The present application relates to detecting if video images captured by a camera are depicting a live scene or a recorded video played on a monitor, display or computer screen, which is setup to hide the scene from the camera. Metadata regarding the mapping operation used to transform image data between different intensity ranges, or bit depths, is included with the video and evaluated in order to determine if a video replay attack has taken place.