A new service known as OnlyFake is leveraging artificial intelligence (AI) "neural networks" and "generators" to produce counterfeit driver licenses and passports that have reportedly passed Know Your Customer (KYC) verifications on several cryptocurrency exchanges. The service, charging a mere $15 per ID, offers realistic fake documents from 26 countries, including the United States, Canada, the United Kingdom, Australia, and various European Union nations. Payment is accepted in multiple cryptocurrencies through Coinbase's commercial payments service.
404 Media revealed on Feb. 5 that they successfully evaded KYC verification on the crypto exchange OKX using a photo of a fake British passport generated from the site. Additionally, a Telegram channel displays users' purported success stories in using these fake IDs to bypass verification on exchanges like Kraken, Bybit, Bitget, Huobi, and financial service providers like PayPal.
The service's potential implications are concerning, as it could empower crypto scammers and hackers to open fraudulent exchanges and bank accounts, shielding their real identities and complicating tracking efforts. OnlyFake's pseudonymous owner, known as "John Wick," asserted that the IDs could bypass KYC checks on exchanges such as Binance, Kraken, Bybit, Huobi, Coinbase, and OKX, as well as the crypto-friendly neobank Revolut.
In response to these allegations, an OKX spokesperson emphasized the platform's commitment to combating fraudulent activities and stated they are investigating the report. However, OnlyFake claims it does not produce forged documents, stating that its templates are intended for use in movies, TV shows, and web illustrations only.
Generating a fake document on the site reportedly takes less than a minute, and users can upload their photos or select one from a library. The associated Telegram channel showcases numerous examples of fake IDs, often displayed on surfaces like kitchen countertops and bedsheets, mimicking the environment of online verification.
Moreover, OnlyFake offers image metadata spoofing, enabling users to manipulate GPS location, date, time, and device details associated with the alleged photo. This feature aims to deceive identity verification services that examine metadata for authenticity.
The prevalence of AI deep fake tools raises concerns about the efficacy of video verification methods used in identity checks. Binance's chief security officer, Jimmy Su, warned of scammers attempting to deceive exchange KYC checks using deep fakes and cautioned that these videos could soon be convincing enough to deceive human operators.
Coinbase, Binance, Kraken, Bybit, Bitget, Revolut, Huobi, and PayPal have not yet responded to requests for comment on the alleged bypassing of their identity checks by OnlyFake users.
