Chapter ADeepfakes and synthetic mediaPage 5 of 8

Deepfakes and synthetic media

Worked cases: workplace and civic claims

Verification works best when it protects the decision, not when it depends on proving how suspicious media was produced.

~16 minWorked examples

Before you start

Why this matters

Synthetic media becomes consequential when it enters a real process: approving a payment, changing a schedule, reporting on a candidate, or deciding whether an emergency warning is genuine. In these moments, people rarely have a laboratory, an original file, or unlimited time.

They can still respond well. The key is to identify the claim, identify the requested action, and use an independent route to confirm what matters. The following cases show how to do that without panic or amateur accusations.

1Learn the idea

Read

Case 1: the urgent supplier change

Priya, an accounts-payable specialist, receives a video call from someone who looks and sounds like the finance director. The connection is brief and unstable. The caller says a major supplier changed banks and asks Priya to update payment details before an invoice runs.

Priya notices slight mouth-sync problems. That observation is not proof: unstable conferencing can cause the same effect. More importantly, company policy requires bank-detail changes to be verified with the supplier’s known contact and approved by a second employee.

Priya ends the call politely. She does not use the phone number supplied during it. She opens the supplier record, calls the previously verified number, and messages the finance director through the company directory. The supplier says no change was requested. Priya alerts security and preserves the relevant call details without circulating the recording in group chat.

The successful defense was not “spot the fake face.” It was a process that treats payment-detail changes as high consequence regardless of whether the requester appears familiar.

Read

Case 2: the manager’s voice note

Mateo receives a voice note that sounds like his manager asking for payroll data “for the auditors.” The message mentions a real audit and asks him to upload the file to a new portal within an hour.

Mateo separates three questions:

  1. Is the audit real?
  2. Is this portal approved?
  3. Does his manager have authority to request this data through a voice message?

He checks the internal audit notice, finds no portal link, and calls his manager through a saved number. The manager sent no message. Mateo reports the domain to security.

Even if the audio had been genuine, sending payroll data through an unapproved portal would still violate policy. Verification is not only identity checking; it also checks whether the requested action is allowed.

Read

Case 3: a candidate clip before an election

Two days before a local election, a short clip appears to show a candidate saying that flood protections will be canceled. The clip is shared by several accounts, all linking back to one anonymous post. The candidate calls it fabricated. Supporters call the denial proof of a cover-up.

A careful resident, journalist, or election worker should avoid declaring the clip authentic or fake from appearance alone. They can search for the full speech, identify the event and date claimed, contact the venue or campaign, inspect public policy documents, and look for independent recordings from people who attended.

Suppose the full video shows the candidate quoting an opponent before rejecting the proposal. The pixels were genuine, but the short edit reversed the meaning. A detector aimed only at generated imagery would miss the deception. The correction should explain the missing context and link to the full passage rather than repeatedly amplifying the misleading clip.

Read

Case 4: a false public-safety announcement

A post styled like a city emergency bulletin says tap water is unsafe and includes generated audio resembling the mayor. Residents need timely guidance, and waiting indefinitely could carry risk.

The correct route is the city’s established alert system: its official domain, emergency text service, public-health department, or published phone number. Local news organizations may provide corroboration, but residents should trace their claims back to accountable authorities. They should not call the number embedded in the suspicious post.

If official channels have not addressed the rumor, residents can report it and say, “I cannot verify this alert; check the city’s official emergency page,” rather than “This is definitely fake.” That wording protects others without claiming unavailable evidence.

Read

Case 5: authentic media dismissed as synthetic

A worker publishes a recording that appears to document unsafe conditions. The employer immediately says, “Anyone can fake audio now.” This is the liar’s dividend in practice.

Investigators should preserve the original file, interview witnesses, inspect work records, compare schedules and locations, and follow established evidence procedures. They should neither accept the recording as sufficient proof nor discard it because generation is possible. Retaliating against the worker based on an unsupported accusation would create another harm.

The same balanced standard applies in civic life. Claims should be evaluated through provenance, corroboration, and accountable investigation. Skepticism must not become a tool for automatically silencing inconvenient evidence.

Teach

A shared response pattern

Across all five cases, use the same sequence:

  1. Name the claim. What exactly does the media ask you to believe?
  2. Name the action. Share, pay, disclose, evacuate, accuse, or vote differently?
  3. Assess consequence and urgency. What happens if you act or wait?
  4. Leave the channel. Confirm through a saved contact, official domain, primary record, or established procedure.
  5. Seek independent support. Multiple reposts of one item are not corroboration.
  6. Use careful language. Distinguish confirmed, contradicted, misleadingly edited, and unresolved.
  7. Report proportionately. Use security, platform, newsroom, election, or public-safety routes suited to the case.

Do not make public accusations about who created media unless evidence supports them. Attribution is a separate investigation from deciding whether to act on a claim.

Checking tutor…

Continue learning · glossary & guides