Scammers Clone Person’s Faces to steal all the money

This scam clones a person’s face to steal all the money from their bank account without needing a password

Cybercriminals take advantage of the fact that many financial applications require biometric data for access; they use artificial intelligence to copy several facial features of the victim.

The case of a Vietnamese citizen who lost $400,000 after a sophisticated digital theft has alerted the international community to a new type of fraud. This scheme uses artificial intelligence (AI) to clone faces and drain bank accounts.

According to data from cybersecurity firm Group-IB, this type of attack was first detected in Southeast Asian countries, but experts warn that it may spread to other regions soon.

The criminal group behind these attacks employs an advanced mobile trojan called GoldPickaxe. Initially, this virus targeted iOS users. A version for Android has already been identified.

How this facial data–cloning cyberattack works

This malicious software allows attackers to collect biometric data, such as facial images, as well as identity documents and SMS messages. With this information, criminals can access victims’ bank accounts without knowing their passwords.

The perpetrators of these frauds use the collected data to create deepfakes — digital simulations of the victim’s face generated through artificial intelligence.

These facial replicas enable attackers to bypass biometric verification systems implemented by banks and other financial institutions.

Furthermore, according to Group-IB, there is an AI-based face-swapping service that facilitates the creation of these deepfakes. This increases the risk of facial recognition systems being deceived.

Where cases related to this cyberattack have appeared

The first incidents linked to this trojan were recorded in Thailand, shortly after the Bank of Thailand introduced facial biometric verification as a security measure.

Following those events, the case of the Vietnamese citizen who lost $400,000 was reported, revealing the effectiveness and reach of this new criminal technique.

Cybersecurity experts stated that, so far, the attacks have focused on financial companies and their clients in Vietnam and Thailand, though it is not unlikely that cybercriminals will expand their operations to other countries.

What causes the rise of these cyberattacks

The proliferation of personal images on social networks and other digital platforms makes it easier for attackers to obtain facial data. Today, most people have photos of their faces available online, which increases vulnerability to this type of fraud.

Group-IB explained that although passwords are still in use, the trend is moving toward broader adoption of biometric identification systems, such as facial or fingerprint recognition, under the assumption that these methods cannot be stolen in the same way as traditional passwords.

However, the emergence of trojans like GoldPickaxe and the use of deepfakes demonstrate that biometric security can also be compromised.

The sophistication of these tools calls into question the effectiveness of facial authentication systems, especially when attackers have access to image databases and AI technology capable of generating convincing replicas.

The evolution of these types of cyber threats presents new challenges for financial institutions and app developers, who must strengthen their protective mechanisms and seek alternatives to reduce the risk of identity theft through deepfakes.

The ease with which cybercriminals can access biometric data and use it for bank fraud represents a growing challenge in the field of digital security.

Another point to consider is the risk of posting photos on social networks without restricting who can view this information.

Links

• Deepfakes, how to protect ourselves against fraud – Santander
• Sell pre-owned Apple device online – iGotOffer

Deepfake scams: New face of fraud | FOX 5 News [Video]

Video uploaded by Fox 5 Atalanta on October 19, 2025.