Skip to content
Exiphore
All use cases

Financial crime · Regulatory

Identity and video-KYC abuse

Synthetic faces defeat liveness checks and open mule accounts at scale. Examine onboarding captures and link recurring synthetic identities.

The scenario

Accounts are being opened with documents that check out and faces that pass liveness. Months later they surface as mule accounts in an unrelated investigation. The onboarding captures were retained, and the question is whether the person on the video ever existed.

Why it is difficult

Liveness checks were not built for this

Liveness confirms something is present in front of the camera. A video injected into the capture stream, or a synthetic face rendered in real time, satisfies that check while defeating its purpose.

The fraud is found long after onboarding

By the time an account is identified as a mule, the capture is months old and the operation has opened many more.

Each institution sees one fragment

The same synthetic identity is used across banks and platforms. No single institution sees enough to recognise the pattern.

How Exiphore approaches it

Physiological signals on the capture

Onboarding video is short but usually cooperative, well-lit and front-facing — the conditions under which physiological measurement performs best. That makes retained captures unusually good material to examine.

Examine the document and the face together

The submitted identity document is examined structurally alongside the capture, so a genuine face with an altered document, or the reverse, is visible.

Recurring identity linking

Where the same synthetic face or the same production toolchain appears across captures, the registry surfaces it — which is what turns scattered account fraud into one identifiable operation.

Retrospective review at volume

Batch intake allows retained captures to be re-examined against current measurements, rather than only assessing new onboarding.

What this will not settle

  • The platform examines the capture. It cannot confirm that the person depicted is the person named on the document — that is an identity verification question, not a media authentication one.
  • Cross-institution linking requires the captures to be held in one registry. It does not reach across organisations on its own.

Bring us an exhibit you already know the answer to

The most useful demonstration is on your own material, from a closed case where the ground truth is settled.

Request a demo

Related use cases