KYC : Bypass age verification using generative video models

Historically reserved for the banking sector, the KYC (Know Your Customer) process is now making its way into many online services, driven by increasingly strict legislation on anonymity and age verification. To comply, platforms deploy significant measures aimed at guaranteeing the "proof of life" of the user behind their webcam or smartphone. However, the meteoric rise of generative video AI models completely reshuffles the deck, offering attackers formidable and accessible tools to fool these systems. The French PVID framework aims to counter this new threat.

This article establishes a state of the art of current verification mechanisms, before detailing how we used AI to successfully bypass the age verification system of a website relying on AWS Rekognition.