Search papers, labs, and topics across Lattice.
This paper investigates the zero-shot capabilities of open-source Multimodal Large Language Models (MLLMs) for detecting face morphing attacks in single images, a task traditionally requiring task-specific training. The authors evaluated several MLLMs, including LLaVA1.6-Mistral-7B, on diverse morphing techniques using a standardized protocol. LLaVA1.6-Mistral-7B achieved state-of-the-art performance, outperforming task-specific baselines by at least 23% in EER, demonstrating that MLLMs can implicitly learn subtle facial inconsistencies indicative of morphing artifacts.
Open-source MLLMs can spot face morphing attacks with surprising accuracy, beating specialized systems without any training.
Face morphing attacks threaten biometric verification, yet most morphing attack detection (MAD) systems require task-specific training and generalize poorly to unseen attack types. Meanwhile, open-source multimodal large language models (MLLMs) have demonstrated strong visual-linguistic reasoning, but their potential in biometric forensics remains underexplored. In this paper, we present the first systematic zero-shot evaluation of open-source MLLMs for single-image MAD, using publicly available weights and a standardized, reproducible protocol. Across diverse morphing techniques, many MLLMs show non-trivial discriminative ability without any fine-tuning or domain adaptation, and LLaVA1.6-Mistral-7B achieves state-of-the-art performance, surpassing highly competitive task-specific MAD baselines by at least 23% in terms of equal error rate (EER). The results indicate that multimodal pretraining can implicitly encode fine-grained facial inconsistencies indicative of morphing artifacts, enabling zero-shot forensic sensitivity. Our findings position open-source MLLMs as reproducible, interpretable, and competitive foundations for biometric security and forensic image analysis. This emergent capability also highlights new opportunities to develop state-of-the-art MAD systems through targeted fine-tuning or lightweight adaptation, further improving accuracy and efficiency while preserving interpretability. To support future research, all code and evaluation protocols will be released upon publication.
