Technology

Meta's New AI Looks Past the Ad to Where It Really Leads

Martin HollowayPublished 24m ago4 min readBased on 9 sources
Reading level
Meta's New AI Looks Past the Ad to Where It Really Leads
source:fb.com

Meta is rolling out new AI tools to find ads and accounts that may secretly direct people to illegal child abuse material. TechCrunch

The announcement on Oct. 7, 2026 combined the tool update with enforcement totals for the first half of 2026. Meta said it took action against 33.2 million pieces of child sexual exploitation content on Facebook and Instagram. More than 97% was found by its own systems before users reported it. In India, it acted on 5.3 million pieces in the same period, with more than 98% found before user reports.

Those figures show automated detection now handles almost all initial finding. Human reports cover only a small remainder.

From creative to destination

The main change is a new large language model system to detect signposting. A large language model is AI trained on large amounts of text to spot patterns in wording and connections. Meta uses the word signposting for ads that look ordinary but are suspected of sending users to illegal content hosted elsewhere.

Standard ad checks look at the ad itself: text, images, targeting, and the linked page. Signposting is built to pass those checks. The harmful destination sits one or more steps away, behind a plain-looking shop page, a shortened link, a messaging contact, or another site.

Meta said it now examines where an ad leads, not only what the ad shows, to block violating sites and act against the accounts behind them. That means linking signals across ad accounts, similar ad designs, and destination networks, instead of rating each ad alone.

Meta also states its AI and automated tools use behavioural signals analysis to proactively detect CSAM and related child safety violations. Meta A July description of the same work referred to advanced AI detection tools to identify when individuals post suspicious off-platform links in coordination with other signals. Meta

This work has a history. Meta said it was testing new tools to stop sharing of content that victimizes children in 2021, and said it uses artificial intelligence and machine learning to proactively detect child nudity and previously unknown child exploitative content in 2018. The current version replaces narrower single-purpose classifiers with a language model that reasons across combined signals.

Proactive detection and adversary testing

Meta described two other additions. It is running extra AI scans to catch child exploitation content that earlier systems may have missed. It built a red-teaming AI agent that probes its own defenses for holes that bad actors could use. Red-teaming borrows from security testing, where one team tries to break in so the other can fix gaps.

Meta is also improving its systems for finding people who return with new accounts after an earlier ban. Catching returnees requires combining device, network, payment, behavior, and friend-network clues, while avoiding mistakes against legitimate new users who share a phone or network.

These systems work on probabilities. Precision and recall pull in opposite directions. Precision is avoiding false action. Recall is catching all violations. Stricter blocking of destinations lowers exposure but raises the chance of hitting legitimate advertisers with complex link paths. Looser rules do the reverse.

Enforcement record and regulatory pressure

The update follows reporting that Meta missed ads that were already running. An investigation found 350 ads containing child sexual abuse material that Meta had not caught. Wired Some of those ads used images of real children. A member of a European royal family was among the children whose images were used.

There has also been action from regulators. Spain ordered prosecutors to investigate X, Meta and TikTok for allegedly spreading AI-generated child sexual abuse material. Reuters Actionable reports of AI-generated child sexual imagery have more than doubled over the past two years. Reuters The United Kingdom made the use of AI tools to create child abuse material a crime in 2025. Reuters

The broader context here is a change in how generative AI affects abuse. Earlier problems centered on person-to-person sharing and matching known illegal images by digital fingerprint, often called hashing. The current problem adds AI-made images, cheaper production, and paid distribution. One actor can test hundreds of ad wordings and destinations quickly.

In my view, the technical direction Meta describes fits that problem. Scoring single images cannot keep up when harm comes from intent and routing across several steps. Looking at destinations, linking behavior, and continuously testing defenses addresses evasion better than longer blocklists.

It is worth flagging what the headline totals leave out. Counts of actioned pieces track output, not how common abuse is, how victims were affected, or whether offenders were stopped. A 97% proactive rate says detection started with automated systems. It does not state false positive rate, time to removal, repeat upload rate, or views before removal. For engineers and policymakers, those missing measures shape harm.

Over the longer arc, there is reason for cautious optimism. Each platform shift, from file sharing to social feeds to encrypted messaging, first outran safety tools. Detection moved from human review to hashing to machine learning to behavior models. Language models continue that line by reading word-based and structural tricks, not only images. My own kids adopted new apps months before abuse controls caught up, and I watched that lag close each time. The pattern repeats. Controls lag, then adapt.

Looking ahead, the test is operational. The question is whether destination checks and ban-evasion detection can run at ads scale with fast decisions and fair appeals, and whether internal testing finds bypasses faster than offenders can reuse them. Tools are announced. Results will show in outside audits of missed ads, referrals to prosecutors, and independent measurement, not in totals alone.