We use cookies to allow us and selected partners to improve your experience and our advertising. By continuing to browse you consent to our use of cookies as per our policy which also explains how to change your preferences.

Criminals can buy your online identity – including banking details – for just £800

Has your personal information been exposed to fraudsters? And, what can you do to protect it

Criminals can buy your entire online profile – including your online banking details – for about £800 on the dark web, research has revealed.

But your Facebook login and everything you’ve shared within it can cost as little as £3.74, while your passport details fetch almost £40, according to the Dark Web Market Place Index 2018.

The findings come after a team of security experts at top10vpn.com – a service that ranks sites that make your online browsing anonymous – reviewed thousands of listings for personal data on the three most popular dark web markets.

Read more: Which? reveals how much of your personal information is publicly available online

How much your data is worth on the dark web

Looking at the dark web’s top three market places – Dream, Point and Wall Street Market – the security worked out the average price criminals can buy logins for.

  • PayPal Login £279.74
  • Online banking details £161.81
  • Credit card details £56.50
  • Debit card details £6.30
  • Proof of Identity £46.14
  • Passport £39.76
  • Ebay login £26.20
  • Apple login £10.98
  • Facebook login £3.74
  • AOL login £3.00
  • Hotmail login £2.37
  • Deliveroo login £3.74

These login details allow criminals access to an account so they can then fraudulently apply for products, services or transfer money and, because they bought it through the dark web, they can do it all anonymously.

What data’s available on the public internet

Fraud reporting agency Cifas joined with Forensic Pathways to get an insight into how people’s personal data can be pieced together from various sources and then used to commit identity fraud.

Their report found they could create detailed profiles through using online market places, social media and public databases.

One victim in the Wolves of the Internet report had their details posted in a ‘Fullz’ profile in a market place. Fullz is slang for financial information, including their name, address, credit card information, National Insurance number, date of birth, and more.

Which? found an example of someone selling various ‘Fullz’ details in a simple Google search.

Over the space of two years, the victim in the report had their details used to apply for 22 products – all financial, including personal credit cards (36% of applications) and personal current accounts (32%). A third of the applications were successful.

How to protect your data online

We’ve compiled 10 tips to protect your data online, including how you can tell if your email address has been breached and how to opt out of being on public records.


Torn between online promotion and data protection

CEO of Cifas, Mike Haley, said: ‘As individuals, we can take steps to protect our identities online.

‘The dilemma for those who want to promote themselves, either professionally or personally, is whether this promotion outweighs the risks of publicly revealing personal sensitive data.

This research shows that many victims of impersonation have a public presence on social media and this, paired together with other publicly available information, can enable a criminal to perpetrate identity fraud.’

Back to top
Back to top