Inside the Underground Market for Know Your Client Services

Summary

Underground sellers offer forged identity documents, deepfake videos, and live verification services to help buyers pass Know Your Client (KYC) checks. In February 2026, the operator of OnlyFake pleaded guilty in the United States for a service that generated more than 10,000 fraudulent digital identity documents, which the U.S. Department of Justice said were used to conceal identities, circumvent identity checks at banks and cryptocurrency exchanges, and launder money.

Related items

• MediumGHSA-2658-85cv-9wwq: Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTMLSimilar attack · GitHub Advisory Database
• MediumGHSA-953h-535j-jg2v: agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeableSimilar attack · GitHub Advisory Database
• MediumA hacker broke into John Deere and SharkNinja with an army of AI agentsSimilar attack · The Verge (AI)
• MediumCVE-2026-112081: hankcs HanLP deserialization through classpath in hanlp.loadSimilar attack · NVD/CVE Database
• MediumCVE-2026-111991: WongKinYiu yolov9 code injection via ONNX Metadata HandlerSimilar attack · NVD/CVE Database