Using a Fake Passport to Pass Verification | Experiment

Поділитися
Вставка
  • Опубліковано 2 чер 2024
  • In this video, we dive into the cybercriminal underworld, first-hand. We create a fake identity by photoshopping a real passport. Then we try to get verified with a number of online services.
    The results were definitely surprising. But we don’t recommend that you try this at home.
    You’ll also learn about how document verification works, and how to tell the difference between real documents and fake ones.
    We hope you enjoy!
    More about us:
    sumsub.com
    / sumsubcom
    / sumsubcom
    / admin
    00:00 Intro
    00:40 Disclaimer
    01:00 Fake Identity
    03:08 First shot
    04:55 Second
    07:51 Тhird
    08:51 Fourth
    10:32 The next day
    11:15 Wirex
    12:46 b-Sharpe
    14:47 Mercurio
    16:34 How does online verification work?
    17:35 Сonclusions
    #Sumsub #fake #idverification #kyc

КОМЕНТАРІ • 609

  • @TonyLewis42
    @TonyLewis42 2 роки тому +1338

    You needed to go a lot farther with your techniques. Things like the metadata of your photos clearly stated they were saved in photoshop and not a mobile device you needed to modify the meta data. The IP address of your computer was logged on the first attempt so you weren’t getting away with the second attempt. Also the MAC address of your phone was recorded on the first attempt. There were so many simple red flags you missed that any mid level scam artist would bypass

    • @Sumsubcom
      @Sumsubcom  2 роки тому +488

      You're right. Looking back on this video, there are so many different things I could've done. We'll be doing another video in the future, I'm sure. Thanks for your comment!

    • @gaudigalves
      @gaudigalves 2 роки тому +14

      Ok the metadata thing might account for the times he had to actually upload the passport as a file (jpg or whatever) but not for the times he had to SCAN the passport. Correct me if I'm wrong .

    • @kiyzui
      @kiyzui 2 роки тому +17

      @@Sumsubcom Also when you took the picture using your phone of your machine, you can clearly see the other tabs that were open, exposing the fact that you were taking a picture of the passport using your computer.

    • @wanya1980
      @wanya1980 2 роки тому +22

      And use an email address in the name of the ID - not “Bradley” something g when it’s Paul applying

    • @ryanthetide
      @ryanthetide 2 роки тому +19

      I’d also presume deep faking might play a little part too, I’d love to see fooling the AI with a deep fake.

  • @sabedi2129
    @sabedi2129 2 роки тому +161

    Is nobody gonna talk about how he recorded a selfie video of himself even tho he doesn't look anywhere the same as the guy in the passport? 😅

    • @Sumsubcom
      @Sumsubcom  2 роки тому +37

      I wanted to see if they would let me through, or what kind of error message there would be. :)

    • @refraggedbean
      @refraggedbean 2 роки тому +6

      my drivers license looks nothing like me now, so Id say its possible to get the photo past in some cases

    • @Lawson143
      @Lawson143 Місяць тому

      Are you gonna watch the rest of the video?

  • @dainsimmons5549
    @dainsimmons5549 3 роки тому +160

    After you screwed something up with one service, you cannot expect to go back in to same service with same name, email, phone, mac address and I.P.

    • @Sumsubcom
      @Sumsubcom  3 роки тому +50

      Good point, they are supposed to use internal blacklists. We're just checking that they actually do ;)

    • @duckmeat4674
      @duckmeat4674 3 роки тому +4

      Your opinion is meaningless as websites can't get your Mac address

    • @duckmeat4674
      @duckmeat4674 3 роки тому +3

      @@iainkay3630 do you have more information about using singed JavaScript to get Mac address? Also when is the last time someone used active X or internet explorer?

    • @MatthewStinar
      @MatthewStinar 2 роки тому +11

      @@duckmeat4674 Give people half credit for being half right. Being wrong about a single detail isn't equivalent to being entirely wrong.

    • @giotek8
      @giotek8 2 роки тому

      @@iainkay3630 I'm pretty sure he's using Mac OS?

  • @maxm1584
    @maxm1584 3 роки тому +259

    Do you offer a course for your video/photo editing? 😂 Your skill is excellente

    • @Sumsubcom
      @Sumsubcom  3 роки тому +110

      I have the team to thank for that; there are some truly talented guys behind the curtain. Thank you for your comment! - Bradley

    • @EyesonEnforcement911
      @EyesonEnforcement911 2 роки тому +15

      He's not even a real person... CGI

    • @danieltaon7333
      @danieltaon7333 2 роки тому

      its easy

    • @DigitalArtisan77
      @DigitalArtisan77 2 роки тому

      When's the currency counterfeit bolt on?

  • @HerozTech
    @HerozTech 3 роки тому +98

    i found your channel from seytonic's channel
    and ever since it feels like a gold mine
    i literally love all your content

    • @Sumsubcom
      @Sumsubcom  3 роки тому +14

      That's really great to hear and it's fantastic to have you onboard. Looking forward to the future! Brad

    • @richjack3703
      @richjack3703 2 роки тому

      I thought all hope was last on getting a job not until I was recommended to *driphack20* on Instagram, who helped I was able to got an ID and drivers license at affordable prices..

    • @richjack3703
      @richjack3703 2 роки тому

      I thought all hope was last on getting a job not until I was recommended to *driphack20* on Instagram, who helped I was able to got an ID and drivers license at affordable prices..

    • @jjjjulian
      @jjjjulian 2 роки тому

      @@richjack3703 scam

  • @nicoshafes
    @nicoshafes 3 роки тому +250

    Have to be careful... Some of this brokers have common databases, about emails, cellphones, names, when they tag ONE red flag... can be that you'll be always tagged as a red flag IP, NAME, DOB... It's not THAT easy once your IP gets tagged.

    • @Sumsubcom
      @Sumsubcom  3 роки тому +41

      Yes, you are right.

    • @adammaxi
      @adammaxi 2 роки тому +24

      @@Sumsubcom Ip but more importantly fingerprinting and your specific device settings. If you really want to get this done just use a vm and make sure you have a vpn

    • @tihomirrasperic
      @tihomirrasperic 2 роки тому +29

      two things you don’t want in life
      a) be on the FBI terrorist flight ban list
      b) be blacklisted by Banks
      so don't play, the consequences can be painful and long lasting

    • @noobian3314
      @noobian3314 2 роки тому

      @@adammaxi VPN be blacklisted or at least flagged

    • @Crown42
      @Crown42 2 роки тому +8

      @@adammaxi, that's why use a cookie cleaner, socks 5 proxy server, and an anti detect software to bypass any security instrument.
      All of that will give you a better chance.

  • @nathanielpowell8107
    @nathanielpowell8107 2 роки тому +343

    I was wondering, if using a deep fake on the selfie verification may work. Pre-record the steps taking by moving your head side to side

    • @taco4121
      @taco4121 2 роки тому +8

      but saying the numbers out loud would be a problem

    • @nathanielpowell8107
      @nathanielpowell8107 2 роки тому +6

      @@taco4121 I get what you're saying, although I think with deep fake can also change the voice of the person. Unfortunately there are and always will be ways around scammers will find

    • @taco4121
      @taco4121 2 роки тому +3

      @@nathanielpowell8107 yeah they could chainge the voice but the numbers that you have to say out loud are randomly chosen in the app. So pre recording would be really difficult

    • @nickn2794
      @nickn2794 2 роки тому +4

      @@taco4121 Nah, not difficult. The number are from 1 to 9. Just have the separate sounds ready.

    • @taco4121
      @taco4121 2 роки тому +1

      @@nickn2794 ah yeah true

  • @may_may675
    @may_may675 2 роки тому +6

    Can’t wait to see the re-do of this experiment! Love your content… I’m so hooked!

  • @syokanaa9356
    @syokanaa9356 2 роки тому +7

    How you only have 18k subs and 10k views? This is so well made and is very interesting. Keep it up, you just got brand new subscriber!

  • @andivlogs
    @andivlogs 2 роки тому +24

    Your channel deserves a million subs! It's so informative, thanks for making these videos for us

  • @JulesOfIslington
    @JulesOfIslington 2 роки тому +125

    You talked at the end of the video about analysis of pixels and advanced security features. However, the most basic check to automate for some time has been the reading of the MRZ; if this isn't in the standard format, it isn't a valid document. You admitted at the outset of the video that you're not sure about the proper format for the MRZ for the a passport of the identity that you were creating, and a single character being off has long enabled passport scanners to identify problems.

    • @GRBtutorials
      @GRBtutorials 2 роки тому +5

      Indeed, in fact, the scan at the end of the video reveals that there are some problems with the MRZ.

    • @delkorntem3863
      @delkorntem3863 Рік тому

      Bruhh, It can already be faked.

    • @phr3ui559
      @phr3ui559 11 місяців тому

      yes

  • @keithsweet8840
    @keithsweet8840 3 роки тому +25

    Paul your face is now in a Al
    database of known fradsters..

    • @Sumsubcom
      @Sumsubcom  3 роки тому +18

      Yeah, I told the producers about that... Hopefully they don't nab me on the border lol

  • @parth__agarwal
    @parth__agarwal 2 роки тому +6

    I discovered this channel early in the morning now I find myself watching all the videos one at a time.

    • @Sumsubcom
      @Sumsubcom  2 роки тому +2

      Glad to have you onboard, Parth!

  • @TheNpcNoob
    @TheNpcNoob 2 роки тому +8

    The quality of content from this new of channel is amazing, almost as if it’s being used for money laundering…

  • @jecepede
    @jecepede 2 роки тому +11

    Dear mr Young ;-)
    Should the biggest take away of this not be : DONT EVER UPLOAD YOUR PASSPORT, ID OR FACE !
    If the system you are trying to sign up on will ever get breached, your whole identity is out in the open and potentially in the wrong hands.
    "But the website needs it so they can offer their services" I hear people say..... May I suggest you find another website that does have his ducks in a row :-)
    And what's more: In a number of countries it is even illegal to upload such documents. In my country, The Netherlands, you are not even allowed to share your social security number with anyone exept goverment organisations. Since that number is on the passport, drivers license etc... you can't share those either unless you blatanly take out a marker and make everything black. And this will lead to yet another ban because you 'messed around' with your document.
    Cheeeeeeeeeeeers,
    Jecepede

    • @CZghost
      @CZghost 10 місяців тому

      SSN is essential for banking institutions tho, because they have to verify the identity of the person that's opening a banking account. Since multiple people can share the same name, the same date of birth and could also potentially share very similar appearance to each other (it is rare, but it may happen), and live in the same city, it's actually very hard for banks to verify your identity using only those informations. SSN however is unique to you and you only, which means that they can verify it is indeed you who is using their banking services. They can't of course share your personal informations with advertisers or literally anyone, they can only use them internally for processing to address you individually, and potentially offer you their own products and services which you might like. Do you want to tell me that banking institutions in Netherlands are not allowed to use SSNs for their internal purposes because they're not government institutions? And why am I talking about banking institutions? All of those services shown in the video are banking institutions that handle your money.

  • @nebunu1702
    @nebunu1702 3 роки тому +39

    I wonder if we'll see phishing attacks aimed at getting people to rotate their heads & show id lol

    • @Sumsubcom
      @Sumsubcom  3 роки тому +14

      Very good point. I hadn't thought about that. 🤔

    • @pteppig
      @pteppig 2 роки тому

      @@KahruSuomiPerkele your can create live deepfakes of just a face with an etc card. But not yet on a weak laptop

    • @Greg-yu4ij
      @Greg-yu4ij 2 роки тому +1

      @sumsub There’s probably at least a checksum at the bottom. Also, be careful in the USA we are a surveillance state whose leadership has been compromised by the CCP and trying that could put you on a no-fly list even though the spying and lack of due process are flagrantly unconstitutional. Not sure about 🇬🇧 hopefully the Queen does not have to answer to Marxists also .

    • @jasongv300
      @jasongv300 Місяць тому

      ​@@pteppig what do you mean etc card ? Can further explain pls ?

  • @tumku
    @tumku 3 роки тому +7

    Earned a sub! I'm glad i found you guys before you got big!

    • @Sumsubcom
      @Sumsubcom  3 роки тому +1

      Thanks! Great to have you here. :))

  • @ibrahimmuhammad964
    @ibrahimmuhammad964 2 роки тому

    Never imagined I would get a great job from you man thanks again

  • @AwokenEntertainment
    @AwokenEntertainment 2 роки тому +4

    Never felt so safe while seeing somebody fail repeatedly 😂

  • @phoqueanonyme4072
    @phoqueanonyme4072 2 роки тому

    Great video as usual !

  • @davidczajkowski5956
    @davidczajkowski5956 2 роки тому +1

    Great video…didn’t know security had come so far…

  • @drmadjdsadjadi
    @drmadjdsadjadi 2 роки тому

    KYC can also reject legitimate documents and people when data is not accurate in their online databases. Also liveness checks can reject people when the documents are older.

  • @Zachsnotboard
    @Zachsnotboard 3 роки тому +6

    I have wondered if someone could use a fake driver's license at a bitcoin ATM, and if fake money would be accepted at the atm. Seems like that would be a crazy scam

  • @vadimnovikov7350
    @vadimnovikov7350 Рік тому +1

    This episode is a real thriller! For a moment I felt like I myself am submitting fake ID. 5*

  • @TechPeeves
    @TechPeeves 4 місяці тому +2

    what forensic software did you use to verify ID scans?

  • @gniewkomalecki596
    @gniewkomalecki596 2 роки тому +2

    this channel is underrated

  • @ToPanPawel
    @ToPanPawel 10 місяців тому

    Thats why NFC verification + liveliness check is the way to do it. You can always pass the optical only checks.

  • @miawafdhal
    @miawafdhal 3 роки тому +26

    If you wanted to change your passport details, you at least need to check your MRZ check sum and secure image. It’s a pretty easy to be detected by the system since it doesn’t matched with the document itself. Btw, it’s pretty interesting video.

    • @Sumsubcom
      @Sumsubcom  3 роки тому +12

      Thanks Thomas for the comment. Good advice too. I might try and make bulletproof documents and try again to actually fool some of these systems. Must be possible one way or another.

    • @KiinaSu
      @KiinaSu 2 роки тому +1

      Yeah I noticed that too. I know little about the exact sequencing of passport except the basic stuff you can tell from looking the passport. The last digit has to be a checksum and I would assume the part after the Passport Number and birthday would also be a checksum. Checking with my own passport that seems to be the case.
      And having the same checksum on the real and fake document would be a pretty big coincidence. Typing in the stuff provided into a checksum calculator it seems the last part should be a 9 instead of a 2. The passport number would be 9 instead of 7, Birthday checksum 3 instead of 6. (ofc the last part changes again after you fix the mistakes with the checksums for the other parts). Failing a single should put it into manual review in even the most basic system (checking if maybe the OCR has made a mistake), failing multiple of the check digits, I don't even think you need a human to look over that. Would've probably been more fruitful with a correct MRZ to see if the whole face thing even does a thing. A good amount of work put into making a 20 minute video but falling at the first hurdle.
      Also sidenote I love how he blurred the expiration date on the real passport, yet the MRZ for the expiration is still there.

    • @CZghost
      @CZghost 10 місяців тому +1

      @@KiinaSu The expiration date isn't really a private information, as well as the document creation. Date of birth however is. And if someone else has your SSN (which may vary in format in every country, my country for example uses YYMMDD/XXXX format, where YYMMDD is a date of birth in two digit year, month and day format - so let's say you were born May 5th 1998, then date of birth would be 980505 - except for females, the most significant digit of a month changes, simply to a month a number 50 is added, so if you are female, then it's 985505, and XXXX is a four digit random identified assigned to you - multiple people can have the same identifier, but then they cannot have the same date of birth - as for non-binary genders, Czechia doesn't really have a system for that, your SSN is assigned to you at the day of birth most of the time, and even if you transition to another gender, where surgery is a requirement, then you can have a new SSN being provided to you, because it reflects your date of birth and your gender - but non-binary people don't have a mechanism, which is why I believe the government wants to change it to be more like a US SSN), it's game over if they do. They can impersonate you and take loans on your name and not pay for them, and get you in trouble. If they have your full name, your SSN, and your full address, you're screwed.
      Anyway MRZ would be interesting to explore, learn how it is calculated, and try many different techniques to fool the MRZ validator. But I must stress that MRZ validator isn't the only check here. And pretty much all of those services have proceeded further into selfie check, which means that there might not even be an MRZ check in the first place, because validator only checks if the format is valid, not the informations, and if the format isn't valid, it may not proceed further and straight out refuse to continue. But the fact that even the checksums were all wrong, the app continued further, which means that there must have been some other issue preventing them to continue.

  • @Chichi-sl2mq
    @Chichi-sl2mq 2 роки тому +4

    the color scheme for this video is superb. like the black hoodie ...the white background and the grey deco ....

    • @Sumsubcom
      @Sumsubcom  2 роки тому +2

      I wanted to wear a suit, so you've got the team to thank for that!

  • @fookyoo69
    @fookyoo69 Рік тому

    This is all dystopian in a very whimsical way.

  • @slendi9623
    @slendi9623 2 роки тому

    This my new fav channel

  • @krzheph7373
    @krzheph7373 2 роки тому

    Avatarify - AI Face Animator & talking photos - for the live face videos - Boom sorted.
    Great channel btw - quirky and off the beaten YT path.

  • @exuviumisopods
    @exuviumisopods 2 роки тому

    4:45 most of the times the verification code arrives instantly after I single click on the power button of my cell phone. Otherwise it kinda remains in a somewhat 'idle mode'.

  • @Treshy
    @Treshy 2 роки тому

    The MRC probably has a checksum in it which instantly blocks you.

  • @Mr-ir2rc
    @Mr-ir2rc 2 роки тому

    What app of editing is used in the video, it looks quite professional.

  • @qtpi6450
    @qtpi6450 2 роки тому +1

    “I’ve tried, honestly… I gave it 6 minutes. I’m giving up”
    Same bro

  • @Origameasy
    @Origameasy 3 роки тому +10

    *It didn't work because you didn't remove the metadata of the passport image, the websites detect the image was generated by Photoshop.*

    • @Sumsubcom
      @Sumsubcom  3 роки тому +9

      Interesting point, but I think you'll find that most services use a variety of algorithmic maps to detect forgery. It's not as simple as detecting the metadata.
      At Sumsub, we use five. 😎

    • @lxdimension
      @lxdimension 2 місяці тому

      @@Sumsubcom What are they? What apps were you using to detect forgeries?

  • @pineapples7449
    @pineapples7449 3 роки тому +11

    If you’re here from digital asset news...

    • @Sumsubcom
      @Sumsubcom  3 роки тому

      We're glad that you've paid us a visit!

  • @ianargyle3388
    @ianargyle3388 2 роки тому

    Find the ML model used in lots of KYC toolkits -> gradient ascent on the image -> profit

  • @DronkenDrenthen
    @DronkenDrenthen 2 роки тому +10

    The face recognition check could be circumvented by an external video source input, going through a pc with a facial masking programme that emulates the photo on the document onto your face.

    • @matteavana2384
      @matteavana2384 2 роки тому +1

      Which program does this for gnu/linux?

    • @maryagyemang9870
      @maryagyemang9870 2 роки тому

      @@matteavana2384 did you find out if you did can you tell me

    • @matteavana2384
      @matteavana2384 2 роки тому

      @@maryagyemang9870 didn't, actually

  • @surajsiwakoti-lt5dc
    @surajsiwakoti-lt5dc 10 місяців тому

    i’m traveling Canada by ETa visa which is made through the same passport like you shown above and no any verification is made. is it possible to reach there please?

  • @uniteam3702
    @uniteam3702 2 роки тому +1

    realy good video!

  • @benzingartech197
    @benzingartech197 2 роки тому +1

    I think Machine Readable Zone was the main reason it didn't go through not the photo. he needed an mrz that matches the name. forget the photo. you can use any photo.

  • @lxdimension
    @lxdimension 2 місяці тому

    Whats the name of the apps used to scan, analyse and verify the ID documents?

  • @thangthai2476
    @thangthai2476 2 роки тому

    Could you tell me the application using for ID scanning at the end of the video?

  • @epipen22
    @epipen22 2 роки тому +1

    Is it possible that those companies have saved your live face video and added to their blacklist?

  • @ventilaar
    @ventilaar Рік тому +1

    Why would you zoom in and edit out the identity verificaiton service comany's name? You can clearly see at 12:51 that there is something blurred in the middle. It's almost as if you are trying to hide that this video is secretly an ad to show the public that online identity verification works (which it doesn't, I tested it with just half an hour of work you just have to know what to to).
    It is so conventient that the provider who detects the scams are Sumsub (the identity verificatior) and the others are just not working (no otp or page hanging). Not to mention that this channel is called Sumsub literally the company who's business is to identify people and has benefit from it to show that it works.

  • @YeloPartyHat
    @YeloPartyHat 2 роки тому

    What's up with the blur for a large part of the video at the b-Sharpe chapter?

    • @nimeton666
      @nimeton666 2 роки тому

      I was also thinking about that

  • @maggiesmith4662
    @maggiesmith4662 Рік тому

    Hi there, can you tell me what's the name of the website that you used to create a fake ID? Thanks!

  • @pickledbushman
    @pickledbushman 2 роки тому

    Its interesting to note that OTPs via SMS are broken the world over.

  • @shivanshubansal1124
    @shivanshubansal1124 2 роки тому +3

    I bet if you try your real passport, they'll block that as well. Your face, IP, phone number, address etc... must have gone into a blacklisted database on the first day.

  • @AlexpxThreeTen
    @AlexpxThreeTen 2 роки тому

    Is that a bong on the shelf behind you? 😂

  • @curiousmind6472
    @curiousmind6472 3 роки тому +22

    Would be interesting to use a photo of someone you know and have them do the live’ness verification with your name and details and see what happens. Pretty sure it might work. I think I’ll try it 👌 Thx!

    • @Sumsubcom
      @Sumsubcom  3 роки тому +12

      Not so fast! That's where anti-fraud comes in. At Sumsub, we use five different algorithmic maps to determine a document's authenticity. If you try that, the least you'll get is a final rejection notice on the basis of photoshop.
      Nevertheless, if you do give it a go, let us know! -Brad

    • @eggibot
      @eggibot 2 роки тому +1

      Is there really a point in doing something like this though? The only advantage that you would get is the service not knowing what your real face looks like, which is quiet unimportant (imo).

    • @curiousmind6472
      @curiousmind6472 2 роки тому +3

      @@eggibot what one would get is a mis-match in identity, and avoid all kinds of inconveniences. That account could be considered void, in the meanwhile you could move plenty thru it.
      This option might be useless to you but you don’t speak for everyone.

    • @eggibot
      @eggibot 2 роки тому

      @@curiousmind6472 yea, but you are still using your own REAL name and details, so it wouldn't be too complicated for other parties to identify the (suspected) account owner. the reason to use fake ID after all is to not have identifying information associated with your account

    • @curiousmind6472
      @curiousmind6472 2 роки тому +1

      @@eggibot Certainly when a bank account is open with conflicting information it’s considered void/fraudulent, and so would be the case in this situation. No regulator could tax the account legitimately, especially with all parties denying the accounts existence. Trust me, it’s been done before - many times.. You could simply use one friends ID and someone else’s picture, opposed to your own. No rocket science there.

  • @reastle1307
    @reastle1307 3 роки тому +7

    new subscriber from nepal ❤

    • @Sumsubcom
      @Sumsubcom  3 роки тому +1

      Great to have you onboard!

  • @madimorie
    @madimorie 2 роки тому

    idk if this counts as verifying with a false identity but i got through the airbnb verification system when i was 17 (it’s 18+ only) by just changing the birth year on my passport with photoshop lmao, i think it worked because i didn’t change my name or photo? not sure though

  • @willstikken5619
    @willstikken5619 3 роки тому +3

    I am a bit baffled by the concept here. I must have missed something because it seems like Bradley was mixing real information with fake information rather than creating a whole new fake persona where the photo would match your face as someone woudl do when trying to actually get past this. The coding on the passport seems to be the only variable but not an unsurmountable one.

    • @Sumsubcom
      @Sumsubcom  3 роки тому +4

      Hey Will. The goal of this experiment was to see if I could pass the online identity verification systems with a blatantly fake ID, just to see what would happen. That's why in some instances, I'm using my real address, or my own email address etc. We were ultimately looking to get some responses from these guys. Would I get through? Would they temporarily reject me? Would I end up on some sort of blacklist? We should re-do the experiment with some anti-tank dark-web ordered passports. That would be a cool experiment. Cheers for the support!

    • @willstikken5619
      @willstikken5619 3 роки тому +1

      @@Sumsubcom It jsut seemed like most if not all attemtps were setup for failure rather than real attempts to get through.
      I am new to the channel though and do appreciate what you do.

  • @jekabsmilass8531
    @jekabsmilass8531 2 роки тому +1

    Could you try something like this but instead with valid passport data and attempting to bypass the liveness check with a deepfake video? Also would be interesting to see if a valid passport with some minor discrepancies like date of birth changed would pass their tests

  • @PriestessOfDada
    @PriestessOfDada 9 місяців тому +1

    Okay, so here's what you pass the face check.
    First download OSC.
    Then, download an AI package called the thin spline model. It's an avatar based deepfake.
    Take some video of yourself doing the head check. Make sure the video seamlessly loops before you process it.
    The way you make a loop is by playing the whole video forward, then backward.
    Now that you've got your driver video, apply either your fake person or the photo of your choice to the driver video.
    At this point, provided you didn't open your mouth, you should have a nice low resolution video. Cool.
    Drop that video into the frame extractor of choice. Blender's the easier for me, but you might prefer davinci or after effects. It does not matter. The important thing is that you have all the frames.
    Take your raw frames and process them through one of the sharp upscalers in Stable Diffusion. You're shooting for something 1020x1020.
    Re-assemble your video. Ideally, with innocuous room noise.
    Now, set up OBS, enabling the internal camera.
    Within your OBS scene, drop your looping video, and tell OBS to play it on loop. Make sure your canvas matches the image resolution of your upscaled images.
    Set OBS camera feed to your default camera within windows or mac, or whatever you're doing.
    And that's how you do that one.
    I don't know enough to help with any of the other stuff, but you get the idea

    • @MrMentality
      @MrMentality 10 днів тому

      Very interesting. I’ve been having issues with this exact thing. Do you have a discord or anything where I can ask you some questions? Cheers :)

  • @TheSimArchitect
    @TheSimArchitect 3 роки тому +5

    It sucks those places even require camera validation. It makes sense if they're lending you money or allowing for you to use leverage, but if you're just adding funds and trading covered (like a cash account) some of those businesses should allow plain simple KYC validation (or does the law require thorough validation like that?). Just a couple of years ago (maybe longer) you could open an account on Coinbase without even adding an ID. 😟

    • @Sumsubcom
      @Sumsubcom  3 роки тому +3

      This is where AML comes in. Transactions that pass certain thresholds need to be verified. This is especially important when it comes to crypto wallet checks.

    • @MatthewStinar
      @MatthewStinar 2 роки тому +3

      My problem with KYC is that accountability doesn't go both ways. I understand banks and governments wanting to hold me accountable for my actions. They need to be equally accountable for how they use and distribute my personal information and their records of my activities as well as the times they impede legitimate activity, but they aren't.

    • @TheSimArchitect
      @TheSimArchitect 2 роки тому

      @@MatthewStinar Amen! In the end they want to know how much money we have at any given moment to tax the hell out of us. There's no other reasonable explanation (plus knowing where our assets are make it easier for them to garnish / freeze what we have).

    • @sadgredcjtdregtfetjgfydtlk7003
      @sadgredcjtdregtfetjgfydtlk7003 2 роки тому

      When it come to Coinbase there are level at the 3 level it ask you for live selfie verification so it's not that joke the way people think

    • @franco8flyline
      @franco8flyline 2 роки тому

      This is 100% because regulations (MLR 2017, with 5MLD updates) require regulated crypto currency exchanges to be verifying details of customers. Even for one off transactions, this is still mostly required (as the thresholds are very low).

  • @MautreXvids
    @MautreXvids 2 роки тому +2

    At 13:50 is it only me who got blurred bars on his face and sometimes background?

  • @dunar1005
    @dunar1005 3 роки тому +5

    Not sure about the uk. But a UA-camr did something similar in the EU and got jailed because the crime was real, even if he did it for educational purposes.

    • @randomguy-ys1mu
      @randomguy-ys1mu 3 роки тому

      Can you name the video or the chanel

    • @Sumsubcom
      @Sumsubcom  3 роки тому +1

      I'll be alright, Dunar.

    • @superchdk
      @superchdk 2 роки тому

      How can you faking your passport not get you in trouble? Are the companies not gonna report it as document forgery?

    • @dunar1005
      @dunar1005 2 роки тому

      @@superchdk I assume because he works for the company behind this channel and they would defend him. Also the laws in the UK could be different.

  • @tekkimariani
    @tekkimariani 2 роки тому

    Just wondering when 'your' passport says Paul Young Peak, where Peak is clearly the last name, why the hell are you typing in your name as Paul Young without the Peak?
    Even without further investigation there can't be a match.
    But interesting to see anyway.
    Also wondering isn't it illegal in the UK to even try to do something like this?

  • @clayaderhold
    @clayaderhold 2 роки тому +1

    if you ever get in trouble at least you can say you making educational content

  • @AlphaBravo860
    @AlphaBravo860 2 роки тому +5

    You need to walk into Social Security & tell them you just had a kid under 1 year ago & the kid and mother are out of country and you need a social security number for the kid that was born at home with a mid wife. Then open credit cards

    • @KYLE-zo4bm
      @KYLE-zo4bm 2 роки тому +2

      matt cox!

    • @AlphaBravo860
      @AlphaBravo860 2 роки тому +3

      @@KYLE-zo4bm I see you appreciate some good ole' UA-cam. Screw colledge. I can build everything from a rocketship to a non existent human being from watching UA-cam!... Americka!

    • @KYLE-zo4bm
      @KYLE-zo4bm 2 роки тому +1

      @@AlphaBravo860damn right based

    • @KYLE-zo4bm
      @KYLE-zo4bm 2 роки тому

      @@xabhax it worked for matt cox he did dozens of times idk if it would work today but it did in the mid 2000s

    • @KYLE-zo4bm
      @KYLE-zo4bm 2 роки тому

      @@xabhax yeah i know matt cox faked the birth certificate too and all the docs needed to get them to issue an SSN and then went to the dmv and got IDs with that SSN just look him up its pretty insane what he pulled off

  • @kymanijeffers5019
    @kymanijeffers5019 3 роки тому +6

    Hello. What is the software at 16:40 called. Nice video btw

    • @pabbip9
      @pabbip9 2 роки тому

      Trying to find it as well. Did you ever figure it out?

  • @BL0CKchainGANG
    @BL0CKchainGANG 2 роки тому

    Taking a picture of a printout of probably be better than the screen

  • @navish1909
    @navish1909 2 роки тому

    Dude for the video, you could have done a 3d version of it and display it on an ipad. It will work

  • @robertkulzerdriphack20onin12

    If i remember everything the group did to me am so grateful for life, i got a job with he's scannable ID am not a driver in a big company here in Canada.

  • @SeattlePaddler
    @SeattlePaddler 3 роки тому +8

    Here because of D.A.N.

    • @Sumsubcom
      @Sumsubcom  3 роки тому +1

      Nice to have you on board!

  • @JohnSmith-pn5xn
    @JohnSmith-pn5xn 2 роки тому

    Would be cool to try a 3D printed head with a wig for both passport photo and celfie

  • @flightsimdev9021
    @flightsimdev9021 2 роки тому +1

    Let's hope that the real Paul Young Peak never tries those sites as he will now be flagged forever.

  • @halehale1670
    @halehale1670 6 днів тому

    Please which website did you use in creating this?

  • @GRBtutorials
    @GRBtutorials 2 роки тому +4

    If you look at your results at 16:55, you’ll see that the MRZ is wrong. You could have easily looked it up before doing all this...

    • @Sumsubcom
      @Sumsubcom  2 роки тому +4

      I went into this as a real amateur... Next time we'll get it right :)

  • @TheL0wner
    @TheL0wner 2 роки тому +1

    you really should have made a new email address for this. with your name in your email not matching the name on your docs getting verified is highly unlikely. also a vpn in the nation of your fake doc would be a good call.

  • @ThatBidsh
    @ThatBidsh 2 роки тому

    i wonder if wirex only failed the second time because it had already flagged that name, what about with a fresh name and even a fresh face? have someone else attempt to sign up and use their photo on the fake id?

  • @bestowicprimer8835
    @bestowicprimer8835 2 роки тому +1

    Duddde... my life is like this episode.

  • @maskaryow8817
    @maskaryow8817 6 місяців тому

    that's because you take photos from a computer screen, it's different if you print them. trust me

  • @Nightslide
    @Nightslide 2 роки тому +11

    I like how you can do this type of stuff in the UK, in Germany it's literally like that, if you even plan to do a video like this, and let the publicity know, that you are planning one like that, you would get sued, if you already did something like that, with a bit of bad luck you'll get life sentence (15 years).
    But nonetheless, great video, worth to sub to :)

    • @pascalwiery7129
      @pascalwiery7129 4 місяці тому

      Comment two years late, but anyway.
      This is completelty wrong. Document forgery has a maximum sentence of five years according to §267 StGB. If you forge documents as part of a gang that continuosly commits crimes together, the maximum sentence goes up to 10 years.
      But no ordinary person is ever going to be sentenced anything close to that. Creating this video would be illegal in germany, but i wouldnt be suprised if the charges would be dropped immediatelly by the prosecutor because there is no public interest in prosecution. Even if the prosecutor doesnt drop the charges, i am 100% certain there wouldnt be any jail time.

  • @ToPanPawel
    @ToPanPawel Рік тому

    NFC verification of electronic layer is a key to successful and secure identity verification

  • @fabiofoltran4361
    @fabiofoltran4361 3 роки тому +1

    Shouldn't he change up address? Like also ips have fraud score. Also I don't know if he used the same phone number, probably the get into blacklist one they are rejected one time

    • @Sumsubcom
      @Sumsubcom  3 роки тому +1

      I'll likely only get registered on their internal blacklists, so it's improbable that I'll get stopped on any borders. Good point though!

  • @elasticharmony
    @elasticharmony Рік тому

    I actually believe that all these identity requirements show that the business that wirex us in is not legitimate, like a security camera they are useless to stop a pro who has a good plan to use their service for unallowed purposes.
    The standards are higher than just Photoshop but are not that high if you know hacking. It is all about how much you want to surrender to these financial services in hopes of the offered pie in the sky.

  • @MO-zl6xj
    @MO-zl6xj 2 роки тому

    Ur voice is Awesome ❤️

  • @command6519
    @command6519 2 роки тому

    Underrated

  • @woahjay69backup
    @woahjay69backup 11 місяців тому

    What you need to do is have the same picture but change everything else in the document.

  • @N____er
    @N____er 10 місяців тому

    What's the website shown at the first section?

  • @joenight9693
    @joenight9693 2 роки тому +2

    Oh my goodness, where do I even start...
    First off, do a printout of the edited passport and then take another picture of the printout. It will require some fiddeling, however it will remove the tracepixels you leave when photoshopping the damn thing.
    Second Deepfake the videopart and show a screen to the camera.
    Third, VPN, VPN and yet another VPN. If your IP doesn't match the country you're supposedly in, that's the first red flag to any provider.
    Fourth, use a real persons picture. Fake people are being detected relatively fast by AI, as they're most of the times to perfect.
    And that's the primitive way to do it. Not even talking about running the phones OS in a Sandbox and simulating the whole input.
    Feel free to contact me, if you have further questions.

    • @Sumsubcom
      @Sumsubcom  2 роки тому +1

      Hey Joe, I get you. When I filmed this video, I really didn't know what I was doing. I was just playing around. We might do this at a later stage with some really thought-out fakes.
      Thanks so much for taking the time to write to us, I hope your comment will help others! Or do I hope so? I don't know who our target audience even is anymore lol.

    • @kyawmyo814
      @kyawmyo814 2 роки тому

      I want to know the method u say about simulating android os on sandbox

    • @joenight9693
      @joenight9693 2 роки тому

      @Manu C I wouldn't do that if I were you. And I also wouldn't call that "safe".

    • @joenight9693
      @joenight9693 2 роки тому

      @Martin The hell if I know. That totally depends on the laws of the country you're in. Also, maybe not the smartest move admitting something like that on a plattform like this. But then I'm no lawyer so, #nolegaladvice
      It can be anything from computerfraud to identity theft up to forgery. Like I said, completely depending on the country you're in. Also, why would you do such a thing and not consider the possible consequences and outcomes up front?

    • @pecadosrojos
      @pecadosrojos 3 місяці тому

      How can I contact you?

  • @cvspvr
    @cvspvr Рік тому

    you could use some sort of realtime deepfake for the video verification, or redirect your camera to a prerecorded video

  • @3dp_edc
    @3dp_edc Рік тому

    I mean of course your going to fail verification when the picture on the passport isnt even the same person that is doing the "selfie" portion. Topping it off the phone number is registered to your name. A textnow or google number would circumvent that . These sites also use whats called "cookies" and "digital fingerprinting" meaning if youve used that pc as one person it recognizes that. Fresh Virtual Machine would be the way to do a test for that. and A drivers license or a government document would be much easier ways to go about fake as there isnt the number on the bottom to scan. Another thing is people that would do this would probably have already got their victim to send them stuff like this and edited their face to it instead so its a real doc everything scans just a different face to fool the selfie check.

  • @415sf305
    @415sf305 2 роки тому

    The truth is that these ID verification companies are doing a lot more then using state of the art camera technology .. what I am saying is that these companies are running a (Background check/credit check) on you as well… to what extent I don’t know.
    But what I do know is that it’s not legal for companies to run a background check on you with out your consent. In America

  • @sabuein
    @sabuein 2 роки тому

    Thank you so much.

  • @barry63196
    @barry63196 2 роки тому

    my dad tried to sign up to gemini back in early may of 2021, we put in all the correct data and it is november 24th and we are still waiting to get confirmed :skull:

  • @sometalllad8442
    @sometalllad8442 2 роки тому +2

    Big brain would have been to deepfake the face verification

  • @warriorsportsuk
    @warriorsportsuk Рік тому

    Which website did you use to create the fake passport

  • @Praecantetia
    @Praecantetia 2 роки тому

    Kinda spooky considerring what one could do with malicious acess to these scanns

  • @abhishekbaguldesign
    @abhishekbaguldesign 2 роки тому +1

    What if you submit affidavit of name change on the support.

  • @SciemceCrass
    @SciemceCrass 2 роки тому +1

    Good vid

  • @Wassermelonenbaum
    @Wassermelonenbaum 2 роки тому

    Plot twist:
    He actually tried to open up a fake account and had to come up with a cover story.

  • @constantined9015
    @constantined9015 2 роки тому +1

    Hi all! Has anyone any idea what happens when someone has beard but the ID photo is without!? (Actually the photo is with a minimal beard!)

  • @hocinelahmar7986
    @hocinelahmar7986 2 роки тому

    Can Algerian biometric passport be fake easily or is it secure?

  • @user-10021
    @user-10021 2 роки тому

    Does a fake also work on UA-cam for the age verification? Or do they just close your google account?
    I’m way over the age limit but no way I’m feeding them my data

    • @Sumsubcom
      @Sumsubcom  2 роки тому +1

      You'd have to be a real genius to scam this kinda stuff... We'll try it again in a future video.

    • @user-10021
      @user-10021 2 роки тому

      @@Sumsubcom that would be cool to see, I've tried searching if someone has tried this in private but seems like nobody did!