Why the documents were requested
The request imitates the verification a genuine exchange performs, which is what makes it persuasive. On a fraudulent platform the documents are not used to verify you; they are collected.
A document set with a matching selfie can be used to attempt account openings elsewhere, to add credibility to a fake profile, or to be resold. Treat it as a data compromise rather than a paperwork issue.
What to do now
- Record exactly what was sent, to which platform, and when.
- Report to Action Fraud and describe the document exposure specifically, not only the financial loss.
- Register with Cifas protective registration, which flags your details for additional checks when an account application is made in your name.
- Check your credit file with each of the main UK agencies and set up alerts for new applications.
- Tell your bank that your identity documents have been exposed so it can note the account.
- If a passport or driving licence has been misused rather than only exposed, report that to the issuing authority.
What not to do
- Do not send further documents to "cancel" or "close" the account.
- Do not accept help from anyone who contacts you afterwards offering to remove your data for a fee.
- Do not share a seed phrase, private key or remote access to your device with anyone, for any reason.
How this affects an investigation
The document exposure does not usually change the onchain picture, but it does belong in the written record. Where we produce an evidence pack, we note what was disclosed and when, because it is relevant to a bank, a solicitor or a police report.
We do not need copies of your identity documents to assess a case. What we need are transaction hashes, addresses and a timeline.
If you are looking at your own case rather than reading generally, our cryptocurrency investigation service explains how a case is scoped and worked, the asset tracing hub covers the network-specific work, and our overview of cryptocurrency scam recovery in the UK sets out what is realistic. Asset pages: USDT tracing, Bitcoin tracing and Ethereum tracing. You can also contact the investigations team directly.
Common questions
- Can the documents be deleted from the platform?
- Realistically, no. Assume the data is retained and act on that basis with protective registration and monitoring rather than waiting for a deletion request to be honoured.
- Do I need a new passport?
- Exposure alone does not usually require replacement. If you have evidence the document has been used to impersonate you, report it to the issuing authority and follow its guidance.
- Should I send Wallsec my ID as well?
- Not to assess a case. We work from transaction hashes, addresses and your account of events; identity checks only arise if we take on paid work, and we explain them in writing first.
Have a case you want reviewed?
We scope at intake and tell you honestly whether the onchain data supports a traceable case.
Key terms in this guide
Plain-English definitions from the Wallsec glossary.