AI Weekly Malaysia

Spanish police caught a suspected digital certificate fraudster after his real-time deepfake face-swap software glitched for barely a second during a live video identity check, exposing his real face. He had made 38 attempts to impersonate 30 people, using forged documents, household spotlights with colored bulbs to simulate ID holograms, VPNs, and deepfake tools to bypass a certificate authority's visual verification. Certificates were fraudulently issued on multiple occasions before the glitch led to his identification.

Why: If you build or rely on video-based KYC, identity verification, or e-signature onboarding, this is a concrete demonstration that real-time deepfake attacks against live face checks are already happening and can succeed multiple times. The attacker's setup was low-cost—household spotlights and consumer deepfake software—yet defeated a certificate authority's checks. Review whether your verification flow includes liveness detection that goes beyond matching a face to a photo, and consider whether your fraud monitoring catches repeated attempts from the same device or IP range even when VPNs are used.