Identifying and Countering AI threats in a New Era of Cybercrime

Gaurav Khot, Distinguished Architect at Ping Identity, catalogues how AI is weaponizing identity fraud across the entire user journey and lays out layered countermeasures. He opens with a 2024 case of a finance executive wiring $25 million after a live deepfake video call impersonating his CFO, plays a synthetic Morgan Freeman clip to show how convincing today's fakes are, and cites a survey where only 52 percent of respondents believed they could recognize a deepfake of their own CEO. He walks through AI-amplified schemes at each stage of an identity lifecycle: synthetic and stolen identities passing hiring checks (including a North Korean state actor caught mid-process at a bank), AI-scaled phishing emails with none of the old grammar tells, voice-cloned grandparent scams, session hijacking, and support-desk impersonation bypassing voice biometrics. His countermeasures center on multimodal, continuous verification, document authentication with liveness and injection detection, device and data triangulation across multiple providers, phishing-resistant MFA (FIDO/passkeys), dynamic risk-based authorization instead of static rules, and verifiable credentials as tamper-proof, privacy-preserving, delegable proof of identity throughout a user's journey, including re-verification after hiring. A short Q&A distinguishes continuous verification from real-time multimodal risk signaling.