Many corporate identity checks end with one request: send a passport, identity card, or company document. If the scan is clear and the name matches, the process moves on.
Europol announced on 4 June 2026 that a French-led investigation supported by Spain and Europol had dismantled a production facility in Alicante and seized around 800 forged European documents, equipment, and digital devices. Authorities suspect an online platform supplied physical and digital false documents across Europe; final responsibility remains subject to judicial process.
The case concerned migrant smuggling, but the corporate lesson is broader. When forged documents can be produced and sold as a service, a KYC process that checks only an image is collecting files, not verifying identity.
What decision-makers should know
Identity checks for directors, agents, investors, and counterparties should follow five principles:
- Document authenticity is only the first layer; the person, company, address, and behaviour must align.
- A high-resolution scan does not prove provenance.
- Contradictory traces across platforms are material risk signals.
- A video call does not replace callbacks, liveness checks, and independent verification.
- Preserve original files and transmission records when concerns appear.
1. The investigation began with an online market
Europol said investigators traced a website advertising counterfeit identity documents to Alicante. A search of an apartment rented under a false name revealed an operational workshop, with documents, production equipment, devices, a vehicle, and cash seized.
The important pattern is industrialisation: online advertising, digital delivery, cross-border customers, and physical production. Appearance alone is no longer a reliable control.
2. Why corporate KYC is often defeated by a document
Identity verification is frequently treated as administration. Staff check whether fields are complete and images uploaded, but not why the person is in the transaction, whom they represent, who authorised them, or whether public traces support the story.
Identity is not a card. It is a set of relationships among name, date of birth, address, phone, company, role, device, account, and history.
3. Five layers of identity verification
01
Document
Check format, validity, number structure, machine-readable zones, issuing authority, and file anomalies.
02
Person
Compare face, liveness, known contact channels, historical images, and reasonable age progression.
03
Authority
Confirm the relationship with the company, directors, shareholders, principals, and transaction.
04
Behaviour
Compare login location, response rhythm, language, payment method, and document-delivery path.
05
Independent data
Cross-check registries, professional directories, courts, media, and public digital traces.
4. When should verification be escalated?
- Document country, phone code, bank account, and company location do not align.
- Only newly created email or encrypted channels are accepted.
- The person refuses callback through a published company number.
- The authority chain between directors, agents, and negotiators is unclear.
- Names, transliterations, birth dates, or titles differ slightly across records.
- Urgency is used to obtain payment or sensitive information before verification.
5. Evidence preservation for suspected false identity
Keep original files, not only screenshots. Record filenames, hashes, sender addresses, download links, platform, time, conversations, and version differences. For calls or video meetings, record account identifiers, callback results, and the claimed authority basis.
Where crime, funds, or personal data may be involved, consult qualified counsel, police, or the relevant authority rather than making public accusations.
6. How Relieved Xianyu can assist
01
Identity and entity verification
Cross-check public identity, corporate roles, authority, and digital traces.
02
Document and timeline review
Compare versions, provenance, transmission records, and contradictions.
03
OSINT relationship mapping
Connect people, companies, phones, emails, websites, and social accounts.
04
Pre-transaction due diligence
Clarify whether a counterparty is real and authorised before payment or data release.
7. Final reminder: KYC is meant to exclude the wrong person
KYC is not a complete folder. It is a decision about whether money, authority, and confidential information are being handed to the right person.
Documents can be printed, accounts registered, and titles typed into signatures. A coherent identity leaves relationships over time. Verification tests whether those relationships fit.
FAQ | Fake Documents, KYC, and Identity Verification
Does a passport scan complete KYC?
+
No. It is one lead. Verify the document, person, corporate role, authority, contact channel, and independent data.
Does a video call prove identity?
+
It proves someone appeared. It does not by itself prove name, role, or authority. Use callback and independent checks.
What identity risk do companies miss most often?
+
Agents and authority chains. A real person may still lack authority to represent the claimed company or asset owner.
Should a suspected forgery be published immediately?
+
No. Preserve evidence and consult counsel or authorities to avoid misidentification, defamation, or disruption of an investigation.
Can OSINT prove identity?
+
OSINT can establish consistency and contradictions, but it should be combined with documents, callbacks, registries, and lawful sources.
Can Relieved Xianyu access passport databases?
+
We do not provide illegal or unauthorised database access. Work is limited to lawful public information, authorised data, cross-verification, and risk analysis.
Related Services
RELATED SERVICE
Cross-Border Background Checks
Review people, directors, agents, and counterparties through lawful public sources.
RELATED SERVICE
Commercial Due Diligence
Verify entities, authority, and risk before contracts and payments.
RELATED SERVICE
OSINT Investigation
Map public links among accounts, sites, contacts, and companies.
RELATED SERVICE
Digital Evidence Support
Organise original files, transmission records, and event timelines.
Reference Sources
