Forging an Identity

by SistemRoot

Many hackers don't limit themselves to the world of computers and networks but explore weaknesses in all systems.

I was intrigued with obtaining false identification so I set out to figure out a way it could be done.  But how can you possibly duplicate an identification card with all the ways they try to prevent this from being done such as holograms?  Well... you don't.

With all the protection they have to keep anyone from reproducing an ID, the two documents you need to obtain an actual ID are easily forged, making all those anti-counterfeiting methods useless.

First, the birth certificate.

Depending on the year and location of birth, the paper and style of the certificate varies.  The one I worked with is nothing more than a photocopy on regular paper with a raised seal.  Using GIMP or Photoshop and a typewriter, it can easily be reproduced.

The same thing applies with the Social Security card.  It takes some time tweaking the color to get it right.  The paper is simply non-glossy card stock.

With a paper-cutting tool found at office supply stores, a perforated edge can be created.  However, getting a raised seal on a birth certificate takes some social engineering, a small manufacturing company of paper embossers, and a TracFone.  If you want a real registered copy, it is easy to get with the right information

With these two documents anyone can get a photo ID.

Standard state photo IDs are offered at License Bureaus and once someone has obtained a false photo ID, it isn't hard to gain other forms of ID to back it up.  But of course this is just an ID and unless they have used an actual Social Security number and real information on the birth certificate, it won't pass when opening bank accounts and signing up for certain jobs.

For someone to do this, they would need to find information on a person who was born around the same time as they were and died under the age of six months or passed away in a different state from their birthplace.

Because of this, there wouldn't be any state or work records of them being deceased.  This information can be found at the library's newspaper archives under the obituary section.  Pretending to be this person, they could write the county courthouse and request and obtain an actual registered copy of the birth certificate.

Getting an actual Social Security number isn't hard ether.  Anyone can apply for a Social Security number over the phone and getting a Social Security card can be done by mail.

Now the person would have a new identity and the means for getting a driver's license, passport, state ID, bank accounts, credit cards, or basically anything.