Ofcom orders hash-matching measures to curb illegal intimate images

Ofcom has strengthened its Illegal Content Codes to recommend that certain sites and apps use hash-matching technology to detect and reduce the spread of illegal intimate images online, including explicit deepfakes.

The UK regulator said on 18 May 2026 that the change is aimed at stopping abuse at source by turning harmful images into digital fingerprints and matching them against later uploads.

The amendments are not yet final. Ofcom said they are subject to the parliamentary process and are expected to come into force in autumn 2026.

What the change does

Hash matching is designed to identify known illegal images when they are uploaded again on other services. Ofcom said it wants platforms to expand use of the technology so it can help detect non-consensual intimate imagery more proactively.

The regulator also said victims should only need to report an image once through services such as StopNCII.org, allowing a hash to be shared across platforms for automatic matching, according to reporting by ITV.

Why it matters

The move marks a more direct regulatory push on the spread of intimate image abuse, including AI-generated sexual deepfakes. Reuters-syndicated reporting described the decision as requiring platforms to use detection technology to limit the spread of such images.

Ofcom first said in February 2026 that it would fast-track its decision on proposed proactive technology requirements for blocking illegal intimate images at source. Monday's statement is the regulator's latest step in that process.

What happens next

The key near-term question is how quickly in-scope platforms will adopt the recommendation once the parliamentary process is complete. Ofcom has not yet set out the final details of which services will fall within scope of the amended codes.