DF-MoE: Generalizable Deepfake Detection via Multimodal Sparse Mixture-of-Experts
Authors: Vlad Hondru, Florinel Alin Croitoru, Iuliana Georgescu, A. Sophia Koepke, Radu Tudor Ionescu
Organizations: University of Bucharest Bucharest, Romania · Technical University Munich, MCML Munich, Germany · University of Tübingen, Tübingen AI Center Tübingen, Germany
Audio-visual deepfake detection is an actively studied topic, where one of the main challenges is to develop detectors able to generalize across deepfake generation methods. We conjecture that overfitting can be mitigated by extracting multiple high-level cues from the available audio and visual modalities via pre-trained models. We therefore assemble a wide variety of pre-trained models to extract features that encode mouth movements, face parsing, facial expressions, head pose, gaze tracking, heart rate, audio emotion and speech activity. We further integrate both unimodal and multimodal cues via a Mixture-of-Experts (MoE) backbone to detect deepfakes. We perform in-domain and cross-domain experiments on five benchmarks for deepfake detection (MAVOS-DD, AVLips, PolyGlotFake, BioDeepAV, FakeAVCeleb) to compare our framework (DF-MoE) with state-of-the-art methods. Our results indicate that DF-MoE obtains superior deepfake detection results, surpassing all competing methods. We release our code at https://github.com/vladhondru25/DF-MoE.
Figures & tables
Figure 1: Overview of the proposed pipeline for deepfake detection. First, we employ multiple pre-trained models to extract high-level semantic cues. Then, a lightweight Mixture-of-Experts (MoE) transformer aggregates the extracted signals and learns to classify audio-visual inputs as real or fake. Our design prevents overfitting to a specific dataset by keeping the pre-trained models frozen, while only training the lightweight MoE on the target task.
Figure 2: Detailed overview of our DF-MoE framework for deepfake detection. Face detection and tracking are applied to obtain face tracks. Next, multiple pre-trained models (frozen) are employed to extract high-level semantic cues (features). The extracted features are encoded into tokens via specialized encoders (trainable adapters), ensuring consistent dimensionality across different cues. The resulting tokens are processed by a sparse MoE transformer (trainable). Best viewed in color.
Method
Closed-set
Open-set model
Open-set lang.
Open-set full
mAP
AUC
acc
mAP
AUC
acc
mAP
AUC
acc
mAP
AUC
acc
TALL [ 105 ]
0.84
0.85
75.61
0.67
0.73
62.40
0.77
0.78
70.14
0.69
0.72
63.86
MRDF [ 121 ]
0.90
0.92
79.55
0.75
0.81
67.86
0.88
0.89
76.91
0.80
0.83
70.95
AVFF [ 75 ]
0.97
0.97
90.71
0.93
0.94
85.10
0.93
0.93
{\color[rgb]{0.8633,0.4688,0}86.58}
0.91
0.93
84.85
AVH-Align [ 89 ]
0.56
0.56
52.48
0.51
0.51
62.66
0.57
0.57
58.11
0.54
0.54
57.78
AVH-Align sup [ 89 ]
0.81
0.83
75.56
0.69
0.74
63.84
0.76
0.78
72.75
0.70
0.73
64.90
Table 1: Results on MAVOS-DD obtained by TALL [ 105 ] , MRDF [ 121 ] , AVFF [ 75 ] , AVH-Align [ 89 ] , AVH-Align sup [ 89 ] , DF-Linear, and our DF-MoE. The best performing method is highlighted in blue bold , and the second-best in orange . Our DF-MoE outperforms all previous state-of-the-art methods, regardless of the evaluation setup.
Method
AVLips
mAP
AUC
acc
RealForensics [ 31 ]
0.90
-
91.78
LipForensics [ 32 ]
0.82
-
86.13
LipFD [ 64 ]
0.93
0.95
\mathbf{{\color[rgb]{0,0.3125,0.7852}95.27}}
AVH-Align [ 89 ]
-
0.89
-
AVFF [ 75 ]
0.89
0.89
76.64
Table 2: In-domain results on AVLips [ 64 ] obtained by state-of-the-art models vs. DF-MoE. The best performing method is highlighted in blue bold , and the second-best in orange . Our DF-MoE outperforms all previous state-of-the-art methods in terms of mAP and AUC.
rPPG
Face
HP+Gaze
AV
AV
AVFF+
mAP
AUC
acc
segmentation
emotion
transformer
Effort
✓
✗
✗
✗
✗
✗
0.73
0.74
66.18
✗
✓
✗
✗
✗
✗
0.73
0.72
66.58
✗
✗
✓
✗
✗
✗
0.66
0.69
62.51
✗
✗
✗
✓
✗
✗
0.78
0.78
70.48
✗
✗
✗
✗
✓
✗
0.88
0.88
81.40
Table 3: Ablation study on the impact of each feature type on the final performance of DF-MoE on MAVOS-DD (open-set full). The best individual components are AV Transformer and AVFF. However, the complementary cues brought by the other pre-trained models (HP+Gaze, rPPG, audio-visual emotion, face segmentation) bring consistent performance gains, all contributing to the final performance of DF-MoE.
Year
Method
PolyGlotFake [ 38 ]
BioDeepAV [ 18 ]
Vox+FakeAVCeleb [ 49 ]
mAP
AUC
acc
mAP
AUC
acc
mAP
AUC
acc
2018
MesoNet [ 1 ]
-
0.57
-
-
-
-
-
-
-
MesoInception [ 1 ]
-
0.58
-
-
-
-
-
-
-
DSP-FWA [ 60 ]
-
0.67
-
-
-
-
-
-
-
2019
XceptionNet [ 80 ]
-
0.61
-
-
0.57
-
-
-
-
EfficienNet-B4 [ 97 ]
-
0.58
-
-
-
-
-
-
-
Table 4: Cross-dataset evaluation on PolyGlotFake, BioDeepAV and Vox+FakeAVCeleb. The best performing method is highlighted in blue bold , and the second-best in orange . DF-MoE obtains the best performance on both datasets in terms of AUC and acc. Results of methods marked with an asterisk are reproduced using publicly available code.
Figure 3: Examples of videos correctly classified by DF-MoE, alongside the corresponding attention scores of each high-level cue. Best viewed in color.
#GPUs
Average
Face detection &
Feature
MoE
Total
video duration
tracking
extraction
1
10.97
3.35
8.47
1.16
12.98
2
10.97
3.35
4.65
1.16
9.16
Table 5: Average video duration and stage-wise inference times (in seconds) for DF-MoE. The values are estimated across 20 videos on a machine with 1× AMD Ryzen Threadripper 9960X 24-core CPU and 2× Nvidia RTX 5090 GPU (32GB VRAM).
Dropout Ratio
#Experts
mAP
AUC
acc
0.2
6
0.98
0.98
92.95
0.4
6
0.97
0.97
91.70
0.2
12
0.96
0.97
92.54
0.4
12
0.96
0.96
91.24
Table A1: Ablation study on the expert dropout ratio ( d ) and the number of experts ( n ) included in DF-MoE. The study is conducted on the open-set full protocol of MAVOS-DD [ 19 ] .
Figure 1: Latent space of DF-MoE before introducing the CRO loss.
CRO Loss
mAP
AUC
acc
✗
0.919
0.936
98.42
✓
0.929
0.941
98.49
Table A2: Results of DF-MoE on PolyGlotFake [ 38 ] , before and after introducing the proposed contractive-repulsive objective (CRO).
AVFF+
Face
HP+Gaze
AV
AV
rPPG
mAP
AUC
acc
Effort
segmentation
emotion
transformer
✓
✗
✗
✗
✗
✗
0.88
0.91
97.93
✓
✓
✗
✗
✗
✗
0.90
0.90
96.70
✓
✗
✓
✗
✗
✗
0.91
0.92
96.65
✓
✗
✗
✓
✗
✗
0.87
0.88
91.71
✓
✗
✗
✗
✓
✗
0.92
0.93
98.70
Table A3: Ablation study on combinations of AVFF+Effort features and other high-level features included in DF-MoE. Results are reported on PolyGlotFake [ 38 ] .
Method
mAP
AUC
acc
DF-MoE (AVFF full)
0.94
0.94
86.38
DF-MoE (AVFF+Effort)
0.98
0.98
92.95
Table A4: Full vs. parameter-efficient training of AVFF encoder on MAVOS-DD (open-set full). Fine-tuning based on Effort [ 107 ] surpasses full fine-tuning.
Method
AUC
F3Net [ 76 ]
0.789
CORE [ 72 ]
0.809
RECCE [ 8 ]
0.823
UCF [ 108 ]
0.837
LSDA [ 106 ]
0.875
DF-MoE (ours)
0.834
Table A5: Cross-dataset evaluation on Celeb-DF (v2) [ 61 ] , a video-only dataset. The results demonstrate that DF-MoE obtains competitive results even when the audio modality is missing.
Figure 4: Average attention scores across datasets and class labels.
Figure 5: Examples of videos incorrectly classified by DF-MoE, alongside the corresponding attention scores of each feature type. Best viewed in color.
With every advancement in generative AI models, forensics is under increasing pressure. The constant emergence of new generation techniques makes it impossible to collect data for each manipulation to train a deepfake detection model. Thus, generalizing to deepfakes unseen during training is one of the major challenges in current deepfake detection research. To tackle this challenge, we employ high-level semantic cues and argue that these cues can support low-level focused approaches in generalizing to unseen types of manipulations. In this work, we study emotions as a high-level semantic cue. We propose Emo-Boost, a multimodal deepfake detection framework that fuses an off-the-shelf RGB- and acoustic-focused deepfake detector with our emotion-based deepfake detector EmoForensics. EmoForensics utilises vision and audio emotion recognition modules and models intra- and inter-modal temporal consistency in emotion representations from an audio-visual stream. We found that EmoForensics and the low-level focused method capture complementary signals. Consequently, combining both signals in EmoBoost enhances the average cross-manipulation generalization AUC by 2.1% on FakeAVCeleb.
Audio-visual deepfake detection (AVD) is increasingly important as modern generators can fabricate convincing speech and video. Most current multimodal detectors are small, task-specific models: they work well on curated tests but scale poorly and generalize weakly across domains. We introduce AV-LMMDetect, a supervised fine-tuned (SFT) large multimodal model that casts AVD as a prompted yes/no classification - "Is this video real or fake?". Built on Qwen 2.5 Omni, it jointly analyzes audio and visual streams for deepfake detection and is trained in two stages: lightweight LoRA alignment followed by audio-visual encoder full fine-tuning. On FakeAVCeleb and Mavos-DD, AV-LMMDetect matches or surpasses prior methods and sets a new state of the art on Mavos-DD datasets.
Songjun Cao, Yuqi Li, Yunpeng Luo +2
Tencent YouTu Lab, China · Tencent Youtu Lab, China · Fudan University, China
Audio-visual deepfakes have reached a level of realism that makes perceptual detection unreliable, threatening media integrity and biometric security. While multimodal detection has shown promise, most approaches are binary classification tasks that often latch onto dataset-specific artifacts rather than genuine generative traces. We argue that a detector incapable of identifying how a video was forged is likely learning the wrong signal. Unlike binary detection, attribution-guided learning imposes a stronger geometric constraint on the shared embedding space, forcing the model to encode generator-specific forensic content rather than shortcuts. We propose the Attribution-Guided Multimodal Deepfake Detection (AMDD) framework, which jointly learns to detect and attribute manipulation. AMDD treats generator attribution as a structured regularization that constrains representation geometry toward forensically meaningful features. We introduce a Cross-Modal Forensic Fingerprint Consistency (CMFFC) loss to enforce alignment between generator-induced artifacts in visual and audio streams. This exploits the fact that coherent manipulation leaves correlated traces across modalities, grounded in the physical coupling between speech and facial articulation that synthetic pipelines routinely disrupt. Architecturally, we pair a ResNet50 with temporal attention for visual encoding against a pretrained ResNet18 for mel spectrograms, closing the encoder capacity gap found in prior models. On FakeAVCeleb, AMDD achieves 99.7% balanced accuracy and 99.8% AUC with 95.9% attribution accuracy. Cross-dataset evaluation on DeepfakeTIMIT, DFDM, and LAV-DF confirms that real video detection generalizes robustly, while fake detection on unseen generators remains an open challenge that we analyze in depth.
Wasim Ahmad, Wei Zhang, Xuerui Mao
School of Interdisciplinary Science, Beijing Institute of Technology, Beijing 100081, China