The U.S. Attorney\u2019s Office for the District of New Mexico announced Thursday that federal authorities have executed a court-authorized seizure of two domain names and one affiliated blog associated with VerifTools, an online marketplace peddling counterfeit driver\u2019s licenses, passports, and other state- and country-issued identity documents.\u00a0<\/p>\n
Operating under the banner of VerifTools since 2020, the enterprise leveraged the anonymity of cryptocurrency<\/a> and underground DNS infrastructures to facilitate identity fraud on a global scale.<\/p>\n The Federal Bureau of Investigation (FBI) initiated Operation Iron Seal in August 2022 after uncovering a conspiracy to exploit stolen Personally Identifiable Information (PII)<\/a> for unauthorized access to cryptocurrency accounts and illicit transfers on the blockchain.\u00a0<\/p>\n VerifTools advertised counterfeit digital and physical IDs for all 50 U.S. states and multiple foreign jurisdictions, accepting payments in Bitcoin (BTC) and Monero (XMR) via privacy-enhanced wallets.\u00a0<\/p>\n According to court filings, the marketplace generated at least $6.4 million in illicit proceeds. Agents obtained and verified VerifTools\u2019 backend source code through a controlled purchase of counterfeit New Mexico driver\u2019s licenses priced at just $9 per document.\u00a0<\/p>\n Using cryptocurrency mixing services and Tor\u2010based hidden services, operators obscured transaction trails and server locations.\u00a0<\/p>\n FBI analysts deployed standard DNS sinkholing<\/a> techniques to redirect VerifTools\u2019 top-level domains (TLDs) to a government-controlled server, effectively neutralizing the sites and preserving evidence.<\/p>\n \u201cIf you build or sell tools that let offenders impersonate victims, you are part of the crime,\u201d Acting U.S. Attorney Ryan Ellison stated, citing a seizure warrant.<\/p>\n Philip Russell, Acting Special Agent in Charge of the FBI\u2019s Albuquerque Division, highlighted the technical complexity of dismantling such platforms:<\/p>\n \u201cThe removal of this marketplace is a major step in protecting the public from fraud and identity theft crime. We leveraged advanced cyber forensics packet capture (PCAP<\/a>) analysis, deep packet inspection (DPI), and WHOIS record mapping to identify infrastructure nodes and operators.\u201d<\/p>\n The sale or transfer of possession of false identification documents carries penalties of up to 15 years imprisonment.\u00a0<\/p>\n The Justice Department\u2019s Office of<\/a> International Affairs facilitated mutual legal assistance requests, while prosecutors consolidated charges, including Conspiracy to Commit Aggravated Identity Theft<\/a> and Money Laundering.<\/p>\n The FBI\u2019s Albuquerque Field Office led the technical takedown, executing covert operations to seize control of VerifTools\u2019 DNS records and preserving forensic images of server hard drives.\u00a0<\/p>\n Domain registrars were served with ex parte seizure orders, and updated WHOIS entries now reflect registry status: \u201cCONFISCATED BY THE UNITED STATES GOVERNMENT.\u201d\u00a0<\/p>\n Authorities continue to pursue the remaining cybercriminal network responsible for distributing these tools worldwide.<\/p>\n Find this Story Interesting! Follow us on Google News<\/a>,\u00a0LinkedIn<\/a>,\u00a0and\u00a0X<\/a>\u00a0to Get More Instant Updates<\/strong>.<\/p>\n The post U.S. Government Seizes Online Marketplaces Used to Sell Fraudulent Identity Documents to Cybercriminals<\/a> appeared first on Cyber Security News<\/a>.<\/p>\n<\/div>\nKey Takeaways
<\/mark><\/strong>1. Seized VerifTools domains, blocking $6.4 M in fake-ID sales.
2. FBI used DNS sinkholing and Tor forensics.
3. US-Dutch law enforcement collaboration on identity theft and money laundering charges.<\/pre>\n\u00a0FBI Takes Down VerifTools Dark Web Marketplace<\/strong><\/h2>\n
![\"VerifTools](\"https:\/\/i0.wp.com\/cybersecuritynews.com\/wp-content\/uploads\/2025\/08\/image-23-1024x576.png?resize=1024%2C576&ssl=1\")