Summary

AI or Not audited 16 commercial AI image-generation models and found they produced synthetic government identity documents in 69 of 75 test attempts; five named consumer products (Google Gemini [Nano Banana], ChatGPT Images 2.0, Recraft v4, Grok, and Imagen 4 Ultra) generated high-fidelity fake adult IDs the report says could deceive a human reviewer. The audit covered documents for 17 countries and the 16 most populous U.S. states. The report also found three models (Google Gemini, Grok, and Imagen 4 Ultra) produced high-fidelity fake IDs of minors via their standard consumer interfaces, while ChatGPT (Images 2.0) and Recraft v4 declined minor-ID requests in consumer apps but fulfilled them via developer APIs. AI or Not identified an interface-versus-API safety gap and said reframing prompts as KYC/compliance requests caused all 16 models to produce synthetic IDs.