Passport Identity Cloning Scam via Cryptocurrency
Cryptocurrency is the near-universal settlement method for cloned passport and identity-document sales because it is fast, cross-border, and hard to reverse.
Part of: Passport Identity Cloning
Last reviewed: 5 July 2026
Marketplaces that sell cloned passports and identity kits almost always price their listings in cryptocurrency, since a card or bank payment would leave a traceable trail straight back to the buyer and seller.
How this scam works on cryptocurrency
Listings quote prices in Bitcoin or Monero and route payment through a middleman escrow wallet controlled by the marketplace, which releases funds to the seller only after the buyer confirms the cloned document 'works.' Because Monero transactions are especially difficult to trace, higher-end sellers of full identity kits increasingly demand it exclusively, pricing in fiat but settling only in Monero to avoid blockchain analytics tools used by investigators.
Victims of the underlying identity theft rarely interact with the payment layer directly, but it explains why these operations are so hard to shut down: once a scammer receives crypto for a cloned document, there is no bank or card network to reverse the charge or freeze the account. Some kits are even sold as NFTs or token-gated downloads, requiring the buyer to hold a specific token to unlock the document files, adding another layer of obfuscation.
Common red flags
- A document or identity vendor accepts only cryptocurrency, with no card or bank option
- The seller insists on Monero or another privacy coin instead of Bitcoin
- An escrow bot inside a chat app holds funds and only releases them after a 'confirmation' step
- Prices are quoted with rush or 'guaranteed working' surcharges paid in crypto upfront
- The transaction is framed as buying a 'digital product' or NFT to disguise its real purpose
- You are asked to convert fiat to crypto through an unfamiliar exchange just before the purchase
How to protect yourself
- Never attempt to purchase identity documents of any kind; doing so is itself a serious crime
- If you discover your own documents were cloned and sold, document any crypto wallet addresses mentioned for law enforcement
- Report suspicious crypto-for-documents listings to the exchange used to fund the wallet, as it may violate their terms
- Use blockchain-analysis reporting tools some exchanges offer to flag wallets tied to document fraud
- Work with your bank's fraud team if a cloned document was used to open an account funded through crypto off-ramps
- Keep records of any breach notifications that may explain how your documents were originally cloned
How to report it
- Report the wallet address and marketplace listing to the exchange that processed the crypto, citing their fraud/abuse policy
- File a report with your national financial crimes unit (e.g., FinCEN tip line in the US)
- Report to IdentityTheft.gov or your country's equivalent identity-theft agency
- Notify the platform hosting the marketplace listing (forum, chat app, or website) so it can be taken down
Frequently asked questions
Why do these sellers prefer Monero over Bitcoin?
Monero obscures sender, receiver, and amount by default, making it far harder for investigators to trace payments back to a real identity than with Bitcoin's public ledger.
Can crypto used in these sales ever be traced?
Sometimes. Bitcoin transactions can often be traced with blockchain analytics, and exchanges cooperating with law enforcement have identified buyers and sellers, but privacy coins make this significantly harder.