Topic: AI-generated fake IDs claimed to pass crypto exchange KYC are selling for $15 - page 2. (Read 602 times)

Technology is getting more sophisticated, everything can now be done with AI, and selling KYC to an exchange for $15 and it passes, of course this will be a task that must be done by the Exchange so that no Fake AI profiles can get through. $15 for KYC is very cheap and this will be targeted by people who don't want to do KYC. There must be more valid scanning of identity on the exchange, if it is a fake identity then there will be account freezing and that will definitely happen. Exchanges also need to evolve and must leverage AI as well to check the identity of each user.

As far as our local exchanges go, they are very strict with the implementation and execution of their KYC process.

To give you a concrete example, not only does our local exchange (coins.ph) require you to submit government issued IDs, they also require you to submit additional documents (e.g. bank statements, ITR, etc.) to strengthen your position on their exchange. Not to mention, it also requires some movement behind their registration process like moving your head sideways, etc. for them to accurately tell if you are using fake IDs or not.

Though the above-mentioned exchange have implemented their KYC in a very strict manner, I still hope that some exchanges follow this example. The only downside is that it may push others to not register and avoid the said exchange due to stringent requirements.

Exactly, so we have an old CEX like .stamp that became famous for its crazy checks (some members described their experiences), to those that encourage people to elegantly bypass the rules and even help them to do so. At the end of the day, it all boils down to making as much money as possible while spending as little time as possible on things like KYC.

For a few hundred $ you can buy the account of a well-known CEX together with the card, and it is even sold quite legally on this forum. They will not mind that the account is opened in country X, and the money is spent in country Y.

Most exchanges use some generic KYC verification system from a third-party provider, and only really start to clamp down on fraudulent accounts if they are forced to by governments. Like if they are ordered that they either have to do that or face heavy millions of dollars fines, suspended licenses, and possibly even arrest.

People are happy that AI is making things easy, not thinking about their dangerous works like this one stated in the OP. Passing KYC has became mandatory in almost all centralized exchanges before having access to trading with them that is why people are generating ways to bypass them; this is very dangerous because it can be used to hack into people’s account especially if someone have some of your details and decided to use AI to generate your ID for some selfish purposes.

The idea of using AI generated ID’s to pass KYC is good and will protect our privacy, but it’s sign that our Centralized exchanges are not reliable anymore, they are supposed to have solutions to such fake identities so that scammers will have limited access to their exchanges.

The best thing to do to be completely safe is to avoid leaving our assets in the exchanges wallets, always buy and trade with exchanges then move your funds out immediately.

Like why the stress for this? Is it a must to use a centralized exchange for your crypto trade? Are there no more Dex that people can use to sell or buy their Bitcoin? I don't see the need to spend $15 dollars on a AI generated ID, it makes no sense.

If you are trying this hard to avoid KYC then don't use any centralized exchanges, I still use them because I don't care, it's been how many years since many crypto exchanges have come and go? The worst I heard is how they collapse with users funds, I have never seen where stolen identity by an exchange land anyone in problem.

All it will require is investigation, unless people buying this stuff to bypass KYC have some hidden agenda, maybe they are criminals, it's the same reason why I don't see reason people use mixers to hide their transaction, like what are they even hiding? Bitcoin is the only true decentralized digital asset, nothing else, it's enough, I don't have to hide my identity trading online or buying crypto assets.

Real face test is also not foolproof and in many occasions people proved that the liveness test can be bypassed using Deepfake and this isn't even a new but day by day the technology is getting better so the results can be more realistic than in the past. Exchanges have to be careful but what we can expect them to do? Whatever they set then someone will develop a technology that can be used to bypass the new criteria in very few weeks.

I hope you know that though Op did not state it but you can use AI to generate live video and also you should know while exchanges like Binance and Kucoin may have a strict kyc verification, that does not mean it can`t be by pass, in fact with AI its more easier, even doing this live video is possible and it has been existing even since 2022 because Chatgpt 3.5 which as a real time information from 2022 downwards knows this.

Exchanges will be somehow happy, since they will be able to ask for a more private info from the user while if any data breach or they sell the data, the customers face the consequences.
Its funny how government classify Bitcoin as a currency use by fraudsters and terrorists while their beloved AI is been use for crimes like fraud, identity theft and others, yet is still something for the growth of humanity, that does not need strict regulations. Though one is accepted as a positive impact to the world, while the other as volatile  asset with more negative impact to the world

People will do anything just to get some dollar especially when it seems legit and they are ignorant of what is at stake while others may be fully be aware it, they will still opt for it with the reason that they are not a public figure or any other of such. Here is a link about an Article where the founder of Chat gpt were paying Kenyans around $50 for doing retinal scan for the Worldcoin 2023, which is a coin created by him https://techpoint.africa/2023/08/02/make-50-for-an-eye-scan/

At least in Brazil, the fake IDs are already a common market here. You paid just a few bucks to have them. Driver's licenses, personal IDs, credits card. You choose the person and they make very realistic fake documents. So now with the AI's ascension its not surprising that the face swap wil happem in this market.

It is not just shocking but absolutely ridiculous. Why spend $15 to get a fake AI generated image when you can pay someone under the bridge $8 for a real fake identity or even visit a blackmarket website for it? Here you go from the same article.

Not that I support crime but I would say that Anyone who will spend $15 over $8 is not smart.

This is a wakeup call to exchanges to stay ahead of scammers when it comes to security. They should be constantly innovative. That being said, having examined the fake  AI generated ID, I can say thag they are no different from a Photoshopped image.

Using someone else's real identity without their permission is a felony in many countries, whereas a FAKE ID that is not a real person's information or likeness is usually not a felony, just a misdemeanor.

In short, AI-generated ID's will be extremely popular in the criminal underworld. We should expect an explosion of crime using such methods, and an ensuing crackdown by central authorities.

I expect this technology to drive legislation for secure global digital identity, possibly blockchain-based.

Remember the time when new bounty companies appeared every hour, and they did not hesitate to declare that to receive their shit tokens, bounty hunters would have to undergo a document check? It’s not difficult to guess where these documents were intended and how many people wanted to send them their documents to get at least five bucks.
I think even now there will be plenty of people like this who don’t think about their privacy, like, for example, registering somewhere and “selling” your account for pennies.

What about a liveness check? As far as I know, most exchanges require a liveness check to complete the account verification. Even I have failed liveness check verification a couple of times because my photo on the ID card is too old without a beard but I have gained weight a lot and I have a grown beard now. How AI will help verify the liveness check? I don't think it's possible.

Here is another fun fact. You don't have to spend $15. If you ask people from 3rd world country to verify an account for you and offer $5, they will happily do it for you. I have seen a group of people who are hunting bounty and they do KYC on every platform where they may get some possible rewards.

Yes, actually things like this have happened many times before, and if you have editing skills then you can use someone else's identity and put your face on that identity and do KYC.

I also think that platforms are actually not that serious about taking care of kyc and they do it because regulations require it, if there were no such regulations I'm sure many platforms would not want to collect kyc because it only adds work but doesn't generate any profits.

A lot I've seen can be spotted by a human eye provided you pay enough attention. For instance, the awkward movements particularly with the way they speak, looking like a hyper-realistic game character, etc.

The problem is, it can be enough to fool some idenity verification solutions which every fintech service in compliance with kyc/aml policies use by default. Manual verification where a person comes in is provided on special cases.

With how rapid AI tech is developing, it's expected that deepfake contents are gonna be looking more believable over time + much easier to reproduce.

This is not good and will help scammers to scam more easily than before. These fake passport,CNIC and driver license was created in Photoshop or other photo studio app which need experience and time but now with the help of this tool everyone can create fake IDS in seconds.

I have a question, Is there any AI image detective tool introduced so far just like text ,as we know already introduced and we can easily detect by using copyleaks and hive moderation for this purpose. If it's introduce then I think it will be easy for CEX to verify otherwise it is big challenge for CEX.

That's true but this time, it's AI generated and it's much easier. Before, it's from someone who collects these IDs in any source that they can get it.

Maybe in the dark marketplaces for which majority of the IDs there are either fake or came from hacking and that's why it is so unethical to purchase from any of those and of course, it's not your identity.

That trader will definitely face the consequences if he's not going to do it. While we don't like exchanges or any service that requires us KYC, on this matter, if you love your funds and saved cryptos, you don't have to get into these services of buying fake identities.

It doesn't necessarily need to be Binance for it to work. Binance is one of the very few exchanges that have rigorous KYC process that you mentioned in your post for many CEX, just your ID document pic and a selfie us more than enough and both of which can ve generated via an AI. I can only assume that KYC providers like Onfido will begin rolling out support for detecting these kind of services. They probably shouldn't have been it known since it gives KYC providers an idea on how to combat it.

AI generated videos can be used through camera injection attack and can be real time:


I did hear some providers like jumio has started incorporating AI tech to improve detections so it's gonna be a race between them. But I'm leaning towards deepfakes being more ahead as I think detection requires more meticulousness.

At present time, some softwares as well were successfully fooled by obviously deepfake personas from a human eye, see: https://www.theverge.com/2022/5/18/23092964/deepfake-attack-facial-recognition-liveness-test-banks-sensity-report

For anyone crypto exchange user, they will already know that such services are just potential scams waiting to happen, this is because the accounts that are verified via a fake ID will definitely lead to account problems along the line, and reputable exchanges will definitely discover those accounts under such condition and status.


So for a trader who wants to use the exchange to trade large coins will definitely avoid this kind of service because it will eventually lead to problems in the long run.