Audio-visual deepfake detectors are often trained under a single dataset or manipulation regime, but multi-source training collections may contain heterogeneous attacks and uneven source distributions. Training separate detectors for each source is inefficient, while a single shared detector may be biased toward dominant source-specific patterns. We study known-source imbalanced multi-source audio-visual deepfake detection using FakeAVCeleb and LAV-DF, where source identity is supplied during training and inference. To address this setting, we build on the Multi-Scale Cross-Modal Transformer Encoder (MSCT) and propose Pre-MSCT Shared-Private Feature Fusion. Our method routes [CLS]-augmented audio and visual tokens into a shared stream and source-specific private streams before the first MSCT block, while retaining its internal multi-scale self-attention (MSSA), differential cross-modal attention (DCA), and feed-forward operations. The shared stream models cross-source reusable evidence, while the private streams retain source-dependent residual variations. A domain-aware gated residual fusion module injects selected private evidence into the shared representation for the main fused prediction. Experiments under two controlled source-composition protocols show improved macro and worst-source AUC compared with the MRDF and MSCT baselines. These results support shared-private cross-modal discrepancy learning in the evaluated two-source setting with known source identity.
Figures & tables
Component
MSCT
Ours
Token routing
Unified pathway
Shared/private routing before the first MSCT block
Cross-modal modeling
Single shared MSCT stack
Shared stack + source-specific private stacks with the same MSCT blocks
Private branch
Not used
Source-specific adapter, expert, and classifier
Domain identity
Not used
Selects private adapter, expert, Cpd , and βd
Final representation
Concatenated audio/video [CLS]
Gated private residual on shared [CLS] representation
Gate design
Not used
Shared gate with bounded source modulation
Table 1: Architectural comparison between MSCT and our Pre-MSCT shared-private framework.
Figure 1: Pre-MSCT Shared-Private Feature Fusion. Tokens are routed before MSSA and DCA. Source identity selects the private path and βd , while the gate MLP is shared. Dashed and dotted arrows denote diagnostic and stop-gradient paths, respectively.
Setting
Pool (FAC/LAV-DF)
Samples/epoch
Ratio
R13
320 / 960
1,280
1:3
R19
320 / 2,880
3,200
1:9
Table 2: Source-sampling protocols; ratios are enforced over samples per epoch, not per mini-batch.
Ratio
Method
FAC AUC
LAV-DF AUC
Macro AUC
Macro ACC
Worst AUC
Δ AUC
1:3
MRDF-CE
0.8101
0.5116
0.6608
0.5127
0.5116
0.2985
MRDF-Margin
0.8263
0.5058
0.6661
0.5049
0.5058
0.3205
MSCT
0.9028
0.9564
0.9296
0.8503
0.9028
0.0537
Ours
0.9565
0.9557
0.9561
0.9047
0.9557
0.0008
1:9
MRDF-CE
0.6991
0.4958
0.5974
0.7329
0.4958
0.2034
MRDF-Margin
0.7531
0.5044
0.6288
0.7427
0.5044
0.2488
Table 3: Source-domain evaluation under two sampling ratios. FakeAVCeleb uses its evaluation pool and LAV-DF its official test set. Higher AUC/ACC and lower Δ are better; per-ratio best results are bold. Aggregate metrics are computed before rounding.
Ratio
Branch
Macro AUC
Worst AUC
Δ AUC
1:3
Shared
0.9412
0.9292
0.0239
Private
0.7293
0.5156
0.4274
Fused
0.9561
0.9557
0.0008
1:9
Shared
0.9453
0.9151
0.0604
Private
0.9371
0.8960
0.0822
Fused
0.9664
0.9486
0.0358
Table 4: Branch diagnostics from the same fused-selected checkpoint.
Variant
Macro AUC
Worst AUC
Δ AUC
Full Ours
0.9641
0.9456
0.0370
w/o domain
0.9542
0.9390
0.0304
w/o gated fusion
0.9595
0.9440
0.0310
w/o orth.
0.9613
0.9416
0.0394
w/o warm-up
0.9566
0.9363
0.0407
Table 5: R19 ablations (FAC/LAV-DF pools: 320/2,880; 3,200 samples/epoch). Higher Macro/Worst and lower Δ AUC are better.
Item
Configuration
Audio loading
16 kHz mono wav
Audio feature
Log-filterbank features with stack order 4
Stacked audio dimension
104-dimensional frame-level representation
MSCT/Ours audio projection
Linear audio token encoder
MRDF audio front-end
AV-HuBERT-style audio front-end
Video loading
Frame sequence with normalization
Table 6: Input preprocessing used in our experiments.
Item
MRDF
MSCT
Ours
Audio front-end
AV-HuBERT-style
Linear token encoder
Same as MSCT
Visual front-end
AV-HuBERT-style
WTConv/Res2Net-CBAM
Same as MSCT
Feature dimension
768
256
256
Classification token
First fused token
Learnable A/V tokens
Same, before routing
Main sequence block
Fusion encoder
MSSA + DCA + FFN
Shared/private MSCT blocks
Routing
None
None
Before first MSCT block
Table 7: Encoder, backbone network and overall architecture comparison.
Audio-visual deepfake detection typically employs a complementary multi-modal model to check the forgery traces in the video. These methods primarily extract forgery traces through audio-visual alignment, which results from the inconsistency between audio and video modalities. However, the traditional multi-modal forgery detection method has the problem of insufficient feature extraction and modal alignment deviation. To address this, we propose a multi-scale cross-modal transformer encoder (MSCT) for deepfake detection. Our approach includes a multi-scale self-attention to integrate the features of adjacent embeddings and a differential cross-modal attention to fuse multi-modal features. Our experiments demonstrate competitive performance on the FakeAVCeleb dataset, validating the effectiveness of the proposed structure.
Fangda Wei, Miao Liu, Yingxue Wang +3
Beijing Institute of Technology, China · China Academy of Electronics and Information Technology, China
Audio-visual deepfakes have reached a level of realism that makes perceptual detection unreliable, threatening media integrity and biometric security. While multimodal detection has shown promise, most approaches are binary classification tasks that often latch onto dataset-specific artifacts rather than genuine generative traces. We argue that a detector incapable of identifying how a video was forged is likely learning the wrong signal. Unlike binary detection, attribution-guided learning imposes a stronger geometric constraint on the shared embedding space, forcing the model to encode generator-specific forensic content rather than shortcuts. We propose the Attribution-Guided Multimodal Deepfake Detection (AMDD) framework, which jointly learns to detect and attribute manipulation. AMDD treats generator attribution as a structured regularization that constrains representation geometry toward forensically meaningful features. We introduce a Cross-Modal Forensic Fingerprint Consistency (CMFFC) loss to enforce alignment between generator-induced artifacts in visual and audio streams. This exploits the fact that coherent manipulation leaves correlated traces across modalities, grounded in the physical coupling between speech and facial articulation that synthetic pipelines routinely disrupt. Architecturally, we pair a ResNet50 with temporal attention for visual encoding against a pretrained ResNet18 for mel spectrograms, closing the encoder capacity gap found in prior models. On FakeAVCeleb, AMDD achieves 99.7% balanced accuracy and 99.8% AUC with 95.9% attribution accuracy. Cross-dataset evaluation on DeepfakeTIMIT, DFDM, and LAV-DF confirms that real video detection generalizes robustly, while fake detection on unseen generators remains an open challenge that we analyze in depth.
Wasim Ahmad, Wei Zhang, Xuerui Mao
School of Interdisciplinary Science, Beijing Institute of Technology, Beijing 100081, China
Comparing audio-visual deepfake detectors requires coordinating dataset adaptation, temporal input representation, model interfaces and experimental conditions. We present DFD-Lab, a modular pipeline that separates these responsibilities while supporting shared training and evaluation workflows. We integrate three implementations: Xception-based maximum-logit fusion, ResNet with temporal LSTM fusion, and our AVFF reimplementation. Experiments cover external testing, degradation-based training augmentation and evaluation-time corruption. On a filtered subset of Deepfake-Eval-2024, models trained on FakeAVCeleb attain baseline AUROC values of 0.504, 0.538 and 0.458. JPEG50 training augmentation raises these to 0.691, 0.605 and 0.570, respectively, while all three accuracies decrease. These results illustrate why training interventions, evaluation corruptions and metric-dependent outcomes should remain distinct within a common pipeline. The contribution is the integration of audio-visual processing, interchangeable detectors and configurable experimental workflows, supported by empirical case studies. The findings highlight the challenge of cross-dataset detection and the complementary information provided by ranking and classification metrics.
Jan Rybarczyk, Mateusz Roszkowski, Jacek Komorowski