3D Masks and Biometric Fraud: A Forensic Audit

Published on May 04, 2026 | Translated from Spanish

A phishing attack has managed to breach a high-security facial recognition system. The weapon used is not a digital deepfake, but a hyperrealistic mask made from silicone and micrometric 3D scanning. This incident exposes a new frontier in fraud auditing: the need to analyze the physical morphology of masks to detect printing patterns and textures that are invisible to the human eye but detectable by optical metrology.

Hyperrealistic silicone mask with 3D scanning for biometric fraud in facial recognition system

Forensic Workflow with Artec and MountainsMap 🕵️

The auditing process begins with capturing the suspicious mask using an Artec Space Spider scanner, which offers micrometric precision. The resulting point cloud is imported into PolyWorks Inspector to align the geometry against a reference model of the real face. The critical phase occurs in MountainsMap, where surface roughness and texture periodicity are analyzed. Here, 3D printing patterns are revealed: layer lines, artificial porosity, and micro-casting defects that are impossible to replicate on human skin. These markers are the signature of fraud.

Implications for Physical Deepfake Auditing 🧠

This case demonstrates that the boundary between the digital and the physical has blurred. A deepfake is no longer just projected on a screen; it can now materialize as a mask that bypasses biometric systems. For auditors, the lesson is clear: defense against these attacks requires a hybrid approach combining spectral reflectance analysis with surface metrology. Tools like Blender allow simulating these textures, but only the tactile inspection of an optical profilometer can certify whether a face is flesh or silicone.

In a forensic deepfake audit, how can one technically differentiate between a physical 3D mask and an AI-generated impersonation when analyzing skin textures and spectral response?

(PS: Detecting deepfakes is like playing Where's Waldo? but with suspicious pixels.)