AI deepfake tool JINKUSU CAM bypasses KYC systems at banks and crypto platforms
A darknet threat actor known as Jinkusu is reportedly selling an AI deepfake tool called JINKUSU CAM designed to bypass identity verification systems used by banks and cryptocurrency platforms. The tool manipulates real-time video and audio to defeat facial recognition and liveness detection checks, exposing vulnerabilities in KYC onboarding processes that have increasingly relied on automated biometric verification.
What happened
A threat actor known as Jinkusu is selling a fraud kit called JINKUSU CAM designed to bypass Know Your Customer (KYC) identity verification systems at banks and cryptocurrency platforms. The tool uses AI-generated deepfakes and real-time voice manipulation to defeat facial recognition and liveness detection checks during remote onboarding.
JINKUSU CAM utilizes InsightFace for GPU-accelerated real-time face swapping with fluid gesture transfers and voice modulation to evade biometric verification systems. According to VECERT Analyzer, the tool manipulates live video streams to appear as real, present persons during verification checks such as blinking, head turning, smiling, or speaking on command.
Reported impact
The emergence of deepfake tools highlights vulnerabilities in KYC verification systems relied upon by financial institutions and crypto exchanges. Deddy Lavid, CEO of blockchain security platform Cyvers, stated that as AI lowers barriers to synthetic identity fraud, KYC front-door verification remains vulnerable.
The fraud kit enables scammers with no technical knowledge to conduct romance scams such as 'pig butchering,' which resulted in $5.5 billion in losses from 200,000 flagged cases in 2024. Jinkusu is suspected to be the same threat actor behind the Starkiller phishing kit released in February 2026.
Index analysis
Remote identity verification systems have traditionally relied on the assumption that a combination of a selfie, liveness prompts, and facial match creates a meaningful barrier against impersonation. JINKUSU CAM demonstrates that if video or audio reaching verification systems has already been altered by deepfake technology, identity checks can be defeated even when the person appears to execute required actions.
The broader weakness exposed is that banks, exchanges, and fintech companies have increasingly relied on automated biometric checks to quickly onboard users and reduce friction, without adequate safeguards against real-time video manipulation or synthetic identity fraud.
Governance controls
Deddy Lavid, CEO of Cyvers, urged financial platforms to adopt a layered security approach combining identity verification with real-time AI monitoring rather than relying on facial recognition alone. Binance chief security officer Jimmy Su previously warned in May 2023 that improving AI algorithms would be able to crack KYC systems using a single picture of a victim.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.