When Live Isn’t Live

elfie matched. The liveness check passed. The applicant appeared real.

Yet fraudsters are increasingly bypassing these controls without ever standing in front of a camera.

Instead of using photos, masks, or low-quality spoofs, threat actors are injecting synthetic media directly into onboarding workflows, turning AI-generated identities into seemingly legitimate customers. These methods are not theoretical. They are being openly discussed, refined, and sold within criminal communities, complete with tutorials, pricing, and support.

This attack doesn’t break biometric verification through brute force. It exploits the assumptions behind it.

As financial institutions continue to invest in biometrics as a frictionless security control, many are missing a critical reality: fraudsters have learned how to make “live” no longer mean live.

Download the report