CaraComp
CARACOMP DEEP DIVE

Fingerprint Scanner Explained: A 15-Minute Gel Thumb Opens Your Bank App

Fingerprint Scanner: Gel Fingers Fool

October 8, 2026•4:00•Watch on YouTube →
Fingerprint Scanner Explained: A 15-Minute Gel Thumb Opens Your Bank App
Chapter 1 of 10 · 70 Percent Of Tries
0:00 / 4:00

Full Transcript

You could lose your savings by morning. A thief can open your banking app with a fake thumb made of gel. Thieves in Vietnam tricked the face checks banks use to recognize you. One person lost $40,000. You have a fingerprint unlock guarding your phone. By the end of tonight, you'll know your money is safe. Could someone empty your account tonight?

70 Percent Of Tries ▶ 0:00

Fake fingers got in on more than 70 percent of tries. Someone with craft store gelatin fooled real fingerprint scanners.

Someone can lift your fingerprint off a glass you drank from. Research published on arXiv describes turning a photo of a fingerprint into a mold. Then a stranger can open your phone.

Your phone saved 8 to 10 small pieces of your fingerprint. Anyone who matches just one piece gets into your phone.


A Smudge On Glass ▶ 0:30

You leave your fingerprint on everything you touch. You leave it on every glass, every screen, and every door handle. You can't change it like a password.

Here's a real case where thieves fooled a bank's face check.

Thieves in Vietnam wanted to get into people's bank accounts. They used AI to make fake faces. Then they used those faces to fool the banks' checks.


How Thieves Did It ▶ 0:54

Police in Vietnam said what the gang did. With fake faces, the thieves walked right past the banks.

The banks let them right in. Police say the gang laundered $38.4 million. One victim lost $40,000.

Police broke up the ring in May 2025. The banks had required a face scan for big transfers.


Sumsub, May 2025 ▶ 1:16

If this helps, a like and a subscribe help us keep it coming.

If your phone checked your finger more strictly, you'd get locked out too. That's why your phone is still easy to fool.

A thief can make a gel finger in 15 minutes. He just uses gelatin from a craft store. Your bank's extra code takes you 3 seconds. With those 3 seconds, a gel finger alone can't move your money.


2 Weeks In Jail ▶ 1:41

Brandon Mayfield is a lawyer in Oregon. The FBI locked him up for more than 2 weeks. At least three examiners had matched him to part of a fingerprint.

You leave your thumbprint right there on your screen. A stranger can copy your thumb off your smudgy screen.

Spain matched the fingerprint to someone else. The FBI apologized, and the government paid him $2 million.


Liveness Turned Down ▶ 2:02

The companies that sell these scanners say they can tell a live finger from a fake, and they call it liveness detection. A check tuned for gelatin fingers can miss silicone ones. Someone with a fake finger can still get into your phone.

For a long time, phones only checked if the lines on the finger matched yours. It never checks whether you're the one actually standing there. Matching your finger and knowing it's you are two different questions. Phone makers added that second question late, and it still misses some fakes.

Call your bank and ask about adding a second code. Never let your thumb be enough to move money.


Call Your Bank ▶ 2:28

Turn on a passcode for sending money. Wipe your phone screen every night. If you lose your phone, call your bank's fraud line.

Your passcode only lives inside your head. Nobody can make a mold of your passcode.

When you wipe your screen, you wipe away the smudge. Set a passcode for every transfer. Change your passwords from a different phone or computer. Then a thief with a fake thumb gets nothing.


The Full Write-Up ▶ 2:54

If you want more, CaraComp has a longer write-up on this. CaraComp also covers door locks and work time clocks.

One review of these systems puts it bluntly. It says attacks can hit the scanner and the data it sends. It says attackers can also go after stored fingerprint data.

Ask your bank to alert you every time money leaves your account. Keep your money apps off any phone you share with someone. If you lose your phone, tell your bank.


3 Ways To Fake ▶ 3:17

A thief has 3 ways to fake you. He can use a mold, a smudge, or a photo. Two of those ways don't even need you there.

Your fingerprint was never a password. You leave your fingerprint on everything you touch.

Tonight, wipe your phone and your screen. Then set a code for sending money. Write down your bank's fraud number.


Up Next: Today's Briefing ▶ 3:37

A thief can start with one glass you've touched. Set that code before you go to sleep.

Every day we take one story like this and make it simple. Subscribe and tap the bell. Tomorrow's is free too. See you in today's briefing. If this helps, a like and a subscribe help us keep it coming.

Read the Article

Fingerprint Scanner Explained: A 15-Minute Gel Thumb Opens Your Bank App
fingerprint scanner

Fingerprint Scanner Explained: A 15-Minute Gel Thumb Opens Your Bank App

Read the full article →