AI-generated fake IDs claimed to pass crypto exchange KYC are selling for $15

[Potato Chips]

There is only one way, your A.I shaped face on the I.D must come to live, and hold the I.D in it's hand and pass live Video KYC verification that is available on Binance Exchange, there is no taking picture behind the scene and uploading it on the exchange, you need to do it, live.

AI generated videos can be used through camera injection attack and can be real time:

Fraudsters introduce deepfake videos into the system using a camera injection attack. Camera injection occurs when a fraudster bypasses the charged-coupled device (CCD) of a camera to inject pre-recorded content, a real-time face swap video stream or completely fabricated (deepfake) content. This pre-recorded content could be an unaltered video of a real person that a bad actor is attempting to defraud. The pre-recorded or real-time generated video could be a clip where the face is altered in some way, or of a completely synthetic face that does not exist.

The bypass of a live feed that a real camera’s CCD would normally capture is accomplished through a couple of methods. One is by hacking the device driver of a real camera and injecting the video stream into a lower level of the device driver. The more common means of camera injection is to have a virtual camera device driver that simply feeds a pre-recorded or real-time generated video stream to the system, presenting it as a real camera feed.

So they better hurry up and make new softwares to detect this fake documents immediately.

I did hear some providers like jumio has started incorporating AI tech to improve detections so it's gonna be a race between them. But I'm leaning towards deepfakes being more ahead as I think detection requires more meticulousness.

At present time, some softwares as well were successfully fooled by obviously deepfake personas from a human eye, see: https://www.theverge.com/2022/5/18/23092964/deepfake-attack-facial-recognition-liveness-test-banks-sensity-report

[nelson4lov]

~Snipped
So tell me, how is this going to work? Eventually that $15 is a thrown away money, you will be picky because of Exchanges to use such ID, better avoid exchanges with KYC verification or use your very own ID.

It doesn't necessarily need to be Binance for it to work. Binance is one of the very few exchanges that have rigorous KYC process that you mentioned in your post for many CEX, just your ID document pic and a selfie us more than enough and both of which can ve generated via an AI. I can only assume that KYC providers like Onfido will begin rolling out support for detecting these kind of services. They probably shouldn't have been it known since it gives KYC providers an idea on how to combat it.

[jossiel]

We have been hearing about this type of fake verification since many years ago.. It is not new.

That's true but this time, it's AI generated and it's much easier. Before, it's from someone who collects these IDs in any source that they can get it.

Maybe in the dark marketplaces for which majority of the IDs there are either fake or came from hacking and that's why it is so unethical to purchase from any of those and of course, it's not your identity.

So for a trader who wants to use the exchange to trade large coins will definitely avoid this kind of service because it will eventually lead to problems in the long run.

That trader will definitely face the consequences if he's not going to do it. While we don't like exchanges or any service that requires us KYC, on this matter, if you love your funds and saved cryptos, you don't have to get into these services of buying fake identities.

[Gladitorcomeback]

This is not good and will help scammers to scam more easily than before. These fake passport,CNIC and driver license was created in Photoshop or other photo studio app which need experience and time but now with the help of this tool everyone can create fake IDS in seconds.

I have a question, Is there any AI image detective tool introduced so far just like text ,as we know already introduced and we can easily detect by using copyleaks and hive moderation for this purpose. If it's introduce then I think it will be easy for CEX to verify otherwise it is big challenge for CEX.

[Potato Chips]

I have a question, Is there any AI image detective tool introduced so far just like text ,as we know already introduced and we can easily detect by using copyleaks and hive moderation for this purpose. If it's introduce then I think it will be easy for CEX to verify otherwise it is big challenge for CEX.

A lot I've seen can be spotted by a human eye provided you pay enough attention. For instance, the awkward movements particularly with the way they speak, looking like a hyper-realistic game character, etc.

The problem is, it can be enough to fool some idenity verification solutions which every fintech service in compliance with kyc/aml policies use by default. Manual verification where a person comes in is provided on special cases.

With how rapid AI tech is developing, it's expected that deepfake contents are gonna be looking more believable over time + much easier to reproduce.

[PytagoraZ]

Shockingly it is just $15 to get a fake AI generated driver licenses and passports. It has been reportedly succeeded KYC verification on many crypto exchanges.

Yes, actually things like this have happened many times before, and if you have editing skills then you can use someone else's identity and put your face on that identity and do KYC.

I also think that platforms are actually not that serious about taking care of kyc and they do it because regulations require it, if there were no such regulations I'm sure many platforms would not want to collect kyc because it only adds work but doesn't generate any profits.

[Shishir99]

Shockingly it is just $15 to get a fake AI generated driver licenses and passports. It has been reportedly succeeded KYC verification on many crypto exchanges.

What about a liveness check? As far as I know, most exchanges require a liveness check to complete the account verification. Even I have failed liveness check verification a couple of times because my photo on the ID card is too old without a beard but I have gained weight a lot and I have a grown beard now. How AI will help verify the liveness check? I don't think it's possible.

Here is another fun fact. You don't have to spend $15. If you ask people from 3rd world country to verify an account for you and offer $5, they will happily do it for you. I have seen a group of people who are hunting bounty and they do KYC on every platform where they may get some possible rewards.

[lovesmayfamilis]

Remember the time when new bounty companies appeared every hour, and they did not hesitate to declare that to receive their shit tokens, bounty hunters would have to undergo a document check? It’s not difficult to guess where these documents were intended and how many people wanted to send them their documents to get at least five bucks.
I think even now there will be plenty of people like this who don’t think about their privacy, like, for example, registering somewhere and “selling” your account for pennies.

[foggyb]

Shockingly it is just $15 to get a fake AI generated driver licenses and passports. It has been reportedly succeeded KYC verification on many crypto exchanges.

Yes, actually things like this have happened many times before, and if you have editing skills then you can use someone else's identity and put your face on that identity and do KYC.

I also think that platforms are actually not that serious about taking care of kyc and they do it because regulations require it, if there were no such regulations I'm sure many platforms would not want to collect kyc because it only adds work but doesn't generate any profits.

Using someone else's real identity without their permission is a felony in many countries, whereas a FAKE ID that is not a real person's information or likeness is usually not a felony, just a misdemeanor.

In short, AI-generated ID's will be extremely popular in the criminal underworld. We should expect an explosion of crime using such methods, and an ensuing crackdown by central authorities.

I expect this technology to drive legislation for secure global digital identity, possibly blockchain-based.

[alastantiger]

Shockingly it is just $15 to get a fake AI generated driver licenses and passports. It has been reportedly succeeded KYC verification on many crypto exchanges.

It is not just shocking but absolutely ridiculous. Why spend $15 to get a fake AI generated image when you can pay someone under the bridge $8 for a real fake identity or even visit a blackmarket website for it? Here you go from the same article.

In late 2022, blockchain security firm CertiK uncovered an online black market of individuals selling their identities for as little as $8, agreeing to act as the verified face of fraudulent crypto projects and open bank and exchange accounts on behalf of malicious actors.

Not that I support crime but I would say that Anyone who will spend $15 over $8 is not smart.

This is a wakeup call to exchanges to stay ahead of scammers when it comes to security. They should be constantly innovative. That being said, having examined the fake  AI generated ID, I can say thag they are no different from a Photoshopped image.

[snuffman8]

At least in Brazil, the fake IDs are already a common market here. You paid just a few bucks to have them. Driver's licenses, personal IDs, credits card. You choose the person and they make very realistic fake documents. So now with the AI's ascension its not surprising that the face swap wil happem in this market.

[Amphenomenon]

You expect someone like me to believe this? If KYC passed this type of documents then they sucks at it big time, maybe they are using the old KYC verification process, anyone who use their $15 to get such KYC won't be able to pass Binance Exchange KYC verification.

There is only one way, your A.I shaped face on the I.D must come to live, and hold the I.D in it's hand and pass live Video KYC verification that is available on Binance Exchange, there is no taking picture behind the scene and uploading it on the exchange, you need to do it, live.

I hope you know that though Op did not state it but you can use AI to generate live video and also you should know while exchanges like Binance and Kucoin may have a strict kyc verification, that does not mean it can`t be by pass, in fact with AI its more easier, even doing this live video is possible and it has been existing even since 2022 because Chatgpt 3.5 which as a real time information from 2022 downwards knows this.

Well, neural networks are starting to be so harmful that all the joy from their appearance gradually turns into the opposite. Exchanges that require customer verification will begin to impose absurd requirements to ensure that their customers are the people they are. We will wink, jump, and grimace to prove our identity.
All these innovations from enterprising creators of such tools will soon shoot themselves in the foot. There will come a time when it will be difficult for a real person to prove that he is exactly him.

Exchanges will be somehow happy, since they will be able to ask for a more private info from the user while if any data breach or they sell the data, the customers face the consequences.
Its funny how government classify Bitcoin as a currency use by fraudsters and terrorists while their beloved AI is been use for crimes like fraud, identity theft and others, yet is still something for the growth of humanity, that does not need strict regulations. Though one is accepted as a positive impact to the world, while the other as volatile  asset with more negative impact to the world

Remember the time when new bounty companies appeared every hour, and they did not hesitate to declare that to receive their shit tokens, bounty hunters would have to undergo a document check? It’s not difficult to guess where these documents were intended and how many people wanted to send them their documents to get at least five bucks.
I think even now there will be plenty of people like this who don’t think about their privacy, like, for example, registering somewhere and “selling” your account for pennies.

People will do anything just to get some dollar especially when it seems legit and they are ignorant of what is at stake while others may be fully be aware it, they will still opt for it with the reason that they are not a public figure or any other of such. Here is a link about an Article where the founder of Chat gpt were paying Kenyans around $50 for doing retinal scan for the Worldcoin 2023, which is a coin created by him https://techpoint.africa/2023/08/02/make-50-for-an-eye-scan/

[Findingnemo]

You expect someone like me to believe this? If KYC passed this type of documents then they sucks at it big time, maybe they are using the old KYC verification process, anyone who use their $15 to get such KYC won't be able to pass Binance Exchange KYC verification.

There is only one way, your A.I shaped face on the I.D must come to live, and hold the I.D in it's hand and pass live Video KYC verification that is available on Binance Exchange, there is no taking picture behind the scene and uploading it on the exchange, you need to do it, live.

So tell me, how is this going to work? Eventually that $15 is a thrown away money, you will be picky because of Exchanges to use such ID, better avoid exchanges with KYC verification or use your very own ID.

Real face test is also not foolproof and in many occasions people proved that the liveness test can be bypassed using Deepfake and this isn't even a new but day by day the technology is getting better so the results can be more realistic than in the past. Exchanges have to be careful but what we can expect them to do? Whatever they set then someone will develop a technology that can be used to bypass the new criteria in very few weeks.

[Z390]

Like why the stress for this? Is it a must to use a centralized exchange for your crypto trade? Are there no more Dex that people can use to sell or buy their Bitcoin? I don't see the need to spend $15 dollars on a AI generated ID, it makes no sense.

If you are trying this hard to avoid KYC then don't use any centralized exchanges, I still use them because I don't care, it's been how many years since many crypto exchanges have come and go? The worst I heard is how they collapse with users funds, I have never seen where stolen identity by an exchange land anyone in problem.

All it will require is investigation, unless people buying this stuff to bypass KYC have some hidden agenda, maybe they are criminals, it's the same reason why I don't see reason people use mixers to hide their transaction, like what are they even hiding? Bitcoin is the only true decentralized digital asset, nothing else, it's enough, I don't have to hide my identity trading online or buying crypto assets.

[Hyphen(-)]

Well, AI is awesome and can be problematic at times. But all the fiels now have to integrate AI and have to take care of the bad side of it also. Crypto exchanges are no exception either, They now have to come up with a KYC where AI may not be able to fool them and they can do it using the AI also. And that is why i am loving this AI era.

People are happy that AI is making things easy, not thinking about their dangerous works like this one stated in the OP. Passing KYC has became mandatory in almost all centralized exchanges before having access to trading with them that is why people are generating ways to bypass them; this is very dangerous because it can be used to hack into people’s account especially if someone have some of your details and decided to use AI to generate your ID for some selfish purposes.

The idea of using AI generated ID’s to pass KYC is good and will protect our privacy, but it’s sign that our Centralized exchanges are not reliable anymore, they are supposed to have solutions to such fake identities so that scammers will have limited access to their exchanges.

The best thing to do to be completely safe is to avoid leaving our assets in the exchanges wallets, always buy and trade with exchanges then move your funds out immediately.

[NotATether]

If you think that CEXs obey the law down to the smallest detail, then you are living in a big delusion, because they not only close their eyes and turn their heads to the other side whenever possible, but also help users to become legal in their system in an illegal way. The CEX you mention is one of those that owes its success precisely to its work on the edge of the law, or better said in the gray zone, which is why they are banned from working in many countries.

Most exchanges use some generic KYC verification system from a third-party provider, and only really start to clamp down on fraudulent accounts if they are forced to by governments. Like if they are ordered that they either have to do that or face heavy millions of dollars fines, suspended licenses, and possibly even arrest.

[Lucius]

~snip~

Exactly, so we have an old CEX like .stamp that became famous for its crazy checks (some members described their experiences), to those that encourage people to elegantly bypass the rules and even help them to do so. At the end of the day, it all boils down to making as much money as possible while spending as little time as possible on things like KYC.

For a few hundred $ you can buy the account of a well-known CEX together with the card, and it is even sold quite legally on this forum. They will not mind that the account is opened in country X, and the money is spent in country Y.

[qwertyup23]

For anyone crypto exchange user, they will already know that such services are just potential scams waiting to happen, this is because the accounts that are verified via a fake ID will definitely lead to account problems along the line, and reputable exchanges will definitely discover those accounts under such condition and status.


So for a trader who wants to use the exchange to trade large coins will definitely avoid this kind of service because it will eventually lead to problems in the long run.

As far as our local exchanges go, they are very strict with the implementation and execution of their KYC process.

To give you a concrete example, not only does our local exchange (coins.ph) require you to submit government issued IDs, they also require you to submit additional documents (e.g. bank statements, ITR, etc.) to strengthen your position on their exchange. Not to mention, it also requires some movement behind their registration process like moving your head sideways, etc. for them to accurately tell if you are using fake IDs or not.

Though the above-mentioned exchange have implemented their KYC in a very strict manner, I still hope that some exchanges follow this example. The only downside is that it may push others to not register and avoid the said exchange due to stringent requirements.

[AakZaki]

At least in Brazil, the fake IDs are already a common market here. You paid just a few bucks to have them. Driver's licenses, personal IDs, credits card. You choose the person and they make very realistic fake documents. So now with the AI's ascension its not surprising that the face swap wil happem in this market.

Technology is getting more sophisticated, everything can now be done with AI, and selling KYC to an exchange for $15 and it passes, of course this will be a task that must be done by the Exchange so that no Fake AI profiles can get through. $15 for KYC is very cheap and this will be targeted by people who don't want to do KYC. There must be more valid scanning of identity on the exchange, if it is a fake identity then there will be account freezing and that will definitely happen. Exchanges also need to evolve and must leverage AI as well to check the identity of each user.

[Saint-loup]

That's a pretty bad news because dishonest casinos and exchanges will use it as an excuse for asking more private documents to their customers. Most, if not all exchanges and casinos ask selfies, so it's very hard to deceive them actually. In addition they can ask extra documents so the AI used has to also be able to fake them.