You placed an order on a fake ID website a few weeks ago. Now the seller is sending strange messages. Maybe they're asking for more money. Maybe you've discovered that the site has your photo, home address or driver's license details.
Your first thought is probably: What can they do with this information?
And your second might be: How do I make them delete it?
Both are reasonable questions. The problem is that you may not know who runs the website, where your information is stored or whether the person messaging you is even the original seller.
You can't undo what you've already shared. But you can limit the damage.
Start by identifying exactly what information may be exposed. Then secure the accounts and financial details connected to it. The right response depends on what the website has and whether anyone is already using it against you.
735+ People Ordered Their Fake ID This Week
First, figure out what the website actually has
Before changing everything or contacting the seller, take stock of what you shared.
A website that has your email address presents a different risk from one that has a photo of your driver's license, your payment details and your home address.
Think back to the order process.
Did you provide only your name and email?
Did you upload a photograph?
Did you enter your date of birth, residential address or details from a government-issued ID?
Did you reuse a password from another account?
Check your order confirmation and previous messages. Save copies of anything that helps establish what you submitted.
You don't need to visit the website again if you suspect it's malicious. Use the emails and records you already have.
This gives you a starting point for deciding what needs attention first.
If they have your email address or password, secure your accounts
An email address on its own doesn't give someone access to your inbox. The risk changes if you also shared a password, especially one you use elsewhere.
Start with your email account. It can be used to reset passwords for other services, so losing access to it can create problems far beyond the original website.
Change the password if you reused it or suspect it has been exposed. Choose a unique password you don't use anywhere else, enable multifactor authentication and check for unfamiliar login sessions, recovery details or forwarding rules.
Then check other accounts where you used the same password and change those too.
If you used a password specifically for that website and nowhere else, you generally don't need to change unrelated passwords just because the site has your email address. The priority is preventing someone from using exposed credentials to get into other accounts.
If they have your photo or driver's license details
A photo and basic personal details can be used to impersonate you, create convincing scam messages or attempt to pass identity checks.
That doesn't mean every person who has your photo can automatically open accounts in your name. What someone can do depends on the information they have and the verification process they're trying to defeat.
If you uploaded a photograph of your driver's license or another government-issued ID, contact the agency that issued it and explain that a copy may have been exposed. Ask whether it recommends replacing the document or taking other precautions.
If your Social Security number was also shared, the risk is more serious because it can be used in attempts to open financial accounts or commit other forms of identity theft.
In the United States, you can place a free credit freeze with each of the three major credit bureaus: Equifax, Experian and TransUnion. A freeze restricts access to your credit report, making it harder for someone to open new credit accounts in your name.
You don't have to wait until fraudulent activity appears to consider a freeze.
If you paid the website, protect your money
The next step depends on how you paid.
If you entered your debit or credit card details directly on the site, contact the card issuer if you suspect the details have been compromised. Explain what happened and ask whether the card should be locked or replaced. Review recent transactions and report any charges you didn't authorize.
If you paid through a bank transfer or another payment service, contact the provider through its official website or app. Ask whether the transaction can be stopped or whether any account-security measures are available.
Don't assume you'll get your money back. Recovery depends on the payment method, timing and circumstances. Still, reporting the issue promptly gives the provider a chance to advise you on available options.
Be particularly cautious if the seller asks for another payment to release an order, remove your information or prevent an alleged report against you. A new payment doesn't guarantee any of those outcomes.
What if the seller threatens to expose you?
This is where the situation can become frightening.
A seller might claim they'll send your information to your family, school, employer or the police unless you pay more money. They may show you a screenshot of your details to prove they have them.
Don't assume the threat is harmless. But don't assume every claim is true, either.
Paying doesn't guarantee that the seller will delete your information or stop contacting you. They may simply ask for more money.
Save the messages, usernames, email addresses, payment demands and relevant website links. Keep screenshots that show the threat and its date. Don't edit the originals or delete the conversation before preserving the evidence.
Avoid sending more personal information or engaging in a prolonged argument. If the messages continue, block the sender after saving the evidence and report the account or website through the appropriate platform or authority.
If someone threatens physical harm, attempts to blackmail you or uses your information for fraud, contact local law enforcement. In the United States, online crimes can also be reported to the FBI's Internet Crime Complaint Center.
If you're worried about possible legal consequences connected to the original transaction, speak confidentially with a qualified attorney in your jurisdiction before making decisions about how to respond. You don't need to handle threats or suspected identity theft alone.
Can you make the website delete your information?
You can ask, but you may not be able to verify that the data has actually been deleted.
If you have a safe, legitimate way to contact the website, you can send a brief written request asking it to delete your personal information and confirm what action it has taken. Keep a copy of the request and any response.
However, be careful about contacting a seller who is already threatening you. Reaching out may give them another opportunity to pressure you or ask for more information. Preserve the evidence and secure your accounts first.
Even if the website claims to have deleted your data, that doesn't prove every copy, backup or message has disappeared. And if the site has no identifiable operator, you may have little practical ability to enforce your request.
If your information is publicly displayed, you have another option: request removal from search results.
Google allows people to request removal of certain personal information, including home addresses, phone numbers, email addresses, confidential government ID numbers and images of identification documents. Its policies also cover some doxxing situations.
Start with Google's personal-information removal guidance.
There is one important limitation: removing a result from Google Search doesn't necessarily remove the information from the website itself. You may need to pursue both routes, depending on the circumstances.
How do you know if someone is already using your identity?
You may not receive a warning when someone first uses your information. Sometimes, the first sign is a message from a bank, an unfamiliar account on your credit report or a charge you don't recognize.
Watch for:
- Password-reset requests you didn't initiate.
- Unexpected account-verification messages.
- Purchases or withdrawals you can't explain.
- New credit accounts or debts you don't recognize.
- Bills or notices for services you never requested.
Don't click links in suspicious alerts to investigate. Open the official bank, payment provider or account website directly and check your records there.
If you discover actual identity theft in the United States, IdentityTheft.gov can help you report it and build a recovery plan. Its guidance explains how to contact affected companies, secure accounts, place fraud alerts and correct fraudulent credit records.
Keep a record of what you find and whom you contact. That will make follow-up easier if the problem spreads to more than one account.
What if you're afraid to report what happened?
Some people hesitate to seek help because they're embarrassed about using a fake ID website or worried about the consequences.
That hesitation is understandable. But don't let it stop you from securing a compromised bank account, protecting your email or responding to identity theft.
You can describe the privacy or financial problem accurately when contacting your bank, payment provider or identity-theft assistance service. If you need advice about possible legal exposure, consult an attorney.
You don't have to pay a seller who threatens you just because you're worried about being judged. Nor should you assume that handing over more money will make the situation disappear.
Focus on the immediate problem: your information, your accounts and your safety.
Ready to Order Your Fake ID?
Frequently Asked Questions
Should I contact the fake ID website and ask it to delete my data?
You can send a brief written request if you have a safe contact, but deletion is hard to verify. Secure your accounts and preserve evidence first.
What should I do first if the site has my email and password?
Change the exposed password, enable multifactor authentication on your email, check for unfamiliar sessions or forwarding rules, and update other accounts that used the same password.
What if I shared a photo of my driver's license?
Contact the issuing agency, ask about replacement or precautions, and consider a credit freeze if a Social Security number was also shared.
How can I tell if someone is already using my identity?
Watch for password-reset requests you did not make, unknown charges, unfamiliar accounts on your credit report, and bills for services you never requested.
What if the seller threatens to expose my information?
Save the messages, do not pay more money, block after preserving evidence, and report threats to local law enforcement or the FBI's Internet Crime Complaint Center if they involve extortion.
Final Thoughts
If a fake ID website has your personal information, you can't be certain what the operator will do with it. You can, however, take steps that reduce the risk.
Secure any account whose password may be exposed. Contact your financial provider if your payment details are at risk. Take extra precautions if you shared government ID information or a Social Security number. Save evidence of threats and report suspected fraud.
And don't confuse a seller's promise with proof that your data has been deleted.
If you landed here after sharing information with a fake ID website, the most useful next step is to work out exactly what you shared and act on that exposure first. You don't need to panic or fix everything at once. Start with the information that could cause the most immediate harm, then work through the rest.