Dark Web Price Index 2022

Patricia Ruffio

By Patricia Ruffio . 16 March 2022

Cybersecurity Specialist

Miklos Zoltan

Fact-Checked this

As the global health crisis ground on for a second year, many of the trends in Dark Web information product prices and availability continued, too.

Buyers with an entrée to Dark Web retailers participated in a market that was even larger, more diverse, and vigorous than the year before.

Written for the February 2021 to January 2022 reporting period, this guide updates information provided in our previous report.

Keep reading to discover the latest product prices, trends, and methods used to make the Dark Web operations more efficient and customers more secure.

This is what we found:

Category Product Avg. dark web Price (USD)
Credit Card Data Credit card details, account balance up to 5,000 $120
Credit card details, account balance up to 1,000 $80
Stolen online banking logins, minimum 
2,000 on account $65
Israel hacked credit card details with CVV $25
Hacked (Global) credit card details with CVV $15
Spain hacked credit card details with CVV $25
Cloned American Express with PIN $25
Canada hacked credit card details with CVV $18
Australia hacked credit card details w/ CVV $23
Cloned Mastercard with PIN $20
Cloned VISA with PIN $20
Stolen online banking logins, minimum 100 on account $35
Australia hacked credit card details with CVV $30
Walmart account with credit card attached $10
USA hacked credit card details with CVV $17
UK hacked credit card details with CVV $20
Payment processing services PayPal transfer from stolen account, $1,000 – $3,000 balances $45
Cashapp verified account $800
Stolen PayPal account details, minimum $1,000 balances $20
Stolen UK fully verified Skrill account details $120
50 Hacked PayPal account logins $150
Hacked PerfectMoney account $110
PayPal transfers from stolen account, $100-$1,000 balance $15
Movo.Cash Login $14
Hacked Western Union Account $25
Stolen PayPal account details, minimum $100 balances $10
Western Union transfer from stolen account, $1,000+ balances $30
Stolen PayPal account details, no balance $15
Verified Stripe account with payment gateway $1,000
Hacked Weststein Card account $710
Hacked TransferGo account $510
Crypto Accounts Kraken verified account $250
Cex.io verified account $170
Hacked Coinbase verified account $120
Coinfield.com verified account $120
USA verified LocalBitcoins account $120
Blockchain.com verified account $90
Crypto.com verified account $250
Binance verified account $260
Xcoins verified account $320
Bitit.io verified account $400
Bit2me verified account $$120
Social Media Hacked Facebook account $45
Hacked Instagram account $40
Hacked Twitter account $25
Hacked Gmail account $65
Instagram followers x 1000 $4
Spotify followers x 1000 $1
Twitch followers x 1000 $4
LinkedIn company page followers x 1000 $10
Pinterest followers x 1000 $3
Soundcloud plays x 1000 $1
Twitter retweets x 1000 $20
Instagram likes x 1000 $5
Hacked Services Netflix account, 1-year subscription $25
Bet365 account $40
Kaspersky account $5
NBA League Pass $7
Various adult site accounts $5
Canva Pro yearly $6
CNBC Pro $3
Netflix 4K 1 year $4
HBO $4
Orange TVy $4
Hulu $5
Uber hacked account $15
Uber driver hacked account $35
Forged Documents – Scans Utility bill templates $25
New York driver’s license $70
US business cheque templates $10
Russian passport scan $100
USA selfie with holding ID $120
Minnesota driver’s license $150
NSW (Australia) driver’s license $150
Alberta CA driver’s License (scan) $165
Forged Documents – Physical Maltese Passport $3,800
Latvian National ID $160
Netherlands Passport $3,800
Poland Passport $3,800
French Passport $3,800
Various European Union passports $3,800
Delaware ID $150
Indiana ID $150
Latvian National ID $500
Montana ID $150
Nevada ID $160
Texas ID $150
Fake US Green Card $160
New Jersey drivers license $160
New Jersey drivers license 160
Louisiana ID $150
Maltese Passport $6,500
Utah ID $150
European Union National ID (avg.) $160
US driver’s license (avg.) $150
Lithuanian passport $3,800
Email Database Dumps 10 million USA email addresses $120
600k New Zealand emails $110
2,4 million Canada emails $100
Malware Europe fresh, high-quality per 1,000 installs $1,800
UK high-quality per 1,000 installs $1,800
Europe low-quality, slow-speed, low success rate, per 1,000 installs $120
USA, CA, UK, AU med quality, 70% success rate per 1,000 installs $1,200
CA high-quality, per 1,000 installs $1,200
USA high-quality, per 1,000 installs $1,700
USA, CA, UK, AU low quality, slow speed, low success rate x 1000 installs $800
Europe, aged, high-quality, per 1,000 installs $1,100
USA only, medium-quality, 70% success rate, per 1,000 installs $900
Europe, medium-quality, 70% success rate, per 1,000 installs $450
Global, low quality, slow-speed, low success rate, per 1,000 installs $45
Global, medium-quality, 70% success rate, per 1,000 $115
Android OS per 1,000 installs $950
Premium-quality, per 1,000 $5,500
DDOS Attacks Unprotected website, 10-50k requests per second, 1 month $850
Unprotected website, 10-50k requests per second, 1 week $450
Europe, low-quality, slow speed, low success rate per 1, 000 requests $300
Unprotected website, 10-50k requests per second, 1 hour $10
Unprotected website, 10-50k requests per second, 24 hours $45
Premium protected website, 20-50k requests per second, multiple elite proxies, 24 hours $200

As the Data Marketplace Matures, Prices Decline

In the past year, the Dark Web data market grew larger in total volume and product variety. Predictably, as supply grew, most prices plummeted.

Here’s a review of the Dark Web data market by the numbers:

  • Sales volume: The number of items sold this past year is up—way up. Each of more than 9,000active vendors selling fake IDs and credit cards are reporting sales in the several thousands of transactions this past year.
  • Data volume: This year, more bogus credit card data, personal information, and documents were sold in 2021 compared to 2020.
  • Variety of items: The menu of products grew, adding items such as hacked cryptocurrency accounts and web services such as Uber.

Important Operations Changes

As the Dark Web market matures, the folks who run it use features and assume priorities that resemble conventional marketing and retail operations methods.

In the 2021-2022 reporting period, notable changes in Dark Web operations included:

  • A new market leader. Before October 2021, buyers tended to use more established sites, which offered more security features and emphasized customer service. As the most active site in this regime, White House Market was the clear leader, hosting about a third of the market’s approximately 9,000 active vendors.

    In October, with little explanation, site administrators announced that they were closing the site, which shut down soon after the announcement. Although other sites, notably ToRReZ and the reconstituted AlphaBay have moved to fill the gap, it’s not possible to identify a long-term market leader.

  • Dark Web security ops. The Dark Web might have become more secure and efficient, but law enforcement security specialists have become more skillful. To avoid detection and tracking by law enforcement agencies, Dark Web sites now use more—and more sophisticated—security measures throughout Dark Web transactions.
    Last year, Monero cryptocurrency replaced Bitcoin as payment, and pretty good privacy (PGP) encryption methods ruled the day. These security tools still reign supreme.
  • Parallel market and services. These days, Dark Web sites compete on the quality of their security and customer service. So, it’s no surprise that they now use traditional marketing tactics, too. Discounts (Buy 2 cloned credit cards, get one free), coupons, and product reviews are becoming common sights on the most competitive sites.

Here is a profile of a Dark Web vendor, one of nearly 2 million total vendors (active and inactive), who sell stolen, hacked, or bogus data and documents on the Dark Web’s 32 data product sites. Notice that this active vendor has accumulated more than 1,280 sales.

To further illustrate how this marketplace is thriving, here’s another snapshot of a vendor profile. Notice how it normalizes the fake data buying process by including buyer ratings and comments.

Next, we dive into the detailed trends for eight categories of fake , hacked, or stolen data and physical documents.

2022 Dark Web Product Price Index

As in our earlier reports, our data collection methods include scanning dark web marketplaces, forums, and websites. We process this information to create an index of average prices for a wide variety of specific products.

Cloned Credit Cards and Cardholder Data

In December 2021, approximately 4.5 million credit cards went up for sale on the Dark Web.

Average price for credit card details ranged from $1 (in U.S., Canada, and Australia) to $ 20 each (Hong Kong). As the table below shows, however, the general trend for these items was down.

Product Avg. Price USD (2021) Avg. Price USD (2022) YoY Difference
Credit card details, account balance up to 5,000 $240 $120 -$120
Credit card details, account balance up to 1,000 $150 $80 -$70
Stolen online banking logins, minimum 
2,000 on account $120 $65 -$55
Israel hacked credit card details with CVV $65 $25 -$40
Hacked (Global) credit card details with CVV $35 $15 -$20
Spain hacked credit card details with CVV $40 $25 -$15
Cloned American Express with PIN $35 $25 -$10
Canada hacked credit card details with CVV $28 $18 -$10
Australia hacked credit card details w/ CVV $30 $23 -$7
Cloned Mastercard with PIN $25 $20 -$5
Cloned VISA with PIN $25 $20 -$5
Stolen online banking logins, minimum 100 on account $40 $35 -$5
Walmart account with credit card attached $14 $10 -$4
USA hacked credit card details with CVV $20 $17 -$3
UK hacked credit card details with CVV $20 $20 $0

Here’s a screenshot of stolen credit cards sold on the dark web:

Dark Web Credit Cards

Payment Processing Services

As retailers accept mobile pay and other forms of online payment, payment processors have become increasingly common. Value of a hacked account will fluctuate because these entities vary in cybersecurity capabilities and insurance.

PayPal account details are easily the most abundant items listed on the Dark Web marketplace.

Given the laws of supply and demand, it’s no surprise that they are extremely inexpensive to buy. (The more expensive option would be transfers from a hacked account.)

Current prices

As you can see in the table below, processing account detail prices have dropped significantly in the past year, due to the robust supply.

Product Avg. Price USD (2021) Avg. Price USD (2022) YoY Difference
PayPal transfer from stolen account, $1,000 – $3,000 balances $340 $45 -$295
Cashapp verified account $1,000 $800 -$200
Stolen PayPal account details, minimum $1,000 balances $120 $20 -$100
Stolen UK fully verified Skrill account details $200 $120 -$80
50 Hacked PayPal account logins $200 $150 -$50
Hacked PerfectMoney account $160 $110 -$50
PayPal transfers from stolen account, $100-$1,000 balance $50 $15 -$35
Movo.Cash Login $35 $14 -$21
Hacked Western Union Account $45 $25 -$20
Stolen PayPal account details, minimum $100 balances $30 $10 -$20
Western Union transfer from stolen account, $1,000+ balances $45 $30 -$15
Stolen PayPal account details, no balance $14 $15 +$1

Guides to cashing out these transfers without alerting the authorities often accompany the purchase of payment processing accounts, another commonly listed item. These guides sell for cents on the dollar.

Whether they work and keep buyers out of trouble, however, remains unclear.

PayPal Dark Web

New payment processing services

Our price index grew with the addition of nine payment processing services.

New Payment Processing Services Avg. Price USD (2022)
Verified Stripe account with payment gateway $1,000
Hacked Weststein Card account $710
Hacked TransferGo account $510
50 Hacked PayPal account logins $200
Hacked PerfectMoney account $160
Hacked UK Neteller account $70
Hacked Western Union Account $45
Movo.Cash Login $14
Stolen PayPal account details, no balance $14

Hacked Cryptocurrency Accounts

And here are our current crypto account listings for the current reporting period (2021-2022).

Product Avg. Price USD (2021) Avg. Price USD (2022) YoY Difference
Kraken verified account $810 $250 -$560
Cex.io verified account $710 $170 -$540
Hacked Coinbase verified account $610 $120 -$490
Coinfield.com verified account $410 $120 -$290
USA verified LocalBitcoins account $350 $120 -$230
Blockchain.com verified account $310 $90 -$220
Crypto.com verified account $300 $250 -$50

The hefty losses in value reflect jitters in traditional markets.

Although crypto and mainstream investments remained separate for many years, recent events coupled them.

So, investor uncertainty in stock and bond markets, for example, showed up in the crypto markets, too. And Bitcoin being deposed as the currency of choice on the Dark Web shattered confidence in the BTC-based value of its offerings.

New Cryptocurrency Accounts Avg. Price USD (2022)
Xcoins verified account $320
bitit.io verified account $400
Bit2me verified account $120

Nevertheless, three new cryptocurrency-based products made their debut on the Dark Web this year.

Hacked Binance Dark Web

Hacked Online Services & Entertainment Accounts

Do you need proof that cybercriminals have developed a taste for a huge variety of Dark Web data offerings?

If so, look no further than hacked social media accounts. Vendors even sell access to paid online subscription services at lower prices—if customers are willing to take the risk of discovery.

Product Avg. Price USD (2021) Avg. Price USD (2022) YoY Difference
Netflix account, 1-year subscription $44 $25 -$19
Bet365 account $50 $40 -$10
Kaspersky account $8 $5 -$3
NBA League Pass $8 $7 -$1
Various adult site accounts $5 $5 $5
Canva Pro yearly $6 $6 $0
CNBC Pro $3 $3 $0
Netflix 4K 1 year $4 $4 $0
HBO $4 $4 $0
Orange TV $4 $4 $0
Hulu $5 $5 $0
Uber hacked account $8 $15 $+$7
Uber driver hacked account $14 $35 $+21

As you can see by the tepid prices, however, only Uber-related accounts increased in value.

Haxked Services Dark Web

Everything else, to a use a popular term, languished.

Disney Plus Dark Web

Here’s a look at some examples of various hacked online accounts being sold:

Forged Documents (Scans)

If you know where and how to look on the Dark Web, you can buy forgeries as physical documents or digital scans.

These highly customizable items can be changed with any detail a buyer might want.

All it takes are a few pieces of genuine information and some skill. Voila! Criminals can create a portfolio of fake, official-looking documents.

Here’s a list of the going rates for these forgeries:

Product Avg. Price USD (2021) Avg. Price USD (2022) YoY Difference
Utility bill templates $39 $25 -$14
New York driver’s license $80 $70 -$10
US business cheque templates $15 $10 -$5
Russian passport scan $100 $100 $0
USA selfie with holding ID $100 $120 +$20
Minnesota driver’s license $20 $150 +$130
NSW (Australia) driver’s license $20 $150 +$130
Alberta CA driver’s License (scan) $32 $165 +$133

Counterfeit currency (mainly in 20- and 50-USD denominations) is an extremely popular and easily available item.

The most popular currencies include euros, the British pound, and dollars from Canada, Australia, and the United States.

Some of these bills come with a UV pen-test guarantee. Typically, these especially high-quality counterfeit banknotes cost buyers approximately 30 percent their face value.

Document scans that include a selfie with the owner are another valuable purchase.

They can be used for SIM swap attacks and personal data access requests in California and the European Union. (In a SIM swap exploit, an attacker takes over the mobile phone number of the real subscriber by asking the mobile telecom provider to link that number to a SIM card under the attacker’s control.)

Here are examples of fake digital documents being sold on the Dark Web.

Dark Web Scans

Forged Documents (Physical)

Buyers can also obtain forged physical documents on the Dark Web. These are the highest-priced items on the Dark Web markets by far.

Product Avg. Price USD (2021) Avg. Price USD (2022) YoY Difference
Maltese Passport $6,500 $3,800 -$2,700
Latvian National ID $500 $160 -$340
Netherlands Passport $4,000 $3,800 -$200
Poland Passport $4,000 $3,800 -$200
French Passport $4,000 $3,800 -$200
Various European Union passports $4,000 $3,800 -$200
Delaware ID $185 $150 -$350
Indiana ID $185 $150 -$35
Montana ID $150 $150 $0
Nevada ID $160 $160 $0
Texas ID $145 $150 +$5
Fake US Green Card $150 $160 +$10
New Jersey drivers license $150 $160 +$10
Louisiana ID $125 $150 +$25
Utah ID $125 $150 +$25
European Union National ID (avg.) $120 $160 +$40
US driver’s license $100 $150 +$50
Lithuanian passport $1,500 $3,800 +$2,300

These are examples of forged physical documents being sold on the Dark Web:

Dark Web Passports

Drivers’ license examples:

Dark Web Drivers' LIcenses

Email Database Dumps

Easy availability and low accuracy make data from email dumps notoriously cheap. Most email dumps are aggregations and collections of other email breaches, so the quality standards are low—we get what we pay for.

Email Database Dumps Avg. Price USD (2022)
10 million USA email addresses $120
600k New Zealand emails $110
2,4 million Canada emails $100

Malware

When installed on compromised systems that run on Microsoft Windows, Android, and other operating systems, malware gives hackers complete access to machine capabilities. These can be used to hijack computer resources via ransomware or steal user or patient information.

Social networks and fake online casinos are two common and attractive ways of installing malware onto websites. It’s a good idea not to download anything from sites or sources you don’t know and trust.

The following table lists items by their current prices as well as nation of origin and quality indicators.

Product Avg. Price USD (2021) Avg. Price USD (2022) YoY Difference
Europe fresh, high-quality per 1,000 installs $2,500 $1,800 -$700
UK high-quality per 1,000 installs $2,200 $1,800 -$300
Europe low-quality, slow-speed, low success rate, per 1,000 installs $320 $120 -$200
USA, CA, UK, AU med quality, 70% success rate per 1,000 installs $1,400 $1,200 -$200
CA high-quality, per 1,000 installs $1,400 $1,200 -$200
USA high-quality, per 1,000 installs $1,900 $1,700 -$200
USA, CA, UK, AU low quality, slow speed, low success rate x 1000 installs $900 $800 -$100
Europe, aged, high-quality, per 1,000 installs $1,200 $1,100 -$100
USA only, medium-quality, 70% success rate, per 1,000 installs $1,000 $900 -$900
Europe, medium-quality, 70% success rate, per 1,000 installs $500 $450 -$50
Global, low quality, slow-speed, low success rate, per 1,000 installs $50 $45 -$5
Global, medium-quality, 70% success rate, per 1,000 $80 $115 +$35
Android OS per 1,000 installs $900 $950 +$50
Premium-quality, per 1,000 $5,000 $5,500 +$500

Here’s a sample of malware listed on the Dark Web:

DDOS Attacks

A distributed denial of service (DDoS) attack disrupts use of websites and other Internet assets by blocking users from internet products and services.

The malware targets websites by sending thousands of connection requests per second, which overload and crash the website’s server. No information is stolen through these attacks, but they can be used to extort ransoms or hide other hacking activities.

Note that the DDoS attacks offered below are described by the target, thousands of access requests, quality, speed, and duration. (DDoS attacks can last seconds or days. As you might expect, buyers get the results that they pay for.)

Product Avg. Price USD (2021) Avg. Price USD (2022) YoY Difference
Unprotected website, 10-50k requests per second, 1 month $1,000 $850 -$150
Unprotected website, 10-50k requests per second, 1 week $500 $450 -$50
Europe, low-quality, slow speed, low success rate per 1, 000 requests $320 $300 -$20
Unprotected website, 10-50k requests per second, 1 hour $15 $10 -$5
Unprotected website, 10-50k requests per second, 24 hours $50 $45 -$5
Premium protected website, 20-50k requests per second, multiple elite proxies, 24 hours $200 $200 $0

As in most of the products listed this year, prices fell or barely held their value.

How to Protect Yourself from Identity Theft

There are many ways to get hacked but many ways to prevent it, too. At home or the office, you can discourage unwelcome visitors to your accounts by using these recommendations.

If identity theft is your major concern, use the following tips to reduce the chance of unwelcome visitors.

Avoid public or unsecured WiFi

If you’re in a coffee shop or anywhere else you don’t trust network security, use a virtual private network (VPN) to encrypt all communications. This might seem to be a hassle. But if an attacker has access to an unencrypted network that you’re using, it’s easy to view your account data and steal or alter your information.

Use safe ATM practices

Your local ATM is the doorway to your valuable personal data. Here are some ways to prevent it from giving cybercrooks the “Open sesame!”

Check for ATM skimmers. Skimmers are devices placed over an ATM. Often they are exact replicas of the card reader, but their wiring sends your card information to a hacker, not your bank. Check for ATM skimmers by:

  • Pressing around the sides of the card slot. You’re looking for anything that feels loose. Skimmers are delicately mounted, so they’ll move when pressed with light pressure.
  • Checking for glue or tape around the edges. If you see any sticky material, stay away from the ATM and call the bank.
  • Stopping the transaction. If you have difficulty putting your card into the ATM, stop trying and report the situation to the bank.

Check for fake keypads. Fake keypads are sometimes placed over the legitimate one to record your PIN number. They’re also very loosely mounted. So, if the keypad jiggles around a bit, or if you notice the keypad is off-center, stop using it and contact the bank.

Keep your information private

ATMs are only one of many ways to reveal sensitive account information.

Don’t give sensitive information over the phone. Period. Even if the information is a requirement for an important process such as signing up for Social Security or a new driver’s license. If possible, transfer the information in person.

Use anti-malware tools. Install anti-virus or other anti-malware software on your personal computer to check for malware. Then, make sure to set the update period to Automatic.

Practice Account and Password Hygiene

Anywhere you store personal data is a potential entry point for cyberattackers. Here are some ways to prevent illegal entry into your data stores.

  • Avoid using the same password for multiple accounts. This is the easiest way for an attacker to gain access to your accounts. When a major list of account details is dumped on the dark web, your account details can be checked against other services such as email or banking, and you really don’t want them to use the same password.
  • Delete accounts you don’t use anymore. Cyberattackers can compromise old information or use it in password resets or similar attacks. This is especially risky if you reuse passwords on multiple accounts.

Use a password manager. Software such as LastPass or Keepass can make it easy to use extra-strength passwords for all your accounts. (All you need is to remember a master password.) Better yet, many are free.

Rules, rules, rules! These guidelines might seem to be complicated, a real pain.

However, when you get used to following them, they’ll become second nature. That’s when you develop a sense of cybersecurity that is vital online and in daily life.

Why This Data is Important

You might be wondering what all these (admittedly nerdy) details mean to you. It’s true, Dark Web market data might not provide most people with useful insights.

However, the overall message should be clear. Your personal data is valuable to cybercrooks, and it doesn’t cost much to steal your identity or otherwise exploit you.

The sheer quantity of data available for purchase has created a bulk sales mentality on the part of Dark Web customers.

The sad truth is that the growing supply of personal information on the Dark Web makes it cheaper—and therefore more likely—that your accounts will be hacked.

So, the chance of your getting hacked is unpredictable but growing, unless you protect yourself.

By adopting a few, simple rules and habits, you’ll make it harder for hackers to get your data and easier for you get out of their crosshairs.

Leave a Comment