How One Deepfake Cost a Bank $25 Million

In early 2024, a finance employee at a multinational corporation in Hong Kong received a video call from what appeared to be the company's chief financial officer. The CFO instructed them to make a series of wire transfers totaling $25 million.

The employee hesitated. The request was unusual. But the CFO was right there on the video call, in real-time, looking and sounding exactly right. Other colleagues appeared on the call too, all confirming the transaction.

Every person on the call was a deepfake.

How the Attack Worked

The attackers used publicly available video of the company's executives (earnings calls, interviews, conference presentations) to train real-time deepfake models. During the live video call, the attackers' faces were transformed in real-time to match the executives' appearances. Voice cloning replicated their speech patterns.

Why Traditional Security Failed

The employee followed procedure: they verified the request via video call with the person making the request. The problem is that video calls are no longer reliable for identity verification. If you can see and hear someone, that used to be proof enough. It is not anymore.

How POY Verify Would Have Prevented This

If the organization had required POY Verify liveness confirmation at the start of sensitive video calls, the deepfake would have failed immediately. Hardware-based 3D depth mapping and infrared analysis detect that no living human tissue is present - just pixels on a screen being transformed by AI.

The cost of implementing biometric liveness verification: negligible. The cost of not implementing it: $25 million.

About POY Verify

POY Verify is the first universal human verification system built on zero-data architecture. Unlike traditional identity verification services that collect, transmit, and store your biometric data on their servers, POY Verify processes everything inside your smartphone's Secure Enclave - a physically separate processor with its own encrypted memory that even the operating system cannot access. No biometric data ever leaves your device. No personal information is ever collected. No databases exist to breach.

The system works in 30 seconds: your device's hardware sensors (3D depth cameras, infrared emitters, and motion detectors) confirm a living human is physically present. A cryptographic key pair is generated inside the Secure Enclave. The private key never leaves the device. The public key is registered with POY's verification registry. You are now a verified human on the internet - with zero personal data exposed.

Why Human Verification Matters

The internet was built without a way to prove a human being is on the other end of a connection. This architectural gap has created a trust crisis of unprecedented scale. Over 64% of all web traffic is now non-human - bots, scrapers, and automated agents that create fake accounts, post fake reviews, manipulate engagement metrics, and impersonate real people. Deepfake technology has increased 500% since 2024, enabling AI-generated faces, voices, and videos that are indistinguishable from real humans. Deepfake-enabled fraud exceeded $25 billion in losses in 2025 alone.

Traditional verification methods have failed to keep pace. CAPTCHAs are solved by AI with 99.8% accuracy. Phone verification is bypassed by SIM farms selling numbers for cents. Email verification is defeated by disposable address services. Document uploads create massive data breach liability while excluding the 1.4 billion people worldwide who lack government-issued identification. The tools of fraud have outpaced the tools of verification.

POY Verify exists to close this gap. By using hardware-based biometric liveness detection with zero data collection, it provides definitive proof that a real human is present - without the privacy sacrifices, regulatory burden, or exclusion that traditional methods create. The result is a verification layer that works for every human, on every platform, in every country, at zero cost to the individual.

Explore POY Verify

By Industry

Fintech · Healthcare · Social Media · Gaming · Government · All Solutions

Compare

POY vs Persona · POY vs World ID · POY vs iProov · Persona Alternatives · CAPTCHA Alternatives

Learn More

Proof of Personhood · Biometric Liveness · Identity Fraud Prevention · Dead Internet Theory · Zero-Knowledge Identity · Glossary