Foundation Models are Implicit Deepfake Detectors

Authors: Stefan Smeu, Dragos-Alexandru Boldisor, Elisabeta Oneata, Dan Oneata

Published: 2026-08-10 10:55:27+00:00

AI Summary

This research discovers that fake media consistently produce lower-magnitude representations in pretrained self-supervised models compared to real counterparts across various domains. Leveraging this phenomenon, the authors propose a deepfake detection method based on simple statistics of feature magnitude, achieving competitive performance with more complex methods. They attribute this effect primarily to semantic shifts introduced by fake content and note that the discriminative signal strengthens with larger foundation models.

Abstract

Pretrained self-supervised representations have emerged as a core component of current deepfake detection methods, yet it remains unclear which of their properties make real and fake media distinguishable. In this work, we uncover a surprisingly consistent phenomenon: across multiple pretrained models, datasets, and both image and video domains, fake samples systematically produce lower-magnitude representations than their real counterparts. Motivated by this finding, we formulate deepfake detection as an anomaly detection problem and show that simple statistics of feature magnitude achieve competitive performance with far more sophisticated deepfake detection methods. We further investigate the origin of this effect and demonstrate that reduced feature magnitude is primarily associated with semantic shifts introduced by fake content, while low-level generative fingerprints play a comparatively smaller role. Finally, we show that this discriminative signal strengthens as the size of the underlying foundation model grows, suggesting that advances in representation learning naturally translate into stronger zero-shot deepfake detectors.


Key findings
Fake samples consistently produce lower-magnitude feature representations than real samples across diverse self-supervised models, datasets, and both image and video domains. Simple statistics like L1 norm and L1/L2 norm ratio of these features (NormFake) provide competitive deepfake detection performance, often outperforming or matching more complex methods. This discriminative signal is primarily driven by semantic shifts in fake content and improves with the increasing size of the foundation model, suggesting representation learning advancements naturally lead to stronger zero-shot deepfake detectors.
Approach
The authors treat deepfake detection as an anomaly detection problem. They observe that fake samples systematically exhibit lower-magnitude representations than real ones in self-supervised models. Their method, NormFake, uses either the L1 norm (magnitude) or the ratio of L1 to L2 norms (sparsity) of these representations as a fakeness score.
Datasets
FakeAVCeleb (FAVC), AVLips, DeepfakeEval-2024 (DFE), MAVOS-DD, MMDF, DFDC, FaceForensics++ (FF++), DFD, DeeperForensics, Celeb-DF-v2, GenImage, EuroSAT, VoxCeleb2, LRS3
Model(s)
AV-HuBERT, DINOv3 (including DINOv3-7B and various ViT variants), BEiT, OpenCLIP, SigLIP 2, PE-Core, RAVEn, BRAVEn
Author countries
Romania