Presentation Attack Detection (Liveness / PAD)
Techniques and tests that detect spoofed biometric samples (e.g., masks, replays, synthetics) to ensure the sample is from a live, consenting subject.
Overview
Presentation Attack Detection (PAD) protects biometric systems from spoofs such as printed photos, silicone fingerprints, recorded voices, or AI-generated samples. It’s a cross-cutting layer used with face, voice, fingerprint, iris and other modalities.
How it works
- Capture: Sensor or camera acquires the sample.
- Signal analysis: Algorithms look for cues inconsistent with live traits (e.g., texture, reflectance, micro-motions, audio artifacts).
- Decision & score: The PAD subsystem outputs a score or decision (bona fide vs attack).
- Policy: Systems combine PAD with biometric matching and business rules to accept/deny or request step-up verification.
Common use cases
- Remote onboarding / selfie match
- Contactless border checks
- KYC and high-risk transactions
- Access control and workforce auth
- Dating-app trust and safety
- AI-platform account abuse prevention
- Proof-of-life checks for benefits or pensions
Strengths and limitations
Strengths: Mitigates common spoofs; complements matching; standard metrics for evaluation.
Limitations: Attack diversity; new synthetic media; environment variability; false rejections at strict thresholds.
Key terms
- APCER/BPCER: Core PAD error metrics from ISO/IEC 30107-3.
- PAI (Presentation Attack Instrument): The artifact used to attack.
- Attack potential: Effort/resources required to mount an attack.
Current market signal
PAD has moved from a back-end biometric security feature into a visible trust layer for consumer platforms. Recent coverage connects liveness to dating safety, AI-account verification, stablecoin onboarding, and public-benefit proof-of-life checks. This means PAD should be interpreted as both a biometric security control and a platform-integrity control.
References
Vendors using Presentation Attack Detection (Liveness / PAD)
Latest Data Cards
Data Card Researchers detail an Android toolkit that feeds fake video into live KYC checks
2026-08-28CC-BY-4.0video-injection-detectionpadCybernews researchers documented an Android toolkit that feeds saved photographs, prerecorded video, or a remotely controlled stream into a verification app as though it came from the phone camera.
- The toolkit injects prerecorded media or remote streams into the camera subsystem on rooted devices.
- It can spoof hardware signatures, location data, and security profiles.
- Researchers found no evidence of widespread production exploitation and recommend server-side dynamic liveness challenges and hardware nonce verification.
Data Card FaceTec reaches 50 issued patents with grant on autonomous authentication nodes
2026-08-19CC-BY-4.0facial-recognitionpadfacetecFaceTec reached 50 issued US patents with the August 2026 grant of a patent covering autonomous authentication nodes, with roughly 50 further applications pending.
- US Patent 12,699,756 issued on August 4, 2026, naming chief executive Kevin Alan Tussy as inventor.
- The patent covers blocking external server access to prevent manipulation of authentication results.
- A PTAB decision in June 2026 upheld four of the company's 3D liveness patents.
Data Card Google adds selfie video backup for account sign-in
2026-07-23CC-BY-4.0facial-recognitionpadGoogle introduced a selfie video option for account recovery, recording a guided head-movement video as a biometric reference for later sign-in verification.
- Users record a guided head-movement video as a baseline reference.
- Verification applies facial matching plus real-time liveness measures to detect spoofing.
- The option sits alongside FIDO2 authentication and passkeys.