Persona’s 2026 H1 selfie fraud report

Persona analyzed over 27 million fraudulent selfies to understand how fraudsters are attacking selfie verification flows. They found that the vast majority of attempts were relatively simple presentation attacks. And even within the more complex injection attacks, bad actors were more likely to inject videos of real people than AI selfies. “We tend to see high-quality AI selfies and injection attacks when fraudsters have high-value targets,” says Coco Tang, a product architect at Persona. “But there are also fraud rings that use bots or AI to launch hundreds of thousands of attacks. Frankly, it’s fraud slop.” Some of the key findings from the report are: AI-generated content is in nearly one out of every four fraudulent selfies. But most selfie fraud involves presentation attacks with non-AI selfies. Basic virtual camera setups account for over 80% of injection attacks. Attackers are nearly three times more likely to inject videos of real people than AI selfies. Read the full report (no email required) on Persona's site.

Persona analyzed over 27 million fraudulent selfies to understand how fraudsters are attacking selfie verification flows. They found that the vast majority of attempts were relatively simple presentation attacks. And even within the more complex injection attacks, bad actors were more likely to inject videos of real people than AI selfies.

“We tend to see high-quality AI selfies and injection attacks when fraudsters have high-value targets,” says Coco Tang, a product architect at Persona. “But there are also fraud rings that use bots or AI to launch hundreds of thousands of attacks. Frankly, it’s fraud slop.

”Some of the key findings from the report are: AI-generated content is in nearly one out of every four fraudulent selfies. But most selfie fraud involves presentation attacks with non-AI selfies. Basic virtual camera setups account for over 80% of injection attacks.

Attackers are nearly three times more likely to inject videos of real people than AI selfies. Read the full report (no email required) on Persona's site.