Federal prosecutors in Manhattan say an online fake ID factory has gone from shady corner of the internet to national security headache.
On Thursday, the U.S. Attorney in Manhattan, Jay Clayton, warned that OnlyFake, an online service that produces counterfeit identity documents, now poses a nationwide threat to fraud prevention and public safety. Clayton said, "We rely on government issued IDs daily to combat terrorism, hijackings, fraud, money laundering, and a host of other crimes."
The warning came in a short post on X that named OnlyFake directly and did not mention any arrests, indictments, or charging documents behind the public alert.
We rely on government issued IDs daily to combat terrorism, hijackings, fraud, money laundering, and a host of other crimes. OnlyFake9s manufacture of fraudulent IDs and other documents puts us all at risk. https://x.com/i/status/2027075032510304466
— SDNYNews (@SDNYNews) Feb 26, 2026
What prosecutors said
The U.S. Attorney's Office for the Southern District of New York pushed out the warning on X, explicitly naming OnlyFake and accusing the service of manufacturing fraudulent IDs that threaten both security and commerce.
In the post from U.S. Attorney SDNY, prosecutors framed the spread of these fake documents as a danger to investigations and to everyday public safety. They did not share any concrete details about ongoing enforcement efforts, seizures, or specific criminal cases tied to the site.
The OnlyFake blueprint
Earlier this year, reporters digging into OnlyFake’s operation found that the service could generate realistic ID images in a matter of minutes, alter image metadata so files looked like they were snapped on a smartphone, and present the IDs on convincing everyday backgrounds. That mix of tricks helped one reporter breeze through a cryptocurrency exchange's know-your-customer (KYC) checks.
As reported by 404 Media, OnlyFake advertised bulk ID generation and claimed to use “neural networks” to churn out large volumes of documents. Tech outlets that tested the system found that these images sometimes slipped past automated ID verification tools, which amplified concerns that the service could be abused at scale.
Why it matters
Realistic, mass-produced fake IDs do not just mean teenagers trying to sneak into bars. Prosecutors and security experts warn they can be used to open bank and crypto exchange accounts, hijack online profiles, or launder criminal proceeds, risks that stretch far beyond New York courtrooms into the broader financial and travel systems.
Citing one test of the technology, coverage from Cointelegraph documented how OnlyFake-generated images were able to fool at least one KYC flow at a crypto exchange. Verification vendors have separately warned that systems relying on static image uploads, rather than real-time checks, remain especially vulnerable. That weak spot is exactly what the Manhattan prosecutors flagged as particularly dangerous in their social media warning.
Industry response and defenses
Security researchers say fighting this kind of fraud means going well beyond simple picture matching. They point to tools like liveness checks that prove a real person is present, machine-readable barcode or chip verification, and cross-checks against trusted government databases as ways to reduce the chance that generated images succeed at scale.
Identity verification vendors such as IDScan recommend layered systems that combine automated detection with human review for higher-risk transactions, rather than trusting a single algorithmic check. Specialists at Resistant.ai have also urged platforms targeted by KYC abuse to tighten rules around bulk account creation and bulk document uploads, to blunt exactly the sort of large-scale misuse that OnlyFake appears built to enable.
Legal angle
Under federal law, producing, transferring, or trafficking in false identification documents and related authentication features is a crime that can carry up to 15 years in prison, and more in aggravated cases. Those penalties are spelled out in statutes such as 18 U.S.C. § 1028.
Prosecutors can also stack on charges tied to money laundering or conspiracy if they can show the fake IDs were used to move illicit proceeds, with those crimes carrying their own potential sentences. In its public comments, the SDNY office cast OnlyFake’s alleged manufacturing of fraudulent IDs as the sort of conduct that fits squarely within those federal identity fraud laws.
The U.S. Attorney's Office has not released any additional information about possible indictments or defendants connected to OnlyFake. Prosecutors suggested that more details could follow as investigations progress. For now, the notice on X is the clearest public warning from U.S. Attorney SDNY, and any formal charging documents would be expected to appear later in federal court filings or an official Department of Justice press release.
