Just as Mexico debates whether it's a good idea to use biometric data in the CURP, identity trafficking is becoming increasingly sophisticated… and automated. A bot on Telegram (operated by the same individual who sells databases on the Russian forum XSS under the alias Sosyopat) is offering complete "identity packs" for Mexicans at just 7 dollars, around 134 pesos.
Each package includes several personal documents of the same individual: their INE, driver's license, selfies, and even photos of their cars. Beyond the price, what is truly alarming is how easy it has become to access this information and how poorly protected the data of millions of people is.
Buying an Identity Is as Easy as Clicking
The Telegram bot operates like an online store: you can purchase individual documents for just $3.30 each (about 63 Mexican pesos), or get the full “combo” pack. Everything is automated—no need to talk to anyone, just pay with cryptocurrency and you're done.
The most disturbing part is that the system now has OCR technology, which means it can read the documents and display names and data before you buy. This allows you to more accurately choose whom you want to impersonate. Literally, you’re given the option to “browse” through identities as if they were products in a catalog. And all of it, without having to interact with a single human being.
Read more: 50 Thousand Mexican Passwords Leaked on Government Sites .gob.mx
According to the bot’s own administrators, they already have complete identities for at least 3,927 Mexican individuals. And what's concerning is that this number keeps growing. They are constantly updating the database with new leaks.One possible source is a case already under scrutiny: the alleged hack of the Partrunner Mexico platform, a company involved in mobility and vehicle services. If confirmed, this could explain why there are so many car photos included with the personal documents.
Telegram Bot Sells Complete Identities of Mexicans for Just 134 Pesos (Source: Publimetro Mexico)
Extortion for $50,000 Following Massive Driver’s License Theft
On April 28, it was revealed that the operators behind the Telegram bot had allegedly stolen at least 5,000 driver’s licenses from the company Partrunner Mexico. Messages circulating at the time included a video showing folders full of names, IDs, and car photos. The hackers demanded a ransom of $50,000 to prevent the database from being published. Apparently, the company did not pay, because the same information shown in that video ended up being released through the Telegram bot.
Read more: Malware a la Carte for 100 Pesos: New Hacker Service
Telegram: The New Identity Marketplace
This bot, linked to the user @sosyopat3, features a simple interface that allows you to select a country, type of document, and even search by name. Unfortunately, Mexico is one of the most complete and active databases they have. The most alarming part is how easy it has become to access this information—anyone with a phone and 134 pesos can impersonate a Mexican citizen. That’s how low the price is, and how high the risk.