The UK government is creating a dedicated National Centre for Information Defence to detect, attribute, and disrupt foreign information attacks powered by artificial intelligence, recognizing deepfakes and AI-enabled disinformation as existential threats to democratic societies. Prime Minister Andy Burnham announced the initiative at the UN General Assembly, framing the challenge as an "industrial-scale assault" on the information environment by hostile actors seeking to undermine social cohesion and sow division.

Why Are Deepfakes Becoming a National Security Priority?

The scale of AI-powered fraud and synthetic content has grown dramatically. The FBI's Internet Crime Complaint Center logged $893 million in audited losses from AI-powered fraud across more than 22,300 complaints in 2025, marking the first year the agency broke out this category separately. Deepfake fraud attempts are projected to exceed 334 million annually by 2028, according to the 2026 Deepfake Fraud Detection Market Report.

What makes this threat particularly alarming is how convincing synthetic identities have become. Fraudsters no longer need to steal an existing identity; they can now manufacture a fake identity complete with a matching voice and a convincing "live" video feed, all generated in seconds. Deloitte's Center for Financial Services identifies synthetic identity fraud as the fastest-growing financial crime in the United States, projecting at least $23 billion in losses by 2030.

Recent data underscores the acceleration of this threat. Pindrop's analysis of 2025 fraud data found that AI-powered fraud attempts surged 1,210 percent over the course of the year, far outpacing the 195 percent rise in traditional fraud over the same period. Meanwhile, 41 percent of chief information security officers (CISOs) reported at least one social engineering incident involving a deepfake over the past year, according to Gartner data.

What Will the UK's New Centre Actually Do?

The National Centre for Information Defence will bring together intelligence agencies, law enforcement, and social media companies with a mandate to detect, attribute, and disrupt foreign information attacks while helping communities build resilience to disinformation. The centre represents a shift from reactive detection to proactive disruption of state-sponsored campaigns.

However, some industry experts question whether government agencies alone possess the technical expertise needed to keep pace with rapidly evolving AI threats. Andrew Bud, CEO of iProov, a biometric identity verification company, noted that success will depend on how quickly the centre can move from identifying threats to actually disrupting them.

"Deepfakes are becoming too sophisticated and too scalable for the government to rely on individuals or platforms simply spotting fake content after the fact," Bud stated. "The Centre should be looking at the infrastructure behind these attacks, including how we verify that the people, accounts and communications we interact with online are genuine."

Andrew Bud, CEO at iProov

How Can Identity Verification Technology Help Combat AI Fraud?

Modern identity verification systems combine multiple layers of defense to detect both traditional fraud and AI-generated synthetic identities. These systems work by analyzing documents, comparing biometric data, and assessing whether a real person is physically present during the verification process.

• Document Verification: AI algorithms validate the authenticity of identity documents such as passports or driver's licenses, identifying altered documents and extracting data for cross-reference checks.
• Biometric Face Matching: The system compares a selfie or live video against the portrait in the identity document, using facial recognition to confirm the person matches their official identification.
• Video Liveness Detection: Advanced liveness detection records the entire interaction as video, analyzing passive signals like skin texture, light reflection, micro-movements, and 3D facial mapping, then adds active real-time challenges that change with every session to prevent replay attacks and deepfake spoofing.

The evolution of liveness detection represents the most significant technological advancement in this space. Early approaches simply captured a single photo and prompted users to smile or blink. Modern systems now record the full interaction, analyzing natural behavior in front of the camera to distinguish between a real person and a photo, mask, screen replay, or deepfake.

Bud emphasized that identity verification infrastructure should become central to the UK's defensive strategy. "The Cyber Security and Resilience Bill recognises the need to protect the authenticity and integrity of data as part of securing essential services and this same principle needs to extend to the authenticity of the people and digital interactions those services rely on," he explained.

Bud

What's the Gap Between Public Awareness and Actual Risk?

A significant disconnect exists between how confident people feel about spotting deepfakes and their actual ability to do so. The Avast 2026 Safe Tech Report found that 56 percent of adults worldwide are "convinced they'd catch an AI fake the moment they saw one," yet this confidence far exceeds reality given the sophistication of current synthetic media.

This overconfidence creates a vulnerability that fraudsters actively exploit. The old identity verification playbook, which relied on a quick document scan and a selfie, was designed for a fraud landscape that no longer exists. Financial institutions, insurers, and any organization completing digital agreements must adapt their security posture accordingly.

The United States is also taking action. The Department of Homeland Security is expanding its testing of remote identity verification technology to target AI-generated identity documents and biometric deepfakes, and has added a dedicated deepfake detection challenge to the 2026 Remote Identity Validation Rally (RIVR).

Steps to Strengthen Identity Verification Against AI Fraud

• Implement Multi-Layer Verification: Deploy systems that combine document authenticity checks, biometric face matching, and video liveness detection rather than relying on any single method alone.
• Use Risk-Based Authentication: Apply stronger verification requirements to higher-risk transactions without adding unnecessary friction to every customer interaction, balancing security with user experience.
• Create Unified Audit Trails: Connect identity verification, consent, and signing evidence in a single audit trail to create a more coherent record for compliance audits and legal defensibility.
• Continuously Update Document Coverage: Maintain support for a broad range of identity documents across multiple countries and territories, as customers present diverse government-issued IDs from around the world.
• Educate Employees and Customers: Provide ongoing training to help staff recognize security features of identity documents from different countries and help customers understand why verification is necessary.

The convergence of state-sponsored information warfare and AI-powered fraud represents a new category of threat that requires coordination across government, law enforcement, financial institutions, and technology providers. The UK's National Centre for Information Defence signals recognition that defending democratic institutions now requires defending the authenticity of digital identity itself.

" }