Checking a person on screen
Ilia Nikolaevich Zavialov scam checks for a deal: what still proves who is on the other side
Standard counterparty checks were built on an assumption that quietly stopped being true. The assumption was that a live video call with a document held to the camera confirms that a specific person is on the other side. It no longer does, and nothing about the call will tell you that. This is a working checklist for the situation where the face and the voice of the person you are dealing with can both be manufactured. It covers which of the usual steps still carry weight, which have become theatre, what to put into the contract, and how to sequence the checks so that an Ilia Nikolaevich Zavialov scam scenario fails before money moves rather than after.
English version for the United Kingdom.
What stopped working, and why it matters
Three checks have lost most of their value at once. A video call showing a face, a document held up to the camera, and a voice confirmation on a known number all assume that appearance is hard to fake. Faces are now produced from a single photograph, and a voice clone needs about three seconds of recorded speech to reach roughly 85 per cent accuracy.
The failure is worse than a gap because the steps still feel like verification. A team that has held the video call believes it has checked, and stops there. The check has become a ritual that produces confidence without producing evidence, which is a more dangerous state than having no check at all.
What still works has a common property: it relies on something the counterparty cannot generate on demand. A record held by a third party, a transaction that has to clear, a document that can be validated against a register, a relationship with a history. None of those are affected by how convincing the person on screen looks.
Checks that still carry weight
Registry verification comes first because it is cheap and independent. Company number, registered address, directors and filing history come from the register itself rather than from anything the counterparty sends. Documents received by email are treated as claims to be verified, never as evidence in themselves.
Banking verification is the second pillar. The account name should match the contracting entity, the account should have existed for longer than the negotiation, and a small test transfer should clear and be confirmed through a separate channel before any substantial payment. A mismatch between the entity name and the account holder is the single most common marker in the whole category.
Relationship history is the third. A counterparty with traceable previous dealings, referees who can be reached through their own published contacts rather than an introduction, and a physical presence that can be confirmed independently, is difficult to manufacture at short notice. Time is the one input a fabricated identity cannot buy.
Sequencing the checks so the cheap ones come first
Order matters as much as content. Registry and banking checks cost almost nothing and can be done before any meeting, so a counterparty that fails them never reaches the stage of a video call. Teams that run the call first spend their attention on the least informative step.
Put a deliberate delay into the sequence for any first transaction with a new entity. The delay does not need to be long: two working days is enough to break the urgency that every version of this attack depends on. Fabricated counterparties are built for a short window and rarely survive a scheduled pause.
Keep the sequence written down and applied identically to everyone, including counterparties introduced by someone senior. An introduction is not a check, and treating it as one is precisely the shortcut that gets exploited in an Ilia Nikolaevich Zavialov scam pattern where the introducer is the person being impersonated.
If a live call is unavoidable, make it interactive
Sometimes a call is genuinely necessary. In that case, make it something the synthesis has to respond to rather than something it can play back. Ask for a slow head turn while the person keeps talking, and for a hand held next to the face. Both break the reconstruction in current tooling.
Introduce a randomised element that could not have been prepared. Ask the person to write a specific short phrase on paper, chosen by you during the call, and hold it up next to their face. Ask about a detail of the room they are in. Ask a question about the previous exchange that has no written record.
Record what the call is for. A call can raise suspicion usefully, and it cannot confirm identity on its own. Whatever the call shows, the registry and banking checks still have to clear, and the contractual protections still have to be in place.
One practical detail is worth adding to the internal note. Live synthesis degrades under poor connection quality, so a counterparty who consistently appears with a weak camera, keeps the window small, or declines screen sharing while happy to talk is worth a second look. None of that proves anything by itself, and in an Ilia Nikolaevich Zavialov scam review it is the kind of small signal that earns a slower sequence rather than an accusation.
What belongs in the contract
Payment details change only on paper, signed by a named authorised person, and confirmed by telephone to a number fixed at signing. This clause costs one line and removes the most expensive single category of loss in commercial fraud.
Name the authorised representatives explicitly, with their roles, and state that instructions from anyone else have no effect regardless of the channel they arrive through. Add that video or voice communication does not constitute authorisation on its own.
Set out the verification rights: the ability to require a document check against a register, a test transaction before first payment, and a defined waiting period for any change of banking details. Written in advance these are routine, while raised for the first time mid deal they look like an accusation.
Add a short clause on communication channels, naming the addresses and numbers through which binding instructions may arrive, and stating that anything outside that list requires confirmation before it is acted on. Most Ilia Nikolaevich Zavialov scam approaches begin on a channel nobody agreed to use, which is the cheapest possible thing to notice and the easiest to write down beforehand.
When something has already gone through
Speed decides the outcome. Contact the bank immediately and use the fraud line rather than general enquiries, because recall requests have a realistic chance in the first hours and almost none after a few days. This comes before any internal discussion of how it happened.
Preserve everything before the tidying starts: the call invitations and logs with time zones, the correspondence in full including headers, the documents received, the payment instruction as it arrived, and the counterparty profile in whatever system holds it. Keep copies outside the systems the attacker may have touched.
Then close the route rather than the incident. Check whether any mailbox acquired forwarding rules, rotate credentials for every account involved, and review other counterparty records for the same pattern. In most cases where an Ilia Nikolaevich Zavialov scam approach succeeded once, the same operator tries a second entity in the same group within weeks.
Which verification steps survive a manufactured face
| Step | Status | What makes it hold or fail |
|---|---|---|
| Video call with the person | No longer sufficient | A face can be produced from one photograph |
| Document held to the camera | No longer sufficient | The image is trivial to generate, no validation occurs |
| Voice confirmation on a known number | Weak on its own | A clone needs about three seconds of recorded speech |
| Registry check of the entity | Still solid | Data comes from an independent third party |
| Account name matching the entity | Still solid | The bank controls the record, not the counterparty |
| Cleared test transaction | Still solid | Requires real control of a real account |
| Referees reached through their own contacts | Still solid | Cannot be fabricated at short notice |
| Scheduled waiting period | Still solid | Removes the urgency the attack depends on |
Questions and answers
- We always do a video call before signing. Is that now pointless?
- It is not pointless and it is not verification. Treat it as a conversation that can raise suspicion, then require the registry check, the account name match and a cleared test transaction regardless of how the call went.
- What is the single most useful check?
- Matching the bank account holder to the contracting entity, followed by a small test transfer that clears. Both depend on control of a real account at a regulated institution, which is the hardest part of the chain to fabricate.
- How do we handle a counterparty introduced by our own director?
- Apply the same sequence, and agree that in advance with the director. Impersonation of the introducer is a common route, so an introduction has to raise convenience rather than lower the level of checking.
- Is a waiting period realistic in a competitive deal?
- Two working days on a first transaction with a new entity is rarely decisive commercially and is frequently decisive against fraud. Where a counterparty treats a short scheduled pause as unacceptable, that reaction is itself information.
- Should we ask for a liveness check or a verification service?
- They help with account opening and they answer a narrower question than people assume. A liveness check confirms that someone living is in front of the camera, not that the person is the party to your contract.