A threat actor is advertising an alleged Mexican citizenship and passport document service, claiming to provide officially verified identity documents through in-person collection at government offices. The listing describes a package involving biometric passport, CURP, driver’s license, citizen ID, naturalization certificate, utility bill, and other supporting document claims.

• Biometric passport service claims
• CURP registration references
• Driver’s license and citizen ID card claims
• Naturalization certificate references
• Utility bill and address proof document claims
• Bank account and exchange registration references
• Additional education, company, license, and paperwork-related service claims

The advertisement centers on alleged identity-document services rather than a database leak. If credible, this type of offering could support identity fraud, immigration fraud, financial account abuse, impersonation, and related social-engineering activity.

Unverified underground forum advertisement. The actor claims the service involves identity document support and government-office collection, with contact handled through Telegram.