Go back

False Acceptance Rate (FAR)

A biometric metric measuring how often imposters are wrongly accepted. Tightly paired with False Rejection Rate (FRR). Higher FAR means weaker security. Deepfakes inflate FAR unless authenticity checks are added.

False Acceptance Rate (FAR)

False Acceptance Rate (FAR) is a core biometric performance metric that measures the probability of a biometric system incorrectly matching an impostor against an enrolled identity.

Why this matters

It is paired with False Rejection Rate (FRR), which measures legitimate users incorrectly rejected; the two trade off as the matching threshold is tuned.

FAR directly determines fraud exposure: a system with FAR=1% accepts roughly 1 in 100 impostor attempts, which is unacceptable in financial onboarding or border control.

Standards bodies including NIST and ISO publish FAR/FRR benchmarks (FRVT for face, MINEX for fingerprint) that vendors are evaluated against.

Deepfake expansion

Deepfake-rendered faces and cloned voices specifically target the matching layer where FAR is measured: their goal is to look enough like the target to clear the threshold.

Reported FAR figures from vendor benchmarks rarely include deepfake or synthetic media inputs in the impostor set, so live deployments see effectively higher FAR than spec sheets imply.

Tightening the threshold to lower FAR raises FRR, increasing user friction and drop-off — not a sustainable defense against AI-generated impostors.

Control gaps

FAR/FRR specs based on bona fide impostor data alone do not characterize behavior under deepfake or replay attack.

Procurement teams often accept FAR figures from generic benchmarks without testing the system against the threat models relevant to their use case.

Threshold tuning is an operational lever, but operations rarely retune based on observed attack patterns until losses accumulate.

Mitigation

Evaluate biometric vendors against impostor sets that include current-generation deepfake video and audio, not only bona fide impostor pairs.

Layer biometric matching with PAD and deepfake detection so the FAR figure reflects authentic-vs-genuine matching, not authentic-vs-synthetic.

Re-baseline thresholds against measured fraud rates on a regular cadence, and treat single-modal biometrics as one signal in a multi-signal risk decision.

FAQ

Questions we get asked most

Are deepfakes illegal?

Deepfakes themselves are not inherently illegal, but their use can be. The legality depends on the context in which a deepfake is created and used. For instance, using deepfakes for defamation, fraud, harassment, or identity theft can result in criminal charges. Laws are evolving globally to address the ethical and legal challenges posed by deepfakes.

How do you use deepfake AI?

Deepfake AI technology is typically used to create realistic digital representations of people. However, at DuckDuckGoose, we focus on detecting these deepfakes to protect individuals and organizations from fraudulent activities. Our DeepDetector service is designed to analyze images and videos to identify whether they have been manipulated using AI.

What crime is associated with deepfake creation or usage?

The crimes associated with deepfakes can vary depending on their use. Potential crimes include identity theft, harassment, defamation, fraud, and non-consensual pornography. Creating or distributing deepfakes that harm individuals' reputations or privacy can lead to legal consequences.

Is there a free deepfake detection tool?

Yes, there are some free tools available online, but their accuracy may vary. At DuckDuckGoose, we offer advanced deepfake detection services through our DeepDetector API, providing reliable and accurate results. While our primary offering is a paid service, we also provide limited free trials so users can assess the technology.

Are deepfakes illegal in the EU?

The legality of deepfakes in the EU depends on their use. While deepfakes are not illegal per se, using them in a manner that violates privacy, defames someone, or leads to financial or reputational harm can result in legal action. The EU has stringent data protection laws that may apply to the misuse of deepfakes.

Can deepfakes be detected?

Yes, deepfakes can be detected, although the sophistication of detection tools varies. DuckDuckGoose’s DeepDetector leverages advanced algorithms to accurately identify deepfake content, helping to protect individuals and organizations from fraud and deception.

Can you sue someone for making a deepfake of you?

Yes, if a deepfake of you has caused harm, you may have grounds to sue for defamation, invasion of privacy, or emotional distress, among other claims. The ability to sue and the likelihood of success will depend on the laws in your jurisdiction and the specific circumstances.

Is it safe to use deepfake apps?

Using deepfake apps comes with risks, particularly regarding privacy and consent. Some apps may collect and misuse personal data, while others may allow users to create harmful or illegal content. It is important to use such technology responsibly and to be aware of the legal and ethical implications.

Your KYC was built for humans. Attackers stopped sending humans.

Synthetic faces. Cloned voices. Documents generated in the time it takes to read this sentence. DuckDuckGoose is the detection layer that catches what liveness can't — on every image, video, and audio your platform sees.