On Monday, a Facebook user lost control of his personal account, as well as several business pages, for almost a full day, after a hacker was able to convince Facebook to change his password, email address, and even disable two-factor authentication—all thanks to a fake passport.
The hacker tricked Facebook’s customer support into resetting the victim’s password and disable the account’s security mechanisms by pretending to be his victim. And how did Facebook verify his identity? By asking for a digital copy of a government photo ID, which the hacker easily faked.

Read More at www.motherboard.vice.com