Voices You Can't Trust: Stopping AI-Powered Impersonation Attacks with Microsoft Verified ID
Jeremy Nelson from Microsoft presents at Ignite, detailing how AI-driven deepfake fraud is happening today and how Microsoft’s Verified ID can help organizations strengthen their defenses against impersonation attacks.
Voices You Can’t Trust: Stopping AI-Powered Impersonation Attacks with Microsoft Verified ID
Speaker: Jeremy Nelson
Event: Microsoft Ignite 2025 Session - BRKSP487
Session Overview
AI-powered deepfakes are no longer a future risk—they are actively enabling fraud today. In this session, Jeremy Nelson shares real-world incidents including:
- A major $25M fraud involving a fake video call
- Case studies from companies such as Clorox, KnowBe4, and a Hong Kong scam
- Analysis of how threat actors use social engineering amplified by AI to bypass traditional identity verification
Key Topics
- The increasing risk posed by AI in impersonation attacks, especially against executives and public figures
- The asymmetry in social engineering: a single convincing deepfake can trigger major breaches
- Shortcomings of conventional identity checks in the era of synthetic media
Microsoft Verified ID: Solution for Identity Protection
- Introduction to Verified ID: Overview of decentralized identity concepts and Verified ID technology
- Use Case: How Verified ID secures support desk interactions, demonstrated with the process at Woodgrove’s support desk
- Implementation: Steps for integrating Verified ID in organizational workflows
- Organizational Change: The importance of change management, employee training, and communication when adopting secure identity frameworks
Practical Steps for Organizations
- Adopt advanced identity verification such as Verified ID
- Conduct regular employee security training focused on social engineering risks
- Update support processes to account for deepfake threats
- Promote organizational awareness about new attack vectors
Resources
- View additional Microsoft Ignite sessions: https://ignite.microsoft.com
Session Chapters:
- Energetic Session Introduction at Microsoft Ignite
- Real-World Breach Case Studies: Clorox, Hong Kong Deepfake Scam, KnowBe4
- Social Engineering Attempt Analysis
- AI’s Role in Social Engineering
- High-risk Targets: Executives and Public Figures
- Deepfake Attack Techniques
- Introduction to Verified ID and Decentralized Identity
- Verified ID in Practice: Woodgrove Support Desk
- Organizational Change Management