Back to blog

Deepfake Bank Fraud: 1 Man, 47 Fake Accounts, 1 Selfie Trick

Case Study

Case Study

Written by

Brightside Team

Published on

A 34-year-old man in Amsterdam opened 47 bank accounts at ABN AMRO in other people's names, using deepfake and face-swap technology to beat the bank's selfie identity check. No hacking, no malware, just a fake face fed straight into the verification system. In June 2026 a Dutch court sentenced him to 30 months. Here's exactly how the deepfake KYC fraud worked, why the bank's identity verification failed, and how to actually defend against it.

This is a full breakdown of one of the first European convictions for a biometric injection attack against a bank's onboarding system: how the ID documents were harvested through fake rental listings, how the deepfake selfie was built, why "liveness detection" is the layer that was missing, and what the ChatGPT logs on his phone revealed.

Try our vishing simulator

Experience the most advanced voice phishing simulator built for security teams. Create scenarios, test voice cloning, and explore automation features.