DuckDuckGoose's second-ranked page in our winner research describes how deepfakes attack driver and gig-worker onboarding: a rented identity, a virtual camera, and a platform that needs drivers faster than it can verify them. It is a well-aimed attack story. What our directory adds is the defense side of the same niche, counted, and the count is a gap: across the 60 detection tools we track, not one names driver, gig, or delivery onboarding as a use case.
The gap, counted
| What tool records say | Tools |
|---|---|
| Mention onboarding, KYC or identity verification as a use case | 26 |
| Name driver or gig work specifically | 0 |
| Offer liveness detection | 28 |
| Offer injection-attack detection | 9 |
The attack DuckDuckGoose describes does not need gig-specific tooling to work, and the defense does not have it either. A driver's selfie check runs on the same general KYC stack as a bank's: document check, face match, liveness. The control that matters most against the described attack, detecting a virtual camera feeding the session (injection), is the rarest one in our data: 9 of 60 tools name it, and all 9 pair it with liveness. Gig platforms onboard at the highest volume and the thinnest margin of any identity customers, which makes them the natural first buyer for injection detection and, on this evidence, the least served.
The commercial shape of the KYC market quietly fits gig onboarding better than its marketing does. Eight of the 15 KYC tools charge by usage rather than by enterprise contract, which suits a platform whose verification volume swings with driver recruitment drives, and two offer free tiers a platform can pilot on. What none of them sell is the thing the attack actually exploits: an onboarding flow tuned for high-churn, phone-first, low-document populations. Until a vendor builds that product, gig platforms are assembling it themselves from general parts, and the assembly quality is the real defense.
Our injection gap analysis walks the attack mechanics, and the KYC onboarding buyer's guide turns the same counts into selection criteria.
Sources: DuckDuckGoose, How Deepfakes Attack Driver and Gig-Worker Onboarding; this site's detection tool directory, 60 tools, records verified September 2025.