Deepfake fraud attacks surge to match traditional fraud worldwide
Deepfake attacks powered by generative AI have reached parity with traditional fraud methods, affecting one-third of businesses worldwide. Security researchers discovered specialized tools enabling video injection attacks on mobile devices to bypass biometric identity verification systems.
What happened
iProov, a UK biometrics firm, discovered a specialized video injection tool designed to perform advanced deepfake attacks on iOS 15 devices. The tool operates on jailbroken devices and uses a Remote Presentation Transfer Mechanism to inject synthetic video directly into the device's camera stream, bypassing physical cameras and biometric verification systems.
According to a Regula survey, deepfake fraud has become as prevalent as traditional fraud methods worldwide, with 33 percent of organizations reporting deepfake attacks, matching rates for document fraud at 30 percent and social engineering scams at 30 percent. Identity spoofing and biometric fraud each affected 34 percent of organizations surveyed.
Reported impact
Deepfake fraud is increasingly deployed in video-based Know Your Customer processes to create fake but legitimate-appearing identities for money laundering and fund movement. The shift represents fraudsters targeting the verification and onboarding process itself rather than attempting to breach systems after account creation.
iProov stated the tool's discovery signals a shift toward programmatic and scalable attack methods and marks a significant escalation in identity fraud.
Index analysis
The deepfake injection tool relies on compromised iOS devices with native Apple security restrictions removed, allowing attackers to inject face swaps or motion re-enactments that appear as genuine camera feeds to verification systems.
Regula's data shows impersonation-driven tactics—identity spoofing, biometric fraud, and deepfake fraud—now comprise the dominant fraud playbook, with these methods occurring as frequently as entrenched traditional fraud schemes.
Governance controls
iProov's Chief Scientific Officer stated that organizations need multilayered cybersecurity controls informed by real-world threat intelligence and rapid-adapting liveness detection capabilities to combat these advanced threats.
The tool's suspected Chinese origins raised national security concerns according to iProov.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.