S0168RS6-T20-S0168-Z · Full risk code

Synthetic Identity Fraud

合成身分詐欺

Operation & Monitoring
Risk Description

When fraudsters conduct a live video meeting using synthesized audio and video of an executive, instructing finance staff to make an urgent transfer; due to unmitigated control gaps, because the media appears authentic and the context plausible, the staff member completes the transaction without following established verification procedures, triggering compliance exposure and operational reputational costs.

Framework Mappings

EU AI ActArt.50
NIST AI 600-1Information Integrity
MITRE ATLASAML.T0043
NIST AI RMFMANAGE 2.4
ISO/IEC 5338運作與監控
MIT AI Risk RepositoryDomain 4

Risk Treatment & Implementation Guidance

Deploy deepfake detection for synthetic audio-video and maintain multi-factor identity verification for high-risk transactions; Enforce established verification procedures for financial operations with no urgency bypass; Train staff on synthetic-identity fraud awareness with scenario drills