Passport Identity Cloning Scam on Telegram
Criminals use Telegram's encrypted channels and bots to trade cloned passport scans, synthetic identity kits, and document-editing services built from stolen photos.
Part of: Passport Identity Cloning
Last reviewed: 5 July 2026
Telegram's large file-sharing limits, searchable public channels, and lax enforcement have made it a hub for the buying and selling of cloned identity documents, including passport scans lifted from data breaches, phishing sites, and hacked cloud storage.
How this scam works on Telegram
Sellers advertise in loosely moderated Telegram groups offering 'fullz' packages that bundle a passport scan with a matching selfie, utility bill, and sometimes a forged visa stamp, all edited with template software to pass basic verification checks. Buyers pay through a bot-operated escrow inside the chat, and the cloned documents are then used to open bank accounts, register on gig-work platforms, or pass know-your-customer checks on crypto exchanges.
Some channels go further, offering a 'video verification' add-on where an operator uses a deepfake face filter live during a video KYC call so the cloned passport photo appears to move and blink like the real applicant. Because the channel and the buyer disappear or rename constantly, victims whose documents were cloned from an earlier breach often only find out when a bank flags a new account opened in their name.
Common red flags
- A channel or bot offers 'full identity kits' bundling passport, selfie, and address proof for a flat fee
- Sellers claim documents can 'pass any KYC' or bypass liveness checks
- Payment is requested only in cryptocurrency through an in-chat escrow bot
- Channel names and usernames rotate frequently to dodge takedowns
- Marketing mentions specific banks or exchanges the kits are 'tested' against
- You receive a bank or account-opening confirmation for something you never applied for
How to protect yourself
- Freeze your credit files with the major bureaus so cloned documents cannot be used to open new credit
- Set up account alerts with your bank so any new application under your name triggers a notification
- Never upload a full, uncropped passport scan to any website; redact the document number when a copy is unavoidable
- Search your name and passport number periodically in breach-notification tools to catch leaks early
- Report any Telegram channel selling identity documents directly through Telegram's in-app report tool
- If you suspect your passport data was cloned, contact your passport-issuing authority to flag the document
How to report it
- Report the channel or bot in-app via Telegram's Report feature (chat menu > Report > Illegal Content)
- File a report with your national identity-theft reporting body (e.g., IdentityTheft.gov in the US)
- Notify your passport issuing agency so the document number can be flagged for extra scrutiny
- Report to your local cybercrime unit if a financial account was opened using the cloned document
Frequently asked questions
How do sellers get passport scans in the first place?
Most cloned documents originate from data breaches, phishing sites disguised as ID-verification portals, or malware that scrapes cloud storage and email attachments for scanned documents.
Can a cloned passport really pass video verification?
Basic checks can sometimes be fooled with deepfake overlays or injected video, which is why many banks and exchanges are moving to liveness challenges that are harder to spoof, though no method is foolproof.