OKX and OnlyFake · AI used against the institution · severity 1 of 5
404 Media reported on 5 February 2024 that it used a fake identity document generated by OnlyFake, an underground site claiming to use "neural networks" to make photos of fake IDs for $15, to step through the identity verification process at crypto exchange OKX. Per Benzinga and Cointelegraph, the document was a British passport image. An OKX spokesperson told Benzinga the industry uses compliance vendors to screen IDs and that fake IDs are an industry-wide issue. In February 2026 the U.S. Attorney for the Southern District of New York said OnlyFake's operator had pleaded guilty to a fake-ID fraud conspiracy, stating that the site's documents "allowed individuals to circumvent KYC programs" at banks and crypto exchanges. No loss at OKX was reported.
Record last reviewed Oct 21, 2026 · Markdown
Date
Institution
OKX, OnlyFake
Country
Several countries
AI system
OnlyFake · Image generator the site claimed used 'neural networks' to produce photos of fake identity documents
AI?
Machine-learning system (inferred from the record)
The sources describe a machine-learning model; nobody on the record labelled it AI.
Status
Reported
Severity
1 of 5
Impact
No customer harm or loss at OKX reported · A journalist account passed OKX identity verification with a fake document. Per the DOJ, OnlyFake generated at least about 10,000 digital fake IDs that let customers circumvent bank and crypto-exchange KYC programmes.
What happened?
On 5 February 2024 404 Media published an investigation into OnlyFake, a site that claimed to use "neural networks" and "generators" to produce realistic photos of fake IDs for $15. 404 Media said it verified that the site produced fake IDs nearly instantly, and that it then "used another fake ID generated by this site to successfully step through the identity verification process on OKX".[1]
Follow-up coverage described the document used at OKX as a British passport photo generated by OnlyFake. The site's pseudonymous owner, "John Wick", claimed to 404 Media that its IDs could also pass checks at other exchanges and at Revolut; those claims were the seller's and were not tested by 404 Media in the reporting cited here.[3][4]
On 26 February 2026 the U.S. Attorney's Office for the Southern District of New York announced that Ukrainian national Yurii Nazarenko, also known as "John Wick", had been charged and had pleaded guilty for his role in operating OnlyFake. Prosecutors said the site generated at least about 10,000 digital fake IDs from about 2021 to 2024, earned hundreds of thousands of dollars, and that its documents let customers circumvent the Know Your Customer programmes of banks and crypto exchanges. The DOJ release does not name OKX.[2][5]
When did it happen?
- Feb 5, 2024
404 Media reports that an OnlyFake-generated ID passed OKX's identity verification.[1]
- Feb 6, 2024
An OKX spokesperson tells Benzinga that fake IDs bypassing security are an industry-wide issue.[3]
- Sep 2025
OnlyFake's operator is extradited from Romania to the United States, per the DOJ.[2]
- Feb 26, 2026
SDNY announces that OnlyFake's operator has pleaded guilty to conspiracy to commit fraud in connection with identification documents and agreed to forfeit $1.2 million.[2][5]
What was the impact?
- Customers: No customer harm or loss at OKX reported[1][2]
- Other: A journalist account passed OKX identity verification with a fake document. Per the DOJ, OnlyFake generated at least about 10,000 digital fake IDs that let customers circumvent bank and crypto-exchange KYC programmes.[1][2]
Severity 1 of 5: Contained: a journalist's demonstration with no reported loss or customer harm at OKX; the related criminal case concerns the fake-ID seller, not the exchange.
How did OKX and OnlyFake respond?
An OKX spokesperson told Benzinga that the industry uses compliance vendors to screen IDs and that using fake IDs to bypass security was an industry-wide issue. We found no OKX statement describing changes to its verification process as of 2026-10-21 (searched OKX coverage on Cointelegraph and the wider press).[3]
What was the outcome, and did regulators act?
No regulatory action against OKX over the 404 Media test has been reported. The seller was prosecuted: per the U.S. Attorney's Office, OnlyFake's operator pleaded guilty, agreed to forfeit $1,200,000 and faces a maximum of 15 years in prison, with sentencing scheduled for 26 June 2026. We found no published report of the sentence as of 2026-10-21.[2][5]
Did an AI-generated fake ID really pass OKX's KYC checks?
404 Media reported in February 2024 that it used a fake ID generated by OnlyFake to successfully step through OKX's identity verification. OKX did not dispute the test; a spokesperson told Benzinga fake IDs bypassing security were an industry-wide issue and that the industry relies on compliance vendors.
Was OnlyFake actually AI?
OnlyFake claimed to use "neural networks" and "generators" to create its images, and 404 Media and later BleepingComputer described it as AI-powered. The U.S. Attorney's release does not describe the technology; it calls the products "Digital Fake IDs" and says they were customisable scans or photographs.
Was any money lost at OKX because of the fake ID?
No loss was reported. The OKX case was a journalist's demonstration. Prosecutors said OnlyFake's documents were used more broadly to circumvent bank and crypto-exchange KYC and to launder money, but the DOJ release does not name OKX or quantify losses at any institution.
What happened to the operator of OnlyFake?
Per the U.S. Attorney for the Southern District of New York, Yurii Nazarenko pleaded guilty in February 2026 to conspiracy to commit fraud in connection with identification documents, agreed to forfeit $1.2 million, and faced a maximum of 15 years in prison, with sentencing set for 26 June 2026.
- Inside the Underground Site Where 'Neural Networks' Churn Out Fake IDs news
- Creator Of "OnlyFake" Charged And Pleads Guilty To Selling More Than 10,000 Digital Fake Identification Documents official
- AI-Generated Fake IDs Bypass Crypto Exchange KYC Checks, OKX Says Industry-Wide Issue news
- AI-generated fake IDs confound crypto exchange KYC measures news
- Ukrainian man pleads guilty to running AI-powered fake ID site security research
When AI goes wrong at a bank, the next morning's brief says so.
when one of these regulators moves, the next morning's brief says so · six sourced stories · 7 am PT · free
plus every regulation, bank and agent page update, the morning after · leave any morning