Just a beauty spot or two in suitably adversarial locations.

https://arxiv.org/abs/1707.08945

Given that some filters may throw the facial recognition off the scent, probably some kind of makeup or a combination of fake scars, different hairstyle, eye bags should be enough.

I saw Facebook misidentifying siblings of different gender with a year difference in age. The bone structure of their faces is similar, all the rest is different.