Passport Identity Cloning Scam on Telegram
Criminals use Telegram's encrypted channels and bots to trade cloned passport scans, synthetic identity kits, and document-editing services built from stolen photos.
Part of: Passport Identity Cloning
Last reviewed: 5 July 2026
If your passport has been cloned, it almost never reflects personal carelessness; scans traded on Telegram are mostly lifted from data breaches, phishing sites, and hacked cloud storage. Telegram's large file limits, searchable public channels, and light moderation make it a natural marketplace for these documents, with sellers bundling a passport scan, matching selfie, and utility bill into packages built to pass basic identity checks, and some offering deepfake video add-ons for live verification calls. The distinction that matters: this scam runs silently in your name, so the first real signal is often an account or verification you never initiated.
How this scam works on Telegram
Sellers advertise in loosely moderated Telegram groups offering 'fullz' packages that bundle a passport scan with a matching selfie, utility bill, and sometimes a forged visa stamp, all edited with template software to pass basic verification checks. Buyers pay through a bot-operated escrow inside the chat, and the cloned documents are then used to open bank accounts, register on gig-work platforms, or pass know-your-customer checks on crypto exchanges.
Some channels go further, offering a 'video verification' add-on where an operator uses a deepfake face filter live during a video KYC call so the cloned passport photo appears to move and blink like the real applicant. Because the channel and the buyer disappear or rename constantly, victims whose documents were cloned from an earlier breach often only find out when a bank flags a new account opened in their name.
Common red flags
- A channel or bot offers 'full identity kits' bundling passport, selfie, and address proof for a flat fee
- Sellers claim documents can 'pass any KYC' or bypass liveness checks
- Payment is requested only in cryptocurrency through an in-chat escrow bot
- Channel names and usernames rotate frequently to dodge takedowns
- Marketing mentions specific banks or exchanges the kits are 'tested' against
- You receive a bank or account-opening confirmation for something you never applied for
How to protect yourself
- Freeze your credit files with the major bureaus so cloned documents cannot be used to open new credit
- Set up account alerts with your bank so any new application under your name triggers a notification
- Never upload a full, uncropped passport scan to any website; redact the document number when a copy is unavoidable
- Search your name and passport number periodically in breach-notification tools to catch leaks early
- Report any Telegram channel selling identity documents directly through Telegram's in-app report tool
- If you suspect your passport data was cloned, contact your passport-issuing authority to flag the document
How to report it
- Report the channel or bot in-app via Telegram's Report feature (chat menu > Report > Illegal Content)
- File a report with your national identity-theft reporting body (e.g., IdentityTheft.gov in the US)
- Notify your passport issuing agency so the document number can be flagged for extra scrutiny
- Report to your local cybercrime unit if a financial account was opened using the cloned document
Frequently asked questions
Is it illegal just to be a member of a Telegram channel that sells cloned documents?
Simply being added to or viewing such a channel is not typically a crime, but actively buying, selling, or using cloned documents is illegal in most jurisdictions. If you find yourself in one of these channels, the safest move is to leave immediately and report it rather than continuing to browse.
What should I do if a bank tells me an account was opened using my passport details?
Ask the bank in writing to close the account and flag it as fraudulent, then request copies of any application documents used, as these can show exactly which details were compromised. File an identity theft report and contact your passport-issuing authority so your document number is flagged, since the same cloned document is often reused elsewhere.
How can I tell if a Telegram 'ID verification' bot is legitimate or part of a document-cloning scheme?
Legitimate identity verification is almost always run by the company or platform you're actually dealing with, not a third-party bot inside a Telegram chat. If a bot asks you to upload a passport scan or selfie in exchange for 'verifying' or 'unlocking' something unrelated to a service you initiated, treat it as a scam and do not upload anything.
How do sellers get passport scans in the first place?
Most cloned documents originate from data breaches, phishing sites disguised as ID-verification portals, or malware that scrapes cloud storage and email attachments for scanned documents.
Can a cloned passport really pass video verification?
Basic checks can sometimes be fooled with deepfake overlays or injected video, which is why many banks and exchanges are moving to liveness challenges that are harder to spoof, though no method is foolproof.