Profile Photo Verification
Reverse image search and its limits against generated images.
18 minutes to read
What a reverse image search does
You give a search engine a picture and it looks for other copies of that picture. Google Lens, TinEye, Bing and Yandex all do it, they are free, and it takes about a minute.
When it works, it works decisively. A stock photograph, a stolen holiday snapshot, or a model's portfolio shot will usually appear somewhere with a different name attached, and that single result ends the conversation.
The limit that matters most
A generated face has never existed anywhere, so there is nothing to find.
This is not a subtle point but it is routinely misread. People run the search, get no results, and conclude the person is genuine. What they have actually established is that this particular image is not a copy of something else — which is exactly what you would expect from a face that was created rather than taken.
So: a hit is proof. No hit is not evidence of anything at all. Treat an empty result as the search having failed to answer, not as the search having answered no.
Why detectors do not close the gap
The obvious next thought is to run the image through an AI-image detector. The largest independent evaluation of detection tools on real-world material found their accuracy dropping by roughly half against the benchmarks they advertise, and none of them matching a trained human analyst.
Content Credentials, the standard that signs a photograph at the moment of capture, is real and slowly spreading. It does not help you here either: messaging apps and social platforms strip metadata, so a photograph that reaches you through a chat arrives with nothing attached. The absence of a credential proves nothing.
How to use it anyway
Run the search — it is a minute, and when it hits, it hits. Then treat the result as one input and not a verdict, and put your weight on the checks that do not depend on an image at all.
What to carry out of this
- A hit ends the conversation; no hit establishes nothing
- A generated face has no earlier copy to find, which is why empty results mislead
- Detectors and credentials do not close the gap, so do not lean on them
Tactics covered