Apps That Passed Apple Review Hid Sexual Deepfake Tools, Wired Found

An app listed as a pet photo editor could turn out to be a sexual deepfake generator. By Apple's account, the switch came after review.

What Happened

Wired reported a network of more than 400 connected apps and domains, according to coverage published on 2 November 2026.^[1] Digital Trends credits researchers at AI Forensics with uncovering it.^[2]

The apps appeared on Apple's App Store and Google Play as everyday tools: pet photo editors, language tutors, workout coaches.^[2] Under certain conditions, they showed something else.

On install, an app sent a remote server details such as location, language, device identifier and how the user found it.^[2]

The server then decided whether to show the harmless version or a hidden web interface.^[2] That interface generated sexual deepfakes from photos users uploaded.^[1]

Researchers say one trigger was installing the app after clicking an ad on Facebook or Instagram.^[2] Wired said the network was "hiding in plain sight," with thousands of video ads on those two platforms.^[1]

Some ads used fake business names and accounts with zero followers.^[2] Some of the apps had been around for a year.^[1]

Apple removed 19 apps after Wired shared details.^[1] "We review every app before it's published, and these apps complied with our rules when we reviewed them," the company said.^[1]

Apple said that after approval, developers "changed the website the app pulls its content from, replacing what we approved with pornographic content."^[1] 9to5Mac reports that Apple recently strengthened protections against this approach.^[1]

Digital Trends says one popular app had over 100,000 downloads before Google pulled it.^[2] AndroidPure says Google had already pulled most of the apps before Wired got in touch.^[4] It also says Google did not respond to Wired.^[4]

Meta says it banned a company Wired traced much of the network to from advertising in 2025.^[2] It says it has acted against 11,600 ad accounts and 5,200 users, and blocked 209 apps tied to the scheme.^[2]

Why It Matters

App review checks what a developer submits. By Apple's account, the content changed after that check.

Approval described the app on that day, not what it did afterwards.

Digital Trends reported that some apps accepted Apple Pay and Google Pay, and that listings carried no warning for users.^[2]

Similar ads kept resurfacing even as Wired wrapped up its investigation, according to Digital Trends.^[2]

The European Parliament gave final approval on 16 June 2026 to a ban on AI systems that create intimate or sexually explicit depictions of an identifiable person without consent.^[3]

The press release said it still needed formal Council adoption before entering into force, and gave companies until 2 December 2026 to bring their systems in line.^[3] Providers could offer such systems in the EU only if they "come with adequate technical safeguards to prevent the creation of such material."^[3]

What to Do

• Parents: Do not treat an app store listing as a safety check. Talk to children about what they upload and who can see their photos.
• Schools: Set out how staff should respond to a report of a fake intimate image before one arrives. Make sure students know who to tell.
• HR and safety teams: Treat a sexual deepfake of a colleague as a safety matter. Name a contact, keep reports confidential, and do not circulate the material.
• Anyone targeted: Save links, usernames and dates before content is removed. Do not forward it. Report it to the platform and the relevant authorities in your area.

Verify What You See and Hear

Upload a suspicious image or video frame at witness.vision/scan for a second pair of eyes. Witness checks it in seconds and gives a signal, not proof. A clean result does not show an image is authentic, so weigh it alongside other evidence.

Scan now at witness.vision/scan