Deepfake video call simulations

A deepfake video call simulation is a live, operator-run exercise: an admin joins a real video call (Zoom, Teams, Google Meet, Webex, GoTo Meetings, Slack huddle, WhatsApp, Telegram, or Signal) wearing a real-time face- and voice-swap so they appear and sound like someone the target trusts, a CEO, a board member, an IT admin, and tries to get the target to comply with a request (authorize a payment, hand over credentials, grant access). It is distinct from the Deepfake Videos library, which generates standalone pre-rendered video assets rather than running a live impersonated call. In the console, this feature is labeled Deepfake Video Call in the sidebar.

When you launch a campaign, the platform spins up a dedicated real-time face- and voice-swap session for your workspace, and your browser joins that session so the operator can run the call.

Prerequisites

Deepfake video calls are a paid feature that must be enabled for your workspace. Trial workspaces can build a campaign in draft but cannot launch it; the launch button shows an upgrade prompt instead.
Only one live deepfake or voice-impersonation session can run at a time per workspace. The platform checks for an existing session first and blocks with a message like "A deepfake session already exists" or "…is already being used by another admin" if one is active.
For WhatsApp, Telegram, or Signal delivery, the operator needs an active account on that platform and a mobile device for pairing.

How to use it

From the console sidebar, open Deepfake Video Call and select Create New Campaign.
Delivery Channel: pick the platform the call will run on (Zoom, Slack, Microsoft Teams, Telegram, Signal, WhatsApp, Google Meet, Webex, or GoTo Meetings). For platforms that need a meeting link (Zoom, Teams, Meet, Webex, GoTo Meetings), add the meeting details via the modal that opens. Switching platforms clears any meeting details you already entered.
Scenario Setup, filled in across four sub-sections:
- Exercise Configuration: the use case (Tabletop Exercise, Red Team / Penetration Test, Security Awareness Training, …) and the target audience (pick from a list or type a custom one).
- Impersonated Identity Details: the impersonated person's name and job title (e.g. "Craig Jones", "Head of HR"), someone the target audience knows and trusts.
- Attack Configuration: the target department, the attack objective (wire transfer, credential harvesting, data exfiltration, access provisioning, malware delivery, vendor payment redirect, gift card / crypto purchase, info disclosure, physical bypass), and one or more social-engineering tactics (urgency, authority, pretexting, familiarity, fear, helpfulness, confidentiality, technical jargon, reciprocity, social proof).
- Generated Scenario: an AI-drafted scenario name and description built from the fields above; regenerate with the wand icon or edit manually.
Scenario Summary: review the configuration, then Launch. This creates or updates the campaign and requests browser notification permission so you're alerted when the live session is ready.
Once the session is ready, the operator joins the live session UI (face and voice swap active) and conducts the call on the chosen platform.
After the call, log the outcome: an operator fills in the Target Vulnerability assessment (outcome + vulnerability level + a written observation), optionally using AI to draft the summary from the scenario and outcome.
Call recordings appear on the campaign detail page (thumbnail + duration per recording) for later review.

What the operator sees on each channel

When the live session opens, the operator is looking at one of the screens below: the delivery application at its very first page, with no address bar and no tabs. These are the real screens, and the marked area is the control that gets you into the meeting. The session itself shows the same guidance, in the same words, the first time you use a channel, so nothing here is a paraphrase of what you will be told in the product.

Where a channel keeps that control behind a click, both screens are shown, in the order you meet them.