A new comprehensive study shows how much hackers pay for Dark Web user data. To quote the researchers, “This is just the tip of the iceberg. There’s stuff we can’t even publish as it is so horrible”.
Hackers pay for Dark Web user data to implement Identity Theft, take over networks, plant malware and set up botnets. The 2022 Privacy Affairs report is an update of previous studies. It covers credit cards, payment processing services, social media, hacked services (like Uber), official documents, email databases, dormant malware installs, DDoS attacks, and Botnets, and so much more. For example, it lists that a NSW drivers licence forgery costs $150.
Bad news for 2022
Since GadgetGuy reported on this in 2021, there have been some key changes, and the news is not good:
- Private data is getting cheaper
- ​​​​​​More items are available for buyingÂ
- ​​​​​​More dark web vendors have appearedÂ
The Privacy Affairs Report shows that the number of items sold this past year is way up. This means that each of more than 9,000 active vendors selling fake IDs and credit cards are now reporting sales in the several thousands of transactions.
The volume of data has also increased over time. More bogus credit card data, personal information, and documents were sold in 2021 compared to 2020.
Lastly, the menu of products available to purchase on the Dark Web, adding items such as hacked cryptocurrency accounts and web services such as Uber logins.
Waht can you buy on the Dark Web?
There’s plenty of personal data and services available on the Dark Web. Below is the Privacy Affairs report, which includes the going rate and type of data or service. We’ve listed the basics, click here for the full report, which includes more about buying email databases dumps and Malware.
Category | Product | Avg. dark web Price (USD) |
Credit Card Data | Credit card details, account balance up to 5,000 | $120 |
Credit card details, account balance up to 1,000 | $80 | |
Stolen online banking logins, minimum 
2,000 on account | $65 | |
Israel hacked credit card details with CVV | $25 | |
Hacked (Global) credit card details with CVV | $15 | |
Spain hacked credit card details with CVV | $25 | |
Cloned American Express with PIN | $25 | |
Canada hacked credit card details with CVV | $18 | |
Australia hacked credit card details w/ CVV | $23 | |
Cloned Mastercard with PIN | $20 | |
Cloned VISA with PIN | $20 | |
Stolen online banking logins, minimum 100 on account | $35 | |
Australia hacked credit card details with CVV | $30 | |
Walmart account with credit card attached | $10 | |
USA hacked credit card details with CVV | $17 | |
UK hacked credit card details with CVV | $20 | |
Payment processing services | PayPal transfer from stolen account, $1,000 – $3,000 balances | $45 |
Cashapp verified account | $800 | |
Stolen PayPal account details, minimum $1,000 balances | $20 | |
Stolen UK fully verified Skrill account details | $120 | |
50 Hacked PayPal account logins | $150 | |
Hacked PerfectMoney account | $110 | |
PayPal transfers from stolen account, $100-$1,000 balance | $15 | |
Movo.Cash Login | $14 | |
Hacked Western Union Account | $25 | |
Stolen PayPal account details, minimum $100 balances | $10 | |
Western Union transfer from stolen account, $1,000+ balances | $30 | |
Stolen PayPal account details, no balance | $15 | |
Verified Stripe account with payment gateway | $1,000 | |
Hacked Weststein Card account | $710 | |
Hacked TransferGo account | $510 | |
Crypto Accounts | Kraken verified account | $250 |
Cex.io verified account | $170 | |
Hacked Coinbase verified account | $120 | |
Coinfield.com verified account | $120 | |
USA verified LocalBitcoins account | $120 | |
Blockchain.com verified account | $90 | |
Crypto.com verified account | $250 | |
Binance verified account | $260 | |
Xcoins verified account | $320 | |
Bitit.io verified account | $400 | |
Bit2me verified account | $$120 | |
Social Media | Hacked Facebook account | $45 |
Hacked Instagram account | $40 | |
Hacked Twitter account | $25 | |
Hacked Gmail account | $65 | |
Instagram followers x 1000 | $4 | |
Spotify followers x 1000 | $1 | |
Twitch followers x 1000 | $4 | |
LinkedIn company page followers x 1000 | $10 | |
Pinterest followers x 1000 | $3 | |
Soundcloud plays x 1000 | $1 | |
Twitter retweets x 1000 | $20 | |
Instagram likes x 1000 | $5 | |
Hacked Services | Netflix account, 1-year subscription | $25 |
Bet365 account | $40 | |
Kaspersky account | $5 | |
NBA League Pass | $7 | |
Various adult site accounts | $5 | |
Canva Pro yearly | $6 | |
CNBC Pro | $3 | |
Netflix 4K 1 year | $4 | |
HBO | $4 | |
Orange TVy | $4 | |
Hulu | $5 | |
Uber hacked account | $15 | |
Uber driver hacked account | $35 | |
Forged Documents – Scans | Utility bill templates | $25 |
New York driver’s license | $70 | |
US business cheque templates | $10 | |
Russian passport scan | $100 | |
USA selfie with holding ID | $120 | |
Minnesota driver’s license | $150 | |
NSW (Australia) driver’s license | $150 | |
Alberta CA driver’s License (scan) | $165 | |
Forged Documents – Physical | Maltese Passport | $3,800 |
Latvian National ID | $160 | |
Netherlands Passport | $3,800 | |
Poland Passport | $3,800 | |
French Passport | $3,800 | |
Various European Union passports | $3,800 | |
Delaware ID | $150 | |
Indiana ID | $150 | |
Latvian National ID | $500 | |
Montana ID | $150 | |
Nevada ID | $160 | |
Texas ID | $150 | |
Fake US Green Card | $160 | |
New Jersey drivers license | $160 | |
New Jersey drivers license | 160 | |
Louisiana ID | $150 | |
Maltese Passport | $6,500 | |
Utah ID | $150 | |
European Union National ID (avg.) | $160 | |
US driver’s license (avg.) | $150 | |
Lithuanian passport | $3,800 |
Where is your data is being stolen from?
- Public, unsecured Wi-Fi, especially at large shopping centres and food courts
- ATM Skimmers
- Data breaches
- Malware recording computer key stokes when accessing a finance site
- Brute force password attacks
Remember, to avoid your data from being stolen from places like the above, always use a VPN, Password manager and take precautions against ID Theft.
Read GadgetGuy’s strong data protection tips Â
GadgetGuy’s take
Stolen data is gold. And that data is freely and cheaply available on the Dark Web. It is a smorgasbord of how to rip people off.
Of course, much of the data has already been massaged into a master dark web profile on you that the super-organised cybercriminals use. The items in this article are the ‘dregs’ that can still yield pennies from heaven.
The reality is that ‘mug’ hackers rarely target specific people. With the sheer quantity of data available, they just need to play the numbers game – it only takes a tiny percentage of successful hits to make a decent living if you are in a third-world country.