Real-time face-swap video calls defeat KYC identity verification used by defense contractors

Real-time deepfake face-swapping tools now run at 30fps on consumer GPUs, enabling an attacker to impersonate a cleared defense contractor employee during a video call KYC check. The attacker passes liveness detection (blinks, head turns) because the face swap operates in real time. Defense contractors using video calls for identity verification in remote work environments are exposed to insider threat impersonation. This persists because liveness detection was designed to stop static photo spoofs, not real-time neural face rendering, and the detection arms race favors attackers who only need to fool the system once while defenders must catch every attempt.