Underground sellers are packaging KYC-bypass services for identity checks
The market now combines forged documents with live verification tricks, making bank and crypto onboarding harder to trust.
A BleepingComputer report says underground sellers are packaging full KYC-bypass services, ranging from forged identity documents to live verification help and post-delivery account support, which matters because these services directly target the checks banks and crypto platforms rely on. The story highlights the February 2026 guilty plea of the OnlyFake operator in the United States after a service produced more than 10,000 fraudulent digital identity documents. It also says Flare saw this market evolve between March and September 2026, with forum sellers offering tailored document sets such as bank statements, manipulated photos and videos, AI-assisted live verification, and even “human KYC” participation. The report adds that U.S. and standards bodies have already warned that deepfakes and fake documents are being used to defeat customer verification, and recommends comparing the full application package for mismatches and checking for camera-feed tampering.
Why it matters
For banks and crypto platforms, the change is that identity checks are no longer being attacked only with static fake documents. Sellers are now bundling tailored papers with video and live-session manipulation, so defenders have to look for mismatches across the whole application package and signs that the camera feed itself has been tampered with. That raises the cost and complexity of verification for the systems these checks are meant to protect.
Matters or hype?
Does this story matter, or is it hype? Vote before you see what everyone else said.
Sources
- BleepingComputer