Spanish national police say they have arrested a man suspected of using deepfake software and a rigged lighting setup to fraudulently obtain digital certificates in other people's names. The suspect allegedly made 38 attempts to impersonate 30 different people, successfully tricking a certified security company's video identity checks on multiple occasions. Digital certificates carry significant weight in Spain and the wider EU, letting holders sign contracts, authorise transactions and deal with public bodies online, so certificates issued fraudulently could have handed the suspect a powerful tool for further impersonation and cybercrime.

Investigators say the man used forged documents, altered photographs and real-time deepfake face-swapping to pass live video verification, while household spotlights fitted with coloured bulbs were used to mimic the holograms and security flashes on genuine ID documents held up to the webcam. He was reportedly caught out when his face-swapping software glitched for "barely a second," briefly revealing his real face to the camera. A search of his home turned up an encrypted laptop, multiple phones and storage devices, and the probe was complicated by his alleged use of over 320 phone lines across 24 devices, many registered with stolen identities traced to sellers in the Murcia region.