KrebsOnSecurity reported a live dark-web ID marketplace called Nexus with more than 153 million records, including scanned driver’s licenses, some government Common Access Cards, and listings that the FBI is now investigating. The collection is appearing and growing in real time, with records tied to victims including the reporter and several security researchers.
The dangerous part is not just the photo of the ID. Many records include front and back scans plus infrared and ultraviolet images, which are the same features verifiers use to check whether an ID is real. That gives counterfeiters source material that can make a fake card look convincing under the lights and scanners used for onboarding, rentals, badges, and access checks.
For organizations that accept scanned IDs as proof of identity, the exposure does not stop with the theft of the image itself. Any process that relies on the visual or spectral features of a physical document now inherits the fraud path if those scans are enough to feed a passable counterfeit.