Scworld Fraudulent Documents and Deepfakes Target KYC Processes
Article Content
- •OnlyFake's operator created over 10,000 fake identity documents.
- •Criminals use deepfakes and forged documents to bypass KYC checks.
- •Financial institutions are urged to enhance scrutiny of identity verification.
In February 2026, the operator of OnlyFake pleaded guilty to producing over 10,000 fraudulent digital identity documents, including passports and driver's licenses. These documents are being sold on underground markets alongside manipulated photographs and videos, enabling cybercriminals to bypass Know Your Client (KYC) checks at financial institutions and cryptocurrency exchanges. The KYC process typically involves validating customer identities through various means, but criminals are now creating comprehensive 'identity packages' that include forged documents and deepfakes. This sophisticated fraud allows for money laundering and identity concealment. Financial institutions are advised to scrutinize applications for inconsistencies to combat this evolving threat. The situation highlights the growing sophistication of identity fraud in the digital age.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track OnlyFake in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
How many fraudulent documents were created?
What should financial institutions do?
What types of documents are being forged?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…