deepfake investigation (video / audio / image) — quick-start

checklist

1. download the suspect video, audio, or image in its original format immediately — platforms delete flagged content fast.
2. hash the original file sha-256 before any transcoding, compression, or social share — compressed versions lose artifacts.
3. record where and when you first saw the content — URL, platform, timestamp, account that posted it.
4. preserve the account that posted it: handle, bio, follower count, post history — note whether it is new or hijacked.
5. download any claimed 'original' the subject provides for comparison — hash both before analysis.
6. note temporal artifacts: unnatural blinks, mouth sync lag, hair boundary smoothing, and ear texture inconsistency.
7. extract audio separately if video — check for voice clone artifacts (monotone stress curve, unnatural formant transitions).
8. pull image EXIF if available — GenAI tools often strip EXIF; absence of metadata in an 'original' is a signal.
9. note the claimed context of the content — political figure, financial fraud, or identity impersonation changes the reporting path.
10. begin the primary tool path below — deepfake artifact analyzer and image/audio metadata extractor.

primary tools

1. 01video deepfake analyzerdrop a short video · sample frames · blink rate · face boundary flicker · temporal inconsistency score · runs locally
2. 02face swap artifact detectordrop an image · jawline color mismatch · compression boundary heuristics · face-region signal table · runs locally
3. 03gan fingerprint detectordrop an image · fft grid periodicity · color histogram anomalies · synthetic likelihood score 0–100 · runs locally
4. 04ai synthetic voice generation artifact analyzeranalyze synthetic voice generation artifacts and identify possible AI-generated speech characteristics · spectrogram consistency, prosody, splice boundaries · runs locally
5. 05audio splice detectordrop audio · spectral flux discontinuities · candidate splice timestamps · timeline table · runs locally
6. 06ela image tampering detectordrop a JPEG · error level analysis · detect localized re-compression · flag tampered regions · visualize ELA map · runs locally
7. 07prnu fingerprinterjpeg png sensor noise · residual fingerprint · pearson correlation · heatmap viz · LIKELY DIFFERENT · CSV · runs locally
8. 08copy-move forgery detectordrop an image · block-matching copy-move scan · suspicious region overlay · heuristic clone map · runs locally

go deeper