When I first published this investigation, the story ended in April 2025: HYBE had just worked with police to arrest eight people, and I wrote that "perpetrators are learning that anonymity no longer guarantees impunity."
More than a year later, I've rewritten the whole thing. Because far more happened than I expected: the first real prison sentences landed, a Korean company started hunting offenders in American courts, Grok generated three million sexualized images in eleven days — and, most unsettling of all, the people making idol deepfakes are no longer just anonymous criminals. Some of them are fans.
Let me start with a Reddit post. On r/kpop_uncensored, a fan wrote: "I always thought I could 100% tell it's a deepfake. Today one of a girl group idol appeared on my feed, and if I hadn't read the caption, I would have carried on believing it was really her." That's not an outlier — research has long shown that people wildly overestimate their ability to spot deepfakes (we cover that study in detail in our media literacy guide). When even Gen Z fans admit they can't tell anymore, the crisis has entered a new phase.
The Dark Side of the "Republic of Deepfakes"
South Korea — home to the world's fastest internet and its most tech-savvy population — still carries that unwanted label: the "Republic of Deepfakes."
The numbers remain brutal. According to Security Hero's 2023 census report, South Korean singers and actresses constitute 53% of the individuals featured in deepfake pornography — the most targeted group on the planet. That report has never been updated — but Korea's own official numbers have taken over the counting: the Digital Sex Crime Victim Support Center assisted 8,983 victims in 2023, 10,305 in 2024 (the first time it broke ten thousand since its founding), and 10,637 in 2025 — 77.6% of them teenagers and twenty-somethings.
This was never just a celebrity scandal — it's a systematic digital assault that spread from idol stages to school classrooms and military barracks. And the new plot line of 2025–2026 is this: the counterattack is finally working. But the battlefield is moving.
Which K-pop Idols Have Been Victimized? (2026 Update)
Blackpink: Global Fame, Global Targeting
Blackpink members — Lisa and Jennie in particular — still rank among the most frequently targeted individuals on international deepfake sites. YG Entertainment's "zero-tolerance policy" from September 2024 (covering both Blackpink and BABYMONSTER) remains in force; it was announced during the first week of Korea's deepfake crackdown, when police logged 88 reports in seven days.
There's news on Jennie's side: her own label, OA Entertainment, announced in March 2026 that it was weighing multiple legal measures against defamation, false rumors, and violations of her portrait rights. Worth remembering is the surreal case that preceded it: a man claiming to be Jennie's biological father published an AI-generated "memoir" of their relationship. Jennie won at trial — the court ordered every copy destroyed and barred him from mentioning her on social media.
TWICE: Cross-Border Digital Harassment
TWICE's popularity across Korea, Japan, and Southeast Asia brings unique challenges, and their wholesome image makes them targets for deliberately degrading content. JYP Entertainment's statement of August 30, 2024 — issued through the TWICE FANS app — got the framing exactly right: this is "clearly illegal conduct" and a violation of the artists' personal rights. Not a copyright dispute. Sexual violence.
IU: When Classmates Become Perpetrators
IU's case is still the most instructive one I've covered. Over two years, EDAM Entertainment filed complaints against 180 individuals — including one of IU's former middle school classmates. The assumption that perpetrators are anonymous strangers shattered hardest right here.
Now there are outcomes: six people fined, four given conditional suspended indictments, and one defendant fined 3 million won for online harassment and death threats (currently appealing). EDAM's policy hasn't moved an inch: "No settlement, no forgiveness."
aespa: From a Reporting Platform to a Prison Gate
As a group that debuted on an "AI avatar" concept, aespa has always endured this abuse with a layer of bitter irony. But SM Entertainment has turned their case into the industry's template:
- Through the fan-reporting platform KWANGYA 119, SM had filed more than 200 criminal complaints by October 2025;
- In January 2026, SM and the law firm Sejong filed criminal complaints against 11 accounts that had persistently attacked aespa, RIIZE, and NCT WISH — and took the rare step of publicly naming the account IDs;
- In April 2026, SM announced that several deepfake cases had been upheld on final appeal, with defendants now serving sentences, and that it was working with U.S. law firms to pursue offenders overseas;
- In June 2026, the Daegu High Court sentenced a man who created and sold sexually explicit deepfakes of Karina and Winter to 2 years and 6 months in prison, plus an 80-hour sexual violence rehabilitation program and a 7-year ban on working in youth-related institutions.
From issuing statements to putting people behind bars — aespa's case has now traveled the entire distance.
NewJeans and HYBE: Defending Underage Idols
NewJeans' situation remains the most alarming — content targeting their underage members once circulated in Telegram rooms organized by school name, crossing the line into child sexual abuse material (CSAM).
HYBE's response became the industry's first true company–police joint operation: an MOU with the Gyeonggi Northern Provincial Police on February 25, 2025 (a dedicated hotline plus fast-tracked investigation), followed by the April 11 announcement that eight people had been arrested for creating and distributing deepfakes of HYBE artists. And that was just one slice of a wider sweep — police arrested 23 Telegram group operators in the same period, including one 30-year-old man accused of producing more than 1,100 deepfake videos of some 30 artists in eight months. HYBE CEO Lee Jae-sang's words: "Zero tolerance, no settlement."
BTS: Even the World's Biggest Boy Band Isn't Safe
This section didn't exist in the original version — because back then, male idols were rarely targeted. In May 2026, sexually suggestive AI images of V and Jungkook spread across TikTok, triggering a massive backlash from ARMY. Deepfakes are no longer just a female idol's nightmare.
Stray Kids' Bang Chan: Cracking It Open in a U.S. Court
In September 2025 came a ruling that may change the game: a federal judge in California granted Bang Chan's petition to compel X to disclose the identities behind accounts spreading deepfakes of him. With those identities in hand, his civil suit at the Seoul Eastern District Court could move forward. Cross-border anonymity — the deepfake offender's greatest shield — had been pried open by legal process for the first time.
Other Cases Worth Remembering
-
(G)I-DLE: In April 2025, Cube Entertainment escalated its stance: maliciously edited videos, sexual harassment, and defamation are crimes "regardless of whether the original footage was shot in public," with civil and criminal action proceeding in parallel and no settlements;
-
The IVE incident (date corrected: January 2025): a Starship Entertainment employee "accidentally reposted" a deepfake post of Jang Wonyoung and An Yujin to the company's official Weibo account. The company apologized and disciplined the employee — proof that even professionals fumble in front of synthetic content;
-
Historical background: the MOMOLAND Nancy case (2021): photos secretly taken in a changing room were altered with Photoshop and circulated. Strictly speaking this wasn't an AI deepfake — it was pre-deepfake-era crime, spy cam plus photo editing. But it was the moment the Korean public first understood: an idol's face can be stolen by technology.
The Grok Moment: Three Million Images in Eleven Days
If the Telegram era of deepfakes still required "joining a group," the Grok scandal of January 2026 proved the barrier had dropped to a single button.
Users on X exploited Grok's image features to "undress" photos of real people. The Center for Countering Digital Hate counted roughly 3 million sexualized images generated in eleven days (December 29, 2025 – January 8, 2026), including about 23,000 involving minors. Among the named victims: aespa's Karina, IVE's Jang Wonyoung, and Wonho. Fans launched petitions demanding that Grok's real-person image editing be shut down entirely.
The pressure worked: in mid-January, xAI disabled image generation and editing of real people. Korean regulators then moved on two fronts — the Korea Communications Commission gave X two weeks to submit a compliance plan, and the Personal Information Protection Commission opened an investigation. The same scandal directly propelled the U.S. Senate to pass the DEFIANCE Act unanimously on January 13, giving victims statutory damages starting at $150,000 (see our deepfake law tracker for the full picture).
One platform feature. Eleven days. Three million images. That is the generation speed of 2026 — and no enforcement system has ever faced an opponent like it.
The Numbers: How Widespread Is the Korean K-pop Deepfake Crisis?
Globally (Security Hero's 2023 census — still the latest of its kind):
- 53% of the individuals featured in deepfake pornography are South Korean singers and actresses;
- The census found 95,820 videos on top deepfake sites — up 550% from 2019, 98% of them pornographic, with women as 99% of victims.
Korea's official numbers (year by year, methodology noted):
- Victims assisted: 8,983 (2023) → 10,305 (2024, +14.7%) → 10,637 (2025) [Ministry of Gender Equality and Family];
- Content takedowns: corrective orders against deepfake videos jumped from 7,187 (2023) to 23,107 (2024) — a 3.2x surge — with 15,179 more in the first half of 2026 alone;
- Police reports: 156 (2021) → 964 in the first ten months of 2024 — after the crackdown began in late August 2024, daily reports exploded from 1.85 to 8.8;
- The 2026 inflection point: in the latest enforcement campaign (launched November 2025), deepfake crime reports declined year-over-year for the first time — police credit sustained crackdowns and the amended law's deterrent effect.
For the first time in six years, the curve bent downward. But don't celebrate yet — read on and you'll see why.
The Telegram Crisis: A "Deepfake Factory" With 227,000 Users
In August 2024, investigators exposed a Telegram bot channel with roughly 227,000 subscribers: upload any woman's photo, receive a nude deepfake within seconds. Bots like this typically ran a freemium playbook — free samples, then pay or recruit friends to unlock more — turning digital sexual violence into a viral social activity. Groups organized under tags like "K-pop girl groups," "female soldiers," "nurses," and specific school names had participants competing to degrade women they knew personally.
The "Victim School Map" That Shocked the Nation
On August 27, 2024, a ninth-grade student spent two hours building an interactive map marking which schools had deepfake Telegram rooms. By the next day it had passed 3 million visits, with more than 500 schools marked (the map ran on unverified community reports — but the panic was real). Countless women and girls purged every photo from their social media overnight — a desperate digital exodus.
Not Even the Military Was Spared
A Telegram channel of roughly 850 members targeted at least 30 female soldiers, with participants submitting the women's names, ranks, phone numbers, and uniform photos for deepfaking. In September 2024, the Ministry of National Defense ordered all personnel photos pulled from the military intranet. When deepfakes reach the barracks, they stop being cybercrime and become a national security problem.
When Fans Started Making Idol Deepfakes
This was the hardest chapter of the update to write — because the profile of the perpetrator changed.
In June 2026, 404 Media reported an incident that left fandom communities stunned: a fan had used AI to generate a video of themselves being hugged and kissed by Keonho of CORTIS — the boy group HYBE debuted in August 2025. Keonho was born in 2009. He was a minor when it happened. In the Reddit thread that exposed it, the top comment read: "Some fans may think it's harmless, but if you tolerate this, you're opening doors to much worse things in the future."
It wasn't an isolated case. In early 2025, a wave of "AI fan edits" went viral — photorealistic clips synthesized from static photos showing idols embracing fans. TikTok and Instagram filled with ads for face-swap apps promising "upload a selfie, kiss your idol"; fans reported them en masse, and the ads kept coming back (the Korea Times documented this app siege in May 2025).
What's fascinating is who actually polices this: not the platforms, not the companies — the fandoms themselves. A 2025 academic study of BTS ARMY (published at CHI, the top human-computer interaction venue) traced how the fandom handled deepfakes from 2017 to 2025 and found three self-organized governance mechanisms: educational threads, organized reporting systems, and public condemnation.
The study is equally honest about the system's fragility — misidentifying a realistic fan artwork as a deepfake can ignite civil war between the reporting camp and the creative camp. But where legal and technical guardrails are absent, fandom self-governance is the only defense line that actually exists.
Sarah Keith of Macquarie University, who studies K-pop fan culture, put her finger on it: "Silicon Valley has built a technical workaround for the law and the social norms of consent." And as 404 Media summarized her view: when a label protects an idol, it protects an investment. When fans protect an idol, they protect a person.
The Industry's Two Faces
Here I have to deal with a fact that makes everyone uncomfortable: the same K-pop industry cracking down on deepfakes is going all-in on generative AI.
In September 2025, SM and Google DeepMind released a fully AI-generated music video for an aespa "Rich Man" remix — and got flamed by fans, "a soulless disaster" being one of the kinder verdicts. Three months later a "boy band" called GLXE debuted on TikTok: all three members synthetic, every vocal generated by AI, the whole thing run by one individual under the alias "Orion."
Meanwhile PLAVE — a virtual boy band driven by real performers in motion capture — was selling a million albums in a week. To be clear, PLAVE is not a deepfake operation; there are humans behind it. But the success of "virtual faces with real popularity" undeniably feeds the imagination of pure-AI idol ventures.
Voice is the other gray frontier: AI covers make idols "sing" songs they never recorded, and under Korean law, a voice itself has no copyright. The industry is improvising its own defenses — the Korea Music Copyright Association now requires every new song registration to declare "no AI involvement" (since March 2025); SM patented a blockchain system for tracing artists' voiceprints; JYP wrote voice-data clauses directly into trainee contracts. But no company has yet fought a landmark lawsuit over AI covers. The law simply isn't ready.
The same company sues deepfake makers with its left hand and generates AI idols with its right. The industry is drawing its own line, and it's worth spelling out: the difference isn't the technology — it's consent. Which happens to be the exact line lawmakers around the world are drawing too.
Timeline: From "Nth Room" to Grok (2019–2026)
| Date | Event |
|---|---|
| 2019–2020 | The "Nth Room" scandal establishes Telegram as the hub of digital sex crime |
| June 2020 | Korea's first deepfake law takes effect — but watching and possessing remain legal |
| Late 2023 | Security Hero census: 53% of individuals in deepfake porn are Korean artists |
| August 2024 | The 227,000-user Telegram bot is exposed; a ninth-grader's "victim school map" ignites national panic |
| September 2024 | President Yoon orders a crackdown; the law is amended — viewing criminalized, max sentence raised to 7 years; the military pulls intranet photos; Telegram apologizes to Korean regulators |
| October 2024 | Seoul National University deepfake ring leader sentenced to 10 years at trial (prosecutors call it the heaviest sentence since deepfakes were criminalized) |
| January 2025 | The Starship/IVE accidental deepfake repost incident |
| February–April 2025 | HYBE signs the police MOU; 8 arrested; the 7-month special operation closes — 963 people investigated per official figures |
| April 2025 | Korea opens a 24-hour National Digital Sex Crime Response Center; Cube escalates its legal stance |
| September 2025 | Bang Chan wins the California discovery order against X; the SM×DeepMind AI music video sparks a boycott |
| December 2025 | Fully-AI band GLXE debuts; the Grok "undressing" scandal begins to build |
| January 2026 | CCDH: 3 million sexualized images in 11 days; Korean regulators move on X; Korea's AI Framework Act takes effect; SM names 11 accounts |
| April 2026 | SM announces final convictions upheld; begins cross-border pursuit with U.S. law firms |
| May 2026 | BTS's V and Jungkook targeted; ARMY erupts |
| June 2026 | Daegu High Court: 2 years 6 months for the aespa deepfake seller |
The Legal Response: From Amendments to Prison Sentences
In the last version I wrote that the law had "just closed its loopholes." This time I can write that the sentences have started landing.
The 2024 amendments (Sexual Violence Punishment Act) remain the foundation: watching or possessing deepfake porn carries up to 3 years; creating or distributing, up to 7; police gained undercover investigation powers; "non-commercial" is no longer an excuse.
Sentences landing: the Seoul National University ringleader got 10 years at trial, reduced to 9 on appeal after settling with some victims — and the appellate ruling established that commissioning deepfakes makes you an accomplice, a precedent in its own right. The aespa seller got 2 years and 6 months. SM's cases were upheld on final appeal. From "watching is legal" in 2020 to real prison time in 2026 — Korea walked that entire road in six years.
The new layer in 2026: the AI Framework Act took effect January 22, mandating labels on AI content that's hard to distinguish from reality. That makes Korea the first country running both tracks at once — criminal deepfake law plus AI labeling law. Add the election deepfake ban and the 24-hour response center, and Korea now has the most complete deepfake legal toolkit in the world. For how it compares with the U.S. and the EU, see our deepfake law tracker — spoiler: the U.S. still has no federal labeling mandate at all.
How to Report K-pop Deepfakes
Official channels in Korea:
-
Digital Sex Crime Victim Support Center: 02-735-8994, d4u.stop.or.kr (counseling, legal aid, takedown support)
-
Broadcasting Media Communications Standards Commission (the former KCSC, reorganized and renamed in October 2025): blocks URLs within Korea, accepts public reports
-
National Police Agency Cyber Bureau: emergency line 112 (multilingual)
Agency portals:
-
SM: kwangya119.smtown.com (SMTOWN account required)
-
HYBE: protect.hybecorp.com (covers all subsidiaries)
-
YG / JYP / Cube: public tip channels via official sites
If you're in the U.S. or elsewhere (the part most English-language guides skip):
-
Under the TAKE IT DOWN Act, U.S. platforms must remove reported non-consensual intimate images within 48 hours; if a platform stalls, complain to the FTC at TakeItDown.ftc.gov;
-
Minors can use NCMEC's Take It Down tool (takeitdown.ncmec.org); adults can use StopNCII.org — the hash is generated on your device and the original image never leaves your phone;
-
The full victim action checklist is in our deepfake law tracker.
Why Is It Always K-pop?
That 53% number haunted me for a long time: why K-pop, specifically? After this round of research, I think the answer has three layers.
The first layer is an industry contradiction.
Female idols are required to maintain a "pure" image — no dating, no discussion of their private lives — while being sexualized in marketing far more heavily than their male counterparts. USC professor Hye Jin Lee has floated an even colder hypothesis: a meaningful share of idol deepfakes may come from anti-fans — because destroying the pure image is precisely what delivers the greatest satisfaction.
The second layer is the business model biting back.
For decades the K-pop industry has deliberately cultivated parasocial intimacy — video calls with your idol, "exclusive" voice messages. When AI lets fans manufacture that fantasy themselves, the intimacy business reveals its other face. Fan-made "kissing my idol" videos are exactly what this business model looks like when it metastasizes in the generative AI era.
The third layer is Korea's gender war.
Describing the aftermath of school deepfakes to the AP, Hallym University sociologist Shin Kyung-ah said: "Their mutual trust has been completely shattered." In the same report, 17-year-old Kim Haeun said: "I feel scared of living as a woman in South Korea." Deepfakes are the digital front of this conflict: the perpetrators are overwhelmingly young men, the weapon is AI, and the ammunition is women's faces.
And one secondary disaster is closing in, which deserves its own sentence (this is my extension of what scholars call the "liar's dividend"): when deepfakes become common enough, real evidence gets doubted too. Someday, an authentic recording of a genuine scandal may be laundered away as "AI-generated" — and the casualty won't just be the person faked, but the entire system of trust behind "seeing is believing."
What the Researchers Are Saying
K-pop deepfakes have entered serious academic research — and the two key studies point at the same conclusion: fans are not bystanders.
A 2022 study from Korea University (Wang & Kim, published in Computers in Human Behavior — the first empirical study of K-pop deepfake viewers anywhere) found that after encountering idol deepfake porn, anger significantly drives people to act — to report, seek help, and support victims — while guilt produces no behavioral response at all. In other words, the fans "angrily posting about it" are precisely this ecosystem's most effective immune cells. The CHI 2025 BTS ARMY study I described earlier maps how that immune response organizes itself.
Honesty requires one more note: a 2025 systematic review found deepfake research heavily skewed toward the English-speaking world — peer-reviewed work on Korea and K-pop remains scarce. This field needs more researchers.
Frequently Asked Questions
Is making a deepfake of a K-pop idol illegal? In Korea: creation and distribution carry up to 7 years, and even watching or possessing up to 3 — the strictest regime in the world. In the U.S.: publishing sexual deepfakes is a federal crime (TAKE IT DOWN Act, up to 2–3 years), with laws in 46 states on top. For how the rules differ by country, see our deepfake law tracker.
Can international fans actually be prosecuted? The risk is becoming real. SM is working with U.S. law firms to pursue overseas offenders; Bang Chan's case proved a U.S. court will grant cross-border discovery; Japan has made two AI deepfake arrests since late 2025. "I'm not in Korea" is a shield that's failing.
Can you really go to jail in Korea just for watching? Yes. Since the 2024 amendments, possessing, purchasing, storing, or viewing deepfake sexual imagery is punishable by up to 3 years or a 30 million won fine. "I only watched, I didn't share" is no longer a defense.
Why are so many perpetrators teenagers? In the early crackdown data, over 80% of those caught were aged 10–19; the share has eased in the latest campaign. Experts point to three factors: high digital fluency with low ethical restraint; gamified "invite friends for free credits" mechanics; and peer culture in male chat groups where making deepfakes reads as "cool." It's also why Korea is pushing mandatory digital ethics education in schools.
Are those "kiss your idol" AI face-swap apps legal? They live in a rapidly shrinking gray zone. Fans mass-reported these app ads through 2025; after the Grok scandal, real-person image generation got sharply restricted; from August, the EU requires all deepfakes to be labeled. A practical rule that will keep you on the right side of everything: if the real person in the content didn't consent, don't make it — whatever the app allows.
How can you tell if an idol video is a deepfake? It's getting genuinely hard — even veteran fans get fooled. What still works isn't artifact-hunting but source-checking: pause, reverse-search a keyframe, and see whether official channels ever posted it. The full method — including the six detection signals that still hold in 2026 — is in our media literacy guide.
Conclusion
A year ago, I ended this investigation with: "Perpetrators are learning that anonymity no longer guarantees impunity."
Now I can be more specific. Some of them are in prison (9 years in the Seoul National University case; 2 years 6 months in the aespa case). Some are being chased across borders (SM's American law firms; Bang Chan's California discovery order). And Korea's deepfake crime curve has bent downward for the first time in six years. The counterattack is real, and it is working.
But Grok's three million images in eleven days proved something else: the cost of generation has fallen to zero, and every technological leap forces the law to start the chase all over again. More complicated still, the battle line no longer runs neatly between criminals and idols — it now cuts through fandoms themselves, and through every entertainment company suing deepfake makers with one hand while building AI idols with the other.
This fight is far from over. But if 2024 Korea showed the world how much damage deepfakes can do, 2026 Korea is showing something else: how far a society can go once it truly decides to fight back.
Sources
- Security Hero: State of Deepfakes 2023 (the 53% figure)
- Korea Ministry of Gender Equality and Family / Digital Sex Crime Victim Support Center annual reports (2023–2025)
- Korea National Police Agency special operation briefings (2024–2026)
- Korea Herald / Korea Times / JoongAng Daily (enforcement and sentencing coverage)
- Center for Countering Digital Hate: Grok image monitoring report (January 2026)
- 404 Media: "K-pop Fans Are Calling Out Creepy Deepfakes of Idols" (June 2026)
- Wang & Kim, Computers in Human Behavior (2022); Her & Ringland, CHI EA '25 (BTS ARMY study)
- AP: "In South Korea, deepfake porn wrecks women's lives and deepens gender conflict" (October 2024)
- Rolling Stone / Dazed / Music Business Worldwide (industry coverage)
- OECD.AI incident database (agency legal actions)