SCAM ALERTS
Could you spot a deepfake on a live video call?
Scammers are already using AI-generated faces in real time on video calls. A fraud investigator showed how a simple test, holding three fingers in front of the face, helps expose the fake. See how the scam works and how to protect your company.
IN 30 SECONDS
- Real-time deepfakes are already being used on video calls to run scams.
- Asking the person to pass a hand in front of their face or turn to the side often reveals glitches in the image.
- No visual test is foolproof: the real defense is process.
- Urgent transfer requests must always be confirmed through another channel.
The case: a scammer exposed live
Jim Browning, an investigator known worldwide for exposing scam call centers, got on a video call with a scammer posing as a representative of a supposed stolen cryptocurrency recovery company. The face on screen wasn’t real: it was being generated by AI in real time.
The turning point came with a simple request: “Could you put three fingers in front of your face?” The reaction gave the fake away, because a hand moving in front of the face tends to distort the synthetic image. The video went viral as “the three-finger test.”
The “recovery” scam
Companies that promise to recover money lost to scams are often a second scam aimed at the same victims.
Why this matters for companies
The same technique has already been used against businesses. In 2024, an employee at a multinational in Hong Kong transferred about US$25 million after joining a video call in which the CFO and other colleagues were all deepfakes. The script is always the same: urgency, secrecy and an authority figure asking for an exception to the process.
Signs that the face on screen may be fake
- Objects in front of the face
A hand, fingers or a cup passing across the face cause blurring, cut-outs or distortions. - Profile views and sudden moves
Turning the head to the side or moving close to the camera often breaks the mask. - Eyes, teeth and hair
Odd blinking, blurry teeth and hair outlines that seem to “float.” - Light and shadow
Lighting on the face that doesn’t match the room or doesn’t change with movement. - Voice and mouth
A lag between speech and lip movement, or a voice with no natural breathing. - Resistance to tests
Excuses for not turning on the camera, not moving or ending the call.
A visual test helps, but it isn’t enough
Deepfake tools are evolving fast, and some already handle hands and profile views better. The three-finger test is a good warning sign, not a guarantee.
The defense that works: process
- Confirm through another channel
A request for a transfer, a change of bank details or sensitive information? Call the number you already had, not the one given during the call. - Internal passphrase
Agree on a verification phrase for urgent requests from leadership, known only to the people involved. - Dual approval
No out-of-the-ordinary transfer goes out with the approval of just one person. - Urgency is a red flag
Tight deadlines, secrecy and “don’t tell anyone” are classic social engineering techniques. - Train your teams
Show real examples and run simulations, especially with finance, HR and executive assistants.
The question that remains
Would your team know what to do if the “CEO” called asking for an urgent transfer and the face on screen looked perfect? If the answer was a hesitation, that is your next security gap.
Quick checklist for your company
- Rule to confirm financial requests through another channel
- Verification passphrase agreed with leadership
- Dual approval for out-of-the-ordinary transfers
- Finance and HR trained on deepfakes
- Social engineering simulations carried out
- A clear channel to report scam attempts
HOW GESTÃO DE TI CAN HELP
Cybersecurity
Team awareness, simulations and processes that stop social engineering scams.
For information only. This does not replace a professional review of your specific case. Legal references reflect the rules in force on the publication date (Brazilian law).