Cybersecurity experts say digital REAL ID scams are targeting immigrants, seniors and Johnny-come-latelies as the federal government tightens identification requirements for domestic air travel.
As of Wednesday, the Transportation Security Administration no longer accepts state-issued driver’s licenses, nondriver identifications and learner’s permits lacking the distinctive REAL ID star in the upper right corner.
Passengers 18 and older must present a valid passport or REAL ID-compliant document, reflecting a 2005 federal law that strengthened identity verification standards after the 9/11 terror attacks.
The Better Business Bureau has reported a surge of text messages, phone calls and social media ads from phony government officials offering a “REAL ID” without requiring an in-person application.
Most of the fraudsters seek to hack the personal accounts of victims, stealing their financial information.
“You can only obtain a REAL ID in person at your local Department of Motor Vehicles office,” said Melanie McGovern, a spokesperson for the International Association of Better Business Bureaus. “Some states may allow you to start the process online, but you have to finish it in person.”
A variety of digital scams have flourished nationwide since the pandemic.
According to the Federal Trade Commission, the amount of money that Americans lost to government impostor scams surged from $171 million in 2023 to $789 million in 2024.
The federal government requires first-time REAL ID applicants to present a Social Security card, proof of U.S. residency, proof of legal name and either a birth certificate, passport or permanent resident card. They must apply in person and with original, government-issued identity documents in hand.
Nevertheless, local news outlets from Oklahoma to Boston have reported a surge of callers flagging social media accounts that offered them a “REAL ID” online.
LexisNexis Risk Solutions’ Government Group, which works with federal agencies to combat financial scams, said the frauds target victims’ banking, retail and government benefits accounts.
“The first major type involves fake websites that claim to help expedite or bypass long DMV lines or appointment backlogs, some of which stretch into September in certain states,” said Haywood Talcove, CEO of government for LexisNexis Risk Solutions. “These fraudulent sites lure people into uploading sensitive documents such as birth certificates, utility bills, and passports under the guise of speeding up the REAL ID process.”
Other examples include phishing emails and text messages from fake state and federal agencies demanding personal information, even though legitimate government officials never request such information electronically.
“Reports have surfaced of phishing emails claiming to be from the TSA, tricking people into entering personal info on fake websites that closely mimic government pages,” said Kristin Lewis, a senior vice president at the digital safety app Aura. “Scammers are also targeting people scrambling for last-minute DMV appointments, capitalizing on stress and tight timelines, especially ahead of peak travel periods.”
Financial experts say the scams single out non-native English speakers, older adults with mobility challenges, and people trying to save time who either do not understand the REAL ID requirements or want a workaround.
Angelica Gianchandani, a finance instructor at New York University, said scammers have also created a black market of “fake IDs” for illegal immigrants and criminals seeking to subvert the law.
“While some fake REAL IDs can look convincing to untrained eyes, they rarely pass official inspection due to embedded security features like UV markers and machine-readable zones,” Ms. Gianchandani said. “Still, there’s a black-market demand, particularly among those trying to sidestep legal or documentation barriers.”
As of this month, adults must also have a REAL ID-compliant identification to enter federal buildings.
However, the enhanced identification is not required to drive, vote, visit the post office, enter a courthouse or apply for government benefits.
Cyber safety experts recommend reporting suspected REAL ID scams to the police, the Federal Trade Commission or the Better Business Bureau.
While most states have rapidly implemented REAL ID in recent years, others have slow-walked it.
The Maryland Motor Vehicle Administration reported that 99% of Maryland residents were REAL ID compliant in March, giving the state one of the top compliance rates in the country.
The Virginia Department of Motor Vehicles reported issuing 4.1 million REAL ID-compliant credentials from 2018 to March 2025. That’s roughly 59% of active Virginia driver’s licenses and IDs.
Others are much further behind. Just 17% of New Jersey residents have a REAL ID, giving the Garden State the lowest compliance rate in the nation.
Rob Shavell, CEO and co-founder of the cybersecurity firm DeleteMe, said scammers “had a long time to prepare” for Wednesday.
“They know there’s a sense of urgency whenever travelers have a deadline to prepare for,” said Mr. Shavell, whose Boston-based firm “scrubs” the personal information companies sell to online data brokers.
“It’s safe to say that they’re going to exploit that, just like they have thousands of times before. Unfortunately, we probably won’t get the full data on how effective the scams were until long after it’s all blown over,” he said.
According to AAA, air travelers should expect delays at airports while TSA agents figure out what to do with passengers who haven’t upgraded their IDs.
“For those traveling in the next few weeks, give yourself some extra time to get through security, even if you have REAL ID,” said Ragina Ali, a spokeswoman for AAA in Maryland, Virginia and Washington, D.C. “There could be longer than normal delays and the potential for travel disruptions as TSA agents are checking and verifying numerous different types of credentials at the checkpoints.”
