How to Preserve Evidence When You Discover a Deepfake

Finding a deepfake is often disorienting. The most useful first response is not to argue with the account that posted it or to share the content publicly. It is to preserve enough context that someone else can understand what appeared, where it appeared and when you found it.

Record the source, not just the image

An isolated screenshot may show what the media looked like but not how it was presented. Capture the page or post context as well: the profile or channel, the post identifier, the surrounding text, replies, visible timestamps and any linked destination. If the content appears in more than one place, record each URL separately.

Preserve a clean chronology

Make a short timeline while details are fresh. Note when you first learned about the content, who sent it to you, when you captured it, whether it was edited or removed, and which reports you submitted. Keep platform confirmation emails and case numbers with the same record.

Avoid creating more copies

Evidence preservation does not require forwarding the media to colleagues, friends or group chats. Share the source link and surrounding context through the appropriate private reporting or legal channel. Re-sharing can increase exposure and make it harder to distinguish the original source from later copies.

What to do after preservation

Once the record is secure, use the platform's specific impersonation, manipulated-media or non-consensual-content reporting path. If there is a threat, extortion, fraud or immediate safety concern, involve a trusted professional or the relevant authorities. This guide is general information, not legal advice.