All investigations
Investigation
19 min

The Most Convincing Deepfakes Ever Created

A forensic review of the most convincing deepfakes ever created — analysing what made each one believable and how investigators eventually identified the deception.

deepfake investigation history case-study

The term “convincing deepfake” is relative — what fooled audiences in 2019 would be trivially detected today, and what passes inspection now will likely be obvious within a few years. But certain deepfakes have achieved a level of realism that challenged even trained forensic analysts, fooled millions of viewers, and forced the detection community to develop entirely new methodologies. This investigation examines the most notable cases, analysing precisely why each was convincing, how each was eventually exposed, and what forensic lessons each case contributed to the field.

Case 1: The Tom Cruise TikTok Deepfakes (2021–2023)

Why It Worked

The “deeptomcruise” TikTok account, created by visual effects artist Chris Umé using actor Miles Fisher as the performer, represents a watershed moment in deepfake realism. The videos accumulated tens of millions of views before most viewers realised they were synthetic. Several factors made these deepfakes exceptionally convincing:

  • Performer matching. Miles Fisher already bore a structural resemblance to Tom Cruise — similar jaw geometry, comparable build, and crucially, practiced Cruise’s mannerisms for years as an impersonator. The face-swap algorithm only needed to modify surface-level features rather than restructure fundamental bone geometry.
  • Professional-grade production. Unlike amateur deepfakes shot on webcams, these used proper lighting, camera work, and staging. The controlled environment minimised the artifacts that typically emerge from challenging lighting conditions.
  • Post-production refinement. Each video underwent manual refinement by a professional VFX artist, correcting edge artifacts, colour matching, and temporal inconsistencies that automated pipelines would miss.
  • Platform compression as camouflage. TikTok’s aggressive video compression — typically re-encoding to H.264 at relatively low bitrates — destroyed many subtle forensic signals that would be detectable in uncompressed source footage. This compression effectively served as an anti-forensic compression wash.
  • Short-form content. Videos under 60 seconds limited the temporal window for inconsistencies to accumulate. Longer deepfakes are exponentially harder to maintain because face tracking drift, lighting inconsistencies, and expression mismatches compound over time.

How It Was Exposed

The deepfakes were not “detected” through automated analysis — they were disclosed by the creator. However, forensic analysts who examined the videos after disclosure identified several signals that, in aggregate, could have raised flags:

  • Subtle face boundary discontinuities visible at the hairline and jaw edges when frames were examined at full resolution before TikTok compression.
  • Micro-expression timing anomalies: the synthetic face occasionally exhibited expression transitions that lagged the performer’s body language by 1–2 frames.
  • Teeth rendering inconsistencies — a persistent challenge for face-swap systems where the interior mouth geometry doesn’t perfectly match the target identity.
  • Ear geometry discrepancies that were largely masked by camera angles but visible in certain frames.

The key forensic lesson: platform compression makes single-signal detection unreliable. Effective analysis requires multi-signal forensic correlation that combines spatial, temporal, and statistical anomaly detection.

Case 2: The Morgan Freeman Deepfake (2021)

Why It Worked

Created by Dutch YouTube channel Diep Nansen, this deepfake of Morgan Freeman delivering a monologue about synthetic media achieved viral status partly because of its ironic self-awareness — the synthetic Freeman discussed deepfakes while being one. The technical achievement was remarkable for several reasons:

  • Voice synthesis integration. Unlike the Tom Cruise deepfakes which used an impersonator’s natural voice, this project synthesised Freeman’s distinctive voice using neural text-to-speech trained on extensive audio data. The voice-face synchronisation eliminated the uncanny valley that occurs when voice and face come from different sources.
  • Controlled setting. The static, well-lit, front-facing composition minimised the geometric and lighting challenges that expose deepfakes in dynamic scenes. Single-angle, studio-lit compositions are the optimal conditions for current face-swap technology.
  • Target selection. Freeman’s face has distinctive, high-contrast features (prominent freckles, deep expression lines) that actually benefit face-swap models — these features provide strong anchor points for the neural network during training and inference.
  • Emotional consistency. The monologue maintained a single emotional register (calm, authoritative narration), avoiding the complex expression transitions that commonly break deepfake realism.

Detection Signals

Forensic examination of the video revealed detectable signals despite the high production quality:

  • Voice synthesis artifacts: subtle spectral anomalies in the 4–8 kHz range where neural TTS models typically struggle with natural breathiness and vocal fry characteristic of Freeman’s speech.
  • Lip-sync micro-timing: while gross lip movements matched the audio, phoneme-level analysis revealed timing deviations of 30–50ms on certain consonant clusters — within perceptual tolerance but measurable with frame-level audio-visual alignment analysis.
  • Skin texture periodicity: the generated skin texture exhibited subtle repeating patterns in the frequency domain, a fingerprint of the GAN architecture used for face synthesis.
  • Blink rate anomaly: the synthetic Freeman blinked at approximately 4 blinks per minute, significantly below the natural average of 15–20 blinks per minute — a well-documented artifact of early deepfake systems that has since been largely corrected.

Case 3: Political Deepfakes in Elections (2023–2025)

The Operational Context

Political deepfakes represent a distinct category because their effectiveness depends not on perfect visual realism but on social context — they need only be convincing enough to survive the 3–5 seconds of attention a voter gives a social media clip before sharing it. Several documented cases illustrate this principle:

  • Slovakia 2023 election audio deepfake. A fabricated audio recording purportedly of candidate Michal Šimečka discussing vote rigging circulated on social media 48 hours before the election during a legally mandated media silence period, limiting official debunking opportunities. The audio quality was mediocre by technical standards, but the distribution timing made it devastatingly effective.
  • Bangladesh 2024 election video deepfakes. Synthetic videos of opposition candidates making inflammatory statements circulated on WhatsApp and Facebook. The end-to-end encryption of WhatsApp prevented platform-level detection, and the videos were re-compressed and screen-recorded multiple times before reaching most viewers, destroying forensic evidence.
  • US 2024 primary robocall deepfake. An AI-generated voice clone of President Biden was used in automated phone calls discouraging voters from participating in the New Hampshire primary. The voice synthesis was technically sophisticated but was identified through call routing analysis rather than audio forensics.

Why Political Deepfakes Are Effective

The forensic lesson from political deepfakes is that technical realism is often secondary to operational context. These deepfakes succeed because:

  • They exploit confirmation bias — viewers are predisposed to believe content that aligns with existing beliefs about a political figure.
  • Distribution through encrypted messaging platforms prevents centralised detection.
  • The response asymmetry is enormous: a deepfake can be created in hours and spread to millions before any forensic analysis can be completed and distributed.
  • Multiple generations of compression and screen-recording progressively destroy the forensic evidence needed for definitive analysis. Understanding the compression history of a political deepfake is often the most critical and most challenging aspect of the investigation.

Case 4: Corporate Fraud Deepfakes (2024–2025)

The $25 Million Video Call Fraud

In early 2024, a multinational corporation in Hong Kong lost approximately $25 million USD after an employee participated in a video conference call where every other participant — including the company’s CFO — was a real-time deepfake. This case represents the most financially damaging documented deepfake attack and illustrates the capability of real-time face-swap systems:

  • Real-time generation. The attackers used real-time face-swap technology capable of processing video at 30fps with latency under 100ms, making natural conversation possible without noticeable lag.
  • Multi-participant synthesis. Multiple fake identities were maintained simultaneously, each with consistent face rendering and voice characteristics.
  • Social engineering integration. The deepfake technology was embedded within a broader social engineering operation that included pre-call emails, meeting scheduling through normal channels, and follow-up communication.
  • Video conferencing compression. Zoom, Teams, and similar platforms apply aggressive real-time compression that significantly reduces the resolution available for forensic analysis, and the lossy encoding destroys many spatial-frequency signals used by detection models.

Detection Retrospective

Post-incident analysis identified several signals that could have flagged the fraud in real-time with appropriate tools:

  • Gaze direction inconsistencies: the synthetic participants occasionally exhibited gaze patterns inconsistent with their apparent focus of attention.
  • Lighting response anomalies: when participants moved, their face lighting didn’t always update consistently with the background environment lighting.
  • Peripheral feature stability: ear positions, neck geometry, and shoulder transitions exhibited occasional frame-level discontinuities.

This case catalysed development of real-time deepfake detection for video conferencing — a domain where detection faces significant constraints due to low resolution, aggressive compression, and the need for sub-second analysis.

Case 5: Entertainment Deepfakes — De-Aging and Digital Resurrection

The Spectrum of Synthetic Performance

Hollywood’s use of deepfake-adjacent technology occupies a unique position: these are professionally produced, disclosed synthetic media with virtually unlimited budgets for post-production refinement. Examining them reveals the upper boundary of current technology:

  • De-aging in “The Irishman” (2019). Industrial Light & Magic used a proprietary three-camera system and extensive manual VFX work to de-age Robert De Niro, Al Pacino, and Joe Pesci. Despite the estimated $100M+ budget, critics noted that the de-aged faces moved with the body language of elderly men, creating an uncanny disconnect between facial youth and physical movement.
  • Digital resurrection of Peter Cushing in “Rogue One” (2016). Guy Henry performed the role with motion-capture markers, and Cushing’s face was digitally applied. The result was praised as groundbreaking but exhibited subtle skin subsurface scattering anomalies and eye reflection inconsistencies visible in high-resolution theatrical projection.
  • Harrison Ford de-aging in “Indiana Jones and the Dial of Destiny” (2023). Lucasfilm used machine learning combined with archival footage to create a de-aged Ford for the opening sequence. The extended runtime of the de-aged sequence (approximately 25 minutes) revealed temporal consistency challenges — the synthetic face exhibited subtle variance in skin texture and lighting response across cuts that was not present in the archival reference footage.
  • Bruce Willis likeness licensing (2022). Willis licensed his deepfake likeness to a Russian telecom company for advertising, marking one of the first commercial deepfake licensing agreements. The resulting advertisements demonstrated that even with full cooperation and access to extensive reference material, synthetic performances lack the micro-expressional spontaneity of natural human performance.

Forensic Relevance of Entertainment Deepfakes

Entertainment deepfakes matter to forensic investigators because they represent the technological ceiling. If Hollywood productions with unlimited budgets and manual refinement still exhibit detectable artifacts, consumer-grade deepfakes will have significantly stronger signals. The key forensic takeaways:

  • Body-face consistency remains a reliable signal even in high-budget productions — the disconnect between a synthetically altered face and a natural body is detectable through motion analysis.
  • Temporal consistency over extended sequences is the most challenging aspect of deepfake generation and provides the strongest forensic signal in longer content.
  • Physics-based rendering inconsistencies (light transport, subsurface scattering, specular reflections) persist even in the most refined productions and form the basis of next-generation detection approaches.

Cross-Case Forensic Analysis

Common Factors in Convincing Deepfakes

Analysing these cases collectively reveals several consistent factors that correlate with deepfake convincingness:

  • Controlled environments. Every convincing deepfake in this analysis was produced under controlled lighting and camera conditions. Dynamic, uncontrolled environments consistently expose synthesis artifacts.
  • Short duration. Convincingness degrades with length. The most effective deepfakes are under 60 seconds. Extended sequences allow temporal inconsistencies to accumulate.
  • Platform compression. Social media and messaging platform compression serves as inadvertent anti-forensic processing, destroying the high-frequency spatial information that detection models rely on.
  • Performer-target similarity. The most convincing face-swaps use performers who already resemble the target, reducing the magnitude of facial transformation required.
  • Emotional simplicity. Deepfakes maintaining a single emotional register are far more convincing than those attempting complex emotional transitions.

Implications for Detection Methodology

These cases collectively demonstrate that effective deepfake detection cannot rely on any single signal or methodology. The multi-signal forensic approach — combining spatial analysis, temporal consistency checking, audio-visual correlation, compression artifact analysis, and statistical anomaly detection — provides the most robust framework for identifying synthetic media across the full spectrum of production quality.

For investigators encountering potentially synthetic media, we recommend beginning with our comprehensive deepfake detection guide and using the forensic analysis tool to run automated multi-signal analysis on suspect content. Understanding the limitations of current detection technology is equally important — no tool provides certainty, and all forensic conclusions should be expressed as confidence levels rather than binary authenticity judgments.

Looking Forward: What Will Be Convincing Next?

The trajectory is clear: generation quality improves faster than detection capability. Current research suggests that within 12–18 months, real-time deepfakes will routinely pass visual inspection at video-call resolution. The next generation of convincing deepfakes will likely feature:

  • Full-body synthesis with natural body language, eliminating the face-body consistency signal that currently aids detection.
  • Environment-aware lighting models that respond correctly to scene illumination changes.
  • Integrated voice-face generation that produces synchronised audio-visual output from a single model, eliminating lip-sync timing artifacts.
  • Adversarially trained outputs specifically designed to evade known detection architectures.

The forensic community’s response must focus on signals that are fundamentally difficult for generators to replicate — physics-based consistency, provenance verification, and multi-modal correlation — rather than relying on generation artifacts that will inevitably be resolved. For a deeper analysis of this dynamic, see our investigation into the technical foundations of forensic detection.

Investigate a video with ClipForensics

15 forensic modules. Evidence-based verdicts. Transparent limitations.