Trend report · gnews_detection · 2026-06-14

AI Supercharges Deepfake Nudes—Unleashing a New Form of Bullying Among Kids - WSJ

AI Supercharges Deepfake Nudes—Unleashing a New Form of Bullying Among Kids - WSJ

How Platforms Detect AI-Generated Content—and Why the Metadata Layer Is Your Real Problem

When a platform flags your upload as "AI-generated," it almost never happened because a human moderator watched your video. It happened because automated systems scanned invisible forensic signals baked into your file—signals that survive cropping, compression, and re-export. Understanding what those systems actually look for is the difference between content that gets buried and content that reaches your audience.

The recent reporting on AI-powered deepfake abuse among minors highlights how serious this has become. But the detection infrastructure built to catch deepfakes doesn't just target explicit content—it flags any file carrying AI-generation markers, regardless of what the content actually depicts. If you're an AI creator posting legitimate work, you're hitting the same tripwires.

What Actually Gets Your File Flagged

Platforms in 2026 scan for three distinct layers of AI-generated identity:

C2PA / Content Credentials are the most damning. These are cryptographic manifests embedded in JPEG, PNG, MOV, and MP4 files using the JUMBF (JPEG Universal Metadata Box Format) standard. A single AI export from Midjourney, Sora, or Runway can carry 18 or more JUMBF atoms containing the model name, generation parameters, and a cryptographic signature asserting "made by AI." ExifTool calls these C2PA_* tags. Instagram and TikTok both parse JUMBF on upload—if the manifest says genTime and points to a known generative model, the file gets flagged before a human ever sees it.

XMP AI metadata flags are the second layer. Adobe's XMP (Extensible Metadata Platform) specification includes fields like xmpMM:DerivedFrom, photoshop:History, and the critical DigitalSourceType tag set to trainedAlgorithmicMedia. This isn't a rumor or a heuristic—it's a formal XMP property. A raw AI export from Leonardo.ai or DALL-E 3 will carry this flag in its XMP block. Platforms parse XMP on ingest. If DigitalSourceType equals trainedAlgorithmicMedia, that's a direct match against AI-generation policies.

Encoder fingerprints are the third tripwire—and the one most creators don't know exists. Video files carry embedded codec signatures in their SEI (Supplemental Enhancement Information) NAL units. Lavf (the FFmpeg Lavf muxer), x264, and x265 SEI messages are common in AI-generated video because most generative models use FFmpeg for final export. These aren't metadata—they're burned into the bitstream. Even re-encoding doesn't always strip them cleanly. A file that originated from an AI pipeline carries a detectable encoder fingerprint that forensic tools like Amped FIVE and iScan can identify.

Missing authenticator signals complete the picture. Real phone captures carry GPS coordinates, precise capture timestamps, and device profiles (iPhone 15 Pro, Pixel 8 Pro, Galaxy S24 Ultra). They carry make/model/software strings. They carry specific lens metadata and absence of synthetic generation markers. When a file has none of these—AI exports are GPS-less, timestamped to generation time rather than capture time—the gap itself is a signal.

How Calabi Handles It

Calabi runs a three-stage pipeline on every upload:

Stage 1: Strip. The system removes all C2PA / Content Credentials manifests, reducing JUMBF atom counts from 18+ to zero. It nullifies DigitalSourceType: trainedAlgorithmicMedia and all XMP AI flags. It strips generator/tool tags, Photoshop history trails, and FFmpeg/Lavf SEI fingerprints from the bitstream. The goal isn't to edit pixels—it's to remove the invisible forensic layer that platforms scan for.

Stage 2: Inject. Calabi injects authentic phone-capture identity: a real device profile (iPhone 15 Pro, Pixel 8 Pro, Galaxy S24 Ultra), GPS coordinates, capture timestamp, and a genuine phone encoder name. The file now looks, at the metadata level, exactly like a video shot on a physical device. No gaps. No AI fingerprints. No missing authenticator signals.

Stage 3: Verify. Every processed file ships with a forensic proof card—an ExifTool scan showing exactly what was stripped and what was injected. This is the same forensic output newsrooms and platform trust-and-safety teams use. You see, line by line, that 18 JUMBF atoms became 0, that trainedAlgorithmicMedia is gone, and that 144 AI metadata tags became 94 neutral structural tags.

A Note on Visible Watermarks

If your AI export carries a visible overlay—a corner logo, a "Sora" sparkle, a Midjourney badge—Calabi does not erase it pixel-by-pixel. That's not what the tool does. What Calabi does is remove the invisible metadata layer that survives cropping. If you crop out the visible watermark, Calabi strips the forensic trail that would have flagged your file anyway. That's the honest framing: metadata removal, not pixel editing.

The Process: Upload to Clean File in Four Steps

  1. Upload your AI-generated video or image. Drag-and-drop or select from your device. Any format—MP4, MOV, JPEG, PNG, WebM.
  2. Calabi's pipeline runs automatically. Strip C2PA/JUMBF, nullify XMP AI flags, remove encoder fingerprints, inject phone device profile and GPS. No manual settings, no region selection.
  3. Review the forensic proof card. See exactly what was stripped (18 JUMBF atoms, 16 C2PA references, DigitalSourceType flag, 50+ AI metadata tags) and what was injected (device make/model, GPS, timestamp, encoder identity). This is the same scan platforms run.
  4. Download the cleaned file. The file now carries authentic phone-capture identity. Upload it to Instagram, TikTok, YouTube, or Reddit with the forensic trail showing a clean bill of health.

FAQ

Does this guarantee my post won't be flagged? No tool can guarantee a platform won't flag you. Results vary by platform and source model. Calabi removes the documented forensic signals—C2PA manifests, XMP AI flags, encoder fingerprints—that automated systems scan for. Visible-content moderation and user reports are separate layers Calabi doesn't touch.

Can I use my own device profile? Calabi uses curated device profiles—iPhone 15/16 Pro, Pixel 8 Pro, Galaxy S24 Ultra—with realistic make/model/software strings, GPS, and capture metadata. You select the profile; the system injects consistent, verifiable identity.

→ Try Calabi free at calabilabs.com — 10 cleans, no card.

10 free cleans. See the forensic proof before you download.
Try free →

Related reading