India: AI deepfakes bypass facial authentication in financial fraud
India's Ministry of Home Affairs warned of a rising trend of fraudsters using AI-generated deepfake videos to bypass facial authentication and gain unauthorised access to bank accounts and digital wallets. The criminals reportedly obtain facial recordings through social engineering on social media and video calling platforms, then use AI tools to create synthetic identities that defeat identity verification safeguards.
What happened
Fraudsters are reportedly using AI to create deepfake videos and synthetic identities to bypass facial authentication systems, liveness verification, video-KYC checks, and account recovery safeguards in India.
Criminals obtain facial data through deceptive video calls, fake online job interviews conducted via social media platforms, messaging apps, job portals, or dating sites, where victims' natural facial movements including blinking, speaking, and head movements are recorded without their knowledge.
The AI-generated synthetic media replicates facial expressions, eye movements, blinking patterns, and voice to authenticate fraudulently as the victim, enabling access to financial and digital services.
Reported impact
Once authentication safeguards are breached using deepfakes, criminals can fraudulently complete KYC formalities, activate digital wallets, open new financial accounts, and gain unauthorised access to existing banking and digital service accounts.
The Indian Cyber Crime Coordination Centre warned that such breaches pose a serious risk to India's rapidly expanding digital payments ecosystem.
Index analysis
The deepfake detection failures in financial institution authentication systems suggest that existing facial recognition and liveness verification tools lack robust detection capabilities for synthetic media.
Banks and fintech companies reportedly lack integrated deepfake detection mechanisms in their customer onboarding systems, allowing fraudsters to exploit vulnerabilities in video-KYC and identity verification frameworks.
Governance controls
The Indian Cyber Crime Coordination Centre advised that customer onboarding systems integrate deepfake detection mechanisms and that biometric profiles be locked to prevent remote identity theft.
Financial institutions and fintech companies were urged to immediately strengthen their customer onboarding and verification frameworks and integrate advanced deepfake detection and synthetic media identification technologies into their security architecture.
Citizens were advised to monitor email notifications for unauthorised login attempts and alert telecom providers immediately if mobile network connectivity stops to prevent SIM swap fraud.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.