Congress criminalizes deepfake fraud—but leaves platform liability unclear

What it does

This bill makes it a federal crime to use AI-generated deepfakes to impersonate real or fictional people in order to commit fraud, with penalties up to 3 years in prison. It empowers the FTC to enforce these rules as unfair trade practices, establishes a working group to develop detection and prevention standards, and directs the government to coordinate with foreign law enforcement to combat cross-border deepfake fraud schemes.

Why we flagged it

The bill's core function is to criminalize deepfake-based fraud and empower the FTC to enforce against it. While it touches AI regulation, its primary civic purpose is protecting citizens from a specific fraud vector, not broadly regulating AI development or deployment.

What the text implies

• The 'identifiable individual' definition includes both real people AND 'imaginary individuals' created to look real—this may create ambiguity in enforcement if a deepfake is designed to look like a plausible but non-existent person used in a scam.
• The bill grants extraterritorial jurisdiction over deepfake fraud originating outside the US, potentially creating enforcement challenges and diplomatic friction with countries that do not cooperate.
• The working group's 10-year sunset means standards and best practices may lapse unless Congress reauthorizes, creating a gap in federal guidance on detection and prevention.
• FTC enforcement treats violations as 'unfair or deceptive acts'—a lower bar than criminal fraud—which may lead to civil penalties and settlements rather than prosecution, potentially limiting deterrent effect.
• The bill does not explicitly address liability for platforms hosting deepfake content, only the creator/user of the deepfake itself, leaving a potential enforcement gap.

Who it affects

Ordinary citizens gain a new federal tool against a genuine emerging harm—deepfake fraud targeting individuals and financial institutions. The bill creates criminal penalties and FTC enforcement without imposing new compliance burdens on the public, and includes explicit carve-outs for parody, satire, and journalism. The working group and international coordination may improve detection and prevention.

Who stands to gain

• cybersecurity and AI detection software vendors
• financial services firms (reduced fraud losses)
• telecommunications and digital platform companies (reduced liability exposure)

Named in the bill

Federal Trade Commission (FTC), Department of Justice (DOJ), National Institute of Standards and Technology (NIST), Communications Act of 1934, Federal Trade Commission Act, Controlled Substances Act (forfeiture procedures), AMD, HPE, Cisco (CSCO), Cognizant (CTSH), Verisign (VRSN)

Where it stands

2 cosponsors: 1 Democrats, 1 Republicans.

• Mar 4, 2026 — Introduced · Congress.gov: “Introduced in House”
• Mar 4, 2026 — Referred to House Committee on Foreign Affairs and House Committee on Science, Space, and Technology · Congress.gov: “Referred to the Committee on Energy and Commerce, and in addition to the Committees on the Judiciary…”

Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.

Money around this bill

2 lobbying clients named this bill on 2 disclosure filings across 1 quarter, Jun 2026 to Jun 2026. Those filings disclosed $140,000 in lobbying spend. A filing names 8 bills on average, so that figure is what each filing reported, not a share belonging to this bill.

More lobbying clients named this bill than 41% of bills with at least one filing.

Vern Buchanan, the sponsor, reported $544,700 in PAC receipts in the 2026 cycle. $5,000 of that came from 1 PAC tied to these lobbying clients.

• Microsoft Corporation — $90,000 on 1 filing
• Microsoft Corporation — $50,000 on 1 filing

Lobbying Disclosure Act filings through Jul 20, 2026. A filing shows who paid to lobby on a bill it names, not what changed.