Topic starter
11/07/2026 1:59 pm
TL;DR: Deepfake incidents in Asia-Pacific increased by over 1,500% in a single year, while Vietnam recorded a 25.3% jump in deepfake-related fraud incidents, according to Oz Forensics, as fraudsters used cloned faces, voices, and synthetic identities to bypass eKYC and biometric checks. Legacy onboarding controls are now being tested against industrialised impersonation, not just document fraud.
Editorial analysis by NHI Mgmt Group, based on content published by Oz Forensics: “Deep fake-Driven Identity Fraud in Southeast Asia”.
Key questions
Q: What breaks when biometric onboarding relies on face match alone?
A: Face match alone breaks when attackers can present synthetic or replayed images that look legitimate but do not prove a real, live person is present.
Q: Why do deepfakes make video-based identity verification so risky for remote operations?
A: Deepfakes undermine video verification because they can convincingly mimic a person’s face and voice, which makes social engineering easier to scale.
Q: How do security teams evaluate whether liveness detection is strong enough?
A: Look for measurable resistance to presentation attacks, defined false accept and false reject rates, and testing that reflects the real environment where the control will run.
Practitioner guidance
- Strengthen eKYC with layered proofing Combine document integrity checks, liveness detection, biometric forensics, and behavioural signals so no single control carries the whole trust decision.
- Test capture-path integrity Detect virtual cameras, replayed media, injected video streams, and other non-live inputs before biometric matching is accepted.
- Segment high-risk onboarding journeys Apply stricter verification for telecom activation, account opening, and large-value financial access than for low-risk self-service flows.
Bottom line: Deepfake identity fraud turns remote onboarding into an adversarial trust problem rather than a simple verification workflow.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
11/07/2026 2:10 pm
Deepfake fraud is now a digital identity governance problem, not just a fraud problem. The article shows that the attack surface has moved into onboarding, eKYC, and remote verification, where identity proofing decisions are made at speed. That means identity programmes have to treat fraud resistance as part of assurance design, not as a downstream detection layer. Practitioners should reframe remote verification as an adversarial trust decision.
A few things that frame the scale:
- Sophisticated multi-step fraud rose 180%, according to Sumsub's Identity Fraud Report 2025-2026.
A question worth separating out:
Q: Who should own deepfake-resistant identity verification across the business?
A: Ownership should sit across IAM, fraud, compliance, and product teams because the control affects risk, onboarding conversion, regulatory obligations, and customer experience. When those functions are separate, organisations tend to optimise one layer while leaving another exposed, which creates inconsistent assurance and governance gaps.
👉 Read our full editorial: Deepfake identity fraud in Southeast Asia is reshaping digital trust