{"meta":{"exportedAt":"2026-10-02T16:34:48.622Z","formatVersion":2,"selection":{"q":"identity-impersonation","system":"","harm":"","context":"","country":"","role":"","relation":"core","evidence":"","year":"","response":"","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":1,"coverage":{"cases":1,"countries":1,"languages":2,"unknownLocation":0,"locationPending":0,"unknownLanguage":0,"unknownDate":1,"lawsuits":0,"regulatory":1,"minors":0,"coreRelations":1,"contextualRelations":0,"mixedRelations":0,"unknownRelations":0,"relationPending":0,"relationUnknown":0},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2026-murcia-ai-real-time-face-modification-forged-dni-video-checks-electronic-signature-certificates","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'El investigado aparecía personalmente en los vídeos de verificación de la empresa mostrando el DNI falsificado mientras que, gracias a la inteligencia artificial, su rostro en pantalla se modificaba en tiempo real para ser idéntico al de la fotografía del documento. De este modo realizó 38 intentos sobre más de 30 identidades de ciudadanos reales.'","relation":"supports","source_id":"s1"},{"locator":"'Durante las videoconferencias de verificación, aparecía físicamente ante la cámara, mientras un programa modificaba sus facciones en tiempo real para que coincidieran con las de la persona cuya identidad estaba suplantando.'","relation":"supports","source_id":"s2"},{"locator":"'The unnamed man allegedly made 38 attempts to impersonate 30 people and obtain digital certificates in their names, succeeding on multiple occasions.'","relation":"supports","source_id":"s3"}],"assertion":"Police say the suspect appeared in an electronic-certificate company's verification videos showing forged DNI cards while AI software modified the suspect's face in real time to match the photo on the forged document and the features of the person being impersonated, making 38 attempts on more than 30 identities of real citizens.","causal_attribution":"Police allegation in a press release; untested in court."},{"id":"c2","status":"reported","evidence":[{"locator":"'logrando suplantar la identidad de múltiples víctimas.'","relation":"supports","source_id":"s1"},{"locator":"'con el objetivo final de conseguir firmas digitales autorizadas que posteriormente pudieran ser utilizadas para cometer estafas económicas.'","relation":"supports","source_id":"s2"},{"locator":"'Police did not say how many of the 38 attempts succeeded, only that certificates were issued on \"multiple\" occasions.'","relation":"supports","source_id":"s3"}],"assertion":"Police say the suspect succeeded in impersonating multiple victims, with the final aim of obtaining authorised digital signatures for later economic scams; they did not say how many attempts succeeded.","causal_attribution":"Police statement; no later fraud using the certificates is reported."},{"id":"c3","status":"reported","evidence":[{"locator":"'Durante apenas un segundo, la máscara digital de su víctima desapareció de la pantalla, dejando al descubierto el rostro real del sospechoso ante el personal de seguridad de la entidad emisora.'; 'culminando con la detención del investigado como presunto responsable de un delito continuado de falsedad documental en documento oficial.'","relation":"supports","source_id":"s1"},{"locator":"'A search of his home yielded a laptop protected by high-grade encryption, several mobile phones, storage devices, and documents, according to police.'","relation":"supports","source_id":"s3"}],"assertion":"During one live video identification the face-modification program lagged and for about a second the victim's digital mask disappeared, exposing the suspect's real face to the issuer's security staff; police then arrested the suspect as the alleged perpetrator of a continuing offence of falsifying official documents and seized an encrypted laptop, phones and storage devices.","causal_attribution":"Police account of the detection and arrest."},{"id":"c4","status":"reported","evidence":[{"locator":"'Los agentes identificaron más de 320 líneas telefónicas asociadas a 24 dispositivos móviles distintos. La mayoría de estas líneas habían sido contratadas utilizando identidades suplantadas y adquiridas en puntos de venta localizados en Murcia.'","relation":"supports","source_id":"s2"}],"assertion":"Investigators identified more than 320 phone lines on 24 mobile devices, most contracted with impersonated identities and bought at points of sale in Murcia.","causal_attribution":"Police statement; the phone lines are not described as involving AI."}],"effects":[{"label":"identities of more than 30 real citizens used on forged ID cards and impersonated with real-time AI face modification to apply for signature certificates","claim_id":"c1","direction":"negative"},{"label":"police say the impersonation succeeded for multiple victims","claim_id":"c2","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.h50.es/la-policia-nacional-detiene-a-un-ciberdelincuente-que-utilizaba-una-tecnica-pionera-mediante-ia-para-obtener-certificados-de-firma-electronica/","kind":"news_report","access":"read","language":"es","translation_note":"Read live in Spanish on 2026-10-02 (h50 Digital Policial, 11 August 2026); the text reproduces the Policía Nacional release. Researcher translation.","independence_group":"policia-nacional-release-2026-08-11"},{"id":"s2","url":"https://www.la7tv.es/articulo/sucesos/detenido-murcia-ciberdelincuente-que-usaba-ia-obtener-certificados-digitales/20260811095847072087.html","kind":"news_report","access":"read","language":"es","translation_note":"Read live in Spanish on 2026-10-02 (La 7 TV Región de Murcia, 11 August 2026); a rewrite of the same police release. Researcher translation.","independence_group":"policia-nacional-release-2026-08-11"},{"id":"s3","url":"https://www.theregister.com/security/2026/08/11/deepfake-hiccup-unmasks-suspected-digital-certificate-fraudster/5285934","kind":"news_report","access":"read","language":"en","translation_note":"Read live in English on 2026-10-02 (The Register, 11 August 2026); summarises the police release and quotes it in machine translation.","independence_group":"policia-nacional-release-2026-08-11"}],"version":1,"ai_roles":["others_use"],"contexts":["privacy","finance"],"unknowns":["When the attempts took place and when the arrest was made; the police release is dated 11 August 2026.","How many certificates were issued and whether any was used in a later fraud.","Which face-modification program was used.","Where the issuing company is based and where the impersonated citizens live.","Any charge decision or court proceeding."],"geography":{"basis":"Policía Nacional arrested the suspect in Murcia, and most of the more than 320 phone lines were bought at points of sale in Murcia. The issuing company's location is not stated in the inspected bodies, and the residence of the impersonated citizens is not stated (a DNI is not used to infer residence). No court proceeding is reported.","court_countries":[],"event_countries":["ES"],"affected_person_countries":[]},"publication":{"basis":"Published as a core case (depicted_or_impersonated): police say a suspect used real-time AI face modification in video identity checks to impersonate more than 30 real citizens on forged ID cards, succeeding for multiple victims. One police chain (Policía Nacional release) read in Spanish via h50 and La 7 TV and in English via The Register; every claim is reported. The suspect and the impersonated citizens are not named. Event date unknown; reported 11 August 2026.","reviewed_on":"2026-10-02"},"ai_involvement":{"basis":"Policía Nacional states that the suspect used artificial intelligence to modify the suspect's face in real time during video identity checks so that it matched the photo on forged DNI cards, combined with deepfake techniques; police call the AI-altered face 'la máscara digital de su víctima'. The tool is not named and the videos were not inspected. The allegation is untested in court. The AI output impersonated the real citizens (depicted_or_impersonated).","status":"reported"},"person_relations":["depicted_or_impersonated"]},"name":"Spanish police arrest a man in Murcia suspected of using real-time AI face modification and forged ID cards to impersonate more than 30 real people in video identity checks for electronic signature certificates","summary":"Spain's Policía Nacional said on 11 August 2026 that it had arrested in Murcia a suspect who tried to obtain electronic signature certificates in other people's names from a company that issues them. During the company's video identity checks the suspect appeared on camera holding a forged DNI identity card while AI software modified the suspect's face in real time to match the photo on the forged document. Police say the suspect made 38 attempts using the identities of more than 30 real citizens and succeeded in impersonating multiple victims, aiming to use the signatures for later scams. A short processing delay in the face-modification software made the digital mask disappear for barely a second, exposing the suspect's real face to the issuer's security staff.","incidentKind":"bounded_series","incidentDatePrecision":"unknown","exposurePattern":"unknown","reportedDate":"2026-08-11","aiSystem":"AI software that modified the suspect's face in real time during live video identity checks to match the photo on forged DNI cards, described by police as deepfake techniques; the program is not named","aiProduct":"Unidentified video tool","severity":"medium","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["other_material_harm"],"harmOutcomeSummary":"Police say the identities of more than 30 real citizens were used on forged ID cards and impersonated with real-time AI face modification in 38 attempts to obtain electronic signature certificates, succeeding for multiple victims (Policía Nacional release via h50 and La 7 TV; The Register).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":30,"affectedCountStatus":"documented_minimum","affectedCountEvidence":"The Policía Nacional release (h50; La 7 TV) says the suspect, showing a forged DNI while AI altered the suspect's face on camera, 'De este modo realizó 38 intentos sobre más de 30 identidades de ciudadanos reales': each of these real citizens had their identity placed on a forged DNI and impersonated in a live video check, and the release calls the person impersonated in the attempt that failed 'su víctima'. Documented minimum 30 (more than 30). The count is of people whose identities were used, not of issued certificates: impersonation succeeded for 'múltiples víctimas', a number police did not give (The Register). The certificate-issuing company and the people whose identities were used for the 320 phone lines are not counted (the phone-line identities are not tied to the AI use).","victimAgeRange":"unknown","jurisdiction":"ES","platformType":"other","outcomeType":"investigation_opened","outcomeStatus":"ongoing","primarySourceUrl":"https://www.h50.es/la-policia-nacional-detiene-a-un-ciberdelincuente-que-utilizaba-una-tecnica-pionera-mediante-ia-para-obtener-certificados-de-firma-electronica/","primarySourceLabel":"h50 Digital Policial, 11 August 2026: La Policía Nacional detiene en Murcia a un ciberdelincuente que utilizaba una técnica pionera mediante IA","firstPublishedAt":"2026-10-02T03:25:55.932181+00:00","updatedAt":"2026-10-02T03:25:55.932181+00:00","scopeVersion":"facts-v3","tags":["deepfakes","identity-impersonation","identity-verification-bypass","electronic-signature","arrest","spanish-language"]}]}