huntress.comarticleThe Three-Finger Test
A Huntress blog post examines the viral "three-finger test" — asking a suspected deepfake video-call participant to hold up three fingers, which exposes real-time face-swap AI because it struggles to render hand-over-face occlusion cleanly. It notes deepfake-detection firms (Reality Defender, OpenOrigins) already say advanced real-time models have patched this tell, and argues organizations should replace ad-hoc human detection tricks with process controls like callback verification and two-person approval for wire transfers, executive requests, and vendor payments.
TL;DR The viral "three-finger test" for spotting deepfake video calls is already being defeated by newer real-time face-swap AI, so Huntress argues for process-based verification (callbacks, two-person approval) over relying on human-spotted tells.
Organisations named here
- Ben Colman
- Chris Henderson
- Jim Browning
- John Hammond
- Manny Ahmed
Technologies named here
- _declassified
- Reality Defender
- OpenOrigins
- Huntress
Techniques named here
- Deepfake social engineering / real-time AI face overlay
- Three-finger test
- Head-turn test
- Light/shadow wave test
Threat actors named here
- Deepfake scam call center operators
Related in AI Security
blog.talosintelligence.comtoolIntroducing CAIRN: Frontier tracking for AI-integrated malware (Cisco Talos)
github.comadvisoryFlowise MCP Security Bypass Enables RCE
github.comrepoYesWeHack Claude Kit
jfrog.comarticle