CyHawk Africa has identified a post on a dark web forum advertising the sale of a Nigerian woman’s full KYC set, including an ID front and back with a selfie. The listing, shared by a threat actor using the alias, Redman, also claims to offer identity documents from multiple countries. The said ID is a Nigerian woman’s international passport.
According to the post,
- Nigerian KYC Documents – ID scans with matching selfies.
- Extra Services – PayPal transaction refunds, including “Friends & Family” transfers.
- Distribution Channel – Download link hosted on AnonFiles.
Seller Activity – The threat actor has other listings that include U.S. and French identity sets, suggesting an international trade in stolen or fabricated personal data.
The sale of such KYC packages is a major cause of:
- Fraudulent account creation on banks, fintech apps, and crypto exchanges.
- Money laundering through mule accounts and synthetic identities.
- Wider cybercrime as these IDs can be repurposed for phishing, scams, or bypassing security checks.
This highlights the urgent need for financial institutions, telecommunications and regulators to strengthen KYC verification processes, including biometric validation and liveness detection.