{"meta":{"exportedAt":"2026-10-09T08:32:52.566Z","formatVersion":2,"selection":{"q":"security","system":"","harm":"","context":"","country":"","role":"","relation":"contextual","evidence":"","year":"unknown","response":"","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":2,"coverage":{"cases":2,"countries":1,"languages":2,"unknownLocation":1,"locationPending":0,"unknownLanguage":0,"unknownDate":2,"lawsuits":0,"regulatory":0,"minors":0,"coreRelations":0,"contextualRelations":2,"mixedRelations":0,"unknownRelations":0,"relationPending":0,"relationUnknown":0},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2026-espirito-santo-bank-app-facial-recognition-passed-with-photos-of-elderly-man-pix-theft","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'Um homem de 39 anos foi preso suspeito de usar imagens do reconhecimento facial de um idoso de 81 anos para acessar a conta bancária da vítima e desviar R$ 6.080,00'; 'O mandado de prisão preventiva foi cumprido nesta segunda-feira (28).'; 'a prisão ocorreu após a conclusão do inquérito que apurou furto qualificado mediante fraude eletrônica.'","relation":"supports","source_id":"s1"}],"assertion":"A 39-year-old man was arrested on 28 September 2026 on a preventive warrant, after a Civil Police inquiry into qualified theft by electronic fraud, on suspicion of using facial-recognition images of an 81-year-old man to access his bank account and divert R$6,080.","causal_attribution":"Civil Police account relayed by Folha Vitória."},{"id":"c2","status":"reported","evidence":[{"locator":"'o investigado teria convidado o idoso para ir até sua residência, sob a justificativa de produzir uma carteirinha que garantiria entrada gratuita no estabelecimento.'; 'ele teria retido o cartão bancário da vítima, que é analfabeta, além de obter dados pessoais e fotografar o rosto dela.'","relation":"supports","source_id":"s1"}],"assertion":"According to the police, the suspect, a security guard at a dance venue, invited the man to his home on the pretext of making a free-entry card, kept his bank card, obtained personal data and photographed his face; the victim is illiterate.","causal_attribution":"Civil Police account relayed by Folha Vitória."},{"id":"c3","status":"reported","evidence":[{"locator":"'o homem teria usado as imagens para burlar o sistema de reconhecimento facial do aplicativo bancário e habilitar o acesso à conta em seu próprio celular.'; 'ele teria redefinido senhas de segurança, resgatado aplicações financeiras e feito transferências via Pix sem o conhecimento ou consentimento do idoso.'","relation":"supports","source_id":"s1"}],"assertion":"The police say he used the images to get past the banking app's facial recognition and enable access to the account on his own phone, then reset security passwords, redeemed investments and made Pix transfers without the victim's knowledge or consent.","causal_attribution":"Civil Police account relayed by Folha Vitória; no bank or app statement."},{"id":"c4","status":"reported","evidence":[{"locator":"'o investigado tem registros anteriores por furto, estelionato, apropriação indébita, ameaça e delitos de trânsito'; 'ele cumpria pena em regime progressivo quando teria cometido o novo crime.'; 'o homem foi encaminhado ao sistema prisional e permanece à disposição da Justiça.'","relation":"supports","source_id":"s1"}],"assertion":"The police say the suspect had prior records for theft, fraud, misappropriation, threats and traffic offences, was serving a sentence under a progressive regime, and was taken to the prison system.","causal_attribution":"Civil Police account relayed by Folha Vitória."}],"effects":[{"label":"R$6,080 diverted from his bank account after the app's facial recognition was passed with photographs of his face","claim_id":"c3","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.folhavitoria.com.br/policia/homem-e-preso-suspeito-de-usar-rosto-de-idoso-para-acessar-conta-e-desviar-r-6-mil-no-esr-r-6-mil-no-es/","kind":"news_report","access":"read","language":"pt","translation_note":"Read in Portuguese by the research agent (an AI) on 2026-10-07 and translated by the research agent (an AI) into English; no human translator or reviewer was involved. Direct fetch returned HTTP 403; the article was read through an Internet Archive id_ capture of the same URL. The report relays the Espírito Santo Civil Police account.","independence_group":"es-civil-police-statement-2026-09-29"},{"id":"s2","url":"https://folhadoes.com/homem-e-preso-suspeito-de-usar-rosto-de-idoso-para-acessar-conta-e-desviar-r-6-mil-no-es/","kind":"news_report","access":"unavailable","language":"pt","translation_note":"Not read: folhadoes.com returned HTTP 403 on 2026-10-06 and 2026-10-07 and has no Internet Archive capture. Its headline matches Folha Vitória's and it relays the same police account; cited for existence only.","independence_group":"es-civil-police-statement-2026-09-29"}],"version":1,"ai_roles":["others_use","institutional_use"],"contexts":["finance","everyday_life"],"unknowns":["The bank and app whose facial recognition was passed, and whether the bank has commented.","When the meeting, the account access and the transfers took place.","Whether the R$6,080 was recovered.","Whether the suspect has been charged or tried.","How the photographs passed the liveness check, if any."],"geography":{"basis":"The police account places the meeting, the arrest and the regional police station in north-west Espírito Santo, Brazil; the victim is described as an elderly man there; the preventive arrest warrant was issued by a Brazilian court.","court_countries":["BR"],"event_countries":["BR"],"affected_person_countries":["BR"]},"publication":{"basis":"Published as a contextual case (made_decision_about) at low severity: the Espírito Santo Civil Police, relayed by Folha Vitória, say a suspect photographed an 81-year-old man's face, passed his banking app's facial recognition on another phone and diverted R$6,080 through password resets, redemptions and Pix transfers. One police account; the victim and suspect are not named; the bank is not identified.","reviewed_on":"2026-10-07"},"ai_involvement":{"basis":"The Civil Police, relayed by Folha Vitória, say the suspect used photographs of the victim's face to get past the banking app's facial recognition and enable access to the account on his own phone. The facial recognition check accepted the photographs as the account holder and granted access on another device; that authentication decision is what allowed the password resets, redemptions and Pix transfers. The bank, the app and the recognition vendor are not identified, and no bank statement is reported.","status":"reported"},"person_relations":["made_decision_about"]},"name":"Police in Espírito Santo say a man photographed an 81-year-old's face, passed his bank app's facial recognition on his own phone and took R$6,080; arrested","summary":"Folha Vitória reported on 29 September 2026, citing the Espírito Santo Civil Police, that a 39-year-old man was arrested on 28 September on a preventive warrant after an inquiry into qualified theft by electronic fraud against an 81-year-old man in the north-west of the state. According to the police, the suspect, who worked as a security guard at a dance venue, invited the man to his home on the pretext of making a free-entry card, kept his bank card, obtained personal data and photographed his face. The police say he used the images to get past the facial recognition of the banking app and enable access to the account on his own phone, then reset security passwords, redeemed investments and made Pix transfers without the victim's knowledge, diverting R$6,080. The victim is described as illiterate. The police say the suspect had prior records and was serving a sentence under a progressive regime. Folha do ES and Tribuna Norte Leste carried the same police account but could not be read.","incidentKind":"single_event","incidentDatePrecision":"unknown","exposurePattern":"single_interaction","reportedDate":"2026-09-29","aiSystem":"The facial-recognition check of the victim's banking app, which the Civil Police say the suspect passed with photographs of the victim's face to enable account access on his own phone (bank and app not named)","aiProduct":"Unidentified facial recognition system","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["financial_loss"],"harmOutcomeSummary":"R$6,080 was diverted from an 81-year-old man's bank account after, according to the Civil Police, the suspect photographed his face and passed the banking app's facial recognition on his own phone, then reset passwords, redeemed investments and made Pix transfers (police account relayed by Folha Vitória).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"exact","affectedCountEvidence":"One person, the 81-year-old account holder whose R$6,080 was diverted (police account via Folha Vitória). The suspect is not counted. Exact 1.","victimAgeRange":"elderly","jurisdiction":"BR","platformType":"other","outcomeType":"criminal_charges","outcomeStatus":"ongoing","primarySourceUrl":"https://www.folhavitoria.com.br/policia/homem-e-preso-suspeito-de-usar-rosto-de-idoso-para-acessar-conta-e-desviar-r-6-mil-no-esr-r-6-mil-no-es/","primarySourceLabel":"Folha Vitória, 29 September 2026: man arrested on suspicion of using an elderly man's face to access his account and divert R$6,000 in ES","firstPublishedAt":"2026-10-07T03:25:58.665809+00:00","updatedAt":"2026-10-07T03:25:58.665809+00:00","scopeVersion":"facts-v3","tags":["facial-recognition","banking-app","biometric-bypass","pix","elderly-victim","financial-fraud","brazil","espirito-santo","made-decision-about"]},{"id":"2026-facebook-video-selfie-face-scan-failed-account-lockout-first-person","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'My 5-year-old account got hit with a random security check.'; 'The app asked for a video face scan, but it failed completely.'; 'my face and physical definition have changed a lot'; 'The AI simply didn't recognize me.'","relation":"supports","source_id":"s1"}],"assertion":"The poster's five-year-old Facebook account was put through a security check that asked for a video face scan, and the scan failed; the poster attributes this to changes in their appearance and says the AI did not recognise them.","causal_attribution":"Poster's account and attribution; no messages from Facebook were published."},{"id":"c2","status":"reported","evidence":[{"locator":"'Then it asked for ID.'; 'I use a shortened nickname on my profile for basic privacy'; 'the automated system instantly rejected my government ID for a name mismatch'","relation":"supports","source_id":"s1"}],"assertion":"Facebook then asked for ID, and an automated system rejected the poster's government ID because the profile uses a shortened nickname.","causal_attribution":"Poster's account; the post does not say the ID check used AI."},{"id":"c3","status":"reported","evidence":[{"locator":"'It’s pretty gutting.'; 'locked out of years of memories, friends, and active Marketplace listings'; 'a way to bypass the lock screen to download my archive data and photos'; 'hoping someone here has navigated this specific deadlock or found a way to reach a human'","relation":"supports","source_id":"s1"}],"assertion":"The poster says they are locked out of years of memories, friends and active Marketplace listings, describes the loss as gutting, and is seeking a way to reach a human reviewer or download their data.","causal_attribution":"Poster's own statement of the effect."},{"id":"c4","status":"documented","evidence":[{"locator":"'The user will upload a video selfie and we’ll use facial recognition technology to compare the selfie to the profile pictures on the account they’re trying to access.'","relation":"supports","source_id":"s2"}],"assertion":"Meta says that, when people verify their identity with a video selfie to regain access to a compromised account, it uses facial recognition technology to compare the selfie with the profile pictures on the account.","causal_attribution":"General product description by Meta; it does not establish how this check was decided."}],"effects":[{"label":"locked out of a five-year-old account with years of photos, contacts and active Marketplace listings","claim_id":"c3","direction":"negative"},{"label":"distress at the loss ('pretty gutting')","claim_id":"c3","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.reddit.com/r/facebook/comments/1wsrvdh/lost_my_5year_account_after_military_personal/","kind":"forum_post","access":"read","language":"en","translation_note":"Read in English on 2026-09-29: full self-text retrieved through the arctic_shift archive API by post ID. The poster handle is not recorded.","independence_group":"reddit-facebook-facescan-poster"},{"id":"s2","url":"https://about.fb.com/news/2024/10/testing-combat-scams-restore-compromised-accounts/","kind":"company_blog","access":"read","language":"en","translation_note":"Meta newsroom post first published 21 October 2024 with later updates, fetched 2026-09-29 (200). Describes the feature in general; it does not address this account.","independence_group":"meta-newsroom"}],"version":1,"ai_roles":["institutional_use"],"contexts":["everyday_life","privacy"],"unknowns":["The date of the security check and the poster's location.","Why the security check was triggered and whether a human reviewed the face scan or the ID.","Whether the poster regained access or obtained a data download."],"geography":{"basis":"The post says only 'Where I live' without naming a place; the comments add nothing. Unknown after review.","court_countries":[],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"Published under the 2026-09-15 charter's public-forum rule as a concrete first-person account of a Facebook video face-scan security check, which the poster describes as AI, failing to recognise them and, with an ID rejection, locking them out of their account; described with attribution and without corroboration. Meta's own description of video-selfie verification is cited as context only. Personal circumstances the poster gives for their changed appearance are summarised, not reproduced. No handle is recorded.","reviewed_on":"2026-09-29"},"ai_involvement":{"basis":"The poster says a video face scan in Facebook's security check failed and that 'The AI' did not recognise them. Meta's newsroom documents that video selfies used to recover compromised accounts are compared with profile pictures using facial recognition, without saying whether a human reviews the result or covering routine security checks; the ID rejection is attributed by the poster to an 'automated system' and is not established as AI.","status":"reported"},"person_relations":["made_decision_about"]},"name":"First-person forum account: a Facebook user says a video face-scan security check failed to recognise them after their appearance changed, an automated ID check then rejected their government ID over a nickname, and they were locked out of a five-year-old account","summary":"In a public post to r/facebook on 28 September 2026, a user writes that their five-year-old Facebook account was hit with a security check that asked for a video face scan, which 'failed completely'. They say their face had changed a lot through recent life circumstances and 'The AI simply didn't recognize me.' Facebook then asked for ID, and 'the automated system instantly rejected' their government ID because their profile uses a shortened nickname. The poster says they are locked out of years of memories, friends and active Marketplace listings and are looking for a way to reach a human or download their data. Meta has said that video selfies used to regain access to compromised accounts are compared with the account's profile pictures using facial recognition; whether this check worked that way is not known. The account is uncorroborated.","incidentKind":"single_event","incidentDatePrecision":"unknown","exposurePattern":"single_interaction","reportedDate":"2026-09-28","aiSystem":"Facebook's video face-scan security check (Meta describes video-selfie verification for account recovery as using facial recognition technology); the specific system is not named in the post","aiProduct":"Facebook video face-scan check","aiCompany":"Meta","severity":"low","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["other_material_harm","psychological_distress"],"harmOutcomeSummary":"The poster reports that a Facebook video face-scan check failed to recognise them and an automated ID check rejected their ID over a nickname, locking them out of a five-year-old account with years of photos, contacts and active Marketplace listings, which they describe as 'pretty gutting' (first-person account, uncorroborated).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"One person: the poster, locked out of their own account. Commenters describing their own lockouts are not counted. Exact 1.","victimAgeRange":"adult","jurisdiction":"unknown","platformType":"other","outcomeStatus":"ongoing","primarySourceUrl":"https://www.reddit.com/r/facebook/comments/1wsrvdh/lost_my_5year_account_after_military_personal/","primarySourceLabel":"r/facebook, 28 September 2026: public first-person post about a failed AI face scan and an ID rejected over a nickname (title shortened)","firstPublishedAt":"2026-09-29T03:21:50.784414+00:00","updatedAt":"2026-09-30T01:17:37.118566+00:00","scopeVersion":"facts-v3","tags":["first-person","reddit","facebook","meta","facial-recognition","video-selfie","account-lockout","identity-verification","made-decision-about"]}]}