Virtual Camera Deepfake KYC Evasion — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated Jul 18, 2026

Severity: High | View Full Scam Details

Virtual Camera Deepfake KYC Evasion Scam in India 2026: How Fraudsters Trick Digital Finance

The Virtual Camera Deepfake KYC Evasion scam poses a high-risk threat by exploiting digital identity verification to open fake bank and financial accounts in India.

What Is the Virtual Camera Deepfake KYC Evasion?

Virtual Camera Deepfake KYC Evasion is a sophisticated cyber fraud where scammers use advanced video technology to trick KYC (Know Your Customer) processes. This scam targets digital financial systems in India, especially those relying on remote video verification tools like Zoom or Doxy.me, which many banks and fintech sectors adopted for online KYC checks post-pandemic. By impersonating legitimate customers using deepfake videos created through virtual camera software, fraudsters bypass biometric and face recognition steps meant to secure identity.

This scam is increasing in India as more financial institutions adopt video-based KYC for quick onboarding. According to public complaints analyzed by CERT-In and the I4C cybercrime portal, fraudsters are exploiting gaps in remote verification to open fake accounts that facilitate money laundering, loan frauds, or identity theft. The prominent use of Aadhaar’s eKYC and UPI payment ecosystem makes this scam particularly dangerous because once the fake account is active, it allows scammers to siphon off money or launder funds using phoney credentials. The Reserve Bank of India (RBI) and cybersecurity agencies have issued general advisories warning about emerging digital identity frauds, urging financial firms to strengthen authentication.

How This Scam Works — Step by Step

1. Initial Contact: The caller, claiming to be from a financial service or bank, reaches out via WhatsApp or phone, offering easy loans, credit cards, or new account openings requiring urgent KYC verification.

2. Setting Up a Video Call: The fraudster schedules a “KYC video verification” using popular video apps like Zoom or Doxy.me, which many Indian banks use for remote KYC during account creation.

3. Virtual Camera Deepfake Activation: During the live video call, the scammer uses virtual camera deepfake software to project a pre-recorded or artificially generated face that mimics a legitimate Aadhaar holder’s ID photo and facial movements. The system’s live biometric checks are tricked by this virtual image.

4. Completion of Fake KYC: The call appears authenticated on both sides; the fraudulent victim’s KYC passes, opening a remote account linked to the scammer’s wallet or bank details.

5. Financial Exploitation: After setting up a bogus account, the scammers use it for fraudulent transactions such as applying for loans in the victim’s name, directing UPI payments out, or laundering money through digital wallets.

6. Victims Realize Too Late: Genuine customers only discover the scam when they face loan defaults recorded in their name, receive messages about transactions they never made, or are contacted by recovery agents.

Real Warning Signs to Watch For

• Unsolicited WhatsApp or phone messages promising instant credit or loans with minimal documentation.
• Requests to join a video call on unfamiliar platforms for “KYC” instead of visiting a branch or official app.
• Pressure to complete KYC urgently with unusual requests like showing ID multiple times or repeating facial movements.
• Inconsistencies in caller details, such as generic greetings rather than personalized communication.
• Links or invites to join Zoom/Doxy.me calls sent via personal WhatsApp numbers rather than official bank channels.
• Follow-up messages urging quick action to avoid losing the “offer.”
• Notifications from Aadhaar or bank about KYC updates you did not initiate.

What Happens to Victims

Victims of this scam in India often face immediate financial loss through fraudulent loans taken out in their name or unauthorized UPI transactions. The improper use of their Aadhaar-linked identity aggravates the issue, as blocking or reversing transactions through platforms like UPI can be complicated, and recovery takes significant time. In many cases, the victim’s SIM card may be swapped or compromised to intercept OTPs, making detection harder. Beyond monetary loss, victims suffer emotional distress due to damaged credit scores and the challenge of proving innocence to banks and authorities.

What RBI and CERT-In Say

The Reserve Bank of India has repeatedly warned banks and customers to adopt multi-factor authentication and strengthen KYC processes to combat growing digital fraud. RBI’s guidelines emphasize that no legitimate bank representative will force urgent KYC completion over personal messaging apps without official communication. CERT-In, India’s cybersecurity agency, highlights the rise in remote identity fraud and encourages users to remain vigilant about video-based KYC requests and deepfake technology misuse. Cybercrime reporting through I4C (cybercrime.gov.in) and the national helpline (1930) are recommended for any suspected digital identity fraud. Though no specific advisory exists solely for virtual camera deepfake KYC evasion, these agencies are continually updating guidance to keep pace with new scams.

How to Protect Yourself

1. Verify the caller’s identity through official bank numbers or apps before sharing any KYC details.
2. Never accept video-based KYC requests on personal WhatsApp or unofficial platforms; insist on bank-authenticated portals.
3. Regularly check Aadhaar KYC activity via the official UIDAI website to spot unauthorized verification.
4. Use two-factor authentication (2FA) on all financial apps and UPI wallets.
5. Be cautious if asked to repeat facial movements or show IDs multiple times during video verification.
6. Avoid sharing OTPs, PINs, or passwords with anyone, even if they claim to be from your bank.
7. Report suspicious calls or messages immediately to the 1930 cybercrime helpline.

What to Do If You've Been Targeted

• Immediately contact your bank’s fraud department and ask to freeze or block the affected accounts.
• Report the incident on the official cybercrime.gov.in portal under identity theft or financial fraud.
• Inform UIDAI to check your Aadhaar KYC status and place any necessary locks or alerts.
• Change your UPI PIN and mobile banking passwords without delay.
• File a First Information Report (FIR) at your local police station or cybercrime cell with all evidence like WhatsApp chats and call records.
• Use the 1930 helpline to report the scam and get guidance on further steps.
• Monitor your credit score and financial accounts regularly for unexpected changes.

Frequently Asked Questions

Q: Can deepfake technology really fool bank KYC processes in India?
Yes, fraudsters have started using virtual camera deepfakes on video calls to impersonate customers during remote KYC, exploiting weaknesses in biometric checks. This is an emerging threat being investigated by cybersecurity agencies.

Q: What should I do if I receive a video call KYC request on WhatsApp?
Do not join the call or share personal details. Always verify the request using official bank communication channels or mobile banking apps before proceeding.

Q: How quickly can I recover if my identity is used in this scam?
Recovery can take weeks to months, involving blocking accounts, filing police reports, and correcting Aadhaar KYC records. Prompt reporting increases your chances of limiting damage.

If you receive suspicious messages or calls, verify them immediately at BharatSecure.app and report fraud to the 1930 cybercrime helpline.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.