Attack Vectors

What and how generative AI techniques are used to deceive, impersonate and defraud.
Back to Attack Vectors

Deepfake-as-a-service

Multimodal
Corporate Fraud
Consumer Fraud
Political Disinformation

Deepfake-as-a-service describes commercial platforms and underground marketplaces that productize deepfake creation for non-technical actors. Subscription pricing, drag-and-drop UIs, and customer support have removed the technical barrier to deepfake fraud.

Use cases: Public sector · Finance · Executive impersonation

How it works

  • An operator runs a platform offering face swap, voice clone, or full deepfake video as a service
  • Customers upload reference material and receive output through a web interface or API
  • Underground variants operate on Telegram, Discord, and dark-web forums with crypto payment

Where it shows up

  • Mass deepfake fraud campaigns operated by groups without ML expertise
  • Disposable single-use deepfakes for one-off vishing or BEC attacks
  • Templated deepfake content for romance scams and influence operations
  • Custom-ordered deepfakes targeting specific executives, candidates, or public figures
  • Subscription services producing ongoing synthetic content for fraud or harassment campaigns