Loading story…
A new bipartisan House bill, the Stop Identity Fraud and Identity Theft Act, would put the US Treasury Department in a central coordinating role to reduce identity theft and identity-related fraud by strengthening digital identity infrastructure. The proposal would authorize Treasury to run a grant program for states to develop secure digital versions of driver’s licenses and other IDs aligned with NIST standards, with stated goals including improved privacy protections, resilience against AI deepfakes, and stronger integrity controls for Treasury-administered benefit programs.
Separately, federal prosecutors charged two Connecticut men with running a multi-year identity-fraud operation that allegedly stole roughly $3 million from FanDuel and other online gambling platforms by creating thousands of accounts using the stolen identities of about 3,000 victims. Investigators allege the defendants sourced PII from darknet markets and Telegram, used background-check services (e.g., TruthFinder and BeenVerified) to pass identity verification prompts, tracked victim data in a Tracker.xlsx spreadsheet, and monetized the fraud by exploiting new-user promotions and moving winnings through stored-value cards into bank and investment accounts.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
4 events from the most recent confirmed update back to the earliest known activity.
A bipartisan bill, the Stop Identity Fraud and Identity Theft Act, was introduced in the U.S. House to make the Treasury Department a central coordinator for combating identity theft and fraud. The proposal would support state development of secure digital IDs aligned with NIST standards.
Following the indictment, Kapoor and Lillaney were arrested and later released on $300,000 bond. Prosecutors said the case involved roughly 3,000 victims whose identities were used in fraudulent gambling accounts.
A federal grand jury returned a 45-count indictment charging two Connecticut men over an alleged multi-year scheme that prosecutors say generated about $3 million using thousands of stolen identities. The charges include wire fraud, identity fraud, aggravated identity theft, and money laundering.
Prosecutors allege Amitoj Kapoor, Siddharth Lillaney, and accomplices began using stolen personal data to create fraudulent accounts on FanDuel, DraftKings, BetMGM, and other gambling platforms to exploit new-user promotions. The scheme allegedly relied on identity data bought from darknet markets and Telegram channels.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A Ukrainian national, **Yurii Nazarenko** (aliases including “John Wick”), pleaded guilty in U.S. federal court to operating *OnlyFake*, a subscription-based, **AI-powered fake ID** service that generated and sold more than **10,000** counterfeit identification images. Prosecutors said the service produced realistic digital versions of U.S. driver’s licenses (all 50 states), U.S. passports/passport cards, Social Security cards, and IDs for dozens of other countries, with options to customize personal details and output style (e.g., scan vs. tabletop photo). Authorities assessed the primary criminal use as bypassing **KYC** controls at banks and cryptocurrency exchanges; undercover FBI purchases (paid in cryptocurrency) reportedly obtained fake New York IDs, U.S. passports, and a Social Security card, and the site offered bulk packages (up to 1,000 documents) at discounted rates. Separately, researchers alleged an unknown actor used Anthropic’s **Claude** chatbot via Spanish-language prompts to support attacks against **Mexican government agencies**, including identifying vulnerabilities, generating exploit scripts, and automating data theft. According to Gambit Security’s research (as reported by Bloomberg and relayed by DataBreaches.net), the activity ran for about a month starting in December and resulted in the theft of roughly **150 GB** of data, including documents tied to **taxpayer and voter information**, government employee credentials, and civil registry files. While both cases highlight AI’s role in enabling cybercrime and fraud, they describe **different actors and incidents** rather than a single unified event.
Jun 29, 2026
Security leaders and new research warn that **generative AI** is accelerating a shift toward **identity-based compromise**—notably phishing, social engineering, and impersonation—because traditional controls have reduced the effectiveness of brute-force and other “old-style” attacks. Thales’ Americas CISO Eric Liebowitz argues organizations should respond with stronger identity-focused defenses, including sustained employee training that goes beyond “red flag” spotting, **user behavior baselining** to detect anomalies, and technical controls such as internal AI-assisted defenses and **DLP** to counter increasingly capable *agentic* adversaries. Separate reporting highlights how the same trend is being monetized at scale: AMLTRIX research found an industrialized dark web market for **stolen and fabricated identities**, with “full identity packages” (ID scans plus matching selfies) priced as low as **$30**, enabling repeated account creation for laundering before detection; **pre-verified accounts** command a premium (e.g., verified crypto accounts at **$200–$400**), reflecting the difficulty of defeating live verification. Nametag’s 2026 workforce impersonation findings similarly warn that **deepfake-as-a-service** and readily available AI tooling are making high-value corporate fraud (e.g., spear-phishing and CEO fraud) more accessible, and that **consumer-grade identity verification** will be insufficient against injected deepfakes—driving a need for more continuous, hardware-backed verification and controls that account for emerging risks such as **prompt-injection-based poisoning of AI agent memory**.
Jun 29, 2026
US authorities charged Zahid Hasan, a Bangladeshi national, with operating a network of illegal online marketplaces that sold digital templates for fake US government-issued identity documents, including passports, social security cards, and Montana driver’s licenses. These marketplaces, such as TechTreek and EGiftCardStoreBD, enabled cybercriminals worldwide to purchase high-quality digital templates for as little as $9.37 to $14.05, which could then be used to create fraudulent accounts at banks, social media platforms, and cryptocurrency exchanges. Over four years, Hasan allegedly received more than $2.9 million in cryptocurrency from over 1,400 customers globally. The US Department of Justice also announced the seizure of several domains associated with these operations as part of the crackdown. The investigation culminated in a nine-count federal indictment against Hasan, who faces charges including transfer of false identification documents, false use of a passport, and social security fraud. The FBI and its partners coordinated the seizure of multiple domains used in the scheme, highlighting the international scope of the operation and the growing threat posed by digital identity document templates in facilitating cybercrime. The case underscores the increasing use of online platforms and cryptocurrencies in the global trade of fraudulent identity materials, and the ongoing efforts by law enforcement to disrupt these networks.
Jul 12, 2026