A New Tool Claims to Stop Deepfake Video Scams

Scam.ai has announced the launch of a tool that detects deepfake video calls directly on a user's device. This technology analyzes video feeds in real time to spot the subtle artifacts and micro-expressions that often give away a synthetic face. This launch is a significant development in the fight against AI-enabled fraud. It shows that detection technology is moving from cloud-based servers to the edge. This shift changes the risk landscape for organizations that rely on video calls for communication or verification.

What Scam.ai Actually Does

The new tool works by running on the user's phone or computer rather than in the cloud. It continuously analyzes the video stream. It looks for signs of manipulation, such as unnatural blinking patterns or inconsistencies in lighting. Because it runs locally, it can process the data quickly and privately. This is a response to the growing threat of voice and video cloning. Attackers are now using AI to clone the voices and faces of executives to authorize fraudulent transactions.

The Shift in Fraud Risk

The risk of deepfake fraud is moving from a theoretical future problem to a current reality. Attackers are already using these tools to trick employees into authorizing wire transfers or revealing sensitive data. The traditional method of identity verification, which might rely on a video call and a voice check, is no longer sufficient. The attacker can clone the voice and the face. This creates a scenario where a sensitive action is authorized on a single channel, which is a high-risk situation for any organization.

What This Means for Governance

For risk teams, this launch means that existing verification protocols need an update. You cannot assume that a video call is proof of identity anymore. Governance frameworks must evolve to account for the possibility that the person on the other end is not who they claim to be. You need to define new rules for how to handle video requests. This might mean requiring multi-factor authentication even during video calls or establishing a secondary verification step that is not video-based.

The Detection Arms Race

The launch of tools like Scam.ai highlights an arms race. As generation tools get better, detection tools must improve. This creates a moving target for governance teams. You must stay informed about the latest detection capabilities. You also need to assess whether your current tools or policies are keeping up with the current state of synthetic media. This is not just a technical problem. It is a policy and process problem that requires a layered defense.

What to Do

You should immediately review your policies for authorizing sensitive actions via video call. You need to ensure that sensitive actions are never authorized on a single channel. Implement a policy where high-value transactions require an additional verification step, such as a code sent to a different device or a face-to-face meeting. You should also train your staff to be skeptical of video calls, especially if they come from an unexpected source or request urgent actions.

What to do

• Require multi-factor authentication for all video-based financial requests.
• Update your policies to reflect that video calls are no longer a reliable method of identity verification.
• Train staff to look for the signs of deepfakes and report suspicious video calls.

More from our platforms

These sister platforms cover the parts of this problem that sit outside governance.

• Argus (argus.threatclaw.ai) records every trace an AI application produces and scans it for prompt injection, jailbreaks and data leaks, including the attacks hidden inside retrieved documents and tool results rather than in what the user typed. Governance decides what an AI agent is allowed to do. Argus shows what it actually did.
• ThreatClaw (www.threatclaw.ai) tracks the threat side of the same systems: 22 live intelligence feeds, exploitation predicted before it is officially confirmed, threat actor profiles, and detection rules you can deploy straight away. A control is only as good as the threat it is sized against.
• Xodexa (xodexa.com) runs 300 AI agents through structured, multi-round debates on the questions that do not have settled answers, and publishes the verdicts and the predictions that come out of them. Useful when the governance question is genuinely contested and you want the strongest version of the other side.