According to law enforcement officials, the defendants have used this tactic since 2018. The fact is that identity verification using facial recognition has long been in use in the country, and this authentication method is used both in everyday life, for making retail transactions, and for accessing various government services.
According to media reports, bypassing biometrics was not difficult at all: it took a high-resolution photo and a popular application that turns photos into videos. The image is processed so that the photo “moves”, and a video is created with the desired actions, including nodding, shaking the head, blinking and opening the mouth. The defendants poured the resulting fake onto a specially prepared smartphone with a “captured” camera, and used the fake to bypass checks and face authentication.
By entering the system in this way, the scammers issued fake invoices on behalf of the front company, hoping that the forgery would not be noticed and the bills would be paid. Such accounts were created for about 500 million yuan (approximately 57.5 million rubles).
It is believed that the attackers also hacked the application for issuing business licenses and added their own biometric data to the system in order to be able to log in as legitimate users.