A deepfake is a piece of synthetic audio, image or video, produced with artificial intelligence, that depicts a real person doing or saying something they never did or said, convincingly enough to pass as authentic. The term is a portmanteau of "deep learning" and "fake". Deepfakes exist because generative techniques developed for computer vision research became widely accessible by the late 2010s, cheap enough that anyone with a laptop and photographs could produce a passable fake. For marketing professionals, the term matters because deepfakes have become a primary vector for fabricated celebrity endorsements distributed as paid social advertising, forcing Google, Meta and Microsoft to rebuild advertiser enforcement systems and pulling regulators into disclosure law aimed at commercial content.

How deepfakes are made

Three generative architectures produce the media called a deepfake. The oldest, autoencoders, use a neural network with a shared encoder and two decoders. The encoder compresses a face into a compact representation, called a latent space, capturing pose and expression independent of identity; swapping which decoder receives the encoded frames pastes one person's expressions onto another's face across a video.

The second, the generative adversarial network, or GAN, was introduced by Ian Goodfellow's team in 2014. A GAN pits a generator against a discriminator that tries to tell real images from generated ones; each improves against the other until faces become realistic enough to fool most observers, a result confirmed by a 2022 study in the Proceedings of the National Academy of Sciences that found GAN-generated faces rated more trustworthy than photographs of real people.

The third and now dominant architecture, the diffusion model, has led on quality since roughly 2023, trained by adding random noise to an image until it becomes static, then learning to reverse that process. Audio deepfakes use voice cloning models trained on a target's recorded speech, sometimes from a few seconds of audio. A widely cited 2018 deepfake of Barack Obama, voiced by Jordan Peele, took roughly 56 hours to process; comparable video is now produced on a consumer graphics card in minutes.

Where it sits in the advertising chain

Deepfakes intersect the transaction chain at the creative layer rather than the bidding layer covered by protocols such as OpenRTB. A fraudulent advertiser produces a video or image showing a celebrity or executive appearing to endorse a product, then submits it through an ordinary self-serve interface, most often Meta Ads Manager or Google Ads, targeted at audiences likely to trust the impersonated figure. Clicking the ad routes viewers to a cloned landing page, where victims pay a nominal fee or submit financial details directly. Brazil's data protection authority described this pattern, fabrication, paid promotion, redirection, as the dominant structure of deepfake-enabled advertising fraud. Because the creative enters through ordinary tools, no major buy-side platform blocks it at the bid-request level; enforcement happens afterward, at review and account level.

Platform enforcement

Google prohibits public figure impersonation under its Misrepresentation policy, updated in March 2024 to bar enticing users to part with money or information by falsely implying a public figure's endorsement. Advertisers must have documented permission before using a public figure's name, image or voice to suggest endorsement, according to Google's advertising policy documentation. Google's 2024 Ads Safety Report disclosed the permanent suspension of more than 700,000 advertiser accounts under the policy.

Meta built its enforcement around facial recognition matching for a defined roster of public figures, a change the company said more than doubled fraudulent-ad detection during testing. Meta protects more than 500,000 celebrities and public figures whose likenesses are recurring targets, removed more than 134 million scam ads during 2025, and filed lawsuits in February 2026 against advertisers in Brazil, China and Vietnam using "celeb-bait", fabricated imagery paired with cloaking that redirects visitors while showing reviewers a clean page.

Microsoft Advertising revised its policies in October 2024 to target deepfake technology and fraudulent endorsements. No operator describes its detection as comprehensive: a 2025 study testing three commercial tools, DeepWare Scanner, Attestiv and TrueMedia, found none reliably separated fake from genuine footage.

Origin and evolution

The word originated in November 2017, when a Reddit user operating as "deepfakes" created a subreddit for exchanging pornographic videos built by superimposing celebrities' faces onto adult performers using open-source software. The forum, which grew to roughly 100,000 members, was removed in February 2018 as major platforms banned the content, and by March 5, 2018, the term had reached the New York Times.

The underlying techniques predate the term by decades; deep learning research dates to the 1980s, and Goodfellow's 2014 GAN is the technical turning point, though it took years of open-source tooling, notably DeepFaceLab from 2019, for the technique to reach hobbyist and commercial use. Non-pornographic use followed within a year, most visibly through the Peele-Obama video. The advertising-fraud application became a named platform problem in 2023, when reporting tracked scam videos using fabricated footage of Elon Musk and other public figures to promote nonexistent investment platforms, prompting Google's 2024 policy update and Microsoft's revision that October.

Why it matters for marketing professionals

The financial scale is measured in billions across jurisdictions. The FBI's Internet Crime Complaint Center attributed 893 million dollars in reported 2025 losses to AI-linked fraud; the FTC found social media scams cost Americans 2.1 billion dollars in 2025. Brazil's regulator documented a single operation using deepfakes of model Gisele Bundchen to sell a nonexistent anti-wrinkle kit, moving more than R$20 million before arrests. Reuters reported in November 2025 that internal Meta documents projected roughly 10% of the company's 2024 advertising revenue, an estimated 16 billion dollars, came from ads categorised internally as promoting scams, a figure Meta disputes but which underpinned an April 2026 class action against the company.

Liability has begun extending beyond fraudsters to those who fail to disclose synthetic content. A Berlin court ruled in August 2025 that using an AI-cloned voice commercially without permission violates personality rights under German law regardless of whether the imitation came from a human or an AI system, ordering a YouTuber with 190,000 subscribers to pay 4,000 euros to a professional voice actor.

Disclosure and labelling regulation

Regulation specific to deepfakes has converged on a disclosure model: labelling rather than outright bans, with elections carved out for stricter treatment. Article 50(4) of the EU's AI Act, Regulation (EU) 2024/1689, requires deployers of systems producing deepfakes to disclose that content was artificially generated, with a visible label rather than the invisible watermarking permitted elsewhere. Article 3(60) defines a deepfake as AI-generated content resembling a real person, object, place or event that would falsely appear authentic. The provision became binding across the EU on August 2, 2026, with penalties reaching 15 million euros or 3% of worldwide turnover. A label does not remove other legal exposure automatically: Italy's data protection authority found disclosure did not cure the harm in a case involving a synthetic double of journalist Enrico Mentana.

US regulation has concentrated on elections. California requires deceptive deepfake political content outside specified pre-election windows to carry a disclosure statement, exempting disclosed news coverage and satire, and twenty-eight states passed comparable laws between 2019 and 2025. Brazil went further, banning paid boosting of new synthetic candidate content during the 72 hours before and 24 hours after polls close, regardless of labelling. South Korea bans deepfake campaign videos outright for 90 days before an election.

Detection, limitations and open disputes

Content Credentials, defined by the Coalition for Content Provenance and Authenticity (C2PA), founded in February 2021 by Adobe, Arm, BBC, Intel, Microsoft and Truepic, attach a cryptographically signed manifest recording a file's creation and editing history. SynthID, from Google DeepMind, embeds an imperceptible signal into AI-generated content designed to survive edits such as cropping. YouTube recognises both signals and applies automatic labels even without creator disclosure. Both systems are proactive rather than forensic, depending on voluntary adoption and offering no protection against unmarked content already circulating, a gap that sits alongside the finding that none of three tested detection tools reliably distinguished fake from genuine footage.

Disclosure carries an underpriced commercial cost: research from New York University's Stern School of Business, cited in the IAB's August 2026 disclosure framework, found that an AI disclosure label cut an advertisement's click-through rate by 31.5%. Where liability sits within the chain remains unresolved, since Google's July 2026 update placed disclosure duties on advertisers while confirming AdSense publishers carry no equivalent obligation.

Disambiguation

Synthetic media is the broader category encompassing deepfakes alongside AI-generated content with no real person depicted; every deepfake is synthetic media, but not every synthetic media asset is a deepfake, since a deepfake specifically misrepresents an identifiable real person. AI-generated content, as used in platform policies, is broader still, covering generic AI image, text and audio production with no false attribution; regulators draw a narrower line around deepfakes because the harm differs.

Cheapfakes, or shallowfakes, describe manipulated media made without machine learning, using clipping, slowed playback or splicing; they can deceive as effectively as a deepfake but involve none of the architectures that define the term. Voice cloning and face swapping are production techniques rather than synonyms for the finished artifact.

Recent developments

The regulatory picture shifted substantially in the second half of 2026. The EU's Article 50 regime became binding on August 2, three days after Brazil's ANPD published its technical report on deepfake-enabled fraud. Google and Meta both signed the EU's voluntary Code of Practice on Transparency of AI-Generated Content in late July, Meta reversing a 2025 refusal. Google introduced a consumer-facing "How this ad was made" panel on July 9, extending to paid media a disclosure logic already built for organic YouTube content.

Timeline

  • 1986: Foundational deep learning research methods are established, predating the term by three decades.
  • 2014: Ian Goodfellow introduces the generative adversarial network, enabling photorealistic synthetic face generation.
  • November 2017: A Reddit user operating as "deepfakes" creates the r/deepfakes subreddit, coining the term.
  • February 2018: Reddit removes the deepfakes subreddit; other platforms adopt similar bans.
  • March 5, 2018: The New York Times reports on the term, marking mainstream adoption.
  • 2018: The Jordan Peele-Barack Obama public service video demonstrates non-pornographic use.
  • 2019: DeepFaceLab, an open-source tool, accelerates hobbyist and commercial adoption.
  • 2023-early 2024: Deepfake videos of Elon Musk and other public figures promote fraudulent investment platforms.
  • March 2024: Google updates its Misrepresentation policy to prohibit AI-generated public figure impersonation ads.
  • October 2024: Microsoft Advertising revises its policies to specifically address deepfake technology.
  • August 20, 2025: A Berlin court rules AI voice cloning without consent violates personality rights.
  • December 3, 2025: Meta discloses removal of more than 134 million scam ads during 2025.
  • February 26, 2026: Meta files lawsuits against deepfake-enabled scam advertisers in Brazil, China and Vietnam.
  • April 26, 2026: The Consumer Federation of America files a class action against Meta.
  • July 20, 2026: The European Commission publishes Article 50 guidelines excluding commercial content from lighter rules.
  • July 26-28, 2026: Google and Meta sign the EU's Code of Practice on Transparency of AI-Generated Content.
  • July 29, 2026: Brazil's ANPD publishes its technical report on deepfake-enabled fraud.
  • August 2, 2026: EU AI Act Article 50 deepfake labelling obligations become legally binding.
  • August 2026: The IAB publishes version two of its AI Transparency and Disclosure Framework.

Summary

Who: Advertising platforms including Google, Meta and Microsoft operate enforcement against deepfake-enabled ad fraud; regulators including the European Commission, Brazil's ANPD and electoral court, and individual US states have issued disclosure or restriction rules; criminal operators produce the fraudulent content, typically targeting celebrities, executives and public figures without consent.

What: A deepfake is AI-generated or manipulated audio, image or video that convincingly depicts a real, identifiable person doing or saying something that did not happen, produced using autoencoder, generative adversarial network or diffusion model architectures.

When: The term originated in November 2017; the underlying techniques trace to 2014 and earlier; the advertising-fraud application became a named platform problem starting in 2023; binding EU disclosure law took effect August 2, 2026.

Where: Deepfake-enabled advertising fraud has been documented across Brazil, the United States and the European Union; responses range from the EU's labelling mandate to Brazil's stricter pre-election ban to individual US state laws.

Why: The technology matters to marketing professionals because it has become a primary vector for celebrity-endorsement advertising fraud costing victims billions of dollars annually, because platforms have rebuilt enforcement systems around detecting it, and because a converging but fragmented set of disclosure laws now imposes labelling obligations, and in some cases outright restrictions, on advertisers using AI-generated content resembling a real person.