CaraComp
CaraComp
Forensic-Grade AI Face Recognition for:
Get Started7-day refund guarantee**
digital-forensics

Deepfake Examples: Fraud Schemes Behind Five Classification Types

The Deepfake Type Investigators Keep Missing — and Why It's About to Dominate Fraud
A composite image contrasting deepfake examples of face-swap and lip-sync manipulation used in forensic analysis.

Here's something that should stop you cold: a lip-sync deepfake is actually harder to detect than a face-swap deepfake. Not slightly harder. Significantly harder. And most investigators, trained on the face-swap examples that dominate the news, are looking for entirely the wrong artifacts when they encounter one.

TL;DR

Deepfakes are not one category, they're five distinct manipulation types, each leaving different forensic traces, and the type you're dealing with determines which detection strategy will actually work.

That's the thing nobody tells you when "deepfake literacy" gets packaged into a quick explainer: the word "deepfake" describes a family of techniques, not a single method. Grouping them together is a bit like a doctor saying "it's an infection" without distinguishing between viral and bacterial, the treatment changes completely depending on which one you're actually dealing with.

So before you decide something is fake, before you run it through a detection tool, before you start analyzing facial geometry, ask a different question first. What kind of manipulation am I looking at?


Deepfake Fraud: Two Forensic Buckets

Strip away the technical jargon, and deepfake manipulations fall into two broad forensic categories: entire-face synthesis and partial-face manipulation. That distinction alone changes which evidence artifacts matter.

CaraComp DailyEP.31
3 stories · 3:46
Starts at 02:16 — this story
3:46

Watch this story, in under a minute

Plays right here · jumps to 02:16
In this episode

A new briefing every weekday — three stories, three minutes.

Subscribe on YouTube

Entire-face synthesis means the face in the image or video has been substantially replaced or generated, face swaps, talking-head avatars, and fully synthetic faces all belong here. Partial manipulation means only a region of the face has been altered, lip-sync deepfakes are the primary example. The face itself is real. The mouth region has been modified after the fact to match different audio.

Why does this matter? Because detection approaches for each category are almost completely incompatible. Methods trained to spot the seam artifacts and skin-tone discontinuities of a face swap won't find anything suspicious in a video where the face genuinely belongs to the person, only their mouth movements were quietly swapped. You need different tools, different visual vocabulary, and different confidence thresholds depending on which bucket your evidence falls into. This article is part of a series, start with Federal Judges Just Gutted The Its Real Defense And Investig.

700%
year-over-year increase in deepfake fraud attempts recorded by Sumsub as of 2026
Source: TrueScreen

That number, 700%, means this isn't a theoretical forensic exercise. Investigators are encountering manipulated media at operational scale, right now, across fraud cases, identity verification, and legal proceedings. The stakes of misclassifying a manipulation type have never been higher.


The Five Types, One by One

1. Face Swap

This is the one most people picture when they hear "deepfake." One person's face is transplanted onto another person's body in a video or image. The underlying model learns to map facial geometry from a source identity onto a target's head movements. Because the face is being actively replaced frame-by-frame, the failure points are structural: look for edge inconsistencies at the face boundary, mismatches between skin tone across the face and neck, and, critically, behavioral inconsistencies where the identity markers don't match the person's known movement patterns.

Face swaps have been studied the most extensively, which means detection models for this type are more mature. Most commercial detection tools were initially built around exactly this category. That's great if you're actually dealing with a face swap. It's a problem if you're not.

2. Face Reenactment

Reenactment deepfakes don't swap the face, they puppet it. The target person's actual face is kept in place, but their expressions and head movements are driven by a different person's motion data. Think of it as a remote control for someone else's face. The real face appears throughout the video; what's artificial is the sequence of expressions and poses it performs.

Forensic signals here cluster around unnatural expression transitions, moments where the face shifts between emotional states in ways that don't match the person's documented behavioral baseline. Anyone who works in facial comparison develops an intuition for how a specific individual moves. Reenactment deepfakes betray themselves when that behavioral fingerprint breaks down.

3. Lip-Sync Deepfakes

This is where things get genuinely difficult, and where most investigators walk into trouble. A lip-sync deepfake leaves the entire face completely intact. The only thing that's been altered is the mouth region, modified so the visible lip movements match different audio than was originally spoken.

Here's the number that should make you sit up straight: peer-reviewed research from the IEEE/CVF Conference on Computer Vision and Pattern Recognition found that authentic videos show a median audio-visual distance of 0.16, while lip-sync deepfakes show distances of 0.63-0.66. Every single authentic video in their dataset fell below a threshold of 0.5. More than 97.5% of synthetic lip-syncs sat above it. That's not a fuzzy qualitative judgment, it's a measurable mathematical gap between how audio and lip movements align in real speech versus fabricated speech. Previously in this series: Dhs Just Made Facial Recognition Permanent And Nobody Notice.

The reason this gap exists comes down to how natural speech works. Sounds like "p," "b," and "m" require very specific mouth shapes, they're called bilabial sounds because both lips must press together to produce them. In authentic video, the visual and auditory signals for these sounds are tightly synchronized. When a lip-sync model generates replacement mouth movements, it's approximating that coordination after the fact, and the approximation always introduces timing errors that accumulate across the duration of the video.

This is why a single frame from a lip-sync deepfake might look completely plausible, the mouth isn't doing anything obviously wrong in isolation. The manipulation only becomes visible as a pattern across time. As spatial-temporal analysis research on arxiv explains, detection systems extract features by tracking lip movements across consecutive frames in coordination with audio signals, using convolutional neural networks for spatial features and temporal convolutional networks for tracking movement sequences. One frame is not enough. You need the sequence.

"Identifying lip-syncing deepfakes presents greater challenges and is less explored than face-swap deepfake detection. Detecting lip-syncs requires identifying subtle audio-visual mismatches and spatial-temporal inconsistencies not evident in individual frames." arxiv.org research on deepfake detection challenges

4. Synthetic Identity Faces

These aren't manipulations of a real person, they're people who never existed. Generative adversarial networks and diffusion models can produce photorealistic portraits of entirely fictional individuals. No source face. No original footage. Just a mathematically generated face that could pass a casual glance with ease.

The forensic challenge is different here because you can't do a behavioral comparison to a known subject, there's no known subject to compare against. Artifacts tend to cluster in specific regions: the background often shows warping near the head boundary, earrings or glasses frequently show asymmetry, teeth sometimes appear implausibly uniform, and the eyes occasionally show lighting reflections that don't match between left and right. The face isn't "wrong" in the way a swap is wrong. It's too consistent in ways real faces aren't.

5. Full Synthetic Video Generation

The most computationally demanding category: entire video sequences generated from scratch or built from a combination of real footage and synthesis. Clarity AI Research notes a useful forensic wrinkle specific to real-time and live-generated video: speed imposes a quality tradeoff. When deepfake rendering must operate under approximately 100 milliseconds to support live video calls, detail in hard-to-animate regions degrades first. Teeth rendering is particularly vulnerable, look for teeth that appear blurry, shift position between frames, or display unnaturally uniform brightness. The algorithm sacrifices those fine details when time pressure forces shortcuts.


Trusted by Investigators Worldwide
Run Forensic-Grade Comparisons in Seconds
Detailed facial comparison reports. Results in seconds.
Get Started
7-day refund guarantee**

The Lip-Sync Trap That Fools Investigators

It's genuinely understandable why people treat deepfakes as one category. The media coverage is dominated by celebrity face-swap cases, high-profile, visually dramatic, easy to demonstrate. Consumer tools are built around face swaps. The mental model of "fake face = deepfake" gets reinforced constantly.

But that mental model sends investigators looking for the wrong artifacts. An investigator trained on face-swap detection checks for facial geometry irregularities, edge artifacts, and behavioral inconsistency. All the right things, for that specific type. When they encounter a lip-sync deepfake, none of those red flags appear. The face is genuine. The geometry is genuine. The behavior matches the person's baseline. The mouth mechanics relative to the audio are the only thing wrong, and that variable isn't even on their checklist. Up next: Biometric Data Legislation Investigator Compliance Risk.

That's how a lip-sync deepfake gets cleared as authentic by someone who's genuinely competent. They were competent, at detecting the wrong type.

What You Just Learned

  • 🧠 Classification comes before detectionthe manipulation type determines which forensic signals matter
  • 🔬 Lip-syncs are harder than face-swapsa quantified audio-visual distance gap (0.16 vs 0.63) proves this isn't opinion
  • ⏱️ Single frames aren't enough for lip-sync detectionmanipulation only reveals itself across time, not in any one frame
  • 🦷 Teeth are a live deepfake's weak pointspeed constraints force quality sacrifices in hard-to-render regions first

At CaraComp, the work of facial comparison requires knowing not just whether a face has been altered, but howbecause the method changes which comparison steps are valid, which anomalies are meaningful, and what confidence level is defensible. The five-type framework isn't just academic taxonomy. It's operational triage.

Key Takeaway

Before you run a detection tool or start comparing facial geometry, classify the manipulation type. Face swap, reenactment, lip-sync, synthetic face, and full video generation each fail differently, and the type you're dealing with determines which evidence artifacts are worth examining and which ones will send you in completely the wrong direction.

So here's the question worth sitting with: if lip-sync deepfakes are less studied, harder to detect, and practically invisible to face-swap-trained investigators, and they're also among the easiest to deploy in real time with minimal processing requirements, which type do you think is going to dominate fraud attempts over the next few years?

The category that's hardest to catch is also the most convenient to use. That's not a coincidence. That's exactly where the next wave is already headed.

When you review a questionable image or video, what's the first thing you check? Facial geometry, lighting consistency, mouth movement, or whether the whole face may be synthetic? Your answer reveals which manipulation type you've been trained to find, and which ones you might be missing.

Deepfake Video Examples Investigators Actually Encounter

When people ask for deepfake video examples, they usually picture a celebrity face-swap clip. But the deepfake videos investigators handle in real cases look far more mundane: a job candidate on a video call, a customer verifying identity for a bank, a voicemail attached to a fraud claim. These deepfake examples rarely announce themselves. They pass as ordinary footage until someone checks the right artifact.

That's why cataloging real cases matters more than describing techniques in the abstract. A face swap example, a reenactment example, and a lip-sync example each fail in a different place on screen, and knowing where to look separates a fast clearance from a missed fraud.

Deepfake Audio Examples And Why Voice Is the Softer Target

Deepfake audio examples deserve their own category because voice cloning has become far cheaper and faster to produce than convincing video. A short clip of someone's real voice, a voicemail, a conference recording, a social video, is often enough to train a voice model capable of saying anything. Fraud cases increasingly pair a synthetic voice with no video at all, which removes an entire layer of forensic evidence investigators would otherwise rely on.

Fake video and fake audio examples also get combined. A lip-sync deepfake is essentially a face paired with a cloned or substituted voice track, which is exactly why the audio-visual mismatch described earlier is such a reliable signal. When voice and video are analyzed together instead of separately, the timing gap between real speech and synthetic replacement becomes much easier to spot.

Synthetic Media Examples Beyond the Face

Synthetic media is the broader term that includes deepfake video and deepfake audio examples but also covers fabricated images, cloned voices used without any video, and entirely computer-generated scenes with no real footage underneath. Treating synthetic media as one bucket is the same mistake as treating deepfakes as one bucket, each subtype leaves its own trace, and investigators who only look for face artifacts will miss synthetic audio or synthetic still images entirely.

Cases involving synthetic media impersonation now show up across banking, insurance, and legal proceedings, often with real people's names attached to fabricated audio or video. The deepfake impersonation cases that get the most attention are usually the crude ones, since the convincing deepfakes rarely get caught at all, they simply pass.

How Deepfake Technology Keeps Changing the Examples

Deepfake technology has moved fast enough that examples from even two or three years ago look noticeably cruder than what circulates today. Early face swap examples showed visible seams and flickering edges; current deepfake technology renders skin tone and lighting far more convincingly, which is part of why the 700% increase in fraud attempts noted earlier tracks so closely with improvements in generation quality.

Real-time deepfake technology used in live video calls is the newest and most operationally dangerous category, since it must render convincingly fast enough to fool a person in the moment rather than a frame-by-frame forensic review. That speed constraint, as the Clarity AI research noted, is also where the weakest artifacts appear, teeth, edges, and fine detail get sacrificed first when a system has to generate a face in real time.

Reviewing deepfake examples side by side, face swap, reenactment, lip-sync, synthetic identity, and full synthetic video, makes the differences concrete in a way a written description alone can't. Each deepfake example in this five-type framework corresponds to a different failure point, and investigators who study real cases across all five categories build the kind of pattern recognition that a single-category training can't provide. The goal isn't memorizing one deepfake example; it's recognizing which of the five types you're looking at before you commit to a detection method.

Deepfake Scams: How Fraud-Related Deepfake Schemes Actually Work

Deepfake scams rarely start with the video itself. Most deepfake fraud starts with a pretext, a payment request, an urgent wire transfer, or a fake job offer, and the deepfake video or deepfake audio is only the final piece used to make the scam believable. A fraud-related deepfake works best when the target already expects a call or video from the person being impersonated, which is why businesses that handle payments are a common target for these deepfake schemes.

Deepfake phishing takes this one step further by combining a synthetic voice or video deepfake with a traditional phishing message, such as an email or text asking the victim to click a link or confirm account details. Security teams that train staff to spot phishing text alone often miss the deepfake layer entirely, because the scam is built to look like a normal request from a real colleague or vendor. Recognizing deepfake tech as part of a phishing attempt, not just a video trick, helps close that gap.

Fraud deepfake schemes targeting organizations tend to follow a pattern: a scam email or message sets up urgency, then a short deepfake audio or video clip is used to confirm the request feels legitimate. Training staff to slow down before approving any payment tied to a video or voice call, even one that looks and sounds correct, is one of the simplest defenses organizations have against these scams.

Voice cloning deserves its own mention because it is often cheaper to produce than a convincing video deepfake, and a synthetic voice alone is enough to carry out many deepfake scams. A short recording of a real voice can be enough to generate new audio saying almost anything, which is why voice-only fraud attempts are rising alongside video deepfakes. Any organization that verifies identity or approves payments by phone should treat an unexpected voice request with the same scrutiny as an unexpected video call.

Frequently asked questions

What are the main deepfake examples used in fraud schemes?

Deepfake examples used in fraud schemes fall into five distinct manipulation types rather than one single category. Each type leaves different forensic traces, and these traces fall under two broad forensic categories: entire-face synthesis and partial-face manipulation. Which type is involved determines which detection strategy will actually work when investigating suspected fraud.

Why are lip-sync deepfakes harder to detect than other deepfake examples?

A lip-sync deepfake is significantly harder to detect than a face-swap deepfake because most investigators are trained on face-swap examples, which dominate the news, and end up looking for the wrong artifacts entirely. Since lip-sync manipulation only alters part of the face, it doesn't produce the same telltale signs investigators expect.

Why does classifying deepfake examples matter for detection?

Classifying deepfake examples matters because grouping all deepfakes together ignores that each type leaves different evidence artifacts. The comparison given is a doctor saying 'it's an infection' without specifying viral or bacterial, since treatment changes entirely depending on which one is present. Identifying the manipulation type first is necessary before running detection tools or analyzing facial geometry.

Ready for forensic-grade facial comparison?

Full forensic reports with detailed similarity scoring. Results in seconds.

Run My First Search