{
  "slug": "kyc-injection-attacks",
  "title": "The camera is no longer evidence",
  "summary": "Injection attacks feed synthetic video straight into the capture path, so liveness sees a perfect deepfake. Millions were recorded in 2025. Video stopped being proof.",
  "lede": "Remote identity verification rests on one quiet assumption: that a camera observes reality. Injection attacks turn that assumption into a configuration setting on the attacker's machine. Once you understand the difference between holding a mask up to a lens and replacing the lens entirely, you cannot unsee the problem.",
  "date": "2026-09-09",
  "reading_time": "18 min read",
  "category": "Fraud",
  "tags": [
    "injection attacks",
    "liveness detection",
    "deepfake KYC",
    "identity verification",
    "virtual camera",
    "device binding",
    "onboarding fraud"
  ],
  "image": "https://cdn.twc.sh/images/igcache/KYC%20Injection%20Attacks/1200_630/blog.jpg",
  "url": "/blog/kyc-injection-attacks.html",
  "wordcount": 4378,
  "related": [
    "passkey-recovery-weakest-link",
    "deepfake-defense-matrix",
    "identity-failure-map"
  ],
  "schema": "Article"
}