1. Scrutinize and Stay Skeptical
The first line of defense is a healthy dose of skepticism. AI-generated media is becoming harder to spot, but flaws still exist. Look for unnatural movements, strange lighting, or inconsistent audio quality. In videos, pay close attention to facial expressions
and lip-syncing; if they seem robotic or don't match the audio, it’s a red flag. Check for odd details in images, like weird smudging around hair or distorted backgrounds. Trust your instincts—if a piece of content feels off, it probably is. This critical mindset is crucial, especially when faced with sensational or emotionally charged content designed to make you react before you think.
2. Minimize Your Digital Footprint
The less raw material scammers have, the harder it is for them to create a convincing deepfake of you. Be mindful of the photos and videos you share publicly. It’s wise to tighten the privacy settings on your social media accounts, restricting your posts to a trusted circle of friends and family. This limits the data that can be scraped by bad actors. For high-profile individuals or those with public-facing roles, this is even more critical. Consider watermarking images you do share online, which can deter misuse by making content more traceable. And think twice about your voicemail greeting; using the generic system message instead of your own voice can reduce the risk of audio cloning.
3. Establish a 'Trust, But Verify' Protocol
Scammers thrive on urgency and emotion. A common tactic is the “grandparent scam,” where a deepfaked voice of a loved one calls in distress, asking for money. To counter this, establish a simple verification system with your inner circle. Agree on a secret “safe word” or a specific question that only your family and close friends would know the answer to. If you receive an urgent or unusual request for money or sensitive information, you can ask for the safe word to confirm their identity. For work-related requests, always verify through a second channel. If you get a strange video call from your CEO asking for a wire transfer, hang up and contact them via a known, trusted number or a different platform to confirm the request is legitimate.
4. Fortify Your Basic Digital Security
Good digital hygiene is a powerful shield against a wide array of cyber threats, including those that enable deepfake scams. Start by enabling multi-factor authentication (MFA) on all your important accounts, such as email, banking, and social media. MFA provides an essential second layer of security that can stop an attacker even if they have your password. Speaking of passwords, ensure you're using long, unique, and complex passwords for every account, managed securely with a password manager. Finally, keep your software and devices updated. These updates often contain critical security patches that protect against the latest vulnerabilities that hackers might exploit.
5. Educate Your Entire Network
Protecting yourself is important, but deepfake threats are a collective problem. Share what you learn with your family, friends, and colleagues. The more people who are aware of these scams and how to spot them, the less effective they become. In a professional setting, regular training on identifying deepfakes and phishing attempts can prevent significant financial loss and reputational damage. When people know the signs of manipulation and understand the verification protocols in place, they become a human firewall that is much harder for scammers to penetrate. If you do encounter what you believe to be a deepfake, report it to the platform hosting it and, if necessary, to the authorities.
