Feds Seize VerifTools.Net, Operators Relaunch with VerifTools.com

Authorities in the United States and the Netherlands have seized VerifTools, a marketplace selling fake IDs for cybercrime. The operation links to $6.4M in fraud, but the site has reportedly relaunched.

Following a joint international investigation, authorities in the Netherlands and the United States have seized a major illicit marketplace that sold fraudulent identity documents to criminals worldwide.

The US Attorney’s Office for the District of New Mexico announced on August 28 the takedown of two marketplace domains, veriftools and veriftoolsnet, along with an associated blog. The servers for the operation were seized in Amsterdam in a coordinated effort with the Dutch National Police.

The VerifTools marketplace produced and sold counterfeit driver’s licenses, passports, and other identification documents that could be used to bypass identity verification systems and gain unauthorised access to online accounts.

As we know it, many companies and agencies rely on “Know Your Customer” (KYC) checks that often only require an image of an ID. Criminals used VerifTools to bypass these checks and commit crimes like bank fraud and phishing.

The FBI began investigating in August 2022 after uncovering a conspiracy to use fake identities to access cryptocurrency accounts. As part of their investigation, the FBI used the marketplace to buy counterfeit New Mexico driver’s licenses, paying for them with cryptocurrency.

The probe revealed that VerifTools generated counterfeit IDs for all 50 US states and numerous foreign countries, with documents sold for as little as $9. The FBI has linked the equivalent of approximately $6.4 million in illegal proceeds to the marketplace, and two physical servers, along with more than 21 virtual servers, were confiscated.

Acting US Attorney Ryan Ellison spoke about the operation’s importance, stating, “The internet is not a refuge for criminals. If you build or sell tools that let offenders impersonate victims, you are part of the crime.” Acting Special Agent in Charge Philip Russell of the FBI’s Albuquerque Division also noted that the seizure is a “major step in protecting the public from fraud and identity theft crime.”

The Dutch National Police described VerifTools as one of the largest providers of false identity documents. It is worth noting that in the Netherlands, forgery and false proof of identity carry a maximum prison sentence of six years.

Despite the takedown, the site’s operators have reportedly already relaunched their service under a new domain, veriftoolscom, announced in a Telegram message on August 28.

The relaunch of VerifTools shows that seizing such platforms may not be a permanent solution. In the past, cybercrime forums like BreachForums and XSS.IS were seized but quickly resurfaced without delay.

Still, law enforcement officials have made it clear that they will continue to pursue these platforms wherever they operate, even if they return under new domains.