Expert Demonstrates KYC Bypass with AI-Generated Passport Replica in Just 5 Minutes

TL;DR

Polish researcher Borys Musielak used ChatGPT-4o to generate a fake passport in just five minutes, highlighting significant flaws in digital ID verification systems that rely on photo and selfie matching. This demonstration underscores the need for more robust security measures, such as NFC-based verification and electronic identity documents (eIDs).

Main Content

Researcher Exposes KYC Vulnerabilities with AI-Generated Passport

Polish researcher Borys Musielak (@michuk) recently demonstrated the vulnerabilities in digital ID verification systems by using ChatGPT-4o to generate a fake passport in just five minutes. The document was realistic enough to bypass most automated Know Your Customer (KYC) checks, raising serious concerns about the security of current verification processes.

Musielak shared his findings on X, stating, “You can now generate fake passports with GPT-4o. It took me 5 minutes to create a replica of my own passport that most automated KYC systems would likely accept without blinking.” He emphasized that any verification flow relying on images as “proof” is now obsolete, including selfies, whether static or video. Generative AI can easily replicate these, making photo-based KYC systems ineffective.

You can now generate fake passports with GPT-4o.

It took me 5 minutes to create a replica of my own passport that most automated KYC systems would likely accept without blinking.

The implications are obvious –any verification flow relying on images as “proof” is now officially… pic.twitter.com/SNnH8zYMGq

— Borys Musielak @ Warsaw (@michuk) April 1, 2025

Implications for Digital ID Verification

The AI-crafted document closely mimicked a real passport, exposing major flaws in digital ID verification systems that rely solely on photo and selfie matching without chip validation. Musielak highlighted that unlike typical forgeries, which often contain detectable flaws, AI can generate convincing fakes more efficiently than traditional tools like Photoshop.

Tech News reported that the fake passport generated using ChatGPT-4o successfully bypassed basic KYC checks used by fintech platforms like Revolut and Binance, which depend on photo ID uploads and user selfies. Musielak warned of the rising threat of mass identity theft, fraudulent credit applications, and fake account creation, which are now more scalable with generative AI. Experts are calling for stronger defenses, including broader use of NFC-based verification and electronic identity documents (eIDs), which offer more resilient, hardware-level authentication.

Notably, within hours of Musielak’s demonstration, ChatGPT started rejecting comparable prompts, referencing its safety policies against generating fake documents.

Call for Enhanced Security Measures

Musielak emphasized the need for digitally verified identities, such as eID wallets mandated by the EU. He mentioned that companies like @authologic are ahead of this shift. “If you’re running KYC in banking, insurance, travel, crypto, or anywhere else — it’s time to upgrade your process. Your users deserve better. So does your compliance team,” he advised.

Conclusion

The demonstration by Borys Musielak highlights the urgent need for enhanced security measures in digital ID verification systems. As generative AI continues to advance, traditional photo-based KYC methods are becoming increasingly vulnerable. Implementing more robust verification processes, such as NFC-based verification and eIDs, is crucial to protect against identity theft and fraud.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

SecurityAffairs – hacking, ChatGPT-4o

For more details, visit the full article: source

Additional Resources

For further insights, check:

• Security Express
• Security Affairs on AI Influence Operations

References