Welcome back to Fraudology.

I’m joined this week by Frank McKenna of Frank on Fraud and Point Predictive, because this was one that I needed a second brain to process it all with me.

I was heads-down working on the Merchant Fraud Alliance agenda when my phone would not stop buzzing. It was a group chat with the people I trust to tell me when the big deals are happening versus just internet noise. And this time, it was a big deal. Brian Krebs had uncovered a dark web portal selling real driver’s licenses. Front, back, barcode, and all. For the price of about a hundred dollars each. That’s roughly 60% of the entire US population sitting in a database that almost anyone could buy.

The rest of this episode is really two stories that are more connected than you realize once you start looking deeper. The data breach itself is only half of the story. The other half is understanding the vendor working behind the scenes of a huge number of household-name businesses, handling their identity verification. That’s what makes this breach so much bigger than it looks on the surface. Then we shift to the scam that has been on my mind since Frank first flagged it last year. Digital arrest is a form of psychological captivity scam that’s now officially made the leap from India to the United States, with real victims and real seven-figure losses to prove it.

Buckle up, because the way to start fighting this is to know what we are up against.

What you’ll hear in this episode:

• How a supply chain breach at an identity verification vendor exposed 153 million physical driver’s licenses, and why that’s different from a typical retail data breach.
• Why forged identification cards used to be the thing fraud detection software looked for, and why that entire approach breaks down when the ID being used is real.
• How AI deepfake drivers license techniques let someone swap their face onto a real, stolen license and pass a liveness check.
• What digital arrest actually is, and why I was wrong to assume it would stay contained.
• Real case studies of US victims, including a woman held under surveillance for two months and who lost $4.2 million.
• How digital arrest has evolved into homegrown versions, including police impersonation and FBI impersonation calls, plus jury duty bail scams.
• The scam compounds and pig butchering scam infrastructure in Cambodia that’s now being repurposed for new scam types.
• Why some of the jury duty and bail scam calls are reportedly coming from contraband cell phones inside US prisons.

You should listen to this episode if you:

• Are working in identity verification, KYC, or fraud prevention and need to think what “the ID is real” actually proves.
• Are a fraud and risk professional at a bank who may be the first to see a victim of digital arrest scams withdrawing large sums under duress.
• Someone who wants to understand how a breach at one vendor can quietly expose customers of dozens of major, recognizable brands.
• Are part of a consumer-facing team and may need to train frontline staff to recognize a customer who’s on the phone with a scammer while standing at the counter.