AI deepfake nudes of students: how schools respond

A deepfake nude is a fake sexual image made with artificial intelligence (AI). A "nudify" app or website takes an ordinary photo, such as a school portrait or a social media post, and invents a naked body. The child never posed for it.

It is still abuse. In February 2026 the United Nations Children's Fund (UNICEF) said that AI-generated sexualised images of children are child sexual abuse material. UNICEF cites a study across 11 countries that found at least 1.2 million children said their images had been turned into sexual deepfakes in the past year.

Laws differ by country. UK guidance from the Child Exploitation and Online Protection (CEOP) Education programme says AI-made sexual images of children can be illegal even if they do not look real. Ask local counsel or the police what applies where your school is.

Students may call it a prank. The child in the image can feel exposed, afraid and ashamed.

Follow your school's child protection procedure and tell your designated safeguarding lead (DSL) the same day. If a child is in immediate danger, call local emergency services first, then tell the DSL.

Stay calm and thank whoever told you. Do not open the image, and do not ask anyone to show it to you.

• Do not view, screenshot, forward, print or save the image.
• Do not promise to keep it secret.
• Do not search phones or ask students to open their chats.
• Write down what you were told, in the person's own words.
• Stay with an upset student until the DSL or another trusted adult arrives.
• Do not confront the student you suspect. Leave that to the DSL.

The image is the one thing nobody should copy. UK government guidance on sharing nudes and semi-nudes says staff must never copy, print, share, store or save these images, and that doing so is illegal.

The default is not to view it either. The same guidance says staff must not intentionally view such images without a good and clear reason. One example is when viewing is the only way to decide on a referral.

If the DSL must view it, do it on school premises with a second staff member present, and record why. Never view it if that would distress the child.

Do not delete anything until the police or child protection services say what to keep. If a device may go to the police, disconnect it from Wi-Fi and data, switch it off and lock it away.

Record what you know in words instead. Names, places and times give the police and the platform what they need. Write down:

• Where it was found: the app, group chat, website or account name
• The date and time you heard, and who told you
• Who made it, sent it or received it, as far as you know
• Which students may have seen it, and which devices are involved
• What you did and said, with times

Tell the student yourself, in private, with a trusted adult beside them. Say plainly what you know and what happens next. Do not ask them to describe or show the image.

Tell parents the same day unless that could put the student at risk. UK guidance says to involve parents early, and to take advice from the police or children's social care before holding back.

Offer counselling, a named adult and a quiet place at school. Watch for panic, self-harm or avoiding school, and ask about suicide directly if you are worried. Check in the next school day, then again on a set date.

Many students fear they will be blamed. Avoid saying "it is only fake". Lines that help:

• "Thank you for telling me. This is not your fault."
• "Someone made this without your permission. That is abuse."
• "You are not in trouble. I will tell you who I need to tell."
• "What would help you most today?"

The DSL decides whether to involve the police or child protection services, and records the reasons. Some countries require schools to report suspected child abuse, so check mandatory reporting laws for international schools and ask local counsel.

UK guidance says to refer at once when an adult is involved, when a child may be blackmailed or groomed, or when a child is at risk of harm. Treat those as red flags anywhere.

If someone demands money or more images, read sextortion: what schools need to know. The National Society for the Prevention of Cruelty to Children (NSPCC) warns that paying does not guarantee the threats stop.

Report the image on the app or website that hosts it, using its tool for child sexual abuse material or intimate images. INHOPE lists national hotlines in more than 50 countries.

• The police or child protection services, if the DSL decides it meets the local threshold
• The platform or app where the image sits
• A national hotline from the INHOPE list
• Take It Down, a free tool the student can use, which makes a digital fingerprint on their own device without uploading the image

Treat it as child-on-child abuse. Keeping children safe in education (KCSIE) 2026 lists the non-consensual making or sharing of nudes and semi-nudes among the ways children abuse each other online. Follow your child protection procedure as well as your behaviour policy.

Keep the two students apart and assess risk for both. Ask who received the image, where it went and which tool made it. Help the student delete copies and report the image, but check with the police or social care first if they are involved.

Safety comes before sanctions. Match any sanction to the harm, the age and the child's own needs. The age at which a child can be charged differs by country, so take local advice before you promise a family any outcome.

• A meeting with the student and parents that explains the harm and the law
• Device limits or a suspension, under your behaviour policy
• Lessons on consent and the harm done, with support for the student's own needs
• No face-to-face apology unless the student in the image asks and the DSL agrees

Many staff have never faced this, and some will want to look at the image to be sure. Practise it in training. Run one short scenario where a student hands a teacher a phone, and ask what the teacher will not do.

Teach students in age-appropriate lessons that nudify apps harm real people, that forwarding an image is abuse, and that they can ask an adult for help without fear of punishment.

Check what you publish too. The June 2026 CEOP Education update adds advice on image consent so families understand how children's photos are used. Ask parents before you post student photos, and keep full names off them.

Add a short AI-image protocol to your online safety policy. Name who decides, who calls the police, who tells parents and who speaks to the student. Include out-of-hours cover, such as boarding staff.

Record the facts, decisions and reasons the same day. Keep the record in your child protection file, and share it only with people who need it. Check your accreditor's wording and local law before you finalise the protocol.