image

Deepfakes, Synthetic Fraud & Digital Identity: Securing Financial Authentication in the AI Era

Indonesia’s financial sector is facing a new class of threats where artificial intelligence is no longer just a tool for efficiency but also a weapon for fraud. Deepfakes, synthetic identities, and AI-generated impersonation are redefining how fraud is executed and scaled.

As digital adoption accelerates, institutions must rethink authentication, identity verification, and trust frameworks. For leaders attending a digital banking conference or a financial technology summit, the urgency is clear: financial systems must be secured against rapidly advancing, machine-generated deception.

The Rise of AI-Driven Fraud in Financial Services

AI-driven fraud is rapidly accelerating across Indonesia’s financial ecosystem. Between late 2024 and 2025, losses crossed US$465 million, driven largely by deepfake impersonation and biometric spoofing. The rapid adoption of fintech technology has expanded access, but it has also increased exposure to sophisticated attacks.

Key Trends & Data in Indonesia

  • Surging Losses: AI-driven fraud surged by 1,550% between 2022 and 2024.
  • Major Fraud Vectors: Criminals are deploying deepfake voice and facial impersonation to bypass authentication systems.
  • Scale of Impact: Losses reached 7.8 trillion Indonesian rupiah between November 2024 and November 2025.
  • Regulatory Response: The Indonesia Anti-Scam Centre has processed over 343,000 reports and blocked more than 106,000 bank accounts.
  • Sector Vulnerability: With over 66 million new users entering formal finance, social engineering risks are rising.

While regulators are strengthening financial services policy frameworks and deploying AI-based monitoring, gaps in digital awareness continue to create opportunities for fraudsters.

Synthetic Identity Fraud & Its Impact on Banking Systems

Synthetic Identity Fraud (SIF) is emerging as one of the most damaging forms of financial crime. By combining real and fabricated data, fraudsters create entirely new identities that pass traditional verification checks.

How Synthetic Identity Fraud Works in Indonesia

  • Data Sourcing: Personal data, including NIK numbers, is obtained from breaches and underground markets.
  • Construction: Real identifiers are combined with fake names, addresses, and employment records.
  • Cultivation: Fraudsters build credibility over months using low-risk transactions or piggybacking strategies.
  • Bust-Out Phase: Once credit trust is established, large withdrawals or loans are executed before disappearing.
  • AI Acceleration: Generative AI is used to produce documents and deepfake videos to pass e-KYC.

Impact on Banking Systems

  • Financial Losses: Fraud losses exceeded $2.1 billion across sectors in 2024.
  • Customer Trust Decline: 67% of victims reduced digital transactions for up to two years.
  • Reputational Damage: Banks risk losing 25–40% of customers after major incidents.
  • Rising NPLs: Synthetic identities contribute significantly to bad loans in digital lending.
  • Operational Costs: Institutions face rising expenses in fraud detection and customer compensation.

Specific Vulnerabilities in Indonesia

  • Gaps in digital onboarding processes
  • Widespread availability of leaked personal data
  • Weaknesses in SIM registration systems

For institutions leveraging fintech technology to scale inclusion, these vulnerabilities must be addressed without slowing access.

Deepfake Technology & Financial Authentication Risks

Deepfakes represent a direct threat to authentication systems.  These AI-generated audio and video outputs can mimic real individuals with high accuracy, enabling fraudsters to bypass identity verification layers.

Key Deepfake Threats in Indonesian Banking

  • Biometric Spoofing: Face swaps and virtual camera manipulation bypass liveness detection systems.
  • Voice Phishing (Vishing): AI-generated voices imitate executives or customers to authorize transactions.
  • Synthetic Identity Theft: Deepfake visuals combined with stolen data create entirely new identities.

Despite regulatory progress — including enhanced oversight aligned with financial services policy — enforcement gaps and user awareness remain critical challenges. As authentication systems rely more on biometrics, the integrity of those systems must be continuously validated.

Strengthening Digital Identity and Authentication Systems

To counter AI-driven fraud, Indonesia is focusing on strengthening digital identity frameworks and authentication mechanisms. The objective is to balance security with financial inclusion.

Core Components of Digital Identity Strengthening

  • National Digital ID (IKD): A foundational system to unify identity across services.
  • Biometric Authentication: Facial recognition and iris scanning are increasingly deployed.
  • Secure e-KYC: Advanced verification tools are improving onboarding processes.
  • AI-Based Fraud Detection: Real-time monitoring systems identify suspicious activity patterns.
  • System Integration: Linking identity frameworks with payment systems like QRIS enhances verification accuracy.

Challenges and Strategic Focus

  • Adoption Barriers: Limited digital literacy slows implementation.
  • Security Risks: Phishing and social engineering continue to exploit human behavior.
  • Policy Development: Stronger frameworks are needed to manage cross-platform identity validation.

Discussions at every financial technology summit now increasingly focus on how identity systems can remain secure while supporting scale.

Regulatory Focus on Identity Protection & Fraud Prevention

Indonesia’s regulatory landscape is undergoing significant transformation. The Financial Services Authority (OJK) is leading efforts to establish stricter anti-fraud controls and accountability structures.

Key Regulatory Pillars

  • OJK Regulation 12/2024: Mandates a four-pillar anti-fraud strategy, prevention, detection, investigation, and monitoring.
  • Personal Data Protection Law: Enforces stricter standards for handling customer data.
  • AML/CFT Compliance: Aligns with global standards for customer due diligence.

Identity Protection Requirements

  • Strengthened e-KYC protocols for digital onboarding
  • Mandatory risk assessments and monitoring systems
  • Regulatory sandbox initiatives supporting innovation

These developments reflect a broader shift in financial services policy, where accountability is moving to the board level and compliance expectations are increasing across all financial entities.

Industry Collaboration to Strengthen Identity Security

Collaboration between regulators, financial institutions, and technology providers is becoming essential to combat fraud at scale. With digital adoption reaching 78% among banking users, coordinated efforts are critical.

Key Collaboration Areas

  • Regulatory Alignment: Institutions are aligning with OJK mandates on IT governance and risk monitoring
  • Public-Private Partnerships: Shared intelligence platforms are improving fraud detection and response
  • Unified Digital Identity Systems: Integration with national ID databases improves verification accuracy
  • Technology Deployment: AI and machine learning tools are enabling anomaly detection and predictive analysis
  • Focus on Digital Channels: Security measures are expanding across mobile banking, IoT, and cloud systems

At any major digital banking conference, collaboration is now a central theme, highlighting that no single entity can address these threats alone.

Exchange Insight on Fraud Prevention & Identity Protection at WFIS!

Join the World Financial Innovation Series (WFIS) in Indonesia on 27–28 October 2026 at Raffles Jakarta as policymakers, banking leaders, and technology experts come together to examine the growing impact of deepfakes and synthetic fraud on authentication systems.

Explore the latest approaches to identity protection, hear how institutions are responding to evolving threats, and gain insight into the regulatory priorities, risk mitigation strategies, and real-world implementations shaping the future of secure digital finance.