PrintSteal : Exposing unauthorized CSC-Impersonating Websites Engaging in Large-Scale KYC Document Generation Fraud

This CloudSEK investigation details a large-scale criminal operation, “PrintSteal,” that has generated over 160,000 fraudulent Indian KYC documents through a network of ~600 active fraudulent domains (1,800+ identified historically), affiliates (2,700+ operators on crrsg.site), illicit APIs, deceptive QR verification, and shared hosting; the report includes technical analysis, attribution to an individual (Manish Kumar), IoCs (domains, hosting IP, Telegram handle, email, UPI), impact assessment (financial, reputational, national security), and comprehensive takedown and prevention recommendations.