HKMA Issues New Guidance on AI Deepfake Detection for Remote Banking Onboarding
The Hong Kong Monetary Authority releases updated guidelines requiring authorized institutions to deploy multi-layered AI deepfake detection across video KYC channels.
The Hong Kong Monetary Authority (HKMA) has issued detailed supervisory guidance to authorized financial institutions, mandating enhanced technical controls to combat AI-driven deepfakes during remote customer onboarding.
Mandating camera pipeline validation and liveness layers
The HKMA's circular highlights that visual human inspection and basic presentation liveness checks are no longer sufficient to stop face swaps and synthetic video streams. Banks are instructed to implement multi-layered defenses that evaluate device-level signals and camera hardware authenticity.
Required technical safeguards include:
Camera hardware attestation: Verifying that video captures originate from physical camera lenses rather than software emulators or virtual drivers.
Passive subdermal liveness: Checking structural light reflections and biological properties without forcing users into complex manual movements.
Real-time processing: Running forensic checks in sub-150ms parameters to maintain a seamless user experience.
Through deepeye, deepidv provides financial institutions with native, sub-150ms deepfake detection and passive face liveness interception that fulfills regional supervisory standards.
HKMA Deepfake Guidance FAQ
- What does the HKMA's August 2026 guidance require for remote onboarding?
- It requires authorized financial institutions to deploy multi-layered deepfake detection, hardware camera attestation, and passive liveness analysis across all digital onboarding channels. The guidance states that visual human inspection and basic presentation liveness checks alone are no longer sufficient to stop face swaps and synthetic video streams.
Relevant Articles
One Week Remaining for Public Comments on Federal Stablecoin CIP Mandates
The public comment window for the proposed GENIUS Act stablecoin CIP rules closes August 21, 2026.
Aug 14, 2026
Off-Peak Synthetic Probing Attacks Threaten Real-Time Payment Rails
Fraud syndicates run low-velocity synthetic probing during off-peak hours to bypass rate limits on instant payment rails.
Aug 12, 2026
What is deepidv?
Not everyone loves compliance — but we do. deepidv is the AI-native verification engine and agentic compliance suite built from scratch. No third-party APIs, no legacy stack. We verify users across 211+ countries in under 150 milliseconds, catch deepfakes that liveness checks miss, and let honest users through while keeping bad actors out.
Learn More