Fraudsters have gotten really good at faking faces. AI-generated photos, deepfake video and injection attacks can slip past identity verification that wasn’t built to catch them, which means you may be approving fraudulent users right now without knowing it.
Stricter checks seem like the obvious solution, but they can come with trade-offs. For example, additional tasks or challenges slow down genuine customers who expect to get onboarded fast, and overly rigid settings can flag real people by mistake.
Real-time liveness detection can help, though not every solution protects against sophisticated deepfakes equally well. And even the strongest liveness technology is just one piece of an effective fraud prevention strategy.
In this article, we’ll walk you through how real-time liveness detection works, why a layered approach matters and seven leading solutions to consider for combating deepfake fraud.
We’ll cover:
Ready to step up your fraud detection to address advanced attacks like deepfakes? Book a demo to discover how GBG’s layered fraud prevention approach can help.
Real-time liveness detection checks that a real, physically present person is on the other end of an identity verification session. It’s built to catch someone pretending to be somebody else, whether that’s with a photo, a pre-recorded video, a mask or another spoofing trick. You’ll usually run into it during selfie capture or video-based verification.
To tell a live person from a fake, the system looks at biometric and visual signals, like facial movement, skin texture, depth cues, lighting or other signs of authenticity. While the session runs, it usually returns a result you can act on, such as approve the applicant, reject the attempt or ask for additional verification.
There are two main approaches:
So, how does this help with deepfakes? Fraudsters can use AI-generated images, face swaps, or manipulated videos to pose as genuine customers during onboarding or authentication. Liveness detection helps flag attempts to pass off synthetic or manipulated faces as a real person, especially when the fake is held up to a camera.
That said, solutions vary in how well they protect against convincing deepfake attacks. For example, some are designed mainly to catch physical presentation attacks, like a printed photo, while others add specialized capabilities for detecting AI-generated media and digital injection attacks.
Liveness detection answers if biometric authentication evidence comes from a genuine, physically present person. However, passing a liveness check doesn’t make someone genuine.
How so? Well, a fraudster can be a real, live person committing identity theft using a stolen identity, a manipulated document, or a synthetic identity. And sophisticated attackers may skip the camera altogether by injecting manipulated media directly into the verification process.
That’s why a layered approach works best. Pairing liveness detection with other verification methods lets you assess the biometric capture, the identity evidence, and the person’s broader risk profile together. Here’s what to look for:
The seven providers below have a lot in common. Each one offers real-time liveness detection and helps protect against deepfakes and injection attacks. Most lean on passive liveness to keep verification quick for genuine customers, though some also offer active options. Most also pair liveness with other identity verification tools, like document checks, face recognition and matching and risk signals.
Where they differ is in the details: how they handle deepfakes and injection attacks, what else they offer and how easily they fit into the way your team already works. We’ll start with GBG since we wrote this piece, then look at the others.
We are an identity verification and KYC and KYB provider that combines passive liveness detection, biometric verification, document fraud detection and identity intelligence to help you identify advanced impersonation attempts. Through our platform, you can bring these capabilities together in configurable workflows with 110+ KYC modules instead of managing each check independently.
Here are three reasons 20,000+ global customers choose to partner with us for identity verification and fraud prevention:
Our passive liveness detection confirms that a real person is physically present during biometric capture without requiring them to blink, smile, turn their head or complete any other active challenge to prove it.
It looks at a single selfie for signs of spoofing or impersonation, like the flat texture of a printed photo, the glare of a screen or the edges of a mask, in order to catch presentation attacks. The technology is certified to the highest applicable ISO/IEC presentation attack detection standard.
Deepfakes are another way in for fraudsters, who can use face-swap apps to put the document owner’s face into an image or video. Our passive liveness works alongside its SDK-based capture, which builds the selfie step directly into your mobile or web flow, to detect deepfakes and replayed videos. Our identity proofing also helps protect against single-shot face swap apps.
We tackle injection attacks at the point of capture. Because the selfie is taken inside the SDK, images and video come live from the device’s native camera instead of being uploaded from an unknown source. The SDK detects virtual cameras and other methods used to bypass capture, which helps you verify that the media is more likely to be authentic.
Customers are guided through the selfie as it happens, which helps them submit an acceptable one on the first try, and the added protection doesn’t slow them down. In testing, ISO/IEC-certified liveness detected up to 100% of known injection attacks made with certain face-swap tools.
You can then compare the selfie to the photo on the identity document in seconds using advanced facial recognition: our system analyzes 68 biometric facial landmarks to help establish if the person presenting the document is its rightful owner.
Even with a live face present during verification, the ID or personal details behind it could still be fake. We check those too.
Our document verification runs 50+ forensic authentication checks in seconds to spot signs of forgery, including photo substitution, altered text and other changes to government-issued IDs. It supports 8,500+ documents in 195 countries, drawing on a global ID library curated by our own forensic document experts using millions of real-world samples.
Enhanced tamper detection then takes a closer look, picking up physical modifications to government-issued IDs and checking for document presence. It’s 98% effective at detecting fraudulent document modifications made after issuance, with a false detection rate below 1%.
We also helps identify synthetic identities and other fraud that biometric checks alone would miss. Because matching a record only shows an identity exists, we can check whether the identity has the track record of a genuine person.
GBG Trust, a cross-industry network with millions of insights, detects identity data anomalies and high-velocity submissions in real time, with 96% identity fraud detection accuracy.
With our identity and fraud platform, you get access to 110+ identity and fraud modules through a single API integration, so you can combine biometric verification, document checks, identity data and fraud intelligence in one place.
Layering these checks in a single platform keeps fraud prevention simpler than managing multiple vendors.
You can configure verification workflows around your own risk requirements, deciding when additional checks should run and when a user needs more investigation.
For instance, an applicant with consistent identity information might move ahead automatically, while suspicious document evidence or conflicting identity data could trigger additional verification. The drag-and-drop, no-code workflow builder allows you to make those changes quickly.
Our platform also supports A/B testing, so you can see how changes affect approval rates, referrals and customer experience. And as fraud techniques evolve, your team can adjust verification rules and workflows without needing a new integration for every change.
Since we may not always be the right fit for every business, here are six alternatives to consider:
Mitek¹ specializes in digital identity verification and mobile image processing using AI. Its MiVIP platform can layer data, documents, biometrics, risk insights and AML screening, so liveness is one piece of a bigger workflow.
Mitek’s IDLive Face passively detects fraud from a single image, with no blinking, smiling or head turning required. It picks up natural face movements when they’re present and detects injection attacks from virtual or external cameras. Because it runs quietly in the background, it can be harder for fraudsters to tell it’s there and adapt their approach. Mitek reports testing the technology for consistent performance across race, gender and age.
IDLive Doc looks for uploaded, injected or replayed documents to tell genuine ones apart from digital reproductions in real time. It also targets high-resolution screen images meant to slip past verification, altered portrait photos on IDs and overlays, swaps and other signs of physical forgery.
SEON² is an AI-powered fraud prevention and AML compliance platform, and its approach to liveness starts before the camera even opens. It first analyzes fraud signals across the customer’s email, phone number, IP address and device to build a baseline level of trust. From there, users get clear, real-time instructions to capture their face and ID document through a simple, passive process.
SEON detects injection attacks, browser-based spoofing, presentation attacks and manipulated streams in real time. It can also compare faces across sessions, which helps spot the same person using multiple IDs or one ID being used by different people. All of those layers feed into a single risk decision.
Didit³ is an identity verification and fraud prevention platform with a strong focus on document checks. Its document liveness targets four common attack types: screen captures, phone photos, printed copies and portrait substitutions on otherwise real documents. Tunable thresholds also reject low-quality captures up front, so they never reach your manual-review queue.
On the selfie side, passive liveness detection looks for 3D masks, deepfakes, replay attacks and printed photos. You can also switch on Age Estimation within a liveness workflow, and the same selfie returns both a liveness verdict and an estimated age band.
Didit offers two face tools:
Microblink⁴ treats liveness detection as one signal among many, alongside AI-powered document, biometric and fraud checks, in its Identity Intelligence OS platform. Each check feeds into risk scoring, adaptive workflows and ongoing evaluation of the person behind the account.
Its passive face check analyzes depth cues, surface texture and lighting behavior to distinguish genuine physical presence from spoofed, synthetic or replayed inputs. Autocapture and on-device feedback help make the experience smoother for genuine users.
Microblink also offers liveness for documents and cards:
A further layer analyzes each document for generative AI manipulation, deepfake artifacts and synthetic identity signals.
Jumio⁵ is an AI-powered identity verification platform, with liveness detection that uses a patented active illumination technique. It’s designed to give enhanced protection against deepfakes, injection attacks and presentation attacks. Automated capture gives users real-time feedback so they can take a good selfie with minimal friction.
The selfie technology checks that the user is real (rather than a photo, video or paper copy), isn’t wearing a mask and is physically present at the moment of detection. Jumio can also combine biometrics and liveness with other signals in one platform for a layered defense.
iProov⁶ is a biometric identity security provider, and it offers two liveness options:
iProov’s face authentication also uses active bias mitigation to help keep performance consistent across age, gender and skin tone.
Strengthen your defenses against evolving fraud methods. Book a demo to learn how we can help.
Liveness detection can flag a deepfake shown to the camera, like a face swap playing on another screen, because it picks up on signs the face isn’t a live person, such as unnatural texture, odd lighting and a lack of depth.
Some solutions are built mainly to catch physical fakes like printed photos and masks, while others include specialized capabilities for spotting AI-generated media.
Liveness detection asks whether a real, physically present person is in front of the camera. Deepfake detection determines if the face or video has been generated or altered by AI.
Most false rejections come from poor captures, so guided capture with real-time feedback on lighting and framing helps genuine customers get a good selfie on the first try.
Test candidate solutions with your own customers across different devices and lighting conditions, tune thresholds so strict settings don’t trip up good customers and let borderline cases retry or step up to additional verification instead of rejecting them outright. Then track approval rates, retries and abandonment so you can keep adjusting.
*Disclaimer: Information relating to third-party products and companies referenced in this article is based on publicly available sources and official publications at the time of writing. While reasonable efforts have been made to ensure accuracy, product features, positioning and company information may change and GBG does not guarantee that all information remains current or complete.
Nothing in this article constitutes an endorsement, recommendation or ranking of any third-party provider. Readers should consult each provider’s official website and conduct their own assessment before making any purchasing decisions.
To request an update or correction, please contact press@gbg.com.
Sources:
1. https://www.miteksystems.com/products/mitek-verified-identity-platform
2. https://seon.io/products/liveness-detection/
3. https://didit.me/products/id-verification/
4. https://microblink.com/liveness-detection/