FBI Investigates Dark Web Service Offering Millions of Driver’s License Images

The FBI’s New Orleans field office has opened an inquiry into a dark web marketplace that claims to sell scans of more than 153 million U.S. and Canadian driver’s licenses, according to a report by KrebsOnSecurity.

The service, known as Nexus, was promoted on the Russian-language cybercrime forum Exploit in late August. Its operators claim to offer more than 170 million identity records, including driver’s licenses, other identity cards, travel documents and medical cards. The marketplace allows prospective buyers to search records and view partially redacted previews before purchasing access.

Researchers reviewing the service found that many entries appeared to include multiple versions of identification documents, including front and back scans as well as infrared and ultraviolet images. Some files reportedly carried timestamps that matched dates when affected individuals had traveled or rented vehicles.

Interviews with people whose documents were listed suggested a possible connection to ID scans collected during car rentals, hotel check-ins, airport travel or visits to businesses requiring age verification. However, the precise source of the data has not been independently confirmed.

Nexus operators alleged that the records were being taken from an ongoing compromise at a large Louisiana-based identity verification provider. The company was not confirmed as the source in the report, and the claim remains unverified. The marketplace’s listed driver’s license inventory reportedly increased by hundreds of thousands of records within a day, raising concerns that new data may still be entering the collection.

Potential identity theft risks

High-quality scans of government-issued identification can be valuable to fraudsters because they may support account takeovers, synthetic identity fraud, social-engineering schemes and attempts to bypass identity-verification checks. Documents containing photographs and machine-readable details may create additional risk for affected individuals.

• Monitor credit reports and financial accounts for unexpected activity.
• Consider placing a credit freeze with major credit bureaus.
• Be cautious of unsolicited messages seeking personal information or verification codes.
• Report suspected identity theft through official consumer-protection and law-enforcement channels.

The FBI inquiry is ongoing. Organizations that collect or process identity documents may face renewed scrutiny over how they retain scans, secure verification systems and limit access to sensitive customer data.