Your Identity Sells for Just $200 on the Dark Web, Report

A fresh study shows personal data is frighteningly cheap on the dark web, with some account details costing less than a coffee.

Cybersecurity firm NordVPN and its sister company NordStellar analyzed roughly 75,000 underground listings. Their findings clearly show the price tags criminals put on people’s stolen data.

The Value of Your Stolen Personal Information

NordVPN launched a new calculator that helps you to see the value of your accounts on the dark web by location. For just a median of $10, anyone can get their hands on an Australian payment card. Your Disney+ login? That sells for $7.25, which is literally the price of a fancy coffee. Facebook accounts sell for around $38.

The real jackpot is what hackers call a “fullz” package. That bundle includes your tax file number, home address, date of birth, and other personal data that someone can use to build a complete profile on you. With around $200 (less than a weekly grocery shopping list), a threat actor can purchase the fullzz package on the dark web. This could aid them in stealing your whole identity.

This $200 price marks a stunning collapse in the value of your stolen identity. A 2018 CNBC report revealed that criminals paid an average of $1,200 for a person’s complete online identity back then. Today, your entire identity costs 83% less (barely a sixth of its former dark web price).

Marijus Briedis, NordVPN’s Chief Technology Officer, put it bluntly. In his words,

“For less than a week’s grocery shop, a criminal can purchase enough personal information to start building a fake identity or file fraudulent tax returns in someone else’s name.”

Crypto Wallets Are a Hacker’s Gold Rush

Here’s the scariest part, crypto accounts rank among the most valuable finds for hackers. Kraken account details sell for $150. Why is it so high? Because bank cards need complex fraud methods to access. A compromised crypto wallet gives criminals instant funds if the owner hasn’t secured it properly.

Many crypto credentials are stolen through sophisticated phishing campaigns, hackers have been using fake missile alerts and QR codes to trick victims into entering their Microsoft credentials, which often grant access to linked crypto accounts and email addresses used for password resets.

The dark web stolen data market is a whole economy on its own. And the losses these criminal activities cause every year are devastating. The Australian Competition and Consumer Commission’s recently released Target Scams Report shows how big this problem is becoming. Australians lost over $2.18 billion to scams last year, which is a 7.8% increase from over $2.03 billion in losses reported in 2024.

Phishing scams alone, the ones that trick you into handing over personal details – accounted for $97.6 million of that loss. This number represents an increase of 15.5% from $84.5 million in losses in 2024.

What You Can Actually Do About It

Sadly, you can’t fully stop your data from appearing on the dark web. Georgia Dixon, former Managing Editor of SafeWise Australia, explains. “Unfortunately, there’s not a whole lot that Australians can do to prevent their data appearing on the dark web.”

But you are not helpless. Dixon recommends five simple habits. Use very strong, unique passwords that aren’t easy to guess for all your accounts. Enable two-factor authentication wherever possible.

Only use secure internet connections, no public Wi-Fi for banking. Avoid entering sensitive data unless it is absolutely required. And check your financial accounts regularly for anything suspicious. Thankfully, Telstra network customers (including MVNOs) get Telstra Scam Protect. That feature alerts you to suspicious incoming calls automatically.

You can also fight back with free tools. NordVPN’s Dark Web Monitor lets you check for breaches. So does the free site Have I Been Pwned. Knowing your data is exposed is the first step. Once you know, you can act fast to prevent fraud.

Bottom line: your identity has a price tag. Don’t let a $200 purchase ruin your life. Stay alert, lock down your accounts, and check those breach monitors today.