Brazilian police dismantle deepfake fraud ring targeting telecom biometric systems
Brazilian police launched Operation Mil Faces on 14 April 2026 to dismantle a criminal group that used generative AI to create deepfake facial biometrics, bypassing a major telecommunications provider's security systems to conduct SIM swaps and steal from hundreds of customers. The operation resulted in arrests and asset seizures across Mato Grosso and Espírito Santo.
What happened
On 14 April 2026, Brazil's Delegacia Especializada de Repressão a Crimes Informáticos (DRCI) launched Operation Mil Faces targeting a criminal group specializing in computer device intrusions and electronic theft.
The investigation originated after a large telecommunications provider detected anomalies and identified a scheme using artificial intelligence to bypass internal biometric security systems through facial recognition.
Criminals used generative AI technology to create false facial biometries, or deepfakes, to validate fraudulent identities, then performed SIM swaps to assume total control of victims' telephone lines.
Reported impact
Hundreds of Brazilian consumers suffered subsidiary damages including unauthorized withdrawals from digital accounts and numerous fraudulent purchases.
The telecommunications provider suffered damages from fraudulent registrations created through the scheme.
Index analysis
The criminal group specialized in using generative AI tools to create deepfake facial biometrics to bypass biometric recognition security systems of a major telecommunications company.
Governance controls
The investigation was initiated by the telecommunications provider's internal detection of anomalies, which led to identification of the security breach.
On 14 April 2026, 13 judicial orders were executed including 2 preventive arrest warrants, 5 search and seizure warrants, 3 asset seizure warrants, and 3 telecom disclosure warrants in Poxoreu, Mato Grosso and the metropolitan region of Vitória, Espírito Santo.
Suspects are investigated for criminal association, qualified computer device invasion, ideological falsity, and qualified theft through electronic fraud, with combined sentences potentially reaching 19 years of imprisonment.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.