ProKYC: Deepfake Tool for Account Fraud Attacks

# ProKYC: Deepfake Tool for Account Fraud Attacks

https://gcdradar.vercel.app/incidents/prokyc-deepfake-tool-for-account-fraud-attacks · AIR-2025-0063 · closed 2025-11-21

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation)
- Fix status: No fix needed
- First reported: 2025-11-07 (happened 2024-10-09)
- AI role: AI-enabled attack
- Products: ProKYC

## Summary

Threat actors marketed a deepfake tool called ProKYC to generate fake identity documents and selfie videos to bypass financial KYC checks. The tool defeats facial recognition and liveness tests to establish fraudulent accounts.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-11-07: ProKYC: Synthetic Identity Fraud as a Service (https://idscan.net/blog/prokyc-synthetic-identity-fraud)
- 2025-11-07: Cato CTRL Threat Research: ProKYC - Deepfake Tool for Account Fraud Attacks (https://catonetworks.com/blog/prokyc-selling-deepfake-tool-for-account-fraud-attacks)
- 2025-11-07: AIID Incident 819: ProKYC Tool Allegedly Facilitates Deepfake-Based Account Fraud on Cryptocurrency Exchanges (https://incidentdatabase.ai/cite/819)
- 2025-11-07: ProKYC: Deepfake Tool for Account Fraud Attacks (https://atlas.mitre.org/studies/AML.CS0034)

## Sources

- 2025-11-07 MITRE ATLAS: ProKYC: Deepfake Tool for Account Fraud Attacks https://atlas.mitre.org/studies/AML.CS0034
- 2025-11-07 AI Incident Database: AIID Incident 819: ProKYC Tool Allegedly Facilitates Deepfake-Based Account Fraud on Cryptocurrency Exchanges https://incidentdatabase.ai/cite/819
- 2025-11-07 catonetworks.com: Cato CTRL Threat Research: ProKYC - Deepfake Tool for Account Fraud Attacks https://catonetworks.com/blog/prokyc-selling-deepfake-tool-for-account-fraud-attacks
- 2025-11-07 idscan.net: ProKYC: Synthetic Identity Fraud as a Service https://idscan.net/blog/prokyc-synthetic-identity-fraud

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.