FaceTec Certified Level 4 In Spoof/Bypass Security Testing

Praetorian Security results affirm world-leading, security-by-design architecture

SUMMERLIN, Nev., Sept. 3, 2025 /PRNewswire/ -- FaceTec announced that it successfully passed independent testing conducted by Praetorian Security for Level 4 Face Data Tampering, Reverse Engineering, and Attempting to Decrypt and Edit the Contents of a 3D FaceScan payload. The testing resulted in an Attack Presentation Classification Error Rate (APCER) of 0%.

For 200 hours, Praetorian attempted to force a "3D Liveness Success" result by tampering with 3D FaceScan files. Praetorian also accessed FaceTec's SDKs, with their security experts spending three weeks attempting to reverse-engineer the 3D FaceScan encryption and decryption mechanisms.

During the analysis, Praetorian confirmed the following:

• 0% APCER
• 0 Critical Risk Issues
• 0 High Risk Issues
• 0 Medium Risk Issues
• 0 Low Risk Issues

The full attestation letter can be found here:

www.facetec.com/FaceTec_Level_4_Spoof_Bypass_Certification_Letter.pdf

As demonstrated by FaceTec's dedication to continuous testing and advanced development, and the industry's only ongoing, global Level 1-5 $600,000 Spoof Bounty/Bypass Program, the company continues to expand its industry-leading position in 3D Face Verification and digital identity software.

Guided by FaceTec's principled "security-by-design" architecture, the Level 4 test results follow another recent Praetorian test for the digitally-signed biometric barcode UR® Code protocol, which FaceTec successfully passed Praetorian's rigorous reverse engineering process and its risk-informed security assessment related to robust code obfuscation, like dead code insertion, control flow flattening, and variable, class, and function renaming.

UR^® Codes enable legal identity-issuing authorities to provide machine-readable codes that bind together the legal identity data and biometric face data of a code holder. UR Codes offer similar privacy-protecting biometric security to e-passports, but without the usability and durability issues, or the exorbitant costs of scannable NFC chips. UR Codes can be inexpensively printed out and scanned with any smart device or webcam. Any organization, government, private sector entity, for-profit or nonprofit, and even individuals can scan and match any 2D face photo UR Code with a 3D face photo. All required software is included in the UR Code Scanner/Matcher SDKs and is available for unlimited use at no cost to not-for-profit organizations, law enforcement agencies, and government agencies.

FaceTec had also recently announced the release of the Scan+Match Apps for its revolutionary UR Code identity verification protocol. The apps scan, validate, and match a face to the biometric data encoded in a UR Code, with no biometric data or personally identifiable data leaving the user's device.

About UR^® Codes

FaceTec's UR Codes enable codeholders to prove their legal identity, age, and the right to access their accounts or privileges with high confidence, both in-person and remotely. UR Codes can contain embedded, digitally-signed biometric and legal identity information, ensuring privacy-preserving, decentralized identity verification. Safely storing unique, signed face data, personal info, and legal identity data, UR Codes provide secure, low-cost, two-party identity verification at unlimited scale in any identity-related scenario from any issuing authority, such as a DMV, passport issuer, school, or employer. For more information, visit the following resources:

• An Introduction to UR Codes
• The UR Encoder Demo
• Learn more at URCodes.com

About FaceTec

FaceTec is a global force in the fight against identity fraud. For use on standard, ubiquitous digital devices, FaceTec's patented biometric security software solutions provide exceptionally secure, remote, unsupervised identity verification and authentication, ensuring that only the legitimate account owner is allowed access to their valuable or sensitive digital services, assets, and systems.

Founded in 2013 and headquartered in the US with additional staff in the UK, Brazil, Portugal, Mexico, and Canada, FaceTec is the world's leading provider of 3D face biometric Liveness and matching software, processing 3.5 billion-plus 3D Liveness Checks annualized, protecting sensitive information in high-risk, high-value environments, including banking and finance, government, major e-commerce, global social networks, digital national IDs and mobile driver licenses, and much more.

FaceTec's AI-driven technology employs advanced algorithms and deep learning models to accurately and securely bind, verify, and re-verify individuals based on their unique face biometrics. FaceTec's patented, industry-leading Certified 3D Liveness Detection and face matching, UR Codes, optical character recognition, Know Your Customer (KYC), and age estimation technology anchor the chain of trust in the IDV process for secure access to mobile and web applications.

FaceTec technology has been exhaustively tested against tens of millions of digital and physical spoof artifacts — including high-resolution photos and videos, life-like masks, and mannequin heads — as well as against much more sophisticated injection and bypass-type attacks, all of which are now easily blocked. With ongoing, advanced AI development and the world's only spoof bounty program, FaceTec continues to stay ahead of ever-changing attack methods.

For more information and business inquiries, please visit FaceTec.com. For media inquiries, please contact John Wojewidka at [email protected].

About FaceTec 3D Face Verification

FaceTec's pioneering, patented 3D Face Biometrics are fast becoming the global standard in secure onboarding, KYC, and reverification, stopping ID fraud and unauthorized access for millions of users on six continents.

FaceTec's 3D Face Verification Platform features:

• 100% data-sovereign, customer-run software: no user data is sent to FaceTec
• World-leading 3D Face Matching rate at 1-in-125 million FAR at less-than-1% FRR
• Patented UI generates data-rich 3D FaceMaps® from standard 2D cameras
• UR^® Codes enable secure, low-cost two-party identity verification
• $600,000 Spoof Bounty Program certified Level 4 in Spoof/Bypass Security Testing
• Level 1 & 2 Certified 3D Liveness Detection, and Level 4 Spoof Bypass Certification & Reverse Engineering Assessment
• Unphishable 3D FaceMaps ensure trust without creating honeypots
• Support for all modern smartphones, tablets, and PCs with webcams
• KYC/IDV Dashboard with integrated 1-to-N de-duplication to catch fraudsters
• World-leading 1-in-2 million FAR 3D FaceMap-to-2D-photo-ID matching
• Anonymous, better-than-human 3D age estimation and 3D age checks
• Fast, intuitive interface with 98-99% first-time-user success rates
• Easy to integrate, customize, deploy, and manage

Developers can download FaceTec's demo apps directly from FaceTec.com for iOS, Android, and any modern browser. FaceTec Sample Apps are also available for free testing at dev.facetec.com.

About Liveness.com

Liveness.com is an educational resource for biometrics users, vendors, analysts, media, and regulators, providing a comprehensive history of Level 1-5 Presentation Attack Detection, Template Tampering, and Camera Bypasses, as well as explanations of methods and means for evaluation, certification testing, and bounty programs.

SOURCE FaceTec, Inc.