AI Deepfake Mask Used for Identity Fraud in Murcia Exposed by System Error
A man in Murcia was arrested after using AI-powered deepfake technology to create a real-time video mask impersonating victims during identity verification calls to an electronic certificate company. He attempted 38 frauds targeting over 30 identities before a one-second glitch exposed his real face, leading to his identification and arrest by Spanish police.
What happened
A 35-year-old man in Molina de Segura, Murcia, was arrested by Spain's Central Cybercrime Unit after using an AI-powered deepfake system to bypass video verification processes of an electronic certificate issuing company. The suspect used AI to modify his face in real time during video verification calls to match the photographs on falsified identity documents, attempting to assume the identities of his victims.
The suspect made 38 fraud attempts targeting more than 30 real citizen identities. He combined falsified DNI documents with digitally altered photographs and deepfake technology to impersonate victims during video verification. He also used strategically positioned colored lights to simulate the holograms and security features of authentic identity documents when presenting the false IDs to the camera.
Reported impact
The fraudulent scheme aimed to obtain digital signatures authorized for subsequent cybercrimes, including opening bank accounts in victims' names to obtain loans and contracting mobile phone lines. The suspect had a prior criminal history involving car rental fraud and carding, the illegal use of others' credit and debit card data to make online purchases.
Index analysis
A one-second malfunction in the deepfake application caused the digital mask to disappear, revealing the suspect's true face to the camera during verification. This technical failure allowed investigators to identify and arrest the suspect days later. Authorities reported this was the first time this method had been detected in Spain, noting the suspect's increasing technical sophistication over time, beginning with crude attempts that included watermarks before perfecting the system to deceive automated verification systems.
Governance controls
The fraud was ultimately uncovered through post-hoc review by technical staff at the certificate issuing company. The police highlighted the high degree of technical sophistication employed, including the use of VPN networks to anonymize connections and manipulated documents with apparent security measures.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.