The fight against identity fraud just got a lot harder. AI-generated fake IDs are now bypassing KYC verification across major crypto exchanges and financial platforms, allowing fraudsters to hide their true identities with alarming ease.

A recent investigation by 404 Media uncovered a platform called OnlyFake, which offered AI-generated passports and driver’s licenses from 26 countries for just $15. These ultra-realistic fakes were designed to pass automated KYC checks at major exchanges like Binance, Kraken, Bybit, Coinbase and Revolut. The site has since gone dark; however, the damage is done. AI-powered identity fraud is happening now.

AI Is Making Identity Fraud Easier Than Ever

Traditional document forgeries required photo editing skills, stolen templates or physical counterfeiting, but AI is eliminating these barriers. OnlyFake’s system could instantly generate any identity, in any setting, making the images indistinguishable from real-world document photos. The AI even placed IDs on everyday backgrounds - such as tables, carpets or bedding - all to make them appear more authentic. In a controlled test detailed in their investigation, 404 Media successfully used an AI-generated driver’s license to pass OKX’s Know Your Customer (KYC) verification, proving how advanced these fake identities have become.

So how can we fight this?

Self-Declaration and Questionnaire-Based Verification Are Critical

While automated KYC checks and public data sources play an essential role in compliance, they are no longer sufficient on their own. The rise of AI-generated fake identities reinforces the importance of self-declaration and structured questionnaires in KYC, Customer Due Diligence (CDD) and Third-Party Risk Management (TPRM).

1️⃣ Fraud Prevention Beyond ID Checks

AI-generated documents can easily pass verification, but fraudsters struggle to fabricate detailed, risk-based questionnaire responses that align with their fake identity. By embedding Screening questions and behavioral analysis into KYC workflows, businesses can detect inconsistencies that AI-generated IDs alone wouldn’t reveal.

2️⃣ Context Matters

Simply collecting an ID isn’t enough. Businesses need to ask the right questions to fully understand the entity they’re dealing with. Structured Due Diligence (DD) questionnaires provide deeper insights into source of funds, business relationships and operational history - which lets organizations flag potential risks that don’t appear in document verification alone.

3️⃣ Enhanced Screening Through Questionnaires

Embedding automated Sanctions, Politically Exposed Person (PEP) and Adverse Media screening into KYC and DD questionnaires ensures ongoing risk monitoring. If a Counterparty's Risk Profile changes, companies can detect issues before they escalate, which is something a static ID check cannot accomplish.

4️⃣ Regulatory Compliance and Auditability

Regulators increasingly expect companies to document how decisions are made in a Risk Assessment. A structured questionnaire workflow provides an audit trail that demonstrates why a relationship was approved or rejected. This is critical for meeting Anti-Money Laundering (AML) and compliance obligations.

‍

AI vs. AI: The Battle for Identity Verification

With fraudsters leveraging AI to deceive platforms, financial institutions and compliance teams can also fight AI with AI. Emerging machine learning models can analyze minute details - for example, working with pixel inconsistencies, metadata anomalies and biometric mismatches to detect synthetic identities.

However, as AI models rapidly improve, the effectiveness of automated KYC verification is under pressure. The real challenge is staying ahead of evolving fraud tactics.

‍

What’s Next? The Future of KYC in an AI-Driven World

Some experts argue that biometric authentication, such as facial recognition or fingerprint verification, will become the new standard for identity verification. But even that raises concerns. If centralized biometric databases are breached, the consequences could be catastrophic.

With AI-powered fraud growing at an exponential rate, businesses need to rethink their approach to KYC and identity verification. The old methods are no longer enough. Regulated industries, crypto exchanges and financial institutions must embrace new technologies, enforce stricter verification processes and integrate self-declaration and enhanced due diligence questionnaires to stay ahead of fraudsters.

Because one thing is clear. Fraudsters aren’t slowing down. But luckily, neither are we.

‍

***************

WANT MORE? SOME RELATED KYC ARTICLES

AI in KYC: The five key questions senior leaders should be asking

Is the Fight Against Financial Crime Falling Apart? The Risks of Less Transparency

Adverse Media Screening: White Noise vs True Risks