
Card or crypto, nothing else
DeepNude: the six services still running, and how each takes payment
Nothing of the original program survives. What survived is the name, and six services trading on it — none of which take the payment methods most people here actually use.
Where the name comes from
A desktop program that lasted four days
The original was a Windows and Linux program released in that replaced the clothed part of a photo with a fabricated one. Its author pulled it the same month, a day after the coverage that made it famous, and no successor version ever appeared. The word is no longer a product name: it is a search term, and a label that advertises a category with no link to that program.
It ran on the user's own machine, with no account and no server in the middle. The free build stamped a large watermark across the result; the $50 build replaced it with a "FAKE" mark in the top-left corner that, as the Motherboard report that first tested it pointed out, was trivial to crop off. That price difference summarises the problem that followed: what was sold was not the ability to compute the image, but the ability to delete the warning that it was fabricated.
The shutdown came from the least common direction — the decision of the person who built it. In the announcement published on 27 June 2019 he wrote that the probability of misuse was too high and closed with the line that the world was not yet ready for it. In the same message he admitted what could no longer be prevented: copies would keep circulating.
A program, not a service
Downloaded once and run on the owner's machine, with no account and no server in between. That is precisely the detail nothing carrying the name today repeats.
Withdrawn by its author
Press attention and download volume closed the project within days. No handover, no successor, no team that inherited the name.
The copies stayed
The files were already out, and anyone could repackage them. That is the root of the anonymous bundles and the "restored" builds still being offered.
The name became a category
It now works as a query. Whoever types it lands on paid web services, chat bots and store shells that use the word because it brings traffic, not because they share anything with the program.
So this guide does not talk about "the app". It talks about who runs each service. Two questions order everything else: where the image is processed, and who appears on the other side with a name and an address. The second one decides whether there is anybody to complain to when something goes wrong. The full account of what happened in 2019 — who wrote it, what those four days looked like, and what survives in the archives — is set out separately.
Next: the containers the name is still advertised in, and the business standing behind each one.
How you run into it
Five containers, five ways of charging
Beyond the six web services, the name turns up in four other packages, and each of them takes money differently. This is the map; the detail for each container lives on its own page.
- A site in the browserThe common case: one tab, one account, and the arithmetic running on someone else's machine. Nothing stays on the phone — but the file is never in your hands either.
- An app on the phoneThe most searched form and the rarest real one: most are shells that open the same web page, and some bill weekly. Who ships a genuine build is a short list.
- An APK fileInstalled by hand, signed with a certificate that leads to no owner. The same handful of builds keeps circulating under new file names.
- A bot in a chat appAn automated account inside a conversation: nothing installed, no privacy policy, and a handle that can change by tomorrow morning.
- RiskResold accessActivation keys and "premium" accounts sold person to person in closed chats, paid for in a way designed not to be reversible.
Those five cards describe five different businesses, and that is exactly the part advertising erases. An APK bundle charges for the installation itself, or for a key that unlocks something already on your phone. A bot charges for work on a server with no visible owner. Resold access charges once and disappears. A store shell lives off a weekly subscription signed in three taps and cancelled in a dozen. The question of which ones ship a real app rather than a browser window with an icon has a much shorter answer than most people expect, and which domains are which takes a page of its own, because dozens of addresses carry this word.
One trait crosses all five: the computing never happens inside your phone. The image moves to somebody else's machine, and what happens after that depends on policies nobody can audit from outside. That is the real break with the program, which worked without sending anything anywhere.
Before any money moves
Seven things you can check from outside
Everything below can be read by anyone before a single peso changes hands. The order is deliberate: the two sections that cost people the most money come first.
Price per image
The advertised figure is almost always a pack price, and a pack is the wrong unit for comparing anything. What decides your spending is how much balance one run takes off, and how many times that run is repeated before the result is good enough.
On Ainudez one image costs 15 credits: with the $9.99 pack that is about $0.30 an image, with the $199.99 pack about $0.03. That tenfold gap is not a reward for heavy use, it is a reward for paying a service that names no legal entity a large sum up front. Undresswith puts one image at 100–110 gems itself, roughly six US cents on its smallest pack. WaveSpeed bills per execution. The other three show nothing until an account exists.
How you pay, and whether it comes back
The payment method decides whether your money can still be recovered after the transaction. Ainudez and Undresswith take crypto only: no bank sits in the middle, there is no chargeback, and the purchase is treated as finished the moment the transfer is confirmed. WaveSpeed accepts Visa, Mastercard, American Express, PayPal and a bank transfer, so a charge can be disputed with the card issuer, though its own credits are declared non-refundable. UndressHer takes both rails — debit and credit cards and crypto assets — and is the only one of the six that writes a refund window at all: 14 calendar days, prorated by usage and paid out within 14 business days. Which rail you choose there decides whether that window has anyone behind it.
Two things matter specifically here. First, none of the six lists GCash, Maya or an over-the-counter deposit, so anyone without a card is pushed towards crypto, which is the one rail with no reversal at all. Second, Deep Undress declares all sales final, including membership fees, and warns that the name on your bank statement may differ from the name of the service — the single most common reason people fail to trace a charge they want stopped.
What happens to the file
There is only one question here: how long the incoming image and the outgoing result stay on the server, and who a deletion request is addressed to. Undresswith is the only service that writes a single deadline — encrypted for at most 24 hours, then deleted — although the same document commits it to keeping account, payment and IP records for seven years. The picture goes; the archive about the person who asked for it does not.
Deep Undress gives three answers on three different screens and never reconciles them. Ainudez and WaveSpeed use the "as long as reasonably necessary" formula, which is a controller's discretion, not a dated promise. Pornworks has no document readable from outside at all. Section 16 of the Data Privacy Act of 2012 lets a data subject order the blocking, removal or destruction of personal information held about them — but that right is exercised against an identifiable controller, and that is exactly where four of the six lose their address.
Who runs it
Of the six, two name an identity you can look up. WaveSpeed lists two registered companies, in Singapore and Hong Kong, with addresses. UndressHer stops halfway: it names Telelink Network Limited and sends disputes to the courts of the British Virgin Islands, but publishes no domicile anywhere. A company you can look up is worth more than a brand, and still less than somewhere to send a letter.
The rest is blank. Ainudez says only that it is "based in Estonia", with no company and no street. Undresswith shows a team page with no company behind it and leaves a free webmail address as the channel for law-enforcement requests. Pornworks hides its owner behind a domain privacy service; all that remains is the registration year, 2013.
The free tier
The pattern is uniform across the category. WaveSpeed hands out a one-dollar balance when an account is opened, without asking for a card. Undresswith gives 100 gems after an email is verified — about one image at the cost it publishes itself. UndressHer gives coins on sign-up and more coins for every friend invited. Ainudez states it offers no free allowance of any kind.
That opening balance is enough to see the interface and not enough to judge an output, and the price often only appears once a job is already half-run. What sits behind the word — watermarks, reduced resolution, surveys, quietly active billing — is worked through on the page about how far the free tier goes.
Warning signs
Six patterns repeat often enough to be a reason to close the tab, and all six are visible before payment:
- A page claiming to sell the authentic program, which was never released again after it was withdrawn.
- A download button that produces no file and instead opens a survey, a sign-up form or the installation of something else.
- A weekly subscription inside a store shell, priced in letters small enough to be read only on the payment screen.
- A tariff payable in crypto only, from an operator that names no company anywhere.
- A claim that files are "never stored" sitting next to a retention period on another page of the same site.
- Support that exists only as an in-app chat, with no email address and no stated response time.
Where Philippine law draws the line
The legal question is not which program was used. It is whether sexual material about a person was made or circulated against their will. Section 12 of the Safe Spaces Act defines gender-based online sexual harassment to include uploading and sharing, without the victim's consent, any media containing photos, voice or video with sexual content, and any unauthorised sharing of a person's photos or information online. Section 13 puts the PNP Anti-Cybercrime Group in charge of receiving those complaints; Section 14 sets the penalty at prisión correccional in its medium period or a fine of ₱100,000 to ₱500,000, or both.
The Anti-Photo and Video Voyeurism Act of 2009 punishes copying, selling, distributing, publishing or broadcasting intimate images of a person taken without consent, with three to seven years of imprisonment and a fine of ₱100,000 to ₱500,000. Its wording turns on an image captured of the person, so how far it reaches a fully synthetic picture is not settled here; the Safe Spaces provision is drafted more broadly. Above both sits Section 6 of the Cybercrime Prevention Act of 2012, which raises the penalty for any offence by one degree when it is committed through information and communications technology. There is no standalone deepfake statute in the Philippines: bills have been filed, and filed bills are not law.
This site takes no part in any stage of what is described above: it stores no files, publishes no installer links, accepts no photos and operates no image service. What the six services actually hand back, and what the result looks like when it arrives, is examined on the page about what actually comes back.
Common questions
The things people ask first
Answers limited to what can be defended: the text of Philippine statutes, the reporting archive, and what each service states about itself.
What was the original program, exactly?
A desktop program for Windows and Linux, released in 2019, that replaced the clothed area of a photo with a fabricated one. The free build watermarked the result; the $50 build swapped that for a "FAKE" stamp in the corner. It ran on the user's own computer, with no account and no server.
Can that program still be obtained?
Not from any legitimate source. The author withdrew it in 2019, nobody inherited the project, and GitHub later disabled repositories that hosted copies for breaching its acceptable use policy. What circulates are anonymous repackages with no signature to check and nothing to compare them against.
So what is being advertised under the name today?
Five different packages: paid web services billed in credits, APK files installed by hand, bots inside a messaging app, accounts and keys sold person to person, and store apps that in practice just open a web page. None of them has any relationship to the 2019 program or its author.
Why are these services not on Google Play?
Google Play's inappropriate content policy states plainly that apps containing or promoting sexual content or pornography are not allowed, and it names non-consensual sexual content created via deepfake or similar technology as prohibited. Apple's review guidelines say the same in clause 1.1.4. Anything that does appear under a similar name is usually a shell or an ad carrier, and is usually short-lived.
Is using a service like this illegal in the Philippines?
Making or circulating sexual material about a real person without their consent is reached by the Safe Spaces Act's online harassment provision, and by the Anti-Photo and Video Voyeurism Act where an intimate image of that person is copied or distributed; the Cybercrime Prevention Act raises the penalty by one degree when ICT is used. Where the subject is a child there is no room at all: the Anti-OSAEC Act covers computer-generated material explicitly. This page is editorial, not legal advice.
How were these six services chosen?
They kept appearing in English-language search results for this name from the Philippines — an editorial observation, not traffic data — and all six still responded when their documents were read. Only things checkable without processing a real person's photo were examined: price, deletion window, operator name and payment method. Where a service publishes nothing, the page says so instead of borrowing a number from another site.
How do I report an error, or an image of me?
By email, with the point of the message in the first line. For a correction, name the page and the detail. If intimate images of you are circulating, we cannot take them down because we host no images, but the reporting order that works in the Philippines — evidence first, then the platform, the PNP Anti-Cybercrime Group or the NBI Cybercrime Division, and the National Privacy Commission — is set out on our content removal page.