De ce pierderile frauduloase false ar trebui să sperie instituțiile financiare (Pablo Ferrezuelo)

Escrocii au devenit adepți în utilizarea deepfake-urilor și au potențialul de a provoca pierderi semnificative de fraudă cu această tehnologie terifiantă.

Aflați cum sunt folosite deepfake-urile pentru a frauda clienții prin uzurparea de identitate a unor persoane reale și ce pot face băncile pentru a-și menține clienții în siguranță.

Cum Deepfake Tech permite pierderile prin fraudă

Tehnologia deepfake a fost folosită pentru a uzurpa identitatea a numeroase personalități publice, inclusiv celebrități precum

Tom Cruise, ca liderii de afaceri
Elon Musk, și președintele ucrainean
Volodymyr Zelenskyy. Deepfake-urile pot fi folosite pentru o gamă largă de utilizări, inclusiv experimente distractive, cum ar fi reimaginarea filmelor cu diferiți actori (de exemplu, casting

Nicolas Cage ca Superman). 

Dar am văzut și deepfake-urile folosite în scopuri mai sinistre. Pierderile cauzate de fraudă rezultate din escrocherii deepfake au variat între 243,000 USD și 35 milioane USD în cazuri individuale. Deepfake-ul Musk a făcut parte dintr-o înșelătorie cripto care a costat consumatorii din SUA
aproximativ 2 milioane $ peste șase luni. Tehnologia a fost folosită și pentru a simula actori celebri – și uneori oameni obișnuiți – în filme pentru adulți.

What’s truly scary about deepfakes is not just their effectiveness. It’s their newness. This technology is still in its developmental stages and is already capable of producing highly effective illusions. In time, like all other technology, it will only
get more effective. That’s why banks and financial institutions must understand the most frightening types of deepfake fraud to monitor.

4 înșelătorii terifiante Deepfake de urmărit

Atacurile deepfake iau multe forme diferite. Dar fiecare abordare deepfake poate duce la pierderi semnificative de fraudă. După cum veți vedea, fiecare tactică este înfricoșătoare din motive diferite.

Ghost Fraud Deepfakes. A ghost fraud deepfake occurs when a fraudster steals the identity of a recently deceased person. For example, the fraudster can breach the dead person’s account to access their checking or savings account, apply for loans, or hijack
their credit score information. Deepfake technology has (ironically) given this type of fraud new life. The fraud creates a very convincing illusion that a real, living person is accessing the account, making the scam much more believable. 

Undead Claims. This type of fraud has been around for a long time. In some cases, a family member collects their late relative’s benefits (such as Social Security, life insurance, or pension payouts) before anyone learns of the death. Once again, deepfake
technology provides cover for fraudsters and can keep fraud losses hidden for a long time.

‘Phantom’ or New Account Fraud. In this type of fraud, fraudsters use deepfake technology to create a fake identity and take advantage of one of banking’s most vulnerable stages: account opening. Criminals use fake or stolen credentials to open new bank
accounts while the deepfake convinces the bank that the applicant is real. Fraudsters can bypass many security checks – including two-factor authentication (2FA) requirements – with this tactic. Once the account is created, bad actors can use it for money
laundering or to accrue debt. According to
cifre recente, acest tip de deepfake a dus deja la pierderi semnificative de fraudă de aproximativ 3.4 miliarde de dolari.

‘Frankenstein’ or Synthetic Identities. The fictional Dr. Frankenstein built a monster from the remains of different bodies. Fraudsters take a similar approach to synthetic identity fraud by using a combination of real, stolen, or fake credentials to create
an artificial identity. With the aid of deepfakes, fraudsters convince banks that the invented person is real and open credit or debit cards to build up the fake user’s credit score.

Cum pot băncile să protejeze clienții de Deepfakes

Deepfakes are likely to become a central component of criminals’ fraud strategies. As they become more effective, it will only get more challenging for banks and FIs to spot them and prevent fraud losses. That’s a truly terrifying vision. But all is not
lost for banks. Here’s what banks can do to prevent deepfake fraud threats:

1. Completați procesul de deschidere a contului cu Digital Trust

The account opening stage is one of the most vulnerable points in a bank’s workflow. If a fraudster uses a convincing deepfake during the proof of life stage, banks could unknowingly onboard a very risky actor. Using digital trust – which includes a central
pillar of behavioral biometrics – banks can analyze not just the image or video that is provided during onboarding. Biometric solutions on their own (including facial recognition) will not be enough to detect a deepfake. But the behavioral biometrics component
of digital trust can measure how a customer normally behaves. 

But For example, let’s say a new customer claims to be 75 years old. Digital trust solutions can assess whether the customer is really as old as they claim to be from how they handle their device. This includes looking at the way they touch their screen,
the angle at which they hold their phone, or if they type at the typical speed of an elderly customer. These insights can determine if a fake or synthetic identity is being used.

2. Examinați igiena dispozitivului clienților

Digital trust solutions can also be used to assess whether the device used by a customer is trustworthy or not. Banks should look at whether a recording provided for a proof of life was recorded in real time. They should also look at whether the device submitting
the identity check is the same device used for the recording. Digital trust solutions can also assess whether a device may have been hacked or compromised by malware. Banks should look at these factors carefully to assess whether or not a submitted video is
real or not.

3. Consultați furnizorii de ID

In the age of deepfakes, banks can’t shoulder the responsibility of detecting fake images alone. That’s why banks who work with outside vendors for onboarding and digital authentication must understand how these firms conducted their services. Ask identity
verification providers how video for proof of life was provided and whether a video was recorded on the submitting device itself. ID providers should perform their own malware and device hygiene checks to ensure a device used for account opening is trustworthy.

4. Învățați clienții să își protejeze datele

Consumers have a crucial role to play in protecting themselves against deepfake fraud losses. This is no easy task given how much personal data is publicly available. But banks should still caution their customers about how their data can be manipulated
and urge customers to protect themselves. Some core tips for customers include:

• controlați cine vă vede informațiile pe rețelele sociale

• evitând furnizarea de date către site-uri web nedemn de încredere, terțe părți sau descărcarea de aplicații nedemne de încredere

• nu utilizați dispozitive care au un istoric de compromis sau jailbreak

Amenințarea fraudei deepfake ar trebui să sperie băncile pe tot parcursul anului. Din fericire, utilizarea soluțiilor digitale de încredere oferă băncilor o șansă mare de a prinde fraudă înainte de a fi prea târziu.