ProKYC Tool Used for Deepfake-Based Bypass of Crypto KYC Controls

# ProKYC Tool Used for Deepfake-Based Bypass of Crypto KYC Controls

https://gcdradar.vercel.app/incidents/prokyc-tool-used-for-deepfake-based-bypass-of-crypto-kyc-con · AIR-2024-0039 · closed 2024-10-23

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation)
- Fix status: No fix needed
- First reported: 2024-10-09
- AI role: AI-enabled attack
- Products: ProKYC, ByBit

## Summary

Security researchers discovered that the ProKYC group sells a deepfake tool capable of bypassing biometric and two-factor authentication systems on cryptocurrency exchanges. The tool generates synthetic identities and videos to create fraudulent accounts for money laundering.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2024-10-09: ProKYC Tool Allegedly Facilitates Deepfake-Based Account Fraud on Cryptocurrency Exchanges (https://incidentdatabase.ai/cite/819)

## Sources

- 2024-10-09 AI Incident Database: ProKYC Tool Allegedly Facilitates Deepfake-Based Account Fraud on Cryptocurrency Exchanges https://incidentdatabase.ai/cite/819

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.