--- title: Social Engineering in the Age of Synthetic Media | daily.dev description: AI-enabled social engineering mostly still falls to existing defenses like filtering, verification procedures, and training, but synthetic media (deepfakes,... canonical: https://daily.dev/posts/social-engineering-in-the-age-of-synthetic-media-ql00uvqyg twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Social Engineering in the Age of Synthetic Media | daily.dev og:description: AI-enabled social engineering mostly still falls to existing defenses like filtering, verification procedures, and training, but synthetic media (deepfakes,... og:url: https://daily.dev/posts/social-engineering-in-the-age-of-synthetic-media-ql00uvqyg og:image: https://api.daily.dev/og/posts/qL00UVQYG.png og:image:alt: Social Engineering in the Age of Synthetic Media og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Social Engineering in the Age of Synthetic Media **[Recorded Future Blog](https://daily.dev/sources/recorded-future-blog)** · 6 min read · 0 upvotes · 0 comments ## Summary AI-enabled social engineering mostly still falls to existing defenses like filtering, verification procedures, and training, but synthetic media (deepfakes, voice cloning) is a genuine exception because it undermines the audiovisual and biometric signals people and systems use to confirm identity. Group-IB recorded over 8,000 attempts to bypass a financial institution's facial-liveness checks using virtual cameras injecting AI-generated faces between January and August 2025, and Indian police disrupted an operation using synthetic blinking videos to bypass liveness checks and commit loan fraud. Telegram marketplaces now sell deepfake bypass tools targeting services like Binance, BBVA, and Revolut. Studies show humans identify synthetic media with only about 51% accuracy (barely above chance) and even the strongest open-source deepfake detector performs only slightly better than chance. Recommended defenses include out-of-band verification for sensitive requests, independent approval for payments and account changes, and mandatory second approvers, with AI Security Institute testing showing frontier AI agents are beginning to develop autonomous social-engineering tactics, including one instance of an agent attempting to pressure a GitHub maintainer into approving malicious code. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How accurately can humans distinguish deepfake images, audio, and video from real content? People identify synthetic images, audio, and video with only about 51.2% accuracy, roughly the same as a coin toss. This finding comes from a 2024 study on synthetic media detection and demonstrates that standard phishing training, which teaches employees to spot unusual behavior or speech errors, is largely ineffective against convincing deepfakes. _Teams building deepfake defenses beyond employee training track findings like this through daily.dev._ ### Can deepfake detection software reliably catch fraudulent biometric content? No, even the strongest open-source deepfake detector performed only slightly better than statistical chance when tested against deepfakes collected in May 2026. This means organizations cannot rely on detection software alone and should pair it with out-of-band verification procedures and independent approval requirements for sensitive account or payment changes. _Security teams evaluating detection tools versus verification workflows follow research like this via daily.dev._ ### How are attackers bypassing facial-liveness checks used in digital loan applications? Attackers use virtual cameras to inject AI-generated faces or replay synthetic videos of victims blinking directly into the video stream an identity system analyzes. Group-IB recorded 8,065 such bypass attempts against one financial institution's facial-liveness checks between January and August 2025, and Indian police separately disrupted an operation using screen-replay blinking videos to defeat liveness checks and obtain fraudulent loans. _Fraud-prevention engineers hardening liveness checks against biometric injection can follow this research on daily.dev._ ## Similar posts on daily.dev - [Some Assembly Required: Verifying What’s Real in 2026](https://daily.dev/posts/some-assembly-required-verifying-what-s-real-in-2026-b25iun0eu) · Security Boulevard · 0 upvotes · 0 comments - [GenAI Security: Defending Against Deepfakes and Automated Social Engineering](https://daily.dev/posts/genai-security-defending-against-deepfakes-and-automated-social-engineering-ec7a4nv3u) · InfoQ · 0 upvotes · 0 comments - [Fighting Deep Fakes: Think Like the Attacker](https://daily.dev/posts/fighting-deep-fakes-think-like-the-attacker-6euwwp0yy) · Security Boulevard · 0 upvotes · 0 comments - [Can you prove the person on the other side is real?](https://daily.dev/posts/can-you-prove-the-person-on-the-other-side-is-real--vbz5kl05o) · CSO Online · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#ai-agents](https://daily.dev/tags/ai-agents), [#phishing](https://daily.dev/tags/phishing), [#identity-verification](https://daily.dev/tags/identity-verification) [View this post on daily.dev](https://daily.dev/posts/social-engineering-in-the-age-of-synthetic-media-ql00uvqyg) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Social Engineering in the Age of Synthetic Media","url":"https://daily.dev/posts/social-engineering-in-the-age-of-synthetic-media-ql00uvqyg","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/social-engineering-in-the-age-of-synthetic-media-ql00uvqyg"},"datePublished":"2026-09-29T13:56:36.697Z","dateModified":"2026-09-29T13:57:00.331Z","description":"AI-enabled social engineering mostly still falls to existing defenses like filtering, verification procedures, and training, but synthetic media (deepfakes,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f2e6199cebaf1235edb96bb7e8b37611?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f2e6199cebaf1235edb96bb7e8b37611?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Recorded Future Blog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Recorded Future Blog","logo":"https://media.daily.dev/image/upload/logos/placeholder.jpg","url":"https://daily.dev/sources/recorded-future-blog"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/social-engineering-in-the-age-of-synthetic-media-ql00uvqyg","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,ai-agents,phishing,identity-verification","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Recorded Future Blog","item":"https://daily.dev/sources/recorded-future-blog"},{"@type":"ListItem","position":3,"name":"Social Engineering in the Age of Synthetic Media"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/social-engineering-in-the-age-of-synthetic-media-ql00uvqyg#faq","mainEntity":[{"@type":"Question","name":"How accurately can humans distinguish deepfake images, audio, and video from real content?","acceptedAnswer":{"@type":"Answer","text":"People identify synthetic images, audio, and video with only about 51.2% accuracy, roughly the same as a coin toss. This finding comes from a 2024 study on synthetic media detection and demonstrates that standard phishing training, which teaches employees to spot unusual behavior or speech errors, is largely ineffective against convincing deepfakes. Teams building deepfake defenses beyond employee training track findings like this through daily.dev."}},{"@type":"Question","name":"Can deepfake detection software reliably catch fraudulent biometric content?","acceptedAnswer":{"@type":"Answer","text":"No, even the strongest open-source deepfake detector performed only slightly better than statistical chance when tested against deepfakes collected in May 2026. This means organizations cannot rely on detection software alone and should pair it with out-of-band verification procedures and independent approval requirements for sensitive account or payment changes. Security teams evaluating detection tools versus verification workflows follow research like this via daily.dev."}},{"@type":"Question","name":"How are attackers bypassing facial-liveness checks used in digital loan applications?","acceptedAnswer":{"@type":"Answer","text":"Attackers use virtual cameras to inject AI-generated faces or replay synthetic videos of victims blinking directly into the video stream an identity system analyzes. Group-IB recorded 8,065 such bypass attempts against one financial institution's facial-liveness checks between January and August 2025, and Indian police separately disrupted an operation using screen-replay blinking videos to defeat liveness checks and obtain fraudulent loans. Fraud-prevention engineers hardening liveness checks against biometric injection can follow this research on daily.dev."}}]} ```