Nudify apps are turning up in middle schools, and a new law gives parents a lever

Grace Mancini, a 14-year-old eighth grader at Hingham Middle School in Massachusetts, was the victim in one of the deepfake nude cases the Boston Globe documented in 2026. Her case is one of three middle-school incidents named in Boston Globe reporting from April 2026, which put a price on the tools involved: as little as $4.99 to run a photo through a nudify service.

On October 1, 2026, the Federal Trade Commission turned that problem into parenting guidance, and tied it to a federal statute with a clock attached to it: platforms that receive a valid removal request have 48 hours to act. Whether that gives families real leverage depends on the details of what the law covers, and what it leaves alone.

Three middle schools in one reporting thread

The Globe’s account names Hingham Middle School, Mountain View Middle School in Goffstown, New Hampshire, and McGlynn Middle School in Medford, Massachusetts. At Mountain View, three girls aged 13 and 14 were targeted, and the mother of one of them, Krystal Labranche, spoke to the paper about the incident last fall. At McGlynn, a 14-year-old named Chloe Dorcellus described a classmate as the victim. The Globe also reported that 15 percent of students said they had seen sexually explicit deepfakes of someone connected to their school in the last school year, and that one nudify site drew upward of 5 million visitors in January.

The FTC’s own alert is broader and never uses the words middle school. It speaks to parents and kids generally, listing cyberbullying and scams among the challenges children face online, alongside “digitally altered deepfakes, like nudify apps that create fake nude photos and videos of real people.”

The TAKE IT DOWN Act’s 48-hour rule

The law is the TAKE IT DOWN Act, signed on May 19, 2025. Its platform obligations were enforced starting a year later: the FTC announced on May 19, 2026 that platforms must run a process for victims to request removal of nonconsensual intimate images, and must take down the image and identical copies within 48 hours of a valid request.

The FTC’s October alert puts the same rule in a parent’s terms, and the wording matters for anyone trying to use it. Covered platforms, it says, which include social media, messaging, and photo or video sharing apps, must give people a way to request removal of an explicit photo or video of their child, deepfakes included, and must act within 48 hours.

Law firm Orrick, in a June analysis, spelled out what a valid request contains: a signature, which can be electronic, information sufficient to locate the image, a statement of good-faith belief that it is nonconsensual, and the requester’s contact information. The same analysis puts civil penalties at $53,088 per violation and notes that what counts as reasonable effort to find identical copies is still legally unsettled. Orrick also says the FTC has issued warning letters to a dozen companies and that arrests have been announced under the Act’s criminal provisions, so enforcement is not only theoretical for the platforms or for the people who create and post the images.

A platform duty that starts only after a request

The word lever fits the statute’s design, at least on paper: it gives a parent a defined demand to make and gives the FTC a deadline to enforce. FTC Chairman Andrew N. Ferguson framed the stakes in the enforcement announcement. “In the age of AI, anyone can be targeted, and that becomes even more appalling if children are involved,” he said. The agency also sent compliance reminder letters to 15 major platforms, including Alphabet, Amazon, Apple, Meta, TikTok and X.

The obligation in the FTC’s description falls on platforms that host and share content, and its clock starts only after a request is made. Orrick describes covered platforms as websites, apps and online services that host user-generated content, with social media, messaging, image and video sharing, and gaming services at the center. The statute does not stop a fake image from being created on a phone; it governs what happens once the image is posted somewhere and a victim asks for it to come down.

Advocates describe it as a practical tool. RAINN’s president and founder, Scott Berkowitz, said the organization’s guide links directly to each major platform’s reporting form to help survivors start the 48-hour takedown clock. The FTC alert adds advice aimed at young people themselves: avoid sharing explicit images or deepfakes, refuse requests for nudes, and tell a trusted adult when such content turns up. Taken from the FTC’s October 1 alert, the message to parents is a pairing of two things: a conversation at home about what these apps do, and a legal right to demand removal if an image of a child does surface on a covered platform.

This article was produced with the assistance of AI and reviewed by Morning Overview editors prior to publication.

More from Morning Overview