The iSOC (iProov Security Operations Center) has uncovered a dark web group amassing a substantial collection of identity documents and corresponding facial images, specifically designed to defeat Know Your Customer (KYC) verification processes. Rather than traditional theft, these identities may have been obtained through compensated participation, with individuals willingly providing their image and documentation in exchange for payment. This group operates in the LATAM region, but similar operational patterns have been observed in Eastern European regions, though direct links between the two groups remain unconfirmed. Law enforcement in the LATAM region has been notified of iProov’s findings.