Jeremy Nelson from Microsoft presents at Ignite, detailing how AI-driven deepfake fraud is happening today and how Microsoft's Verified ID can help organizations strengthen their defenses against impersonation attacks.

Voices You Can't Trust: Stopping AI-Powered Impersonation Attacks with Microsoft Verified ID

Speaker: Jeremy Nelson
Event: Microsoft Ignite 2025 Session - BRKSP487

Session Overview

AI-powered deepfakes are no longer a future risk—they are actively enabling fraud today. In this session, Jeremy Nelson shares real-world incidents including:

• A major $25M fraud involving a fake video call
• Case studies from companies such as Clorox, KnowBe4, and a Hong Kong scam
• Analysis of how threat actors use social engineering amplified by AI to bypass traditional identity verification

Key Topics

• The increasing risk posed by AI in impersonation attacks, especially against executives and public figures
• The asymmetry in social engineering: a single convincing deepfake can trigger major breaches
• Shortcomings of conventional identity checks in the era of synthetic media

Microsoft Verified ID: Solution for Identity Protection

• Introduction to Verified ID: Overview of decentralized identity concepts and Verified ID technology
• Use Case: How Verified ID secures support desk interactions, demonstrated with the process at Woodgrove's support desk
• Implementation: Steps for integrating Verified ID in organizational workflows
• Organizational Change: The importance of change management, employee training, and communication when adopting secure identity frameworks

Practical Steps for Organizations

• Adopt advanced identity verification such as Verified ID
• Conduct regular employee security training focused on social engineering risks
• Update support processes to account for deepfake threats
• Promote organizational awareness about new attack vectors

Resources

• View additional Microsoft Ignite sessions: https://ignite.microsoft.com

Session Chapters:

• Energetic Session Introduction at Microsoft Ignite
• Real-World Breach Case Studies: Clorox, Hong Kong Deepfake Scam, KnowBe4
• Social Engineering Attempt Analysis
• AI’s Role in Social Engineering
• High-risk Targets: Executives and Public Figures
• Deepfake Attack Techniques
• Introduction to Verified ID and Decentralized Identity
• Verified ID in Practice: Woodgrove Support Desk
• Organizational Change Management