Cybercriminals on the dark web have developed new ways to exploit identity verification systems. Rather than hacking or stealing personal information, they are purchasing it directly from individuals, as revealed by security researchers at iProov. This approach allows them to bypass Know Your Customer (KYC) processes used by businesses to verify customer identities.
Researchers found that a criminal group in Latin America is gathering identity documents, such as passports and driver’s licenses, along with corresponding facial images.
In some cases, these criminals pay individuals for their personal data. While the exact amount paid remains unclear, this practice raises serious concerns.
This group’s activities extend beyond Latin America, with similar tactics reported in Eastern Europe. Law enforcement agencies in these regions have been alerted to the threat.
Why Is This Dangerous?
Selling personal data equips fraudsters with real identity “kits,” which combine authentic documents with matching biometrics. This makes it challenging to identify the kits as counterfeit. According to iProov Chief Scientific Officer Andrew Newell, these kits enable criminals to execute sophisticated impersonation scams, putting victims’ financial security and personal identities at risk.
This article has been indexed from CySecurity News – Latest Information Security and Hacking Incidents