Be Aware Be Safe 🙌🏻

Main TakeawaysScammers employ AI to replicate users’ faces based on publicly available photos or videos, looking to bypass Binance’s face verification systems and steal victims’ crypto. Public selfies, ID pics, and unsecured devices are prime targets for these face attack-powered scams. Binance’s Security team is actively tracking this threat, enhancing protections and urging users to stay vigilant. The rise of artificial intelligence (AI) has brought incredible innovation and efficiencies – along with new risks. Among the emerging threats to crypto users, one is evolving fast: the so-called face attacks.Criminals are leveraging AI to mimic user’s faces, attempting to trick Binance’s facial recognition system and gain unauthorized access to victims’ accounts. Fueled by publicly available images and stolen hardware, this threat persists across devices beyond mobile. In this post, we’ll break down this growing threat and show you how Binance is fighting back – plus, of course, share the steps you can take to stay safe.From Face to Account TakeoverBinance’s face verification system is a security layer designed to confirm users’ identity before granting account access. If criminals manage to fool it, victims’ crypto is theirs to take.This threat first gained traction as deepfake technology became more accessible. Scammers started with basic photo manipulation, but now they’re pulling vast amounts of data  from social media selfies, leaked IDs, and even casual videos where victims are present in the frame. If they pair this with a stolen device that has the Binance app installed, the risk skyrockets. The result: an account takeover (ATO) that’s hard to spot until it’s too late.Attack Vectors: Public Photos and Stolen DevicesEarly face attacks relied exclusively on publicly available images, like that selfie you posted on X or your driver’s license from a data breach on darkweb. Today, AI tools can stitch these into a convincing facial model, good enough to fool most modern verification systems. Every photo you share online is potential ammunition. Group pics, tagged posts, or even a video where you’re in the background can be harvested.But the threat doesn’t stop there. Scammers are also targeting your devices. A phone or laptop with Binance access is a goldmine. If it’s unlocked or lacks strong security, attackers can combine physical device access with an AI-generated face to wreak havoc. Even more alarming, desktop attacks are emerging. PCs with saved Binance credentials can be exploited remotely, especially if paired with a malware that logs your activity. This multi-angle approach makes face attacks a global concern for crypto users.Your public photos could be the key to a face attack. This is not the person’s real face – the images are AI-generated. Source: Binance.  Face Attack FlowHere’s how scammers pull off face attacks under the two main scenarios:Online Image HarvestingA scammer collects your photos from social media or hacked databases. AI software builds a 3D facial model, mimicking your features. They use this fake face to pass platforms’ verification systems, potentially accessing your account unnoticed. This step is often combined with other attacks aimed at bypassing your account’s password and 2FA defenses.Device-Based AttacksA thief steals your phone or laptop with the Binance app installed.Using saved login data and their AI-generated face, they bypass security checks.Funds are drained before you realize the device is gone. In both cases, the attack hinges on speed and stealth. You might not know you’ve been hit until your wallet’s empty.Crypto users everywhere are at risk, but some are more exposed. In regions with high social media use, like North America and Asia, public photos are easy pickings. Meanwhile, areas with frequent device theft or lax cybersecurity, such as urban hubs or travel hotspots, see more device-based attacks. Scammers don’t discriminate; if your face or phone is accessible, you’re a target.Binance Security Team’s ResponseAt Binance, your safety is our priority. Our Security team is tackling the face attack threat head-on: Threat Detection: We’re analyzing attack patterns and blacklisting suspicious accounts linked to AI scams. System Upgrades: We’re enhancing face verification to spot AI-generated fakes, staying ahead of scammer tech.User Education: Through blogs like this one, alerts, and app notifications, we’re spreading the word to keep you informed. We’re committed to reinforcing our defenses as fast as the threats evolve, but we need your help to block the scammers’ moves.How to Protect YourselfStay one step ahead with these practical steps: Keep Photos Private: If you post selfies or videos online, make sure to limit access to them to people you know and trust using platforms’ privacy settings. Limit what scammers can grab.Lock Your Devices: Use strong passwords, enable 2FA, and secure your phone or laptop. Avoid saving Binance login details on devices that could be stolen.Act Fast: Spotted odd logins? Freeze your account in the Binance app instantly. Lost a device? Report it to us ASAP via support.Verify Links: Check suspicious messages or links at https://www.binance.com/en/official-verification. Phishing attempts are often paired with face attacks. Double-check at every step. If something feels off, a quick pause could save your crypto.Final ThoughtsThe rise of face attacks is a stark reminder of how AI can turn our own tools against us. From a single selfie to an unlocked phone, scammers are finding new ways to strike. But you’re not defenseless. Binance’s security experts are working tirelessly to detect and block these threats, and with your vigilance, we can keep them out. Guard your face, secure your devices, and act fast at the first sign of trouble. Together, we’ll keep your crypto safe.Further ReadingWeb3 Security: No Room for Spam Tokens in Your Web3 WalletBinance CSO: Understanding Recent Credential Leaks and the Rise of InfoStealer MalwareFake Crypto Tokens: How to Spot a Scam and Protect Your Money