London, October 29, 2025 – ComplyCube, the award-winning global financial crime prevention provider, has strengthened its Secure Capture technology ahead of emerging financial crime threats. Building on its liveness detection solution, its latest injection-hardening feature aims to detect synthetic media and digital injection attacks faster and at scale.
The Battle Against AI-Driven Synthetic Media and Injection Attacks
In the past, fraudsters could easily open a bank account by holding a printed photo up to a camera. Today, bad actors can create highly realistic forms of synthetic media. This includes government documents such as passports and driver’s licenses, as well as deepfakes to bypass identity verification.
The challenge becomes more complex when fraudsters don’t have to complete identity verification at all. Instead, they can bypass physical cameras and microphones by injecting fake content directly into the verification stream. This is called an injection attack, and today, it has become commonplace.
The Pervasive Scale of Synthetic Identities
In 2016, Google CEO Sundar Pichai famously described AI as “more profound than electricity or fire.” Artificial intelligence has undoubtedly expanded access to important resources and services. However, it has also equipped criminals with advanced tools to commit impersonation and identity fraud at scale.
AI is the most profound technology humanity is working on. More profound than fire or electricity or anything that we’ve done in the past.
Take the company OnlyFake, for example: a platform that can replicate identity documents, including security features like holograms. This year, the platform sold over 10,000 digital fake identification documents. The data doesn’t lie: in the year ending March 2026, the UK saw 4.5 million fraud incidents.
Additionally, the US Federal Trade Commission reported a record $15.9 billion in fraud losses. Notably, imposter scams accounted for $3.5 billion of them. Because synthetic media is so easy and cheap to produce, criminals have weaponized it to exploit digital trust. For regulated businesses, distinguishing real identity documents from imitations matters more than ever.
The AI Illusion: Presentation Versus Injection Attacks
Pesentation attacks occur when a customer presents a physical image, silicon mask, or prerecorded video directly at a camera lens. Biometric liveness detection technologies counter these attacks by verifying that a person is physically present.
Anyone with access to a basic AI chatbot can produce a convincing fraudulent identity.
Injection attacks target the capture process rather than the physical camera or microphone. They occur when a user “injects” false information into the identity verification stream. Because injection attacks use various virtual cameras, emulators, or software interference, they can be harder to detect.
ComplyCube CEO and founder Dr. Tarek Nechma says, “Anyone with access to a basic AI chatbot can create a convincing fraudulent identity. For regulated firms, the battle has moved from ‘Is this face real to ‘Did this come from a real camera, right now?’ This distinction is critical, which is why providers such as ComplyCube continually strengthen our solutions to stay ahead of evolving criminal tactics.”
Liveness detection confirms a person is real, while injection attack detection identifies whether fraudsters have manipulated identity evidence during capture. Together, these solutions verify that an individual is legitimate.
Can Secure Capture Determine Real Identities?
ComplyCube is the industry leader in Know Your Customer (KYC) and Bekämpfung der Geldwäsche (AML) software built to detect sophisticated financial crime and fraud in one secure platform. Its Secure Capture solution combines cutting-edge Presentation Attack Detection (PAD) with injection-hardening safeguards.
“When generative AI became commonplace, the challenge for businesses seemed simple: Verify that the image or document is real. Now, a perfect-looking selfie can come from an entirely fake source, making it completely false.” Nechma adds.
ComplyCube’s Secure Capture technology provides multi-layered protection against identity manipulation. Its AI-powered, PAD Level 2-certified liveness technology uses advanced facial analysis, along with active or passive techniques, to distinguish legitimate individuals from spoofing, replays, and identity fraud. Building on this foundation, its injection attack detection combines multiple risk indicators related to device integrity, the capture environment, and media submission.
Any single check has the potential to be beaten in this day and age
Harry Varatharasan, Chief Product Officer at ComplyCube, comments, “These controls are engineered to precisely detect any attempts of substituting real camera inputs with synthetic content. Any single check has the potential to be beaten in this day and age. With Secure Capture, businesses can make confident and compliant decisions, while rapidly onboarding genuine users.”
As the Australian Transaction Reports and Analysis Centre (AUSTRAC) notes, an effective compliance infrastructure isn’t void of risks. Ultimately, the aim is to identify, manage, and report fraudulent risks more quickly and at scale. ComplyCube’s platform also works alongside document authentication, AML screening, and ongoing monitoring to support stronger financial crime prevention and higher identity assurance. Global enterprises and small businesses alike can now detect emerging threats earlier, reduce fraud exposure, meet regulatory requirements, and build trust with real users.
Über ComplyCube
ComplyCube is the global leader in Identity Verification (IDV), AML, and KYC compliance. It is also a government-approved Identity Service Provider (IDSP) under the UK’s Digital Verification Services (DVS) Trust Framework, also known as DIATF. With flexible and robust SDKs and APIs, ComplyCube’s solutions are trusted by regulated businesses to navigate complex compliance requirements.
