AI deepfakes are getting better at spoofing KYC verification: Binance exec

Deepfake technology used by crypto fraudsters to bypass Know Your Customer (KYC) verification on crypto exchanges such as Binance is only going to get more advanced, Binanceโ€™s chief security officer has warned.

Deepfakes are made using artificial intelligence tools that use machine learning to create convincing audio, images or videos featuring a personโ€™s likeness. While there are legitimate use cases for the technology, it can also beย used for scams and hoaxes.

Speaking to Cointelegraph, Binance Chief Security Officer Jimmy Su said there had been a rise in fraudsters using the tech to try and get past the exchangeโ€™s customer verification processes.

โ€œThe hacker will look for a normal picture of the victim online somewhere. Based on that, using deepfake tools, theyโ€™re able to produce videos to do the bypass.โ€

Su said the tools have become so advanced that they can even correctly respond to audio instructions designed to check whether the applicant is a human and can do so in real-time.

โ€œSome of the verification requires the user, for example, to blink their left eye or look to the left or to the right, look up or look down. The deepfakes are advanced enough today that they can actually execute those commands,โ€ he explained.

However, Su believes the faked videos are not at the level yetย where they can fool a human operator.

โ€œWhen we look at those videos, there are certain parts of it we can detect with the human eye,โ€ for example, when the user is required to turn their head to the side, said Su.

โ€œAI will overcome [them] over time. So it’s not something that we can always rely on.โ€

In August 2022, Binanceโ€™s chief communications officer, Patrick Hillmann,ย warned that a โ€œsophisticated hacking teamโ€ was using his previous news interviews and TV appearances to create a โ€œdeepfakeโ€ version of him.

The deepfake version of Hillmann was then deployed to conduct Zoom meetings with various crypto project teams, promising an opportunity to list their assets on Binance โ€” for a price, of course.

โ€œThatโ€™s a very difficult problem to solve,โ€ said Su, when asked about how to combat such attacks.

โ€œEven if we can control our own videos, there are videos out there that are not owned by us. So one thing, again, is user education.โ€

Related: Binance off the hook from $8M Tinder โ€˜pig butcheringโ€™ lawsuit

Binance is planning to release a blog post series aimed at educating users about risk management.

In an early version of the blog post featuring a section on cybersecurity, Binance said that it uses AI and machine learning algorithms for its own purposes, including detecting unusual login patterns and transaction patterns and other โ€œabnormal activity on the platform.โ€

AI Eye: โ€˜Biggest everโ€™ leap in AI, cool new tools, AIs are the real DAOs