Digital extortion using artificial intelligence in Peru: a systematic review of the regulatory framework and guidelines for its prevention

Authors

DOI:

https://doi.org/10.5281/zenodo.17643290

Keywords:

digital extortion, artificial intelligence, deepfakes

Abstract

This article aims to examine the Peruvian regulatory framework on AI-enhanced digital extortion, compare it with international standards, and propose normative–operational guidelines for its prevention, prosecution, and forensic examination. Using a systematic review methodology (PRISMA 2020) of 30 academic, regulatory, and institutional sources (2020–2025), with documentary, legal-comparative, and thematic qualitative analysis, the findings show that synthetic-content generation capabilities (deepfakes and voice cloning) surpass human and algorithmic detection in real-world contexts. Peru has made progress with Law No. 32314 (aggravating circumstance for the use of AI); however, gaps remain in procedures for the swift removal of harmful content, early preservation of evidence, and forensic standards for synthetic audio/image analysis. In comparative law, the EU (AI Act), Ofcom (United Kingdom), and eSafety (Australia) establish obligations relating to due diligence, transparency, and attribution/provenance tools. Consequently, this study concludes by recommending a hybrid model that complements criminal sanctions with platform duties (detection, labeling, and preservation), strengthening of forensic laboratories, and cybersecurity prevention and education programs, in order to improve the State’s response and enhance victim protection.

Downloads

Download data is not yet available.

References

Alali, A., y Theodorakopoulos, G. (2025). Partial fake speech attacks in the real world using deepfake audio. Journal of Cybersecurity and Privacy, 5(1), 6. https://doi.org/10.3390/jcp5010006

Chawki, M. (2024). Navigating legal challenges of deepfakes in the American landscape. Cogent Social Sciences, 10(1). https://doi.org/10.1080/23311816.2024.2320971

CNDH. (enero de 2025). Informe Anual 2024. Comisión Nacional de los Derechos Humanos. https://www.cndh.org.mx/sites/default/files/documentos/2025-01/InformeAnual_2024.pdf

Congreso de la República Perú . (29 de April de 2025). Ley N° 32314 (modifica el Código Penal y la Ley 30096 para incluir el uso de IA en la comisión de delitos). https://leyes.congreso.gob.pe/Documentos/2021_2026/ADLP/Texto_Consolidado/32314-TXM.pdf

Diel, A., Freetly, A., y Walther, E. (2024). Human performance in detecting deepfakes: A systematic review and meta-analysis. Heliyon Computer Science. https://doi.org/10.1155/hbe2/1833228

Dolev-Cohen, M., y Levy, N. (2022). A qualitative examination of school counselors’ perspectives of online sextortion. International Journal of Bullying Prevention, 4(4), 293-309. https://doi.org/10.1007/s42380-022-00159-0

Edwards, M., Pitts, M., y O’Malley, R. (2023). Online sextortion: Characteristics of offences from a policing perspective. Journal of Policing and Society. https://doi.org/10.1016/j.jps.2023.100038

eSafety Commissioner. (28 de mayo de 2025). Deepfake trends and challenges — position statement. https://www.esafety.gov.au/industry/tech-trends-and-challenges/deepfakes

eSafety Commissioner. (27 de June de 2025). Guide to responding to image-based abuse involving AI deepfakes. https://www.esafety.gov.au/sites/default/files/2025-06/Respond%203A%20-%20Guide%20to%20responding%20to%20image-based%20abuse%20involving%20AI%20deepfakes.pdf

European Commission. (4 de febrero de 2025). Guidelines on prohibited AI practices (AI Act). https://digital-strategy.ec.europa.eu/en/library/commission-publishes-guidelines-prohibited-artificial-intelligence-ai-practices-defined-ai-act

European Parliament, y Council. (12 de july de 2024). Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence and amending Regulations (EC) No 300/2008, (EU) No 167/2013, (EU) No 168/2013, (EU) 2018/858, (EU) 2018/1139. Official Journal of the European. https://eur-lex.europa.eu/eli/reg/2024/1689/oj

Europol. (2025). Internet Organised Crime Threat Assessment. La Haya: Europol: IOCTA 2025. https://www.europol.europa.eu/activities-services/main-reports/internet-organised-crime-threat-assessment-iocta-2025

Flick, U. (2015). Introducción a la investigación cualitativa (5 ed.). Morata. https://study.sagepub.com/flick_aiqr

Guembe, B., Azeta, A., Sanjay , M., Chukwudi Osamor, V., Fernández-Sanz, L., y Pospelova, V. (2022). La amenaza emergente de los ciberataques impulsados por IA: un análisis. Taylor&Francis Group, 36(1), 2409. https://doi.org/10.1080/08839514.2022.2037254

Guerrero-Sierra, H., y Díaz, L. (2025). Threats and regulatory challenges of non-consensual deepfakes. Cogent Social Sciences, 11(1). https://doi.org/10.1080/23311886.2025.2552342

Hernández-Sampieri, R., y Mendoza, C. (2018). Metodología de la investigación. Las rutas cuantitativa, cualitativa y mixta. McGraw-Hill Educación. https://doi.org/10.22201/fesc.20072236e.2019.10.18.6

Holt, T. J., Bossler, A. M., y Seigfried-Spellar, K. C. (2022). Cybercrime and Digital Forensics (3ra ed.). Routledge. https://www.routledge.com/Cybercrime-and-Digital-Forensics-An-Introduction/Holt-Bossler-Seigfried-Spellar/p/book/9780367360078?srsltid=AfmBOoqE8Ppwy8iZFMBH2HbQu4fNHTOj6zJ706cz_6xa-m9a7MhfXblU

Inter-American Development Bank, y Organization of American States. (2020). 2020 Cybersecurity Report: Risks, Progress, and the Way Forward in Latin America and the Caribbean. IDB. http://dx.doi.org/10.18235/0002513

Khanjani, Z., Watson, G., y Janeja, V. (2023). Audio deepfakes: A survey. Frontiers in Big Data. Frontiers in Bits Data. https://doi.org/10.3389/fdata.2022.1001063

Kira, B. (2024). When non-consensual intimate deepfakes go viral: Legal responses and platform duties. Computer Law & Security Review, 53. https://doi.org/10.1016/j.clsr.2024.105033

Kitchenham, B., y Charters, S. (2007). Guidelines for performing Systematic Literature Reviews in Software Engineering. EBSE Technical Report, Keele University. https://legacyfileshare.elsevier.com/promis_misc/525444systematicreviewsguide.pdf

Kulangareth, N., Nath, A., Davy, J., y Mantri, A. (2024). Investigation of deepfake voice detection using speech biomarkers. JMIR Biomedical Engineering, 9(1). https://doi.org/10.2196/56245

Liu, X., Wang, X., Sahidullah, M., Patino, J., Delgado, H., Kinnunen, T., y Nautsch, A. (2022). ASVspoof 2021: Towards spoofed and deepfake speech detection in the wild. arXiv preprint arXiv:2210.02437, 31, 2507-2522. https://doi.org/10.1109/TASLP.2023.3285283

Ma’arif, A., y Rahman, M. (2025). Social, legal, and ethical implications of AI-generated deepfakes. Journal of Responsible Technology. https://doi.org/10.1016/j.jrt.2025.100610

Maldonado, V. (29 de abril de 2025). Ley 32314: Modifican el Código Penal y otro para sancionar el uso de la inteligencia artificial en la comisión de delitos. Pasión por el derecho: https://lpderecho.pe/ley-32314-modifican-codigo-penal-sancionar-uso-inteligencia-artificial-delitos/

McGlynn, C., Rackley, E., y Johnson, K. (2025). The “new voyeurism”: Criminalizing the creation of deepfake porn. Journal of Law and Society, 52(2), 215-240. https://doi.org/10.1111/jols.12527

Mirsky, Y., y Lee, W. (2021). The Creation and Detection of Deepfakes: A Survey. ACM Computing Surveys, 54(1), 1-41. https://doi.org/10.1145/3425780

Ofcom. (23 de July de 2024). Deepfake defences: Mitigating the harms of deceptive synthetic media. https://www.ofcom.org.uk/online-safety/illegal-and-harmful-content/deepfake-defences

Ofcom. (11 de July de 2025). Deepfake Defences 2 – The Attribution Toolkit. . https://www.ofcom.org.uk/online-safety/illegal-and-harmful-content/deepfake-defences-2--the-attribution-toolkit

Page, M. J., McKenzie, J. E., Bossuyt, P. M., Boutron, I., Hoffmann, T. C., Mulrow, C. D., y Moher, D. (2021). The PRISMA 2020 statement: An updated guideline for reporting systematic reviews. BMJ, n(71), 372. https://doi.org/10.1136/bmj.n71

Proyecto Zero, 2. (29 de abril de 2025). Proyecto Zero 24. Boletín Legal PZ-24: Ley N.º 32314. Proyecto Zero 24: https://proyectozero24.com/wp-content/uploads/2025/04/Boletin-Legal-PZ-24-2025-LEY-N%C2%B0-32314.pdf

Rana, M., Nobi, M., Murali, B., y Sung, A. (2022). Deepfake detection: A systematic literature review. IEEE Access, 10, 25494-25513. https://doi.org/10.1109/ACCESS.2022.3154404

Ray., A., Henry, N., y Flynn, A. (2024). Sextortion: A scoping review. Trauma, Violence, & Abuse (online first). https://doi.org/10.1177/15248380241277271

Regan, G. (18 de junio de 2025). The State of Deepfake Regulations in 2025: What Businesses. Reality Defender. https://www.realitydefender.com/insights/the-state-of-deepfake-regulations-in-2025-what-businesses-need-to-know

Sandoval, M., y Sharman, J. (2024). Threat of deepfakes to the criminal justice system: A systematic review. Crime Science, 13(2). https://doi.org/10.1186/s40163-024-00239-1

Shetty, S., Choi, K., y Park, I. (2024). Investigating the Intersection of AI and Cybercrime: Risks, Trends, and Countermeasures. International Journal of Cybersecurity Intelligence & Cybercrime, 7(2). https://vc.bridgew.edu/ijcic/vol7/iss2/3

Shirish, A., y Komal, A. (2024). A socio-legal inquiry on deepfakes. California Western International Law Journal, 55(1), 1-36. https://scholarlycommons.law.cwsl.edu/cwilj/vol55/iss1/3

Sulaj, A. (2024). Legal responses to challenges posed by deepfakes. SSRN Electronic Journal. https://papers.ssrn.com/sol3/papers.cfm?abstract_id=5146075

Tolosana, R., Vera-Rodríguez, R., Fierrez, J., Morales , A., y Ortega-García, J. (2020). DeepFakes and beyond: A survey of face manipulation and fake detection. Information Fusion, 64, 131-148. https://doi.org/10.1016/j.inffus.2020.06.014

Tzani, C., Grigoriou, C., y Panagiotopoulos, C. (2024). The role of personality, emotional factors and sexual needs in sextortion. Computers in Human Behavior, 152. https://doi.org/10.1016/j.chb.2024.108177

UK Government. (24 de abril de 2025). Guidance Online Safety Act: explainer. https://www.gov.uk/government/publications/online-safety-act-explainer/online-safety-act-explainer

Umbach, R., Henry, N., Beard, G., y Berryessa, C. (2024). Non-consensual synthetic intimate imagery: Prevalence, attitudes, and knowledge in 10 countries. CHI ’24 Proceedings. https://doi.org/10.1145/3613904.3642382

Verdoliva, L. (2020). Media forensics and deepfakes: An overview. IEEE Journal of Selected Topics in Signal Processing, 14(5), 910–932. https://doi.org/10.1109/JSTSP.2020.3002101

Yamagishi, J., Wang, X., Todisco, M., Sahidullah, M., Patino, J., Nautsch, A., y Evans, N. (2021). ASVspoof 2021: Accelerating progress in spoofed and deepfake speech detection. arXiv preprint arXiv:2109.00537. https://arxiv.org/abs/2109.00537

Yi, J., Wang, C., Tao, J., Zhang, X., Zhang, C., y Zhao, Y. (2023). Audio deepfake detection: A survey. arXiv preprint arXiv:2308.14970. https://arxiv.org/abs/2308.14970

Zhang, B., Lin, Z., Yi, J., Wu, J., y Xu, X. (2025). Audio Deepfake Detection: What Has Been Achieved and What Lies Ahead. Sensors MPDI, 25(7), 1989. https://doi.org/10.3390/s25071989

Published

2025-11-18

Issue

Section

Communication of Science: Bibliometrics and systematic reviews.

How to Cite

Palomino Firma, S. V. (2025). Digital extortion using artificial intelligence in Peru: a systematic review of the regulatory framework and guidelines for its prevention. InveCom Journal, 6(3), 1-7. https://doi.org/10.5281/zenodo.17643290

Most read articles by the same author(s)