The First Environmental Sound Deepfake Detection Challenge: Benchmarking Robustness, Evaluation, and Insights
Authors: Han Yin, Yang Xiao, Rohan Kumar Das, Jisheng Bai, Ting Dang
Organizations: School of Electrical Engineering, KAIST, Daejeon, Republic of Korea · University of Melbourne, Australia · Fortemedia Singapore, Singapore · Xi’an University of Posts & Telecommunications, Xi’an, China · Xi’an Lianfeng Acoustic Technologies Co., Ltd., China
Recent progress in audio generation has made it increasingly easy to create highly realistic environmental soundscapes, which can be misused to produce deceptive content, such as fake alarms, gunshots, and crowd sounds, raising concerns for public safety and trust. While deepfake detection for speech and singing voice has been extensively studied, environmental sound deepfake detection (ESDD) remains underexplored. To advance ESDD, the first edition of the ESDD challenge was launched, attracting 97 registered teams and receiving 1,748 valid submissions. This paper presents the task formulation, dataset construction, evaluation protocols, baseline systems, and key insights from the challenge results. Furthermore, we analyze common architectural choices and training strategies among top-performing systems. Finally, we discuss potential future research directions for ESDD, outlining key opportunities and open problems to guide subsequent studies in this field.
Figures & tables
Figure 1: Overview of the two tracks fo ESDD challenge.
Usage
Real
Fake
Sources
# Clips
TTA
ATA
# Clips
Training
[ 7 , 9 , 10 , 11 ]
27,811
[ 1 , 2 , 13 ]
[ 1 ]
111,244
Validation
[ 7 , 9 , 10 , 11 ]
7,942
[ 1 , 2 , 13 ]
[ 1 ]
31,768
Test
[ 8 , 12 ]
1,000
[ 14 , 15 ]
[ 2 ]
3,000
Table 1: Statistics of the dataset in Track 1.
Usage
# Real Clips
# Fake Clips
Training
270
1,083
Validation
90
361
Test
1,994
7,980
Table 2: Statistics of the black-box data in Track 2.
Team
System
ID
Ensem
EER
AHU
EAT+AASIST
S01
5
0.30
DFKI
EAT-L+BiCrossMamba
S02
4
0.80
CUC
SSLAM+FFN
S03
1
1.20
CAU [ 20 ]
BEAT2AASIST
S04
2
1.60
CAU [ 20 ]
BEAT2AASIST
S05
2
1.62
CAU [ 20 ]
BEAT2AASIST
S06
1
1.70
Table 3: Performance in EER (%) of different detection systems in ESDD challenge Track 1. “Ensem” represents “Ensemble”.
Team
System
ID
Ensem
EER
DFKI
EAT-L-SSLAM+ BiCrossMamba
M01
5
0.25
AHU
EAT+AASIST
M02
5
0.25
CAU [ 20 ]
BEAT2AASIST
M03
3
0.35
CAU [ 20 ]
BEAT2AASIST
M04
2
0.40
CAU [ 20 ]
BEAT2AASIST
M05
3
0.41
CUC
SSLAM+FFN
M06
1
1.05
Table 4: Performance in EER (%) of different detection systems in ESDD challenge Track 2. “Ensem” represents “Ensemble”.
Generator
Method
ID
Track 1
Track 2
Training
Test
Training
Test
AudioLDM
TTA
G01
✔
✗
✔
✗
AudioLDM2
TTA
G02
✔
✗
✔
✗
AudioGen
TTA
G03
✔
✗
✔
✗
AudioLDM
ATA
G04
✔
✗
✔
✗
AudioLCM
TTA
G05
✗
✔
✗
✗
Table 5: Audio generators used in the ESDD challenge.
Figure 2: Deepfake detection performance in EER (%) of different systems across various audio generators in Track 1 and Track 2.
In this paper, we propose a deep-learning framework for Environmental Sound Deepfake Detection (ESDD) - the task of identifying whether the sound scene and sound event in an input audio recording is fake or real. To this end, we first conduct extensive experiments to explore how individual spectrograms, a wide range of network architectures, and pre-trained models affect the performance of an ESDD model. The experimental results on the benchmark datasets of EnvSDD indicate that detecting deepfake audio of sound scenes and detecting deepfake audio of sound events should be considered as individual tasks. We also show that fine-tuning a pre-trained model is more effective than training a model from scratch for ESDD. Ultimately, our best model, which fine-tunes the pre-trained BEATs model using the proposed two-phase training strategy, achieves an Accuracy of 0.98, F1 score of 0.95, and AUC score of 0.99 on the Test subset of the EnvSDD dataset. Our best model also achieves an Accuracy of 0.86, F1 score of 0.80, and AUC of 0.93 when evaluated cross-dataset on the ESD-Challenge-TestSet dataset.
Khoi Vu, Dat Tran, Khanh Do +8
FPT University, Vietnam · HCM University of Technology, Vietnam · TDT University, Vietnam +3
The Environment-Aware Speech and Sound Deepfake Detection Challenge (ESDD2), held in conjunction with ICME 2026, evaluated systems for five component-level audio spoofing detection, where speech and environmental sounds may be manipulated independently or jointly. After the challenge concludes, we analyze the final leaderboard and summarize effective design choices from the top-performing submissions. The challenge attracted 94 registrations from 16 countries; after verification of submission requirements and metadata, 13 teams were retained for the final analysis. On the test set, the best system achieved a Macro-F1 score of 0.8775, substantially outperforming the separation-enhanced joint learning baseline (0.6327). Top systems consistently benefited from modular task decomposition, cross-domain self-supervised encoders, targeted data augmentation, and selective ensembling rather than simple model scaling. At the same time, auxiliary EER analyses reveal persistent difficulty in detecting the spoofed environmental component and in generalizing to unseen generators in the test set. This paper reports challenge results and provides insights for future environment-aware deepfake detection research. The CompSpoofV2 dataset and baseline code remain publicly available for reproducibility.
Xueping Zhang, Han Yin, Yang Xiao +4
Duke Kunshan University · Korea Advanced Institute of Science and Technology · The University of Melbourne +3
Recent advances in generative audio models have enabled high-fidelity environmental sound synthesis, raising serious concerns for audio security. The ESDD 2026 Challenge therefore addresses environmental sound deepfake detection under unseen generators (Track 1) and black-box low-resource detection (Track 2) conditions. We propose EnvSSLAM-FFN, which integrates a frozen SSLAM self-supervised encoder with a lightweight FFN back-end. To effectively capture spoofing artifacts under severe data imbalance, we fuse intermediate SSLAM representations from layers 4-9 and adopt a class-weighted training objective. Experimental results show that the proposed system consistently outperforms the official baselines on both tracks, achieving Test Equal Error Rates (EERs) of 1.20% and 1.05%, respectively.
Xiaoxuan Guo, Hengyan Huang, Jiayi Zhou +5
State Key Laboratory of Media Convergence and Communication, Communication University of China, Beijing, China · Machine Intelligence, Ant Group, Shanghai, China · Key Laboratory of Media Audio & Video, Ministry of Education, Communication University of China, Beijing, China