Synthetic Identity with Deepfake KYC Fraud
INDIA — By BharatSecure Threat Intelligence Team ·
Verdict: Suspicious | Risk Score: 8/10 | Severity: high
How Synthetic Identity with Deepfake KYC Fraud Works
Overview: This scam involves cybercriminals using entirely fake or partly stolen identities—complete with photoshopped or AI-altered ID documents—and then matching them to deepfake selfies or videos to fool KYC checks at Indian banks, fintechs, and digital lenders. If successful, they open fraudulent accounts, avail loans, or enable money laundering, putting you at grave financial and reputational risk. How It Works: 1. Scammers collect publicly available data or hack personal details. 2. They either create new synthetic identities or alter real IDs with digital tools. 3. Using deepfake technology, they generate a matching live selfie/video to pass biometric face verification. 4. They submit these details during online account creation or loan applications. 5. Systems relying solely on digital checks fail to spot the forgery, and an account in a fake or stolen name is approved. India Angle: Common in urban centres and fintech-driven states like Maharashtra, Karnataka, and Delhi, these scams are reported on mobile wallets, digital lending apps, and banks integrating Aadhaar and PAN systems. The fraud appeals to networks opening hundreds of fake accounts, hurting everyone—customers, the banking sector, and even government schemes. Real Examples: - "Welcome to [Bank Name]! Your loan application is approved. Repayment schedule attached." - Suddenly receiving rejection emails for loans or cards not applied for Red Flags: 1. Receiving approval/rejection emails for unrequested loans or cards. 2. Finding your PAN/Aadhaar linked to unknown accounts. 3. Bank records showing KYC updates you did not initiate. 4. Account history showing thin, inconsistent, or suspicious details. Protective Measures: - Regularly check your credit report (CIBIL, Equifax) for unknown accounts. - Guard copies of your PAN, Aadhaar, and IDs—never share them via WhatsApp or unverified email. - Register for alerts from all your banks regarding account activity. - Use only official, secure banking apps/sites and update passwords regularly. If Victimised: - Immediately call 1930 and inform your bank. - File a complaint at cybercrime.gov.in, attaching any fraudulent email/notification. - Alert credit bureaus to block reporting on any new accounts/loans until cleared. Related Scams: - Loan fraud with synthetic KYC - Deepfake-enabled UPI account onboarding - Fraudulent insurance claims with fake identity
How This Scam Works — Detailed Explanation
In a world where personal data is abundant, cybercriminals have mastered the art of creating synthetic identities using deepfake technology. They typically obtain personal information from social media, data breaches, or even by hacking into less secure platforms. Once they have a victim's details—such as Aadhaar numbers, PAN details, or financial information—they use photo editing software or AI tools to create forged identification documents. This process isn't just for show; they often match these altered documents with deepfake videos or selfies, making it extremely difficult for KYC checks at Indian banks, digital lenders, and fintech firms to detect fraud.
Scammers employ various psychological tactics to deceive potential victims and institutions. They might pose as legitimate bank representatives or loan agents and send unsolicited offers via WhatsApp or SMS, enticing victims with lucrative loan approvals or credit card offers that seem too good to refuse. They create a sense of urgency, often claiming that the offers are available for a limited time. By instigating fear of missing out (FOMO) or creating false scarcity, they manipulate victims into providing even more personal information, which they can then use to enhance their synthetic identities.
For the victims, the journey begins innocuously enough. They might receive an unexpected SMS alert about a loan or credit card application they never initiated. Next, bank representatives will contact them for KYC verification, often using jargon that makes it sound legitimate. In a recent case, a Delhi resident found out his Aadhaar number had been used to create multiple fake bank accounts. The unexpected alerts triggered panic as he saw his name attached to unknown transactions and attempts to avail loans without his consent. The aftermath involves not only financial losses, which can run into thousands of crores collectively impacting the nation, but also long, arduous processes of proving one’s innocence, often leading to damaged credit scores.
According to reports by the Ministry of Home Affairs (MHA), scams of this nature have soared in the past year, with estimates suggesting that victims have lost upwards of ₹5,000 crores due to various identity frauds, which include synthetic identities. The Reserve Bank of India (RBI) and CERT-In have issued advisories urging the public to be vigilant and report any suspicious activities immediately. The repercussions of these scams are dire, with individual victims suffering not just financial setbacks but prolonged reputational harm that complicates personal and professional relationships.
Identifying this type of scam involves checking for irregularities in your financial communications. Always verify any loan or KYC update notifications by contacting your bank directly using official helplines, like SBI’s 1800-11-1109 or HDFC’s 1800-202-6161, rather than responding directly to unexpected messages. Be alert for unfamiliar loan approvals in your name, or any discrepancies related to your PAN or Aadhaar number appearing on accounts you did not open. Be cautious about communications that push for immediate responses without giving you ample time to validate their authenticity. If something seems off, it most likely is, and taking steps to confirm your situation is crucial to preventing further issues.
Visual Intelligence:
BharatSecure's AI has identified this as a used in scams targeting Indian users.
Who Does Synthetic Identity with Deepfake KYC Fraud Target?
General public across India
Red Flags — How to Identify Synthetic Identity with Deepfake KYC Fraud
- Unfamiliar loan approvals or card offers in your name
- PAN/Aadhaar appearing on accounts you didn’t open
- KYC update notifications not triggered by you
- Patchy or inconsistent account opening histories
What To Do If You Encounter Synthetic Identity with Deepfake KYC Fraud
- Report any suspicious activity immediately at cybercrime.gov.in or by calling 1930.
- Contact your bank's helpline to verify any unexpected loan approvals or KYC requests.
- Change your passwords for critical accounts and enable two-factor authentication.
- Monitor your bank and credit card statements for irregular transactions regularly.
- Inform your contacts about the scam to prevent them from becoming victims.
- Consider placing a fraud alert on your credit report to notify lenders to verify your identity before extending credit.
How to Report Synthetic Identity with Deepfake KYC Fraud in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What to do if I shared my OTP in a UPI scam?
- Immediately contact your bank's customer service and report the incident. Block your account if necessary and monitor your transactions for any unauthorised activities.
- How can I identify if I am a victim of synthetic identity fraud?
- Look out for unfamiliar loan approvals or KYC notifications unexpectedly tied to your PAN or Aadhaar number. Report any discrepancies to your bank.
- How do I report synthetic identity fraud in India?
- You can report this type of fraud to the cybercrime helpline at 1930 or visit cybercrime.gov.in to file a complaint.
- What steps can I take to recover money lost through identity fraud?
- Contact your bank immediately, provide them with details of the scam, and request them to initiate a recovery process. Keep a record of all communications.
Related Scams in India
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.