Cybercriminals are taking deepfake fraud to a new level. iProov, a global leader in biometric identity verification, has revealed the discovery of a new iOS video injection tool capable of inserting AI-generated deepfakes directly into devices, bypassing weak identity verification systems.
The threat intelligence team at iProov describes this as a “significant escalation” in identity fraud, with serious implications for financial institutions, digital wallets, and fintech platforms that rely on mobile onboarding and biometric authentication.
A new phase of digital fraud
Unlike traditional spoofing methods that rely on presenting fake imagery to a camera, this tool injects synthetic video directly into the device’s data stream.
By cutting the physical camera out of the equation, attackers can fool apps into thinking the fraudulent deepfake is a live video feed, opening the door for large-scale account takeovers and synthetic identity creation.
According to the report, here’s how the attack works:
- Jailbroken devices – The attack requires an iOS 15 or later device with Apple’s security restrictions removed.
- Remote connection – Attackers link a computer to the compromised iPhone through a Remote Presentation Transfer Mechanism (RPTM) server.
- Deepfake injection – Generative AI-powered face swaps or motion re-enactments are streamed directly into the device.
- Bypassing security – The fake video is fed into identity verification apps, tricking them into accepting it as authentic.
With fintech apps being prime targets, the ability to impersonate legitimate users or fabricate entire digital identities raises the stakes for fraud prevention.
National security and fintech risks
The tool is suspected to have Chinese origins, surfacing at a time when governments are wary of threats tied to technological sovereignty and supply chain security. But beyond geopolitics, the tool poses a direct challenge to banks, payment providers, and fintech startups across Southeast Asia, where mobile-first onboarding has become the norm.
Fraudsters could exploit weaknesses in identity verification systems that lack robust liveness detection, enabling them to open fraudulent bank accounts, launder money through e-wallets, or orchestrate large-scale scams.
Andrew Newell, Chief Scientific Officer at iProov, underscored the urgency, saying, “The discovery of this iOS tool marks a significant breakthrough in identity fraud and confirms the trend of industrialized attacks.”
“To combat these advanced threats, organizations need multilayered cybersecurity controls informed by real-world threat intelligence — the kind analyzed by the iProov Security Operations Centre (iSOC) — combined with science-based biometrics and a liveness detection capability that can rapidly adapt to ensure a user is the right person, a real person, authenticating in real-time,” he added.
Local fintechs in the crosshairs
The discovery comes at a time when Philippine fintech adoption is at an all-time high.
According to the Bangko Sentral ng Pilipinas (BSP), over 42 million Filipinos are now financially included through digital wallets and online banking apps.
- GCash, which has over 94 million registered users, relies heavily on mobile-based KYC for onboarding. A video injection attack could allow fraudsters to bypass face verification steps and open accounts for money laundering or scams.
- Maya, the country’s second-largest e-wallet, has expanded into digital banking. As more Filipinos use Maya for salary deposits and investments, the risk of deepfake-enabled account takeovers could undermine trust in the platform.
- ShopeePay and GrabPay, both embedded in e-commerce and ride-hailing ecosystems, also face elevated risks if deepfake-driven account creation is used to exploit cashback or rewards systems.
Cybersecurity specialists warn that the danger goes beyond one-off fraud attempts. Tools like these can industrialize the process, enabling attackers to generate hundreds or even thousands of fake accounts at scale. For Philippine fintech players, that could mean massive potential losses and reputational risks if countermeasures are not deployed quickly.
Why multi-layered defense matters
For fintech players, the incident is a reminder that single-factor authentication or weak selfie checks are no longer enough. iProov recommends a multi-layered defense strategy, including:
- The right person – Cross-referencing against official documents or databases.
- A real person – Using metadata analysis to filter out AI-generated forgeries.
- In real-time – Ensuring interactions are happening live, not replayed or pre-recorded.
- Managed Detection and Response (MDR) – Blending advanced tech with human expertise to anticipate, detect, and block new attack methods.
This makes it exponentially harder for attackers to simultaneously bypass all verification layers while maintaining natural human-like interaction.
What this means for the Philippine fintech industry
The Philippines has become one of the fastest-growing fintech markets in Southeast Asia, with digital payments now accounting for over 40% of total retail transactions. But as the ecosystem matures, so do the threats.
Industry observers note that deepfake-enabled fraud is no longer science fiction but an active threat. For fintech companies, detecting liveness and authenticity in real time is increasingly seen as essential — not just to stop fraud, but also to ensure sustainable growth and safeguard trust.
Financial institutions now face mounting pressure to adopt biometric systems with advanced liveness detection, or risk seeing their platforms exploited. The discovery of this iOS tool demonstrates how quickly fraud tactics are industrializing — and why fintech platforms cannot afford to rely on outdated KYC measures.
About iProov
iProov delivers science-driven biometric solutions that enable secure digital onboarding and authentication for governments, banks, and enterprises worldwide. Its award-winning liveness technology and iProov Security Operations Centre (iSOC) provide unmatched defense against deepfakes, generative AI threats, and identity fraud. iProov’s solutions are trusted by organizations such as the U.S. Department of Homeland Security, U.K. Home Office, GovTech Singapore, ING, and UBS. Learn more at www.iproov.com.
