This money app allegedly left passports online like free samples

Thousands of passports and driver’s licenses reportedly got left on the open web by Duc, a money-transfer app—like some deranged Costco where the samples are your legal identity.

TechCrunch says the exposed docs weren’t “encrypted behind military-grade security” or whatever—just sitting out there, available to anyone with a browser and the moral compass of a raccoon in a dumpster.

If you’re wondering who benefits from this, congrats: it’s not you. It’s fraudsters who now get to speedrun the “become you” campaign—new accounts, shady loans, SIM swaps, the whole identity-theft tasting menu.

Duc’s entire job is to move money safely between humans. Instead, it allegedly moved your face, your address, and your government-issued “yes this is a real person” card into the public square and said, “good luck, champ.”

And don’t worry, you’ll find out the fun way—when a bank asks why you applied for a car loan in a state you’ve never visited, or when your transfer gets flagged because “you” suddenly exist in three countries at once.

This is the modern deal: apps want your most sensitive documents to “verify your identity,” then they store them like a teenager hiding weed in a sock drawer.