> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Developer Sought on a Breach Forum to Build a Mexican KYC Bot Capturing ID Scans and Face Biometrics
- URL: https://darkwebinformer.com/developer-sought-on-a-breach-forum-to-build-a-mexican-kyc-bot-capturing-id-scans-and-face-biometrics/
- Published: 2026-08-20T16:20:21.000Z
- Updated: 2026-08-20T16:23:43.000Z
- Author: Dark Web Informer
- Tags: Cybercrime

Recruitment Watch ![Mexico flag](https://flagcdn.com/w40/mx.png)Mexico Telecom / Identity Verification Hiring Post 

## Developer Sought on a Breach Forum to Build a Mexican KYC Bot Capturing ID Scans and Face Biometrics

A member posting as **Cookiegen131** is recruiting a developer to build a **Telegram based identity verification system for a stated Mexican telecom project**. The specified flow collects **front and back images of the INE national identity card**, runs OCR validation, then opens a live camera session for **liveness checking and face comparison against the document**, before passing the result to a telecom registration workflow. The request is technically ordinary and the post carries an **unusually explicit instruction against deepfakes, spoofing or anything designed to defeat a verification provider**. Nothing in the specification is inherently illegitimate. The venue, and what the finished system would accumulate, are why it is worth noting.

Concern ELEVATED 

[ ![WhiteIntel sponsor banner](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/whiteintel_io_banner.jpg) ](https://whiteintel.io/?utm%5Fsource=darkwebinformer.com&utm%5Fmedium=referral&utm%5Fcampaign=whiteintel) 

MarketMexico

DocumentsINE front and back

BiometricsLiveness, face match

PosterCookiegen131

### ▣Post details

TypeDeveloper recruitment

Country![Mexico flag](https://flagcdn.com/w40/mx.png)Mexico

Stated purposeTelecom KYC registration

Front endTelegram bot plus web step

Deliverables14 components listed

TermsNDA offered, budget unstated

ObservedAug 18, 2026

PosterCookiegen131, 7 posts

### !Specified components

- Telegram bot front end
- INE front and back capture
- OCR document validation
- Real time camera session
- Liveness verification
- Document to face comparison
- Secure document storage
- KYC state machine
- PostgreSQL schema
- Admin verification dashboard
- Logging and audit system
- Encryption at rest
- Docker deployment
- Sandbox with test identities

### ◱Screenshots

[ ![Mexico KYC telegram bot developer recruitment forum post screenshot, August 2026](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/7892365976258925987626395789287351.png) Screenshot 1 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/7892365976258925987626395789287351.png) [ ![Listed deliverables and hiring requirements in the KYC bot recruitment post](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/7892365976258925987626395789287352.png) Screenshot 2 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/08/7892365976258925987626395789287352.png) 

### ⚠Why it matters

Whatever the intent, the finished system would **accumulate a KYC grade identity set on every Mexican citizen who passes through it**: both faces of the national identity card, the parsed data behind it, and a live face capture proving the person was present. That combination is precisely what account opening and SIM registration checks are built to demand, so **whoever controls the resulting database controls the means to pass those checks**. The delivery route compounds it, because an end user has no way to distinguish a legitimate Telegram identity bot from a harvesting one, and **the same architecture serves both without a line of code changing**. Mexican context matters too: the country's mandatory biometric SIM registry was struck down as unconstitutional in 2022, so a telecom flow requiring biometric capture invites questions about the legal basis being relied on.

### iAssessment

Unverified 

Two readings fit the evidence and **neither can be settled from the post**. Taken at face value, this is a straightforward contracting request, and the specification argues for it: the explicit prohibition on synthetic media and bypass mechanisms, the insistence on genuine capture, and a sandbox built on fictional identities are not what someone building a harvesting funnel would normally write down. Against that, **a lawful telecom project has ordinary hiring channels available**, and recruiting on a forum devoted to breached data is a choice that needs explaining. No operator, budget or client is named, and the account is small and recent. Dark Web Informer **is not reproducing the contact handle**, and notes that **no compromise of any Mexican carrier or identity system is claimed or implied here**.

Want everything on this listing? **Paid subscribers** get the full claim details and more. Check out the [threat feed](https://darkwebinformer.com/threat-feed/), then after subscribing, search there for this alert. [View pricing →](https://darkwebinformer.com/pricing) 

[DARK WEB INFORMER](https://darkwebinformer.com/) \- THREAT INTELLIGENCE