BeijingHaotian AI replaces faces live on video calls.
Low-latency face-swapping on standard conferencing apps enables “CFO told me to wire the money” fraud without any technical tell.
The tool sells commercially; any call from a known contact is now an unverified identity claim.
Sources: 404 Media
THE LATENCY BARRIER
Early deepfakes needed hours of GPU time per minute of video. Real-time face-swapping requires the full pipeline — face detection, landmark tracking, generative synthesis, color matching — to run in under 100 milliseconds, the threshold below which the human eye stops perceiving lag in conversation.
THE ARMS-LENGTH PROBLEM
Authentication has always relied on out-of-band channels — a callback to a known number, a face seen in person, a passphrase shared offline. Video calls collapsed those channels into one: the screen became the proof. Real-time deepfakes break the assumption that synchronous video is a costly signal.
THE 2024 ARUP CASE
A finance worker at engineering firm Arup wired $25 million after a video call with what appeared to be the CFO and several colleagues. Every face on the call was synthetic, generated from publicly available conference footage. It remains the largest documented deepfake fraud — and predates the commercial tools by over a year.
WHY CHINA FIRST
China's generative AI ecosystem moves faster than Western equivalents because regulatory scrutiny applies after release rather than before. The same dynamic that gave China the lead in consumer face-filter apps (Meitu, FaceU) now gives it the lead in face-swap fraud tooling. The technology export path is GitHub and Telegram — there is no border to enforce.
THE LIABILITY VACUUM
Wire fraud law assumes the deceived party can identify the deceiver. When the deceiver is a generative model trained on stolen footage, sold by a shell company, deployed via a Telegram bot, the chain of liability dissolves. Banks have begun treating CEO-fraud losses as the customer's problem — the legal architecture has not caught up to the technical one.
THE RETURN OF THE PASSPHRASE
The countermeasure emerging inside corporate finance teams is pre-shared verbal codes — a word or phrase agreed in person, never spoken on a recorded channel, demanded before any wire authorization. It is the same technique used by WWII radio operators against German impersonation attempts on captured Allied frequencies.