GARM + GIFCT

Institutional Archetype

THE PRIVATE OFF-SWITCH — Two bodies, one function split in half. The Global Alliance for Responsible Media (GARM) sat on the money side: a voluntary table where the world’s largest advertisers agreed what “brand-safe” content meant, and thereby where ad spend could and could not flow. The Global Internet Forum to Counter Terrorism (GIFCT) sits on the removal side: a shared hash database that lets one member platform’s takedown propagate to every other member’s platform at once. Neither is the state, which is the point — in the United States the First Amendment binds the government, not a trade body or a platform consortium, so a private layer can do what a censor legally cannot, and the affected party has no forum in which to appeal. This profile scores the two chokepoints — demonetization and cross-platform deletion — not the intentions of anyone who staffed them.

Mandate & Origin

GARM was launched in 2019 by the World Federation of Advertisers (WFA) as, in WFA’s own words, “a voluntary cross-industry initiative” — advertisers, agencies, and platforms convening to define brand-safety categories (the “GARM Brand Safety Floor”) and the metrics for ad placement next to harmful content. Its parent and host was the WFA; it never had independent legal personality of its own.

GIFCT was established in 2017 by YouTube, Facebook (now Meta), Microsoft, and Twitter to counter terrorist exploitation of their platforms. At the September 2019 UN General Assembly event convened by New Zealand PM Jacinda Ardern and French President Emmanuel Macron — the same diplomatic push that produced the Christchurch Call — the founding companies announced GIFCT would “spin off as an independent 501(c)(3).” Its membership has since “expanded beyond the founding companies to include over 40 diverse platforms” (2025–26 additions include Anthropic, GitHub, and TikTok). Its core technical product is the Hash-Sharing Database. The Christchurch Call, the government-and-platform pledge that grew out of the same 2019 push, now lists “56 governments, 20 online service providers” in its community (Christchurch Call, Our Community). YouTube’s account of the founding, in Juniper Downs’s Senate testimony: in 2016 it built “a hash-sharing database with Facebook, Twitter and Microsoft,” in 2017 it added seven companies for “over fifty thousand videos and image hashes,” and it “announced the Global Industry Forum to Counter Terrorism (GIFCT) to formalize industry collaboration”; 68 smaller companies were hosted at Tech Against Terrorism workshops, “our partners under the UN Counter Terrorism Executive Directorate” (Downs, Senate Commerce, 17 January 2018).

Funding & Backers

GARM was funded and staffed through the WFA and its member advertisers — the brand-safety standard was paid for by the brands whose collective ad spend gave it force. GIFCT is a 501(c)(3) founded and funded by its member technology companies; the same platforms that operate the removal machinery govern and finance the body that runs it. In both cases the entity setting the rule is composed of the parties the rule most benefits — the advertisers on one side, the platforms on the other.

Institutional Voice & Intent

The two bodies write differently. GARM wrote as a trade initiative: brand safety, adjacency, measurement, and a claim of competitive neutrality. GIFCT writes as a counter-terrorism body: mission, taxonomy, incident log, human-rights language.

GARM, in the WFA’s own words. The discontinuation notice describes “a voluntary cross-industry initiative created in 2019 to address digital safety,” says it provided “voluntary and pro-competitive tools for the advertising industry,” and calls it “a small, not-for-profit initiative” (WFA, 9 Aug 2024). In the documents the House Judiciary Committee reproduced, GARM described its own line between money and speech: “[c]ontent monetization and moderation are inextricably linked” (House Judiciary Committee, GARM’s Harm, 10 July 2024). The FTC’s 2026 complaint against the agencies quotes a GARM message to the six holding companies: “The first rule of Fight Club is: You do not talk about Fight Club” (FTC complaint, Dentsu US); that is the complaint’s allegation about a GARM message, which the consent decree did not adjudicate.

GIFCT, in its own words. The mission: “To prevent terrorists and violent extremists from exploiting digital platforms.” The About page adds: “Central to our efforts is the protection and promotion of the fundamental human rights–including freedom of expression–that terrorism seeks to undermine” (GIFCT, About). On what the database does and does not decide: “It does not dictate how hashes should be used or how moderation should be enforced” (GIFCT, Hash-Sharing Database). The 2024 report says the same of members: “Each member also independently determines what potential action to take regarding content on their platform that matches a particular hash” (GIFCT, 2024 Annual & Transparency Report). On its advisers, in a 2 October 2026 post co-written with its Operating Board: “As an advisory body, the IAC is not designed to oversee GIFCT governance or individual member companies” (GIFCT, 2 Oct 2026). On where its categories are being pushed, a September 2026 post on nihilistic violent extremism: “there has been significant debate on whether and how counterterrorism frameworks should tackle NVE threats” (GIFCT, 15 Sep 2026).

Stated intent: GARM: reduce advertising next to illegal or harmful content, with “voluntary and pro-competitive tools.” GIFCT: prevent terrorists and violent extremists exploiting platforms, with each member deciding its own enforcement (WFA; GIFCT).

Observed intent: GARM: by the FTC’s account, a common standard the six largest agencies adopted together. “Each of the Big Six was a founding member of GARM and maintained its membership until GARM’s dissolution in August 2024,” and the complaint adds that after the dissolution one holding company wrote that it “will continue to abide by the GARM standards despite GARM’s dissolution” (FTC complaint, Dentsu US). GIFCT: a shared signal list plus an incident protocol, with governments alerted when the protocol runs: its October 2026 Kuching, Malaysia activation notice says GIFCT “Alerted the Malaysian government, as the impacted government in this event” (GIFCT, 21 Oct 2026).

Gap: The decision to enforce is, on GIFCT’s account, each member’s. What the record gives is the participation rate: “approximately 2% of hashes had feedback, with the vast majority of that feedback indicating agreement,” and the feedback is members’ feedback, visible to GIFCT and participating members, not a route for the person whose content was hashed (GIFCT, 2024 report). For GARM the court’s ruling is narrow: X lost because its pleaded harm was customers choosing its competitors, which the court held is not antitrust injury, and the FTC decrees bind the agencies, not the WFA.

• Social accounts and feeds. GIFCT’s site links GIFCT on Bluesky and LinkedIn and no X account; its RSS feed returned HTTP 200 as application/rss+xml on 23 October 2026, newest item 21 October 2026. GARM has no account or feed: its WFA page now serves the discontinuation notice.

Position in the Apparatus

• Both bodies date from one event. The WFA says GARM “was set up in the wake of the Christchurch New Zealand Mosque shootings during which the killer livestreamed the attack on Facebook” (WFA); GIFCT says that after Christchurch “the founding companies announced that GIFCT would spin off as an independent 501(c)(3)” (GIFCT, About). One side was built to move ad money, the other to move content signals.
• GARM sat inside an advertisers’ association. The WFA says it “represents over 150 of the world’s biggest brands and more than 60 national advertiser associations on five continents” (WFA, Who we are). The House committee’s report describes “GARM’s Steer Team, which acts as a board of directors,” with Unilever, Mars, Diageo and Procter & Gamble among its corporate seats and the world’s largest media buyer, GroupM, on it (House Judiciary Committee).
• The agencies are where the federal action landed. The FTC’s 15 April 2026 release says the ad agencies “operated through their trade associations,” naming GARM and the 4As’ Advertiser Protection Bureau, to set a common brand-safety floor; websites with so-called misinformation were “deemed to fall below the brand safety floor and thus risked becoming categorically ineligible for advertising revenue” (FTC, 15 Apr 2026). The Havas release of 30 June 2026 says the order “prohibits Havas from entering into agreements that would set common brand safety standards,” and that Havas is “now the final member of the Big Six subject to an order” (FTC, 30 Jun 2026). The WFA and GARM are not parties to those cases.
• GIFCT is governed by platforms and advised by governments. “GIFCT is governed by an Operating Board made up of members from its founding companies: Meta (formerly Facebook), Microsoft, and YouTube,” plus elected at-large seats; “Discord and Twitch have been elected to serve as At-Large members for 2026, and Meta is the 2026 chair.” Its Independent Advisory Committee “includes a minority of members from government and inter-governmental entities and a majority drawn from civil society,” with seats for Canada, France, New Zealand, Australia, Germany, the Netherlands, the European Union’s migration and home affairs directorate and the UN Counter-Terrorism Executive Directorate (GIFCT, Governance). See Meta and Microsoft.
• The database is a set of signals, not a single delete. The HSDB holds cryptographic hashes (exact matches) and perceptual hashes (visually similar content), each with labels, and members “action content in line with their respective policies and terms of service” (GIFCT, Hash-Sharing Database; GIFCT, Membership). At the end of 2024 it held “approximately 2.3 million hashes,” about 408,000 distinct items, and members integrated or integrating included X, YouTube, Google, Meta, Microsoft, Discord, Pinterest, LinkedIn and Twitch among others (GIFCT, 2024 report).
• Its working groups put government agencies in the room. The 2024 Working Groups “convened over 145 participants from 32 countries,” 23 percent from governments; the participant list names the FBI, the U.S. Department of State, the U.S. Department of Homeland Security’s Center for Prevention Programs and Partnerships, the UK Home Office, Ofcom and the European Commission (GIFCT, 2024 report). See also CISA and the Global Engagement Center for the U.S. flagging layer, and the Election Integrity Partnership for a ticket-based flagging pipeline of the same shape.
• The funding structure is a private foundation’s. GIFCT files IRS Form 990-PF, “Return of Private Foundation,” not the public-charity Form 990. For 2024 it reports contributions received of $3,207,500, grants paid of $489,000 (to the Online Harms Foundation, London, “to support Tech Against Terrorism initiatives,” $214,000, and to King’s College London “to support Global Network on Extremism and Technology research,” $275,000) and fair market value of assets of $4,884,492; the form names Naureen Chowdhury Fink as executive director and Courtney Gregoire, Leslie Miller, Nick Pickles and Neil Potts as board members (IRS Form 990-PF, TY2024, via ProPublica). The form does not identify the contributors.

Actions & Leadership Choices

The demonetization side and the deletion side are read on their deeds, not their mission statements. One controlled whether content could earn; the other controls whether content can exist across platforms. The instructive fact about the pair is how differently they fared once tested.

• GARM’s lever was the ad dollar. By setting shared brand-safety definitions across the largest buyers of advertising, GARM shaped where ad revenue could land — a demonetization mechanism that reached platform policy without any government touching it. Its own exit statement claimed the standard had cut ads appearing next to harmful content from 6.1% (2020) to 1.7% (2023).
• The receipt is the shutdown. On 9 August 2024 the WFA discontinued GARM, stating that “recent allegations that unfortunately misconstrue its purpose and activities have caused a distraction and significantly drained its resources and finances.” The discontinuation came three days after X Corp filed an antitrust suit (N.D. Tex., 6 Aug 2024) naming the WFA, GARM, and member firms; Rumble brought related litigation. The antitrust theory — that the coordination functioned as an unlawful group boycott — was the plaintiffs’ allegation, and it failed: on 26 March 2026 Judge Jane Boyle (N.D. Tex.) dismissed X’s suit with prejudice for failure to state a valid legal claim. The costly signal is the timing: a “voluntary” standards body folding within seventy-two hours of the complaint is the clearest available evidence that its coordination was load-bearing and legally exposed. A July 2024 House Judiciary Committee interim staff report, GARM’s Harm: How the World’s Biggest Brands Seek to Control Online Speech (10 July 2024), advanced the same coordination claim ahead of the suit.
• GIFCT’s lever is the delete key, propagated. The shared hash database means a single member’s classification of content as terrorist or violent-extremist can remove that content across every member platform simultaneously. Content is reduced to a cryptographic hash, added to the shared list, and matched on upload everywhere else — one flag, matched across the membership (each member then decides what to do with a match, per GIFCT’s 2024 report), with no requirement that any second platform review the original before acting on the hash. For a Christchurch-style livestream this is a genuine good — the machinery kills a real-time atrocity feed in minutes, faster than any court.
• The hazard is scope, not the founding case. The same one-flag-gone-everywhere pipeline built for the unarguable content becomes available for the arguable content, and the cross-platform appeal step was never built into it — the capture risk is that a taxonomy written for terrorist-and-violent-extremist material widens by degrees while the process protections do not follow. In the EU the same removal machinery now carries a legal mandate under the Digital Services Act and the Terrorist Content Regulation’s one-hour removal window; the flags that feed the private and legal pipelines alike are generated in part by the analyst layer profiled separately — the Stanford Internet Observatory, Graphika, and NewsGuard.

CONDUCT: PRIVATE MODERATION LAYER — DEMONETIZE ON ONE SIDE, DELETE ON THE OTHER, NO APPEAL ON EITHER. GARM coordinated the money and collapsed the moment that coordination was named in court; GIFCT coordinates the deletions and is expanding. Both did work the members wanted done and the state legally could not do itself. The safety cases are real. The missing piece, on both sides, is the same one: a forum in which the party who was demonetized or deleted can be heard.

Alliance Map

These ran at once, on two sides. On the money side the advertisers, their agencies and a trade association built a floor, a court threw out the platform’s suit over it, and the federal government then took the agencies to consent decrees over the same floor. On the removal side the platforms hold the board seats, governments hold advisory seats and working-group seats, a private-foundation budget of about $3.2 million pays for the machinery, and the working-group participant list includes ratchet organizations. The sides share a founding event and a few platform names, and the record shows no tie between the two bodies. The overlap is the finding: in neither body does the party that is demonetized or hashed have a seat.

Reach Assessment

Institutional: GARM reached advertising budgets through members and agencies; the House committee’s report, quoting the WFA’s page, says WFA members “represent roughly 90% of global advertising spend,” and the FTC complaint says the largest agencies “control over $81 billion of ad-buying power.” GIFCT reaches platform enforcement through the database and its incident protocol, and policy through its advisory and working-group seats. Memetic: GARM is now a case name; GIFCT’s notices appear on its own feed with every activation.

Counted: GARM’s own tally, in the WFA’s notice, is ads next to harmful content falling “from 6.1% in 2020 to 1.7% in 2023.” For GIFCT, the 2024 report counts approximately 2.3 million hashes, about 408,000 distinct items (about 330,000 images and 78,000 videos), 33 members at the end of 2024 after six joined that year, seven incident activations in 2024 and feedback on about 2 percent of hashes; the About page now says “over 40 diverse platforms.” Its feed lists perpetrator content incidents for Banga (18 September 2026), Rome (21 September), Umhlali (13 October), Bistrita (19 October) and Kuching (21 October). The TY2024 Form 990-PF gives contributions received of $3,207,500 and expenses of $3,305,431 (WFA; GIFCT, 2024 report; GIFCT, About; GIFCT, RSS feed; IRS Form 990-PF, TY2024).

Sources: WFA discontinues GARM (World Federation of Advertisers, 9 Aug 2024); GARM — World Federation of Advertisers; GIFCT — About; GIFCT — Membership; GIFCT; Content Moderation as Control (evilrobots.lol research); X Corp v. World Federation of Advertisers, No. 7:24-cv-00114 (N.D. Tex.), docket — 26 Mar 2026 order: “X’s case as to those remaining defendants is DISMISSED WITH PREJUDICE”; GIFCT — About: “over 40 diverse platforms”.

Further sources: WFA — Who we are; House Judiciary Committee — GARM’s Harm: How the World’s Biggest Brands Seek to Control Online Speech (interim staff report, 10 Jul 2024); FTC — complaint, FTC v. Dentsu US, Inc., N.D. Tex. No. 4:26-cv-00469 (15 Apr 2026); FTC — Takes Action to Restore Competition in the Digital Advertising Ecosystem (15 Apr 2026); FTC — Secures Agreement with Havas (30 Jun 2026); X Corp v. WFA — Memorandum Opinion and Order, Doc. 255 (26 Mar 2026); X Corp v. WFA — docket; Rumble v. WFA — docket; Jones v. GIFCT — docket; GIFCT — Governance; GIFCT — Hash-Sharing Database; GIFCT — Annual & Transparency Report 2024; GIFCT — to Evolve its Multi-Stakeholder Engagement Model (2 Oct 2026); GIFCT — Definitional Frameworks for Nihilistic Violent Extremism (15 Sep 2026); GIFCT — Perpetrator Content Incident, Kuching, Malaysia (21 Oct 2026); GIFCT — RSS feed; IRS Form 990-PF, TY2024 — ProPublica Nonprofit Explorer; FARA registrant lists — efile.fara.gov.