Most Deepfake Attacks Don't Target Celebrities — They Target the Identity Check You Just Ran

In 2023, roughly 500,000 deepfakes circulated online. By 2025, that number hit 8 million — a 16x increase in under three years. You might assume most of those are political hit pieces or celebrity face-swaps. Some are. But the ones quietly reshaping investigative work? They never go viral. They get submitted as identity verification selfies, video KYC calls, and "live" proof-of-presence checks — and then they disappear into a compliance log nobody reads twice.

The misconception runs deep, and it's understandable. When you see "deepfake" in a headline, it's almost always attached to a famous face. That's what gets clicks. But FinTech Global recently put it plainly: AI-assisted impersonation and deepfake fraud now represent the most alarming development in financial crime, with fraudsters using AI to convincingly replicate real individuals at scale — defeating the very identity verification tools that compliance teams trust most. No viral moment. No news cycle. Just a synthetic face clearing a KYC check and opening a credit line that never gets repaid.

The Fraud Nobody Reports

Here's the uncomfortable math. According to data reported by SQ Magazine, 1 in 20 identity verification failures in 2025 is now linked to deepfake usage — and deepfakes account for 40% of all biometric fraud attempts. That's not a rounding error. That's a structural shift in how fraud gets committed.

Synthetic identity fraud — where a fraudster constructs a fake persona, often by blending real and fabricated details — costs businesses somewhere between $20 billion and $40 billion globally every year. The real killer isn't the initial loss. It's the detection lag. Because no real victim exists to file a complaint, the fraud grows quietly in the dark. A fake identity doesn't call its bank to report suspicious activity. It just keeps borrowing.

This is why impersonation fraud accounts for over 85% of all online fraud attempts, according to Veriff's 2026 Identity Fraud Report. The fraudster isn't hacking your database. They're walking through your front door wearing a mathematically convincing face. For a comprehensive overview, explore our comprehensive face comparison tools resource.

What Facial Comparison Actually Sees

To understand why deepfakes are so effective at defeating identity checks, you need to understand what a facial comparison system is actually doing — because it's not what most people imagine.

The system isn't looking at a photo the way you do. It's not noticing that someone's eyes look a bit too symmetrical or their skin texture seems unnaturally smooth. Instead, it converts each face into a 128-dimensional embedding vector — essentially a list of 128 numbers, where each number encodes a specific geometric relationship between facial landmarks. The distance between cheekbones. The ratio of forehead height to jaw width. The precise angle of the nose relative to the eye sockets. Each measurement becomes one coordinate in a mathematical space with 128 axes.

Think of it like this: every face occupies a unique point on a map — except instead of two dimensions (north-south, east-west), this map has 128 dimensions. Faces that belong to the same person cluster close together in that space. Faces that belong to different people sit far apart. When a facial comparison system makes a match, it's calculating the straight-line distance between two points in that 128-dimensional space — a calculation called Euclidean distance — and checking whether they're close enough to be the same person.

As CaraComp explains it: the distance between two face images reflects the degree of similarity, and optimizing how that distance is calculated directly improves recognition accuracy. The system isn't comparing pixels. It's comparing positions in mathematical space.

Here's why that matters for deepfake fraud. A well-constructed deepfake isn't trying to fool your eyes. It's trying to occupy the right neighborhood in that 128-dimensional space — close enough to the real person that the distance calculation returns a "match." A high match score doesn't mean the face is real. It means the face is mathematically similar to the reference image. Those are very different things.

"AI-assisted impersonation and deepfake fraud represent the most alarming development, with fraudsters now using AI to convincingly replicate real individuals at scale, defeating traditional identity verification tools that rely on static signals." — FinTech Global

The Hidden Layer Most Investigators Miss

Facial comparison catches one thing: whether the face in front of you matches a reference. That's a powerful tool. But determined fraudsters don't stop there — and this is where a lot of investigations run into trouble.

According to Sumsub's fraud trend analysis, fraudsters routinely combine methods in a joined-up attack. They construct a synthetic persona. They submit a deepfake video during onboarding. And simultaneously, they manipulate the behavioral and device data that automated risk systems use alongside biometric checks — device fingerprints, session consistency, typing cadence, navigation patterns. Corrupt the telemetry, and the risk engine makes decisions based on signals that no longer mean what they're supposed to mean. Continue reading: Discord Apple Age Verification Forensic Evidence Investigato.

So you might have a deepfake face that scores well on facial comparison (it's in the right mathematical neighborhood), passing through a system that's simultaneously reading falsified device behavior as "normal." Neither layer catches it alone. Together, they compound into a clean pass.

Biometric fraud attempts surged 58% year-on-year according to FinTech Global, and the verification bypass attempt rate has spiked dramatically — with Keepnet Labs reporting a 3,000% surge in deepfake-assisted verification bypass attempts alongside a 244% increase in digital document forgeries. These aren't isolated incidents. They're industrialized fraud pipelines.

Facial Comparison Is the Baseline, Not the Finish Line

Gartner predicts that by 2026, 30% of enterprises will no longer consider standalone identity verification and authentication solutions reliable in isolation. Read that again slowly. Not "less useful" — not reliable in isolation. That's the industry's own analysts saying a single-layer check has a known failure mode that's being actively exploited.

This reframes what an investigator's job looks like. You're not running a facial comparison and calling it done. You're orchestrating a multi-layer check where the face match is the opening question, not the closing answer. The follow-up questions matter just as much: Did this device move between countries between the onboarding attempt and the next login? Does the behavioral pattern — typing speed, navigation flow, session timing — match how a human actually uses a phone? Did the video submission show genuine micro-expressions, or does it have the telltale stillness of an injected synthetic stream?

None of this requires a forensics lab. It requires knowing what questions to ask and understanding why those questions exist — which starts with knowing that a high match score means "mathematically close," not "definitely real."

So — if someone handed you a "live" selfie video as proof of identity on a case today, what would you check first? The face match score is the obvious answer. But after reading this, you know that's actually the easy part. The harder question is whether everything around that face — the device, the behavior, the temporal consistency — adds up to a person who actually exists.

That's not a nice-to-have skill anymore. In a world producing 8 million deepfakes a year and climbing, it's the difference between closing a case and being fooled by one.