to cause harm, a requirement under the Harmful Digital Communications Act 2015 that is notoriously difficult to satisfy. Offenders often claim their actions were jokes or that they never anticipated the material being taken seriously. In this case, the prosecution’s success hinged on the confession secured by Barry Murphy, which directly demonstrated the offender’s purposeful desire to distress the victims. Without that admission, establishing intent would have been highly uncertain, explaining why prosecutions involving non‑consensual deepfakes remain rare despite the growing prevalence of the technology.
Legislative Response and Future Protections
The case has spurred legislative action. Act MP Laura McClure’s Deepfake Digital Harm and Exploitation Bill passed its first reading in Parliament with unanimous support. The bill seeks to create a specific offence for producing, sharing, or selling sexually explicit deepfakes without consent, expanding the definition of an “intimate visual recording” to include images that are created, synthesised, or altered. Crucially, it would remove the burden on victims to prove harmful intent, streamlining prosecutions. Legal experts, such as digital‑lawyer Arran Hunt, argue that existing laws are inadequate for the rapid evolution of AI‑generated content, and that the proposed legislation represents a necessary step toward safeguarding individuals’ dignity and privacy in the digital age.
Broader Implications for Society and Technology
Beyond the courtroom, the case highlights a disturbing trend: the weaponisation of accessible deepfake tools to perpetrate sexual abuse, harassment, and reputation damage. Victims like Summer Murphy endure long‑term psychological scars, altered behaviour, and a pervasive sense of vulnerability. The incident also raises questions about platform responsibility, the need for better detection of manipulated media, and public awareness about the risks of sharing personal images online. As AI technology continues to advance, the balance between innovation and protection will demand vigilant legal frameworks, robust technical safeguards, and a cultural shift that treats non‑consensual deepfakes as a serious violation akin to traditional forms of sexual assault.