Your sign-up flow
The applicant takes the selfie or video your app already asks for.
Digital onboarding NeuroVerify
Every fake account starts with a fake face.
Fraudsters now open accounts with faces that never existed. NeuroVerify checks the sign-up selfie or video for deepfakes and injected media in one API call, before the account exists.
The problem, in numbers
Deepfakes have moved from the news to the sign-up screen.
- 1 in 5
biometric fraud attempts now involve a deepfake.
Entrust 2026 Identity Fraud Report - +58%
more deepfaked selfies in 2025 than the year before.
Entrust 2026 Identity Fraud Report - +40%
injection attacks year over year, skipping the camera entirely.
Entrust 2026 Identity Fraud Report - Red flag 6
FinCEN tells banks to watch for a photo or video flagged by deepfake detection software.
FinCEN Alert FIN-2024-Alert004
How a fake account gets opened
Four steps. No real person required.
This is the pattern FinCEN describes in its deepfake alert to US banks. The same playbook works on any app that opens accounts with a selfie.
- 01
Build an identity
Stolen personal data, invented data, or a mix of both. FinCEN calls this a synthetic identity.
- 02
Generate a face for it
An AI-generated or face-swapped selfie, made to match the photo on the ID.
- 03
Skip the camera
A virtual camera or webcam plugin plays prepared video into the live check. The lens never sees a person.
- 04
Open the account
Every check passes. FinCEN reports these accounts are then used to receive and move the proceeds of other fraud.
Why your checks pass it
Each check answers one question. Nobody asks the last one.
Your document, face-match and liveness checks are working. They were never built to ask whether the face itself is real.
CheckThe question it answersWhat gets through
Document check
Is the ID genuine and well-formed?
Whether the face presented with it was ever a real person.
Face match
Does the selfie match the ID photo?
A fake built to match. Matching is exactly what it was made to do.
Liveness
Is someone in front of the camera?
Injected video that never meets a camera, and face swaps that blink on cue.
NeuroVerify
Is this face real?
Six checks on the same media: manipulation, AI generation, pixel tampering, live presence, safety and compliance.
Where NeuroVerify fits
One call between the selfie and the new account.
Your sign-up flow stays exactly as it is. NeuroVerify sits behind it and answers one question in under 200 ms.
NeuroVerify
Six checks run in parallel and return one risk score, with the signal evidence behind it.
Your policy
Continue, step up or review. The account only opens when your rules say so.
What to do with the score
Plan for every answer.
Real customers should glide through. Fakes should meet a person. Decide the bands once and let the score route each sign-up.
01
Low risk
When
The score is below your review threshold.
What to do
The application continues through your other checks. Your customer never knew NeuroVerify was there.
02
Medium risk
When
The score sits in the band you choose to question.
What to do
Step up: ask for a fresh live capture, or add a second factor before the account opens.
03
High risk
When
The signals point to a deepfake or injected media.
What to do
Hold the application for a reviewer, with the score and signal evidence attached. Do not auto-reject a real person.
04
No score
When
The media was unusable, or the call timed out.
What to do
Ask for a new capture or retry. A missing score is never treated as a pass.
Who it’s for
Any app that opens accounts with a selfie.
The attack is the same everywhere. See how it plays out in your industry.
Easy integration
Live in under 24 hours. Two lines of code.
Step 1
Get your API key
A scoped key for your onboarding service.
Step 2
Add one call after capture
Mobile SDK in the app, or one call from your backend.
Step 3
Send the selfie or video
The media your sign-up flow already collects.
Step 4
Route on one score
Continue, step up or review, inside your own rules.
SDK-first integration
One API.
Every stack.
Native SDKs for Android, iOS and Flutter, plus Python, TypeScript, Go and Java for your backend. Add NeuroVerify after the sign-up selfie and keep your flow as it is.
Sign in for API access$ npm install @neuraldefend/sdk
import { NeuroVerifyClient } from "@neuraldefend/sdk"
const result = await new NeuroVerifyClient().detectImage("selfie.jpg")Mobile SDKs
Native capture apps- KAndroid (Kotlin)
- SiOS (Swift)
- FFlutter
Backend SDKs
Server-side checks- PyPython
- TSTypeScript / Node.js
- GoGo
- JJava
REST API
For everything elseAlready have capture? Send the image to POST /detect/image and get every signal back in one JSON response.
AI agents
MCP serverGive approved AI assistants bounded image and video authenticity tools, with API keys kept outside prompts.
Two lines to integrate<200 ms p95Live in under 24 hours
Runs as a managed cloud API, in your VPC, as a secure container, on-premises or air-gapped. ISO/IEC 27001 · 27701 · 42001 · SOC 2 Type II.
Sources
Read the evidence yourself.
Third-party publications. None of them evaluates or endorses Neural Defend.
- FinCENAlert on fraud schemes involving deepfake media
Nov 2024. Criminals opened accounts with GenAI identities; nine red flags for banks.
- Entrust2026 Identity Fraud Report
Nov 2025. Vendor data from over a billion verifications in 195 countries.
- NISTSP 800-63A-4, Identity proofing
Jul 2025. Adds controls for injection attacks and forged media, including deepfakes.
- EuropolIOCTA 2026
Describes fraudsters abusing fast neo-bank onboarding to open a stream of accounts.
Will this add friction to sign-up?
No. NeuroVerify reads the selfie or video you already capture. There is no new screen, prompt or wait for the customer. Eligible image requests return in under 200 ms at p95 under defined test conditions.
We already have liveness. Isn’t that enough?
Liveness checks that someone is present. It does not check that the face is real, and injected video can bypass the camera entirely. NeuroVerify includes a live presence signal and adds five more checks for manipulation and AI generation.
What happens to a genuine customer who gets a high score?
They should go to a reviewer or a fresh capture, not an automatic rejection. NeuroVerify returns evidence for your policy; your team makes the decision.
Does NeuroVerify check the ID document?
No. It analyses face images, video and audio. Your document provider keeps doing what it does.
Where does applicant data go?
Your choice: managed cloud, your own VPC, a secure container, on-premises or air-gapped. Neural Defend holds ISO/IEC 27001, 27701 and 42001 certifications and a SOC 2 Type II report.
See it on your own sign-ups
Find the fakes already in your funnel.
Run NeuroVerify on a sample of your approved sign-up selfies and the attacks you worry about. See the score, the signals and the speed before you commit.