Real-Time Deepfake Video Call Impersonation

How Real-Time Deepfake Video Call Impersonation Works

Overview: With the rise of advanced artificial intelligence tools, scammers can now impersonate individuals live during video calls, even simulating real-time responses and facial movements. This scam primarily targets high-net-worth individuals, business professionals, and company executives by fooling bank staff, compliance teams, and business partners into executing unauthorized large transfers or approving high-value transactions. How It Works: Scammers gather enough details and video samples of their target, then deploy deepfake software capable of generating convincing live video feeds. During scheduled KYC or verification calls, fraudsters initiate the session using the deepfake video stream, perfectly synchronized to real-time questions and gestures. The scammers may create entire fake meetings, involving multiple team members, to boost credibility. They then exploit the situation to push for urgent fund transfers or approvals, capitalizing on the implicit trust placed in video-based interactions, especially where V-CIP is used. India Angle: This technique is being weaponized in urban centers like Mumbai, Delhi, and Bengaluru, targeting business leaders, HNIs, and critical company accounts—often where higher transaction limits exist. The scam leverages India's strong shift toward remote onboarding, digital business deals, and flexible banking. Sectors with heavy video KYC reliance, such as banking, lending, and corporate investment, are at the highest risk. Real Examples: - An accounts manager in Delhi receives a late-evening video call from a "CEO" urgently requesting a ₹10 lakh funds transfer, mimicking mannerisms and voice. The real CEO later confirms no such request was made. - A Bengaluru fintech startup's compliance officer unknowingly approves a high-value payout after a seemingly flawless live video discussion with a deepfake 'client.' Red Flags: - Video calls with urgency for high-value approvals at unusual hours - Audio and video slightly out of sync during calls - Visual glitches or stiff, emotionless facial expressions - Requests for nonstandard verification steps from familiar faces Protective Measures: - Always confirm critical requests via a separate channel (e.g., direct call or SMS) - Report any call with poor video quality or forced urgency - Insist on additional authentication like security questions - Train staff to recognize AI-manipulated video signs If Victimised: - Immediately halt the transaction - Call 1930 and inform relevant department heads - Lodge a cybercrime complaint at cybercrime.gov.in Related Scams: - Business email compromise (BEC) - CEO impersonation fraud - Executive WhatsApp clone scams

How This Scam Works — Detailed Explanation

Scammers employ sophisticated tactics to target wealthy individuals, business professionals, and corporate executives via real-time deepfake video impersonation. They often utilize platforms like WhatsApp, where video calling features allow for immediate engagement. By combing through social media profiles, corporate websites, and other digital footprints, scammers gather critical information about their targets. They create a fake but convincing persona using deepfake technology that can simulate facial expressions and voice tones. This polished disguise makes the impostor more believable to their victims and sets the stage for deceitful financial transactions.

The tactics deployed by scammers include psychological manipulation alongside technical deception. They typically initiate the call by adopting the identity of a trusted colleague or business partner, making it easy for them to push for urgent transactions. Scammers often create a false sense of urgency by claiming that approvals are needed immediately or that deadlines are fast approaching. For example, a scammer may impersonate a CFO during a video call and request a large fund transfer, stating that it's critical for a merger or acquisition and that delays could result in financial penalties or missed opportunities. The urgency creates a psychological barrier, making the victim more likely to comply without verifying the request.

As their scheme unfolds, the victims find themselves caught in a cycle of panic and compliance. Let’s say a senior manager at a tech firm receives a video call from a purported executive of a partner organization, asking for an immediate transfer of ₹50 lakh using UPI. The high-quality deepfake technology allows the scammer to display similar features and mannerisms, thus instilling trust. When asked to authenticate the transaction, the scammer may prompt the victim to share an OTP or make a quick call on their mobile phone. In the real world, many individuals have lost massive sums due to trusting these impersonations — for instance, a Bengaluru-based entrepreneur lost over ₹1 crore last year due to a similar scheme involving a deeply convincing fake video call.

The impact of such scams in India has led to significant financial losses amounting to several crores across various industries, particularly in metropolitan areas. According to recent reports, scammers impersonating business executives led to a loss of ₹300 crore in 2022 alone. Besides financial repercussions, victims face psychological trauma and reputational damage, affecting both personal and professional relationships. Authorities like the Ministry of Home Affairs (MHA) and the Reserve Bank of India (RBI) have issued advisories urging businesses to strengthen their verification processes to prevent such occurrences. CERT-In continuously emphasizes the importance of awareness and immediate reporting of cybercrimes to mitigate these risks.

Identifying deepfake scams versus legitimate communications is crucial. Key red flags include video call requests that insist on urgent fund transfers, noticeable delays or lip sync mismatches during the call, and approaches that fall out of the ordinary work hours. If a colleague requests personal details or sensitive information that seems inconsistent with their usual behavior, it's essential to verify this request through secondary means, such as contacting them directly through official company channels. Remember, a legitimate call should always allow you the time to double-check facts before executing any financial action.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Real-Time Deepfake Video Call Impersonation Target?

General public across India

Red Flags — How to Identify Real-Time Deepfake Video Call Impersonation

• Video calls pushing urgent, large fund transfers
• Noticeable delays or mismatches in lip sync
• Requests made outside regular office hours
• Verification demands that seem out of character for the caller

What To Do If You Encounter Real-Time Deepfake Video Call Impersonation

1. Report immediately to the cybersecurity helpline by calling 1930 or visiting cybercrime.gov.in.
2. Verify any urgent transaction requests through a secondary method of communication, such as a phone call to the person’s known number.
3. Consult with your financial institution about any suspicious activity and inform them of potential scams immediately.
4. Educate your team members about recognizing signs of deepfake impersonation to bolster collective security.
5. Monitor your bank statements for any unauthorized transactions and report them immediately if found.
6. Consider enabling two-factor authentication on financial accounts for added security.

How to Report Real-Time Deepfake Video Call Impersonation in India

• Call 1930 — National Cyber Crime Helpline (24x7)
• File a complaint at cybercrime.gov.in
• Contact your bank immediately if money was lost
• Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What to do if I think I was a victim of a deepfake scam on a WhatsApp video call?

Immediately report the incident to the cybercrime helpline at 1930 and consider reaching out to your bank for further assistance. You can also visit cybercrime.gov.in for guidance.

How can I identify if a video call is fake?

Look for issues like lip sync mismatches, unusual requests made outside regular hours, or pressure to complete urgent transactions. Authentic communications allow time for verification.

How do I report a deepfake scam in India?

Report incidents at the cybercrime helpline 1930, or file a report online at cybercrime.gov.in. Additionally, report suspicious activities to your bank.

What steps can I take to recover lost money after falling for this scam?

Firstly, contact your bank immediately to report the fraud. They may help you secure your accounts. Also, file a report with the cybercrime helpline at 1930 to initiate further recovery actions.

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.