How I opened a fake bank account and didn't go to prison

The presentation was given in 2022.
https://www.youtube.com/watch?v=zi0rpKe_DEk&t=23995s

1. How we opened a fake bank account And didn’t go to prison

2. Carding market overview

3. Let’s do that!

4. Now what? Let’s send them BTC and get our cards! But… You can go to prison You can loose your money

5. Instead of that…

6. How you would have assumed KYC works API for the Driving License and IDs checking Collaboration between GOVs (EU, USA, North Korea? )

7. How KYC actually works Liveness check (live capture from the phone, no photos) OCR data extraction “No visual tampering”, e.g. playing with channels Proof that the photos were not modified Black-lists Social media checks

8. Progressive KYC DOB, Address, no actual documents – < £100 One document (some ID) – < £1,000 Another document (proof of address) – >£1,000 Video instead of photo – any suspicions that the photos are not real Live interaction – scrutinize the documents, e.g. check the hologram

9. Simulation

10. How fraudsters bypass KYC 0. Have an agreement in place with the fintech you are trying to fool Photoshop Getting rid of tampering evidence Fake “plastic” that is suitable for video Fake holograms Stolen addresses, names, IDs – helpful but not mandatory

11. 1. Photoshop

12. 1. Photoshop

13. But don’t do that

14. 2. Tampering evidence

15. 3. Liveness check bypass – rooted phone

16. 3. Liveness check bypass – virtual camera

17. 4. Photo analysis – EXIF meta-tags

18. 4. Photo analysis - strings

19. 5. Social media, black-lists

20. Results

21. Results

22. It’s extremely easy to bypass KYC + Liveliness check + Present modified photos (face, name, details) + Visual tampering checks But don’t do that …

23. Why fraudsters open current accs ? Money laundering

24. Why fraudsters open current accs ?

25. Convenience vs security DOB, Address, no actual documents – < £100 One document – < £1,000 <- Should be Level 1 Another document – >£1,000 Video instead of photo Live interaction Endpoint anomaly detection (e.g. Biotech) Share data between KYC providers, GOVs, etc