Cybercriminals can purchase a range of data to commit identity theft for only around $1,000 on the dark web, according to a report by Privacy Affairs.
The report, published on April 23, analyzed the prices of stolen data on various dark web markets and forums. Despite the efforts of law enforcement to take down key dark web marketplaces in the past year, Privacy Affairs found that the sale of stolen data and illegal services continues to thrive.
Researchers found bank logins, fake passports, hacked cryptocurrency accounts, scans of identity documents, full credit card details, and computer viruses available for sale — at a slightly cheaper price due to high supply.
For around $5,010, cybercriminals can purchase “enough data and documents to do any number of fraudulent transactions,” Privacy Affairs said. The report revealed that bulk sales of illicit goods are now more popular on the dark web than the sale of individual items, as this helps cybercriminals evade law enforcement.
Privacy Affairs also highlighted significant shifts in the digital criminal underground. For example, there’s “no clear market leader” due to the shutdown of large marketplaces like Hydra, AlphaBay, and ToRReZ. This has resulted in smaller sites cropping up and cybercriminals shifting to alternative platforms like Telegram to advertise and sell their illegal products and services.
Trove of Stolen Data
Privacy Affairs listed dozens of illicit items and services available on the dark web and their corresponding prices.
Online banking logins cost $100 on average, while stolen credit card details are priced at around $10 to $100 — the price varies depending on the account balance.
The sale of hacked cryptocurrency accounts is also booming, the report said. A hacked verified Coinbase account costs around $600, while a Kraken exchange account is selling for about $800.
Privacy Affairs researchers found stolen social media accounts, hacked emails, and accounts for various services like Airbnb, Uber, Kaspersky, Disney Plus, and more on sale. Cybercriminals are also selling malware and offering DDoS attack services. Even US driver’s licenses, ID cards, forged passports, and insurance cards (scans and physical copies) are available.
According to Privacy Affairs, a typical identity theft package — priced at $1000 — would include the following:
- Stolen banking login > $100 – $150
- High-quality driver’s license > about $500
- Hacked social media account > $25
- Swiped credit card details > about $100
- High-quality ID card > $200
How to Protect Your Personal Data
Cybercriminals are always on the prowl for potentially profitable sensitive data to steal. Last month, Check Point revealed that the sale of stolen premium ChatGPT accounts is growing on the dark web.
“If someone gets their hands on your financial details or social media credentials, the prices mentioned above are basically what it’s worth to them,” Miklos Zoltan, a security researcher at Privacy Affairs, said. “There’s a good chance that you value these things much more than they do, as to them you’re just another mark for a quick buck.”
Protecting your accounts and personal data requires proper cyber hygiene habits. Avoid oversharing on social media, as cybercriminals scan through social media to learn about their victims. Also, use unique, secure passwords for all your accounts and activate multi-factor authentication.
Cybercriminals are increasingly using sophisticated tools and techniques to snare their target. Often, victims are unaware that their privacy has been compromised. That’s why we recommend using a dark web monitoring tool like Norton Lifelock.
A dark web monitoring tool scans illegal marketplaces and alerts you if your personal data is leaked or traded online. You can also use free tools like Have I Been Pwned to search for compromised personal data.
