Skip to content
Fraudulent Documents and Deepfakes Target KYC Processes

Fraudulent Documents and Deepfakes Target KYC Processes

First seen 20 Oct 2026, 19:15 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 20, 2026 at 20:48 UTC
  • •OnlyFake's operator created over 10,000 fake identity documents.
  • •Criminals use deepfakes and forged documents to bypass KYC checks.
  • •Financial institutions are urged to enhance scrutiny of identity verification.

In February 2026, the operator of OnlyFake pleaded guilty to producing over 10,000 fraudulent digital identity documents, including passports and driver's licenses. These documents are being sold on underground markets alongside manipulated photographs and videos, enabling cybercriminals to bypass Know Your Client (KYC) checks at financial institutions and cryptocurrency exchanges. The KYC process typically involves validating customer identities through various means, but criminals are now creating comprehensive 'identity packages' that include forged documents and deepfakes. This sophisticated fraud allows for money laundering and identity concealment. Financial institutions are advised to scrutinize applications for inconsistencies to combat this evolving threat. The situation highlights the growing sophistication of identity fraud in the digital age.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-02-01
OnlyFake operator pleads guilty
The operator admitted to generating over 10,000 fraudulent identity documents, facilitating identity fraud and money laundering.
Bleepingcomputer
2026-10-19
Bleeping Computer report published
Bleeping Computer detailed the underground market for KYC services, highlighting the use of fake documents and deepfakes.
Bleepingcomputer
2026-10-20
Scworld report published
Scworld reported on the increasing use of fake documents and deepfakes in KYC fraud, citing Bleeping Computer's findings.
Scworld

More articles in this cluster (2)

Following this threat?

Track OnlyFake in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

How many fraudulent documents were created?
Over 10,000 fraudulent digital identity documents were generated by the operator of OnlyFake.
What should financial institutions do?
They should enhance scrutiny of applications for inconsistencies between identity information and supporting records.
What types of documents are being forged?
The forged documents include passports, driver's licenses, and Social Security cards from various countries.