Exploring Fake IDs in Biometric Testing: Insights and Lessons Learned
At 3Qi Labs, we’ve been involved in several biometric testing projects, particularly those focused on facial detection and ID verification platforms. In a recent project, we had to order fake IDs to evaluate the ID detection capabilities of the platforms we were testing. While we do not condone or encourage the use of fake IDs for any illegal purposes, this process revealed interesting insights—and some unexpected challenges. We’re sharing this experience to help others understand the risks involved and the critical role such tests play in ensuring the robustness of biometric authentication systems.
What Are Fake IDs?
A fake ID is a non-government-issued identification card designed to mimic an official ID. Several online vendors provide these fake IDs, requiring users to submit personal details and select a state of issuance. While the concept may sound intriguing from a testing perspective, fake IDs cannot be used for legitimate purposes and pose significant risks if misused.
Fake ID Vendors: A Look at the Market
Below are some of the common vendors offering fake IDs, along with our observations:
1. Fake Your Drank
- Price Range: $50–$100 (varies by state and quantity)
- Payment Methods: Bitcoin (BTC), Litecoin (LTC), MoneyGram, Western Union
- Experience: IDs took 3–4 weeks to arrive despite express shipping. The quality was high and able to spoof several biometric platforms.
2. ID King
- Price Range: $80–$100 (varies by state and quantity)
- Payment Methods: BTC, Western Union
- Experience: Delivery took 6–8 weeks. The quality was lower than Fake Your Drank but still effective in some spoof scenarios.
3. Fake Your ID
- Price Range: $50–$125 (varies by state and quantity)
- Payment Methods: BTC, PayPal, Amazon gift cards, other gift cards
- Experience: The ID never arrived, suggesting potential fraud risks when ordering from such vendors.
4. King of Fakes
- Price Range: $100–$150 (varies by state and quantity)
- Payment Methods: Western Union, MoneyGram
- Experience: This service was not used, so no quality assessment is available.
5. Freedom Fakes
- Price Range: $100 (varies by state and quantity)
- Payment Methods: MoneyGram
- Experience: This service was not used, so no quality assessment is available.
How Fake IDs Are Used in Biometric Testing
Biometric platforms that incorporate ID verification often need to differentiate between genuine and fake IDs. Fake IDs can serve as a valuable tool for spoof testing, where the system’s robustness is evaluated against counterfeit inputs.
Testing Scenarios
- Validation of Original IDs: Systems must correctly verify legitimate government-issued IDs.
- Spoof Detection: Using fake IDs, testers evaluate whether the platform identifies fraudulent inputs and flags them appropriately.
One surprising finding was that many fake IDs include a barcode on the back encoded to match the details on the front. This allows some fake IDs to pass systems that only compare barcode data with front-facing ID data. However, robust platforms should validate IDs against DMV databases to ensure authenticity.
Lessons Learned and Takeaways
- Importance of Robust Testing: Biometric platforms used for high-security purposes must incorporate spoof testing to prevent fraudulent access. Fake IDs are a critical component in evaluating the system’s ability to detect counterfeit inputs.
- Risks of Fake ID Vendors: Many vendors require payment through cryptocurrency, which can be volatile and introduce additional risks, including fraud. For example, Bitcoin’s value surged from $5,500 (at the time of purchase) to $12,500 by the time the IDs were delivered.
- Need for Stronger Validation: Systems must go beyond surface-level checks, like barcode validation, and verify IDs against official DMV databases to prevent fake IDs from passing.
Conclusion
While the use of fake IDs may seem controversial, their role in biometric testing is invaluable. These tests ensure that authentication systems are prepared to handle real-world scenarios, reducing fraud and enhancing security.
At 3Qi Labs, we specialize in biometric and spoof testing, leveraging our experience to improve the reliability and robustness of authentication systems. If you’re interested in learning more or need assistance with your biometric testing needs, feel free to contact us.
