Three-Finger Test Is an Unreliable Deepfake Defense, Experts Warn

· Original article ↗

Summary

A viral three-finger check can expose flaws in some real-time deepfakes, but experts warn newer tools may overcome it. The article recommends process-based identity verification, such as callbacks and second-channel approval, over visual tells.

Key points

  • A scammer reportedly ended a video call after being asked to hold up three fingers, a test that can reveal rendering problems when a hand passes in front of a face.
  • The article says lip-sync lag and edge artifacts can also reveal some deepfakes, but these flaws may be fixed in newer tools.
  • Reality Defender CEO Ben Colman said current real-time deepfake models have addressed the three-finger test’s limitation; OpenOrigins CEO Manny Ahmed warned it can create false confidence.
  • Other suggested physical checks include turning the head sideways or moving a hand quickly past a light source, though the article cautions that detection tricks can prompt scammers to improve their tools.
  • Huntress’s survey of 1,050 IT and security professionals found 26.5% named identity-based attacks as their biggest blind spot.
  • Recommended safeguards include calling back on a known number for wire transfers, requiring two-person approval for new vendor payments, and confirming executive requests through a second channel.

Article Details

Topic
Deepfake-enabled social engineering scams and identity verification defenses

People