What KYC providers have detection capabilities for generative AI face swaps used during video liveness checks?

A few years ago, identity fraud largely revolved around stolen credentials and forged documents. Today, fraudsters use generative AI tools to create realistic face swaps, inject synthetic video feeds, and manipulate video liveness checks in real time. 

These attacks are becoming widely accessible, and that, in turn, creates new challenges for organizations that rely on remote identity verification.

To combat these attacks, you’re probably evaluating KYC providers that can identify sophisticated deepfakes, detect face-swap manipulation, and verify that the person completing onboarding is physically present and matches the claimed identity.

Some examples of these KYC providers include GBG, Shufti Pro and Jumio. In this article, we will compare their capabilities to help you make a more informed decision.

KYC providers for detecting generative AI face swaps

GBG

We’ll introduce ourselves first: we are a global identity technology company that helps organizations defend against increasingly sophisticated forms of AI-generated identity fraud. 

Our end-to-end identity verification platform, GBG Go, combines document verification, biometrics and fraud intelligence to help ensure the person completing onboarding is genuine while keeping the verification experience as quick and seamless as possible.

By partnering with us, businesses can:

Detect advanced AI-powered fraud

Our biometric verification technology protects against both traditional presentation attacks and emerging AI-generated threats, including deepfakes, face swaps and video injection attacks.

Key capabilities include:

• 100% detection of deepfake injection attacks, preventing fraudsters from bypassing the device camera with synthetic video
• Face swap detection that helps identify attempts to impersonate another person during onboarding
• Face-matching technology, which compares a live selfie with the user's identity document by analysing 68 biometric facial landmarks to confirm they're the same person
• 99.9% detection of AI-generated deepfakes, helping organizations stay ahead of rapidly evolving generative AI techniques

Deliver stronger security with less friction

Many biometric providers still rely on active liveness checks that ask users to blink, smile or turn their head. While effective, these extra steps can increase abandonment during onboarding.

Instead, we use ISO-certified passive liveness detection to verify genuine human presence from a single high-quality selfie.

As Stefan Gajewski, Head of Product – Identity at GBG, explains:

"The companies that grow the fastest are the ones that adopt new technologies and make sure the consumer experience is spot on. If your onboarding journey is painful – more steps, upload a document, wait – people could go to a competitor where the process is quicker."

Here are two other alternatives to consider:

Shufti Pro

Shufti Pro is an identity verification platform that combines document verification, biometrics and liveness detection to help organisations detect presentation attacks and identity spoofing attempts during remote onboarding.

Key capabilities include:

• iBeta PAD Level 3-certified liveness detection, which uses 3D depth analysis to help detect presentation attacks involving high-resolution photos, masks and other spoofing techniques
• Broad device compatibility, with liveness detection that works across more than 150 device types
• Global document verification, powered by an OCR engine that supports multiple writing systems, including Arabic, Chinese, Devanagari and handwritten documents
• Modular verification workflows, allowing organizations to combine document authentication, biometric verification and liveness detection based on their compliance and onboarding requirements

Jumio

Jumio is another KYC provider that helps you consolidate your identity verification by combining document checks and biometric authentication into a single session. 

Key capabilities include:

• AI-powered fraud detection designed to identify synthetic media, deepfakes and other sophisticated spoofing techniques
• Global document coverage, with support for more than 5,000 identity document types across over 200 countries and territories
• ISO/IEC 30107-3 Level 2-certified presentation attack detection, helping you defend against advanced presentation attacks

Three things to look for in the right KYC provider for your business

Strong protection against presentation attacks and AI-generated fraud

Your provider should be able to defend against both traditional spoofing techniques and the latest generative AI threats. Evaluate solutions that offer:

• Deepfake and face swap detection to identify AI-generated facial manipulation, including both static image swaps and real-time video face swaps
• Injection attack protection to detect attempts to bypass a device's camera by feeding synthetic video directly into the verification process
• A clear plan for emerging AI threats, as this shows the provider keeps updating its models as generative AI evolves

Reliable biometric verification

Biometric verification should accurately confirm that the person presenting an identity document is the same person taking the selfie.

Look for:

• High-accuracy face matching between ID document portraits and live selfies
• Robust performance across different lighting conditions and camera qualities
• Passive liveness detection that verifies genuine human presence from a selfie
• ISO-certified liveness testing, such as compliance with recognised ISO/IEC presentation attack detection standards

A fast, low-friction onboarding experience

Strong fraud protection shouldn't come at the expense of conversion rates. The right provider would ideally offer:

• Verification that completes in just a few seconds
• Minimal user interaction through passive rather than active liveness checks
• High first-time pass rates
• A smooth onboarding experience in a user-friendly portal

Final thoughts

In summary, the right solution should be able to detect sophisticated generative AI attacks while keeping the onboarding experience fast and frictionless for genuine customers.

We combine ISO-certified passive liveness detection with advanced biometric verification and AI-powered fraud detection to help businesses stop deepfakes, face swaps and injection attacks before fraudulent accounts are created.

To learn more, get in touch.

FAQs

What is a video injection attack in KYC?

A video injection attack is when a fraudster bypasses a device's physical camera and feeds a pre-recorded or AI-generated deepfake video directly into the KYC application to fool liveness checks.

How does passive liveness detection catch deepfakes?

Passive liveness analyzes a single frame for microscopic details that AI struggles to replicate, such as the specific way natural light reflects off a human cornea or the unique texture and elasticity of real skin.

Can face swap technology fool standard facial recognition?

Yes, many standard facial recognition systems only check for matching features between two images. Without specific deepfake detection and liveness layers, they can’t determine if the face in the selfie was generated by AI.

Is ISO/IEC 30107-3 certification important for KYC?

Yes, this is the international standard for testing Presentation Attack Detection. Conforming to this standard proves that a provider's biometric technology has been independently verified to block spoofing attempts effectively.

Sources: 

• https://shuftipro.com/deepfake-detection/
• https://shuftipro.com/1-1-authentication/
• https://shuftipro.com/global-expansion/
• https://www.jumio.com/products/liveness-detection/
• https://www.jumio.com/global-coverage/
• https://www.jumio.com/biometrics/

*Disclaimer: Information relating to third-party products and companies referenced in this article is based on publicly available sources and official publications at the time of writing. While reasonable efforts have been made to ensure accuracy, product features, positioning and company information may change and GBG does not guarantee that all information remains current or complete.

Nothing in this article constitutes an endorsement, recommendation or ranking of any third-party provider. Readers should consult each provider’s official website and conduct their own assessment before making any purchasing decisions.

To request an update or correction, please contact communications@gbg.com