An investigation by CloudSEK found a thriving underground market where scammers sell fake Aadhaar, PAN, and birth certificates by mimicking government portals.