mlsanityData to 14 Oct 2026

Replay Attacks Against Audio Deepfake Detection

arXiv 2505.14862 ↗First posted 20 May 2025cs.SD cs.AI eess.AScited by 6

Not on the map. Why?

Abstract (arXiv)

We show how replay attacks undermine audio deepfake detection: By playing and re-recording deepfake audio through various speakers and microphones, we make spoofed samples appear authentic to the detection model. To study this phenomenon in more detail, we introduce ReplayDF, a dataset of recordings derived from M-AILABS and MLAAD, featuring 109 speaker-microphone combinations across six languages and four TTS models. It includes diverse acoustic conditions, some highly challenging for detection. Our analysis of six open-source detection models across five datasets reveals significant vulnerability, with the top-performing W2V2-AASIST model's Equal Error Rate (EER) surging from 4.7% to 18.2%. Even with adaptive Room Impulse Response (RIR) retraining, performance remains compromised with an 11.0% EER. We release ReplayDF for non-commercial research use.

Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Builds on 19 of its 33 references that are in the map. First posted on arXiv 20 May 2025.

Builds on

19 of 33 references.

References · 19

  1. 2020wav2vec 2.0: A Framework for Self-Supervised Learning of Speech Representationscited by 3,905
  2. 2020Shortcut Learning in Deep Neural Networkscited by 1,969
  3. 2021AASIST: Audio Anti-Spoofing using Integrated Spectro-Temporal Graph Attention Networkscited by 180
  4. 2019ASVspoof 2019: Future Horizons in Spoofed and Fake Audio Detectioncited by 178
  5. 2020End-to-end anti-spoofing with RawNet2cited by 164
  6. 2021ASVspoof 2021: accelerating progress in spoofed and deepfake speech detectioncited by 161
  7. 2022Does Audio Deepfake Detection Generalize?cited by 135
  8. 2022Automatic speaker verification spoofing and deepfake detection using wav2vec 2.0 and data augmentationcited by 117
  9. 2024ASVspoof 5: Crowdsourced Speech Data, Deepfakes, and Adversarial Attacks at Scalecited by 91
  10. 2021End-to-End Spectro-Temporal Graph Attention Networks for Speaker Verification Anti-Spoofing and Speech Deepfake Detectioncited by 70
  11. 2021A Comparative Study on Recent Neural Spoofing Countermeasures for Synthetic Speech Detectioncited by 56
  12. 2021Speech is Silver, Silence is Golden: What do ASVspoof-trained Models Really Learn?cited by 37
7 more
  1. 2023Improved DeepFake Detection Using Whisper Featurescited by 29
  2. 2024Temporal-Channel Modeling in Multi-head Self-Attention for Synthetic Speech Detectioncited by 25
  3. 2023Towards generalisable and calibrated synthetic speech detection with self-supervised representationscited by 23
  4. 2019Parrotron: An End-to-End Speech-to-Speech Conversion Model and its Applications to Hearing-Impaired Speech and Speech Separationcited by 22
  5. 2021Raw Differentiable Architecture Search for Speech Deepfake and Spoofing Detectioncited by 22
  6. 2024Toward Robust Real-World Audio Deepfake Detection: Closing the Explainability Gapcited by 4
  7. 2024Room Impulse Responses help attackers to evade Deep Fake Detectioncited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 2; 2026: 4.

6 papers.

  1. 2026AT-ADD: All-Type Audio Deepfake Detection Challenge Evaluation Plancited by 3
  2. 2025AUDDT: A Unified Benchmark Toolkit for Audio and Speech Deepfake Detectorscited by 2
  3. 2025On Deepfake Voice Detection -- It's All in the Presentationcited by 1
  4. 2026Alethia: A Foundational Encoder for Voice Deepfakescited by 1
  5. 2026Teffic-Audio: Tell Fact from Fictioncited by 1
  6. 2026What Counts as Real? Speech Restoration and Voice Quality Conversion Pose New Challenges to Deepfake Detectioncited by 0