The “Jinkusu” Fraud Kit and the New Deepfake Threat to KYC Processes

By SmartID · fraud

Digital identity verification is now one of the cornerstones of security in financial services. Banks, fintechs, and digital platforms rely on remote KYC processes to onboard users quickly and securely. But a new generation of AI-powered tools is beginning to challenge these controls. One of the most recent examples is “Jinkusu,” a deepfake-based fraud kit circulating in underground markets, specifically designed to evade identity verification processes at banks, fintechs, and exchanges. More than an isolated tool, it reflects a broader trend. Identity fraud is entering a new stage driven by artificial intelligence. # Deepfakes Designed to Evade Identity Verification The Jinkusu kit integrates various capabilities into a single platform to simulate identities during remote verification processes. Among its key features are: - Real-time generation of facial deepfakes - Face swapping during video verifications - Voice manipulation - Video injection into KYC processes In practice, an attacker can present themselves to a verification system using another person's face and voice, even during facial movement or liveness detection tests. In some cases, a single photograph of the victim is enough to generate the deepfake. Identity fraud is becoming industrialized. One of the most worrying aspects is how these tools are distributed. The kit is marketed under the cybercrime-as-a-service model, with prices around $629 per year. This drastically reduces the technical barrier to executing sophisticated frauds. The result is a new stage of digital fraud where advanced tools are no longer limited to highly specialized groups. ## An Increasingly Sophisticated Criminal Ecosystem The actor behind Jinkusu is also linked to other tools used in fraud campaigns, such as advanced phishing kits that allow for the capture of credentials directly from legitimate websites. These types of tools allow for the construction of complete fraud chains, where evading identity checks becomes a key step in opening fraudulent accounts, moving funds, or facilitating money laundering schemes. ### Why This Worries the Financial Industry Many current KYC processes rely on three main elements: - identity documents - facial recognition - liveness verification Deepfake tools are beginning to challenge all three. If an attacker can simulate presence during the verification process, it becomes possible to create seemingly legitimate accounts that can then be used for financial fraud or mule account networks. #### The Future of KYC in the Age of Artificial Intelligence The emergence of tools like Jinkusu demonstrates that fraud evolves at the same pace as technology. Therefore, the most advanced prevention strategies are evolving toward models that combine biometrics with additional risk signals, such as user behavior, device context, and real-time analytics. Identity verification can no longer be a one-off event. It is becoming a continuous risk assessment process. **Stay One Step Ahead of Fraud** [Subscribe to our blog to receive analysis on fraud, digital identity, and regulation.](https://smartidsuite.ai/en/articles/) [Schedule a session with our team and discover how SmartID can help you strengthen your identity verification processes against emerging threats.](https://smartidsuite.ai/en/#contact)