Government warns of AI-driven identity fraud

India's Ministry of Home Affairs (MHA), through the Indian Cybercrime Coordination Centre (I4C) and its National Cybercrime Threat Analytics Unit (NCTAU), issued a formal advisory on June 11, 2026, warning that AI-generated deepfakes and synthetic identities pose a growing threat to India's banking and fintech sectors.

The advisory describes a multi-stage modus operandi. Attackers first approach potential victims via social media, job portals, dating apps, messaging platforms, or direct phone calls. They then collect facial recordings through fake job interviews, deceptive video calls, or social engineering tactics where victims are asked to look at the camera, turn their heads, blink repeatedly, or speak on camera. AI-powered deepfake tools process these recordings to create realistic digital replicas mimicking the target's facial expressions, eye movements, gestures, and voice patterns.

I4C specifically highlighted facial authentication, liveness verification, Video-KYC procedures, and account recovery mechanisms as vulnerable targets. Where deepfake detection is absent or inadequate, the advisory warns these synthetic identities could bypass KYC checks, activate digital wallets, take over existing accounts, or open new financial accounts for illegal use.

I4C has urged banks, NBFCs, and fintech companies to integrate robust deepfake and synthetic-content detection mechanisms into customer onboarding systems. The advisory notes that strengthening authentication frameworks is critical to protecting India's digital financial ecosystem.

The advisory states that locking your biometric profile is the strongest defence against this type of remote identity theft. Individuals are also advised to monitor email alerts for unauthorized login attempts, review account activity regularly, watch for unexpected SIM outages (which may indicate SIM swap fraud), and report incidents via the National Cyber Crime Reporting Portal with all available evidence.

The NCTAU clarified that the advisory was issued to raise awareness and does not imply vulnerabilities in any specific platform or service. The guidance reflects India's broader push to address AI-enabled cybercrime as deepfake generation tools become increasingly accessible to non-technical actors.