www.technologyreview.com Scammers Exploit KYC Bypass Tools on Telegram for Money Laundering
Article Content
- •Scammers are using Telegram to sell tools that bypass KYC biometric checks.
- •Virtual cameras can insert deepfakes during liveness checks, facilitating fraud.
- •Governments are tightening regulations in response to the rise of cyber scams.
A surge in illegal hacking services on Telegram is enabling scammers to bypass Know Your Customer (KYC) facial biometric scans used by banks and crypto exchanges. These services include virtual cameras that can insert deepfakes or images of other individuals during liveness checks, allowing fraudsters to open mule accounts for money laundering. Investigations by MIT Technology Review identified 22 Telegram channels selling these bypass tools and stolen biometric data. Major financial institutions like Binance and BBVA are affected, with scammers targeting their compliance checks. In 2025, approximately $17 billion was lost to crypto scams, highlighting the scale of the issue. Governments in Vietnam and Thailand are responding with stricter identity verification measures to combat this growing threat. The rise of Asian scam syndicates, particularly from Cambodia and Myanmar, is contributing to the proliferation of these illicit activities. As financial institutions enhance security, scammers continue to adapt their methods, complicating the fight against cybercrime.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track BBVA in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…