Research prototype. Synthetic data and simulated payments only — not an official or production security service. Limitations

Evaluation

How well does the voice model work?

These figures describe the model on public datasets of pre-2023 fakes, not real-world accuracy against modern voice cloning. Tumaini’s protection does not depend on the detector: payments are held until independent verification whatever the score.

Headline results

Test setResultNotes
English real-world speech (In-the-Wild, unseen speakers)2.9% EERn = 1,000 genuine / 1,000 fake. Flagged synthetic: precision 99.9% (913/914), recall 91.3%.
Arabic speech (ArAD, voice conversion)2.85% EERn = 484 genuine / 1,000 fake. Levantine dialect, short clips; Gulf dialects and Arabic TTS not tested.
WhatsApp-like audio (Opus 16 kbit/s, English)6.1% EERn = 500 / 500. 24.6% of genuine clips come back “inconclusive”; 5% are wrongly flagged.

Model: MMS-300M-AntiDeepfake (NII Yamagishi Lab), CPU inference. Thresholds: Likely genuine below 0.172 · likely synthetic above 0.859 · inconclusive in between — frozen on a speaker-disjoint In-the-Wild calibration split (600/600).

All locked test sets

EER = equal error rate. “Flagged” = labelled likely synthetic. Missed fakes = fakes wrongly labelled likely genuine.

DatasetChanneln genuine / fakeEERPrecisionRecallFalse positivesMissed fakes
In-the-Wildclean1000 / 10002.90%99.9%91.3%0.1%1.3%
In-the-WildOpus 16 kbit/s500 / 5006.10%94.9%92.4%5.0%1.4%
In-the-Wild8 kHz phone500 / 5003.70%99.6%89.0%0.4%3.0%
ArAD (Arabic)clean484 / 10002.85%100%77.4%0.0%5.5%
ArAD (Arabic)Opus 16 kbit/s242 / 5003.46%100%86.6%0.0%2.6%
ArAD (Arabic)8 kHz phone242 / 5004.17%100%58.4%0.0%15.2%

No clip failed to process in any set.

Why not the best-known model?

ModelWhere it looks goodWhere it fails
AASIST (MIT licence)1.72% on ASVspoof 2019 LA (its own benchmark)39.6% on In-the-Wild · 42.1% on Arabic ArAD — near chance
Wav2Vec2-Small-AntiDeepfake4.7% on In-the-Wild19.4% on Arabic ArAD
MMS-300M-AntiDeepfake (selected)2.9% on In-the-Wild2.85% on Arabic ArAD

AASIST is widely cited and permissively licensed, but its excellent benchmark score does not survive real-world audio. We selected on measured performance on data the models were not trained on — and published the failure.

What we do not claim

  • Accuracy against modern zero-shot voice cloning (both test sets contain pre-2023 fakes).
  • Accuracy for Gulf/Emirati Arabic, Arabic text-to-speech, or long WhatsApp voice notes.
  • That a “likely genuine” result identifies the speaker. It does not.
  • That detection replaces verification. Tumaini always requires independent verification before a payment.

Latency and licence

Measured through the live app (upload → VPS inference + transcription → result): about 6–9 s for an 11-second voice note on a shared 2-vCPU container.

Model weights: CC BY-NC-SA 4.0 (non-commercial). Suitable for this research prototype; a commercial launch needs a licensed or self-trained model.

Method, dataset licences and reproduction commands: docs/AI_EVALUATION.md, docs/DATASET_REGISTER.md and evaluation/ in the repository.