Deepfake Detectors That Claim to Read Your Pulse Are Actually Reading the Camera

rPPG-based deepfake detectors don't detect missing heartbeats — they detect video-source fingerprints. Simple chrominance traces beat dedicated rPPG extractors, and the signal persists in backgrounds with no faces at all.

Imagine you're a wine sommelier who claims to identify counterfeit bottles by tasting the terroir — the soil minerals, the microclimate. But a controlled test reveals you're actually tasting the cork. Your accuracy is real, your explanation of why is completely wrong. That's what's happening with rPPG-based deepfake detectors: they work, but not for the reason anyone thought. The committed claim here is blunt: rPPG-style deepfake detectors do not detect the absence of a physiological cardiac signal. They detect high-frequency chrominance artifacts that fingerprint the video's generative source. Harraq and Aldwairi demonstrate this across Celeb-DF++ (22 forgery methods) and FaceForensics++ with a series of ablations that systematically dismantle the physiological hypothesis. A simple chrominance trace — no rPPG extraction at all — hits 0.998 AUC on talking-face forgeries, versus 0.87 for a dedicated rPPG extractor. That's the first red flag: the supposedly unnecessary signal channel outperforms the supposedly necessary one. The controlled experiments are where this gets damning. The discriminative signal works equally well when extracted from background regions containing no face, or from full frames with no face detection step at all. It concentrates above the 0.7–4 Hz heart-rate band, not within it. Shuffling frame order destroys it, but normalizing resolution, frame rate, and encoding does not. The paper's most elegant experiment: removing high-frequency content makes synthesized videos appear real to detectors, adding it makes real videos appear fake, and injecting a synthetic pulse into fake videos has almost no effect. The detectors aren't looking for heartbeats. They're looking for compression and generation artifacts that live in the high-frequency chrominance domain. The cross-dataset transfer experiment is the kill shot. Chrominance detectors trained on Celeb-DF++ classify over 99% of real FF++ videos as fake. That's not a detector that learned manipulation cues — it's a detector that learned video-source identity. A CLIP-based detector exhibits the same failure mode, and a frozen CLIP backbone alone matches or exceeds fusions of CLIP with rPPG and frequency features. The rPPG and frequency channels add nothing because CLIP is already encoding the same source-level artifacts. The paper also drops a methodological bomb on the Celeb-DF community: the official Celeb-DF and Celeb-DF++ train/test splits share identities and source-video content between training and test sets. Custom evaluation protocols that reuse test videos and identities in training inflate weaker detectors by up to 0.30 AUC. That's not a minor quibble — it's a data-contamination finding that undermines a chunk of published results built on these benchmarks. The self-reenactment experiment pins down the mechanism precisely. Animating a face from a single source frame introduces the high-frequency artifact. Reconstructing each frame from its own source does not. The artifact is born in the temporal synthesis step — it's a fingerprint of the generation process, not of missing physiology. This is the kind of controlled, mechanistic ablation that separates a debunking paper from a complaint. What this means for practitioners: if you're building or deploying deepfake detectors, any pipeline leaning on rPPG as a "physiological authenticity" signal needs to be re-examined. The accuracy numbers in the literature are real but the causal story is wrong, and the generalization implications are severe. A detector that learns source fingerprints will break the moment the source changes — which is exactly the adversarial scenario you're deploying it for.