A new service that claims to use artificial intelligence (AI) “neural networks” and “generators” to create fake driver’s licenses and passports passes know-your-customer (KYC) checks on multiple crypto exchanges. It is reported that it was very successful.
cost? Only $15 a pop.
The site OnlyFake generates realistic-looking fake driver’s licenses and passports from 26 countries, including the United States, Canada, the United Kingdom, Australia, and several European Union countries, and sells them in multiple cryptocurrencies through Coinbase’s commercial payment service. Get paid.
404 Media report On February 5th, it announced that it had successfully bypassed the KYC verification of cryptocurrency exchange OKX using a British passport photo generated by the site. In this photo, it appeared that the ID had been placed on the bed sheet, as if the photo had been taken.
A Telegram channel seen by Cointelegraph shows users of the site using their IDs to bypass verification at various cryptocurrency exchanges and financial service providers, including Kraken, Bybit, Bitget, Huobi, and PayPal. They are also shown to be sharing their obvious successes.
The service could be a boon for crypto fraudsters and hackers who can open exchanges and bank accounts using fake documents, protecting their real identities and making them harder to trace.
The owner of OnlyFake’s pseudonym “John Wick” claims to 404 Media that the ID allows him to bypass KYC checks on Binance, Kraken, Bybit, Huobi, Coinbase, OKX exchanges and Revolut, a neobank that accepts cryptocurrencies. did.
A spokesperson for OKX told Cointelegraph that the company denies any allegations or insinuations that it “condons, tolerates, or ignores fraudulent activity” and is working with its team and external partners to develop the report. He said he was investigating.
“We are committed to aggressively combating fraud on our platform and pursuing the highest standards of compliance,” it added. “The misuse of AI to commit fraud is an evolving, industry-wide challenge that OKX is addressing comprehensively.”
However, the OnlyFake site claims it does not “create forged documents because it is illegal” and its terms and conditions state that “templates are intended for use only in movies and television shows.” [and] Web illustration. ”
It has been shown that it takes less than a minute to generate a fake document on the site. According to a Telegram post seen by Cointelegraph, users can upload their own photos or photos randomly selected from “Drop’s personal library without the use of neural networks.”
A related Telegram channel shows fake driver’s licenses and passports that appear to be lying on kitchen countertops, bed sheets, carpets, and desktops, similar to what someone would take if used for online verification. I’ve posted dozens of examples.
The post also states that 100 fake IDs can be generated simultaneously using Excel spreadsheet data.
Related: Hackers claim to have a way to “summon” user information on Discord, Binance, and Coinbase
OnlyFake also offers spoofing of image metadata, and some identity verification services check such data to determine authenticity, allowing users to access information such as GPS location, date, time, and the device that took the photo. can be forged.
Crypto hackers and scammers have long used methods to disguise information and gain access to cryptocurrency exchanges while hiding their true identity.
In late 2022, blockchain security company CertiK agreed to act as the authenticated face of fraudulent crypto projects and open bank and exchange accounts on behalf of malicious actors, paying just 8 I discovered an online black market of individuals selling their IDs for dollars.
With AI deepfake tools becoming widespread and easily accessible; Cryptocurrency industry executives have raised concerns about the effectiveness of video verification used for some identity verifications.
Binance Chief Security Officer Jimmy Hsu told Cointelegraph in May 2023 that there has been an increase in fraudsters using deepfakes to defraud the exchange’s KYC checks, and the video will soon be released. They warned that it would be convincing enough to fool human operators.
Cointelegraph reached out to Coinbase for comment on services using its commerce products, but did not immediately receive a response.
Binance, Kraken, Bybit, Bitget, Revolut, Huobi, and PayPal did not immediately respond to requests for comment about users who say they circumvented identity verification.
AI eye: Fraudulent AI “kidnapping”, $20,000 robot chef, Ackman’s AI plagiarism war
Updated (February 6, 6:00 AM UTC): This article has been updated with comment from OKX.
