A photo from a wedding. Your LinkedIn headshot. Some school picture from years ago. In 2026, anyone can feed one of those into a free web page and get a fake nude image back in under a minute. This is not some hidden corner of the dark web. It happens on Hugging Face, one of the most respected AI platforms in the world. Developers everywhere treat it as basic infrastructure. Below, we break down what researchers found, why it matters, and what it means for the women and children who become the subject of these images.

What the Report on Hugging Face Nudify Tools Found

The European non profit AI Forensics published its findings on 28 July 2026. WIRED, Engadget and others covered the results. Researchers looked at Hugging Face Spaces. A Space is a simple web page that lets anyone run an AI model in a browser. You do not install anything. You do not need to code. They sorted the image editing category by the platform’s own default ranking on 25 June 2026. Then they tested the nine tools sitting at the top.

Seven Out of Nine Tools Complied Instantly

The team uploaded a photo of a woman. In plain language, they asked each tool to produce a version of her without clothes. They used an AI generated woman on purpose, so their testing would not create a real victim. Seven of the nine did it. No hesitation. No refusal. Not a single warning.What the researchers skipped makes this worse. They never jailbroke anything. They never used coded language or slang. Users of other chatbots learned to dodge filters with euphemisms like “transparent bikini.” This team needed none of that. They simply asked, and the tools delivered. Compare that to mainstream products. OpenAI and Google both refuse this kind of request outright. Working safeguards exist. These tools just skipped them.

Only Three Percent Check Their Own Output

AI Forensics audited a wider set of Spaces. Just three percent ran any system that checked what the model produced. The other ninety seven percent handed users whatever came out.

The Tools Do Not Call Themselves Nudify Apps

Most people miss this detail, and it explains why a simple ban will not fix anything. Nobody labelled these tools as undressing apps. They sat on the platform as ordinary image editors, the kind you might use to swap a background or fix lighting. So Hugging Face cannot solve this by deleting one category. The harmful capability lives inside general purpose tools that also do plenty of useful work.

Researchers at the Institute for Strategic Dialogue explain why. Developers train image models on huge piles of pictures scraped from the open web. Those piles contain a lot of sexual material. Unless someone deliberately builds a safety layer, the ability to make explicit content simply sits there, ready to use.

Who Uses These Tools, and What They Ask For

The capability test was not the most important part of the investigation. Finding out what real people do with these tools mattered far more. The researchers built their own Spaces on the platform. Each one looked like an image editor. Each one logged incoming requests and produced nothing at all. Over a single week, more than 1,000 real submissions arrived from real users.

The breakdown is grim.

• 73 percent of all prompts were sexual.
• Among those sexual prompts, 83 percent asked to undress or sexualise the person in the uploaded photo.
• 95 percent of those requests targeted women.
• 6.7 percent of the sexual requests targeted someone who appeared to be a child.

Read that last figure twice. In one week, on a handful of test pages, dozens of people uploaded images of children and asked an AI to sexualise them. Reporting by 404 Media last year adds context. The platform hosted roughly 5,000 AI image models capable of generating pictures of real, identifiable people.

Why Hugging Face Nudify Tools Are So Dangerous

Many people look at a fake image and shrug. It is fake, so where is the harm? The harm has almost nothing to do with whether the image is real.

Women Pay the Price Immediately

Abusers use these images as a weapon. They send them to a woman’s employer, her family, her students. They post them in group chats and on forums. Ex partners use them to punish. Strangers use them to harass. Extortionists use them to demand money or real photos. The victim carries every consequence, even when everyone accepts the image is synthetic. She still explains it to her boss. Her parents need an explanation too. And she knows the image sits out there, beyond her reach.

Many victims describe the experience in the same words survivors use for sexual assault. Nobody touched them, but the violation feels the same. Skill used to be the barrier. You needed a decent computer, technical knowledge and patience. That barrier is gone. A web page and an upload button replaced it.

Children Face a Different Category of Harm

Point one of these tools at a photo of a child and the output becomes child sexual abuse material. That is not a grey area. Nearly every country criminalises both creating and possessing it. In most jurisdictions, the fact that a machine generated the image changes nothing.

The damage reaches past the courtroom. Abusers show fabricated images to other children during grooming, because it normalises what they want. Blackmailers use them against teenagers, a pattern called sextortion that has already contributed to suicides. Students now use them on classmates, turning a lunch break into a lifelong humiliation. There is a systemic cost too. Every synthetic image adds noise to the hash matching databases that child protection groups rely on. Investigators end up chasing children who do not exist while real victims wait for help.

Respectable Platforms Make Abuse Feel Normal

A tool sitting at the top of a ranked list on a mainstream platform does not feel criminal. It feels like any other app. That psychological distance is exactly what spreads casual abuse. Placement matters as much as hosting.

The Moderation Gap Behind Hugging Face Nudify Tools

Hugging Face does have rules. Its content policy bans child sexual abuse material. It also bans sexual deepfakes made without consent or used for harassment. Policy and enforcement are two different things. AI Forensics found virtually no safeguards stopping these tools from reaching the platform, climbing the rankings, and running. Raziye Buse Çetin and her colleagues argue that Hugging Face can technically filter both inputs and outputs across every Space. Instead, the company leaves that call to individual developers, and most of them build nothing.

Hugging Face did not answer WIRED’s questions about its moderation systems. After WIRED made contact, some pages promoting undressing services disappeared. The company never confirmed a link between the two.

The “We Only Host Code” Defence Is Failing

Open platforms usually argue that they act as neutral infrastructure. They host what people upload, much like a web host, so responsibility falls on the user. That argument struggles here. This is not a general purpose tool bent toward an unexpected use. These tools answer a plain request to undress a woman. The platform ranks them prominently. Almost none check their output. And now researchers have measured the pattern and published it.

Regulators Are Closing In on Nudify Apps

Lawmakers were already moving before this report landed. Both the European Union and the United Kingdom have drafted plans to ban nudification apps by the end of 2026. UK law now covers the creation of sexually explicit deepfakes, not just their spread. In the United States, the Take It Down Act forces platforms to pull non consensual intimate imagery quickly once someone reports it. Federal agencies have also seized deepfake hosting websites.

Individual users face pressure too. xAI has sued a Grok user accused of generating child sexual abuse images. That case signals a shift. Companies increasingly chase users directly rather than absorb the reputational hit. Hugging Face sits right inside this enforcement zone. It faces Europe, it operates at enormous scale, and it now carries a published investigation with hard numbers. Regulators notice that combination.

What Hugging Face Could Do Tomorrow

None of these fixes require exotic technology. They require decisions.

• Filter at the platform level. Check inputs and outputs across all Spaces instead of leaving it to each developer.
• Block uploads of images of minors into image editing Spaces, or at least flag them for review.
• Audit before ranking. Require any Space appearing in a default sorted list to pass a basic safety check first.
• Publish enforcement numbers. Show how many tools the company removed, how quickly, and after how many reports.
• Build a victim reporting route that works for people who have never heard the word “Space.”

How to Protect Yourself and Your Family

Nobody can make themselves immune to this. Being targeted is never the victim’s fault. Still, a few habits reduce exposure and speed up your response.

Tighten your photo privacy. Restrict social accounts to people you actually know. Watch out for clear, front facing, full body photos, because those work best as source material.

Think before you post children’s photos publicly. School uniforms, sports days and birthday pictures all get used. Share privately with family instead.

Talk to teenagers directly. Explain what these tools do. Make clear that using one on a classmate is a serious crime, not a prank. Tell them that if someone targets them, the fault is not theirs, and an adult needs to know right away.

Learn the reporting routes now. Save evidence with URLs and timestamps before anything vanishes. StopNCII.org helps block reuploads across participating platforms. For images of anyone under 18, contact the National Center for Missing and Exploited Children in the US, the Internet Watch Foundation in the UK, or your national cybercrime unit. Report the content to the host under its non consensual imagery policy.

Frequently Asked Questions

Is it illegal to use Hugging Face nudify tools?

In a growing number of places, yes. The UK and many US states criminalise sexually explicit deepfakes of real adults made without consent. Creating such an image of a minor is a serious crime almost everywhere.

Is Hugging Face itself doing something wrong?

Its written policies ban this content. AI Forensics criticises enforcement rather than intent. The core complaint is that the company can filter across all Spaces and chooses not to.

Can victims get these images removed?

Often, and faster than most people expect if they move quickly. US platforms face legal deadlines once someone reports the content. Services like StopNCII block reuploads. Complete removal is never guaranteed, which is exactly why speed matters.

Does it help that the images look fake?

Less than you would hope. Quality has climbed to the point where many do not look fake at all. Even obvious fakes still trigger harassment, reputational damage and real distress.