Three-Finger Test Is an Unreliable Deepfake Defense, Experts Warn

Summary
A viral three-finger check can expose flaws in some real-time deepfakes, but experts warn newer tools may overcome it. The article recommends process-based identity verification, such as callbacks and second-channel approval, over visual tells.
Key points
- A scammer reportedly ended a video call after being asked to hold up three fingers, a test that can reveal rendering problems when a hand passes in front of a face.
- The article says lip-sync lag and edge artifacts can also reveal some deepfakes, but these flaws may be fixed in newer tools.
- Reality Defender CEO Ben Colman said current real-time deepfake models have addressed the three-finger test’s limitation; OpenOrigins CEO Manny Ahmed warned it can create false confidence.
- Other suggested physical checks include turning the head sideways or moving a hand quickly past a light source, though the article cautions that detection tricks can prompt scammers to improve their tools.
- Huntress’s survey of 1,050 IT and security professionals found 26.5% named identity-based attacks as their biggest blind spot.
- Recommended safeguards include calling back on a known number for wire transfers, requiring two-person approval for new vendor payments, and confirming executive requests through a second channel.
Article Details
- Topic
- Deepfake-enabled social engineering scams and identity verification defenses
People
Ben ColmanCEO of Reality Defender who said the three-finger test is no longer a reliable way to identify current deepfake models.Chris HendersonCISO at Huntress who discussed how verification processes can reduce the risk of deepfake calls.Jim BrowningScam hunter who challenged a person using a real-time AI face overlay and helped document the scam.Manny AhmedCEO of OpenOrigins who warned that reliance on the three-finger test can create false confidence.
