Deepfake fraud is scaling fast: what controls are teams missing?

TL;DR: Deepfake fraud has surged 2,137% in three years and global fraud losses could reach $40 billion by 2027, according to IDnow, as AI, shell companies and cryptocurrency help criminal networks industrialize scams faster than fragmented enforcement can respond. Trust collapses when verification, payment controls and cross-border intelligence sharing stay siloed.

Editorial analysis by NHI Mgmt Group, based on content published by IDnow: “The true face of fraud #6: 3 ways to fight it in 2026.”.

By the numbers:

• Detected fraud cases across Europe have surged 43% year-over-year, from 3.89 to 5.57 per 100,000 transactions.
• Only around 4% of customers ever recover their money after fraud losses.

Key questions

Q: What are the signs that an identity process is failing to detect deepfake impersonation?

A: Warning signs include repeated verification passes with inconsistent facial movement, voice mismatches across channels, unusual access from high risk locations, and approval requests that bypass normal challenge steps.

Q: Why do cross-border fraud networks outpace traditional controls?

A: They exploit the seams between institutions, jurisdictions and functions.

Q: How should security and fraud teams connect identity signals to fraud detection?

A: They should treat identity signals as inputs to a lifecycle model that spans onboarding, access, and transaction monitoring.

Practitioner guidance

• Strengthen deepfake-resistant verification Use multimodal liveness, behavioural checks and out-of-band confirmation for high-risk onboarding, account recovery and payment authorisation flows.
• Link identity proofing to payment risk Require transaction-level confirmation when identity, device or behavioural signals deviate from the expected profile, especially for urgent transfers or first-time beneficiaries.
• Build shared fraud intelligence workflows Create secure internal processes for sharing suspicious IPs, document patterns, device fingerprints and known mule indicators across fraud, IAM and security teams.

Bottom line: Deepfake-enabled fraud is no longer a niche social engineering tactic. It now sits at the intersection of identity proofing, payment authorisation and cross-border criminal coordination.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →