Attack Vectors

What and how generative AI techniques are used to deceive, impersonate and defraud.
Back to Attack Vectors

Face swap

Video
NCII
Corporate Fraud
Consumer Fraud

A face swap deepfake replaces one person’s face with another’s in a video, mapping the target’s features onto the original speaker’s body and movement. Modern face swap tools run in real time on consumer hardware and produce convincing output without specialized expertise.

Content advisory: this technique is used to produce AI-generated child sexual abuse material (CSAM), including sexual imagery of real children and fully synthetic depictions. Creating, possessing, or sharing this material is illegal. Report suspected CSAM to the NCMEC CyberTipline at report.cybertip.org.

Use cases: Executive impersonation · Identity verification & KYC · Media authentication & moderation

How it works

  • A neural model is trained on images or video of the target’s face
  • The model overlays the target’s face onto the source video, matching expression, head pose, and lighting frame by frame
  • Some implementations operate live, applying the swap to webcam feeds during video calls

Where it shows up

  • Live executive impersonation on Zoom, Teams, or Webex
  • Fake candidate interviews where the applicant’s face is swapped to bypass identity checks
  • Manipulated video evidence used in legal disputes or media leaks
  • Non-consensual imagery placing real faces onto unrelated bodies
  • Celebrity impersonation in fraudulent endorsements or product promotions