Fraudsters operating on the dark web could buy a person's entire identity ("fullz" in the cybercrook lingo) for just £820.
Bank account details, Airbnb profiles and even Match.com logins are worth money to bidders that reside on the murkier side of the internet, a study by virtual private network comparison site Top10VPN.com found.
While online bank details are currently worth around £168 to dark web bidders, and Paypal logins a higher price of about £280, passport details fetch as little as £40. Hacked web accounts – such as access to your Match.com profile, Facebook and even Deliveroo – give criminals a backdoor into identity theft for less than a fiver.
Even eBay accounts with their broad scope for fraud fetch just £26 on the dark web. Compromised PayPal accounts are among the most widely traded items.
The average person has dozens of accounts that make up their online identity – all of which can be hacked and most of which can be sold on. Top10VPN.com reviewed tens of thousands of listings on three of the most popular dark web markets – Dream, Point and Wall Street Market – in putting together its Dark Web Market Price Index.
So you're thinking about becoming an illegal hacker – what's your business plan?READ MORE
Communications services, such as Skype logins, are worth less than £10 despite their utility as a way of sending links to phishing sites or attempting other cons against the contacts of users of compromised accounts.
Even logins to dating sites like Match.com have some value, and tend to earn dark web sellers on average £2.24, because they offers criminals the opportunity to "catfish" potential matches, sparking up relationships to manipulate people for financial gain.
Despite the importance that some attach to social media, compromised Twitter and Instagram logins are among the least valuable on the dark web – even though they offer a useful backdoor to fraudsters planning to commit identity theft.
Simon Migliano, head of research at Top10VPN.com, said: "Some of the accounts we found for sale open the door to even more ingenious scams. A hacked Airbnb account, for example, could allow a scammer to pocket hundreds in booking fees or even stay at high-end properties as a guest and burgle the hosts. At less than £6 initial outlay, that's very appealing to a cybercriminal.
"Our research is a stark reminder of just how easy it is to get hold of personal info on the dark web and the sheer variety of routes that fraudsters can take to get hold of your money. This really underlines the importance of two-factor authentication and more generally secure use of websites and apps," he added.
Top10VPN.com doesn't offer a view of whether dark market personal info prices are going up or down but security experts who keep tabs on assorted deep web malfeasance suspect the latter.
Raj Samani, chief scientist at McAfee, commented: "It seems like the prices are a little lower than when we wrote our paper in 2015. However, there are certainly more services on offer than before.
"Validity rates are not included so like-for-like comparisons are challenging." ®