Virtual Event: Zero Trust Strategies Summit - Watch all Sessions
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

VerifTools Fake ID Operation Dismantled by Law Enforcement

Authorities say VerifTools sold fake driver’s licenses and passports worldwide, enabling fraudsters to bypass KYC checks and access online accounts.

FBI

Law enforcement in the US and the Netherlands on Thursday announced the seizure of domains and servers associated with VerifTools, one of the largest marketplaces for fraudulent identification documents.

As part of the operation, the FBI seized two domains and one blog associated with VerifTools, while the Dutch police seized two physical servers and 21 virtual servers hosted at a data center in Amsterdam.

The marketplace, the US Department of Justice says, was used to sell counterfeit identification documents, including driver’s licenses and passports, that allowed individuals to bypass identity verification systems, assume other people’s identities, and access online accounts.

According to the DoJ, the FBI started investigating VerifTools in August 2022, upon learning of a conspiracy to use stolen identities to access cryptocurrency wallets. Undercover agents used the marketplace to generate and purchase fake New Mexico driver’s licenses.

The investigation uncovered that VerifTools could be used to buy counterfeit identification documents for all 50 US states, as well as for various foreign countries. The fake IDs were offered for as little as $9.

The FBI estimates that VerifTools generated approximately $6.4 million in illicit proceeds for the cybercriminals selling the fake documents.

Advertisement. Scroll to continue reading.

The Dutch police, which seized the marketplace’s entire infrastructure, says that VerifTools could be accessed from multiple URLs (on the surface web) to generate images of fake IDs.

Visitors could upload a passport photo and provide false personal information, and then download the ID’s image after payment. These images could be used to bypass the ‘know your customer’ (KYC) verification that multiple companies rely on.

With all the data from VerifTools’ servers in their hands, the police will attempt to identify the marketplace’s administrators and users, who face imprisonment for their actions.

“The removal of this marketplace is a major step in protecting the public from fraud and identity theft crime. Together with our partners, we will continue to target and dismantle the platforms that criminals depend on, no matter where they operate,” FBI special agent Philip Russell said.

Related: Large Interpol Cybercrime Crackdown in Africa Leads to the Arrest of Over 1,200 Suspects

Related: Europol Says Qilin Ransomware Reward Fake

Related: Silicon Valley Bank Seized by FDIC as Depositors Pull Cash

Related:Global Police Sting Nets 179 Dark Web Sellers

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.

Register

Join as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.

Register

People on the Move

Randy Resnick has joined IGEL as Field CTO.

Darktrace has named Adam Towns as CFOO, Mike McGuinness as CRO, and Beth Shea as CCO.

Acronis has appointed Gerald Caron as CISO.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.