The Agency for Regulation and Development of the Financial Market of the Republic of Kazakhstan published consumer-facing guidance warning that deepfakes are being used to facilitate cyberattacks and the theft of citizens’ confidential data, including in financial fraud. It explains that artificial intelligence can be used to generate or alter photos, videos and audio, and that some services can create deepfake content from as little as a single video or a few seconds of voice. The notice sets out common fraud scenarios, including impersonation to gain access to bank accounts, obtain fraudulent credit, or mimic calls from relatives, managers or bank employees, and it warns that images of senior officials and financial-sector leaders may be misused to build trust. It lists indicators of deepfakes and social-engineering tactics such as rushed requests, discouraging call-backs, and demands for secrecy, and it cautions against investment offers that redirect users to fake websites to submit personal data and transfer small amounts. The agency also notes that requirements are in place for financial organisations to apply two-factor authentication, with mandatory use of biometrics as a key factor, when providing remote services to clients, alongside ongoing measures to support information security including the cybersecurity of financial organisations’ mobile applications.

Original source View in tracker