Key Takeaways:
A new cybercrime tool is being sold on the darknet that uses artificial intelligence to create deepfakes capable of bypassing Know Your Customer (KYC) identity checks at banks and cryptocurrency exchanges. The fraud kit is attributed to a threat actor known as “Jinkusu,” according to a post from cybercrime tracker Dark Web Informer.
"As AI lowers the barriers to synthetic identity fraud, the front door will always remain vulnerable," Deddy Lavid, CEO of blockchain security platform Cyvers, told Cointelegraph. Lavid urged platforms to adopt a layered security approach that combines traditional identity verification with real-time AI monitoring to counter these evolving threats.
The tool reportedly uses AI for real-time face swaps via InsightFace, enabling "fluid gesture transfers," and integrates voice modulation to defeat biometric security measures, according to cybersecurity company Vecert Analyzer. This technology allows a scammer with no technical knowledge to defeat verification systems using as little as a single picture of a victim, a threat previously highlighted by Binance chief security officer Jimmy Su in May 2023. The tool also lowers the barrier for romance scams like "pig butchering," which accounted for $5.5 billion in losses from 200,000 cases in 2024.
The emergence of this "scam-as-a-service" package represents a significant escalation in identity fraud risk for all financial platforms. The author, Jinkusu, is also suspected of creating the "Starkiller" phishing kit in February, which uses a real-time reverse proxy to steal user credentials. While losses from crypto phishing attacks fell 83% in 2025, the continuous development of new malware indicates that the threat to crypto investors remains persistent and is growing more sophisticated.
This article is for informational purposes only and does not constitute investment advice.
