Notifications
Clear all
Topic starter
22/07/2026 4:37 pm
TL;DR: Deepfake fraud moved beyond celebrity impersonation in 2025, with cases spanning state-sponsored candidate fraud, bribed support agents, romance scams, investment deception, and manipulated political or corporate figures, while the U.S. lost $712 million to deepfake-related scams, according to Incode. Identity verification now has to cover the full communication lifecycle, not just the point of onboarding.
NHIMG editorial — based on content published by Incode: What last year’s AI deepfake fraud cases can teach us in 2026
By the numbers:
- The U.S. lost $712 million to deepfake-related scams in 2025.
- The article says Okta has identified more than 6,500 similar cases globally, the majority believed to be linked to North Korean IT workers seeking remote access.
Questions worth separating out
Q: How should security teams handle deepfake risk in identity workflows?
A: Security teams should treat deepfakes as a trust and verification problem inside identity workflows.
Q: Why do deepfakes create a governance problem for security teams?
A: Deepfakes create a governance problem because they undermine trust in evidence used for decisions, approvals, fraud checks, and incident response.
Q: What breaks when organisations rely on one-time identity checks?
A: One-time checks break when the identity can keep acting after the original trust decision is no longer valid.
Practitioner guidance
- Re-sequence identity proofing around the full lifecycle Move beyond onboarding-only checks and require stronger assurance at support escalation, payment changes, account recovery, and executive-facing workflows.
- Add channel correlation to fraud detection Correlate email, voice, video, and chat signals so one convincing interaction cannot reset the risk picture.
- Classify recruiters and support agents as privileged trust brokers Give hiring and service desks explicit policy, review, and monitoring because they can create or extend organisational trust.
What's in the full article
Incode's full article covers the operational detail this post intentionally leaves for the source:
- Case-by-case breakdown of the five fraud patterns and the real-world sequences behind them
- Deepsight detection architecture across perception, integrity, and behavioural layers
- Examples of how the platform blocks deepfakes, virtual cameras, and synthetic identity attacks in real time
- The article’s discussion of how organisations should think about verification across the communication lifecycle
👉 Read Incode's analysis of deepfake fraud cases and identity verification risk →
Deepfake fraud in 2026: where identity verification controls are failing?
Explore further
22/07/2026 4:42 pm
Synthetic identity has become an identity governance failure, not a media authenticity problem. The article shows that fraudsters no longer need to fool only human judgement. They can now pass hiring screens, support calls, and investment pitches by aligning face, voice, and context across the communication lifecycle. That shifts the control problem into identity proofing, privileged workflow design, and account recovery. For practitioners, the lesson is to govern trust decisions as continuously as access decisions.
A question worth separating out:
Q: Who is accountable when a deepfake bypasses identity controls?
A: Accountability usually sits with the team that owns identity assurance, fraud controls, and recovery design together, because the failure spans multiple governance boundaries. If the programme allowed weak proofing, weak liveness, or weak recovery paths, the control owner must treat that as an identity governance gap, not an isolated incident.
👉 Read our full editorial: Deepfake fraud is shifting from celebrity scams to identity lifecycle abuse
