Simple Tricks to Catch AI-Generated Image Tampering Across Different Models

Yi Tang, Xinyi Shang, Jiacheng Cui, Sondos Mahmoud Bsharat, Jiacheng Liu, Xiaohan Zhao, Tran Dinh Tien, Ahmed Elhagry, Salwa K. Al Khatib, Tianjun Yao, Yonina C. Eldar, Jing-Hao Xue, Hao Li, Salman Khan, Zhiqiang Shen · July 20, 2026

As vision-language models (VLMs) like ChatGPT and Gemini become better at generating and editing images, detecting pixel-level tampering is harder—especially when the tampering comes from a model the detector wasn't trained on. This paper proposes a simple training framework that works across different VLM distributions. Two key ideas: (1) balanced minibatch sampling, which ensures each training batch has a mix of tampered and real images to avoid bias; (2) late injection, where the detector is first trained on a large base dataset, then fine-tuned on a small set of new data from emerging VLMs to adapt without overfitting. The method improves tampering localization by over 26% compared to prior state-of-the-art PIXAR, tested on images from GPT-Images-2.0, Gemini-3.1, FLUX.2, and Seedream 4.5. This matters for digital forensics, content moderation, and trust in online media. Practical implication: a cost-effective way to keep tampering detectors robust as new AI models appear, without needing massive retraining.