Deepfake attacks: what it means for IAM and security teams

TL;DR: AI-driven attacks are growing by nearly 14x in six quarters, according to Pindrop, with deepfake-enabled impersonation now spanning hiring, helpdesk, contact centre, vendor, and executive channels that traditional defences often treat as low risk. Trust verification, identity proofing, and workflow-level controls now matter more than channel assumptions.

Editorial analysis by NHI Mgmt Group, based on content published by Pindrop: “The six high-cost AI attacks every CISO needs to know”.

By the numbers:

• AI-driven attacks are growing by nearly 14x in six quarters.

Key questions

Q: What breaks when organisations rely on one-time identity checks?

A: One-time checks break when the identity can keep acting after the original trust decision is no longer valid.

Q: Why do deepfakes matter to IAM teams?

A: Deepfakes matter to IAM teams because identity governance is only as strong as the assurance behind an approval.

Q: What are the warning signs that impersonation controls are failing?

A: Look for repeated lookalike accounts, cloned domains, sudden brand misuse, staff receiving urgent requests through informal channels, and identity claims that bypass normal verification.

Practitioner guidance

• Harden high-risk trust channels Require out-of-band verification for helpdesk resets, payment approvals, hiring decisions, and vendor requests that arrive through voice or video.
• Tighten identity proofing for sensitive workflows Add step-up checks before any irreversible access or payment action, especially when the request originates from a high-trust persona.
• Define approved AI activity and log it Create explicit policy for sanctioned bots and agents so analysts can distinguish legitimate automation from suspicious impersonation.

Bottom line: AI-enabled impersonation now targets the human processes that grant access, approve payments, and verify identity, not just the technical perimeter.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →