Dark Web Price Index 2022

Patricia Ruffio

By Patricia Ruffio . 10 June 2023

Cybersecurity Specialist

Miklos Zoltan

Fact-Checked this

7 Comments

As the global health crisis ground on for a second year, many of the trends in Dark Web information product prices and availability continued, too.

Buyers with an entrée to Dark Web retailers participated in a market that was even larger, more diverse, and vigorous than the year before.

Written for the February 2021 to June 2022 reporting period, this guide updates the information provided in our previous report.

Keep reading to discover the latest product prices, trends, and methods used to make the Dark Web operations more efficient and customers more secure.

IMPORTANT UPDATE: We released our 2023 version of this research. Please head over there for up-to-date and accurate data.

This is what we found:

Category Product Avg. dark web Price (USD)
Credit Card Data Credit card details, account balance up to 5,000 $120
Credit card details, account balance up to 1,000 $80
Stolen online banking logins, minimum 
2,000 on account $65
Israel hacked credit card details with CVV $25
Hacked (Global) credit card details with CVV $15
Spain hacked credit card details with CVV $25
Cloned American Express with PIN $25
Canada hacked credit card details with CVV $18
Australia hacked credit card details w/ CVV $23
Cloned Mastercard with PIN $20
Cloned VISA with PIN $20
Stolen online banking logins, minimum 100 on account $35
Australia hacked credit card details with CVV $30
Walmart account with credit card attached $10
USA hacked credit card details with CVV $17
UK hacked credit card details with CVV $20
Payment processing services PayPal transfer from stolen account, $1,000 – $3,000 balances $45
Cashapp verified account $800
Stolen PayPal account details, minimum $1,000 balances $20
Stolen UK fully verified Skrill account details $120
50 Hacked PayPal account logins $150
Hacked PerfectMoney account $110
PayPal transfers from stolen account, $100-$1,000 balance $15
Movo.Cash Login $14
Hacked Western Union Account $25
Stolen PayPal account details, minimum $100 balances $10
Western Union transfer from stolen account, $1,000+ balances $30
Stolen PayPal account details, no balance $15
Verified Stripe account with payment gateway $1,000
Hacked Weststein Card account $710
Hacked TransferGo account $510
Crypto Accounts Kraken verified account $250
Cex.io verified account $170
Hacked Coinbase verified account $120
Coinfield.com verified account $120
USA verified LocalBitcoins account $120
Blockchain.com verified account $90
Crypto.com verified account $250
Binance verified account $260
Xcoins verified account $320
Bitit.io verified account $400
Bit2me verified account $$120
Social Media Hacked Facebook account $45
Hacked Instagram account $40
Hacked Twitter account $25
Hacked Gmail account $65
Instagram followers x 1000 $4
Spotify followers x 1000 $1
Twitch followers x 1000 $4
LinkedIn company page followers x 1000 $10
Pinterest followers x 1000 $3
Soundcloud plays x 1000 $1
Twitter retweets x 1000 $20
Instagram likes x 1000 $5
Hacked Services Netflix account, 1-year subscription $25
Bet365 account $40
Kaspersky account $5
NBA League Pass $7
Various adult site accounts $5
Canva Pro yearly $6
CNBC Pro $3
Netflix 4K 1 year $4
HBO $4
Orange TVy $4
Hulu $5
Uber hacked account $15
Uber driver hacked account $35
Forged Documents – Scans Utility bill templates $25
New York driver’s license $70
US business cheque templates $10
Russian passport scan $100
USA selfie with holding ID $120
Minnesota driver’s license $150
NSW (Australia) driver’s license $150
Alberta CA driver’s License (scan) $165
Forged Documents – Physical Maltese Passport $6,500
Latvian National ID $160
Netherlands Passport $3,800
Poland Passport $3,800
French Passport $3,800
Various European Union passports $3,800
Delaware ID $150
Indiana ID $150
Latvian National ID $500
Montana ID $150
Nevada ID $160
Texas ID $150
Fake US Green Card $160
New Jersey drivers license $160
New Jersey drivers license 160
Louisiana ID $150
Utah ID $150
European Union National ID (avg.) $160
US driver’s license (avg.) $150
Lithuanian passport $3,800
Email Database Dumps/td> 10 million USA email addresses $120
600k New Zealand emails $110
2,4 million Canada emails $100
Malware Europe fresh, high-quality per 1,000 installs $1,800
UK high-quality per 1,000 installs $1,800
Europe low-quality, slow-speed, low success rate, per 1,000 installs $120
USA, CA, UK, AU med quality, 70% success rate per 1,000 installs $1,200
CA high-quality, per 1,000 installs $1,200
USA high-quality, per 1,000 installs $1,700
USA, CA, UK, AU low quality, slow speed, low success rate x 1000 installs $800
Europe, aged, high-quality, per 1,000 installs $1,100
USA only, medium-quality, 70% success rate, per 1,000 installs $900
Europe, medium-quality, 70% success rate, per 1,000 installs $450
Global, low quality, slow-speed, low success rate, per 1,000 installs $45
Global, medium-quality, 70% success rate, per 1,000 $115
Android OS per 1,000 installs $950
Premium-quality, per 1,000 $5,500
DDOS Attacks Unprotected website, 10-50k requests per second, 1 month $850
Unprotected website, 10-50k requests per second, 1 week $450
Europe, low-quality, slow speed, low success rate per 1, 000 requests $300
Unprotected website, 10-50k requests per second, 1 hour $10
Unprotected website, 10-50k requests per second, 24 hours $45
Premium protected website, 20-50k requests per second, multiple elite proxies, 24 hours $200

As the Data Marketplace Matures, Prices Decline

In the past year, the Dark Web data market grew larger in total volume and product variety. Predictably, as supply grew, most prices plummeted.

Here’s a review of the Dark Web data market by the numbers:

  • Sales volume: The number of items sold this past year is up—way up. Each of more than 9,000active vendors selling fake IDs and credit cards are reporting sales in the several thousands of transactions this past year.
  • Data volume: This year, more bogus credit card data, personal information, and documents were sold in 2021 compared to 2020.
  • Variety of items: The menu of products grew, adding items such as hacked cryptocurrency accounts and web services such as Uber.

Important Operations Changes

As the Dark Web market matures, the folks who run it use features and assume priorities that resemble conventional marketing and retail operations methods.

In the 2021-2022 reporting period, notable changes in Dark Web operations included:

  • A new market leader. Before October 2021, buyers tended to use more established sites, which offered more security features and emphasized customer service. White House Market was the clear leader as the most active site in this regime, hosting about a third of the market’s approximately 9,000 active vendors.

    In October, with little explanation, site administrators announced that they were closing the site, which shut down soon after the announcement. Although other sites, notably ToRReZ and the reconstituted AlphaBay, have moved to fill the gap, it’s impossible to identify a long-term market leader.

  • Dark Web security ops. The Dark Web might have become more secure and efficient, but law enforcement security specialists have become more skillful. To avoid detection and tracking by law enforcement agencies, Dark Web sites now use more—and more sophisticated—security measures throughout Dark Web transactions.
    Last year, Monero cryptocurrency replaced Bitcoin as payment, and pretty good privacy (PGP) encryption methods ruled the day. These security tools still reign supreme.
  • Parallel market and services. These days, Dark Web sites compete on their security and customer service quality. So, it’s no surprise they now use traditional marketing tactics, too. Discounts (Buy 2 cloned credit cards, get one free), coupons, and product reviews are becoming common sights on the most competitive sites.

Here is a profile of a Dark Web vendor, one of nearly 2 million total vendors (active and inactive), who sell stolen, hacked, or bogus data and documents on the Dark Web’s 32 data product sites. Notice that this active vendor has accumulated more than 1,280 sales.

Here’s another snapshot of a vendor profile to further illustrate how this marketplace is thriving. Notice how it normalizes fake data buying by including buyer ratings and comments.

Next, we dive into the detailed trends for eight categories of fake, hacked, or stolen data and physical documents.

2022 Dark Web Product Price Index

As in our earlier reports, our data collection methods include scanning dark web marketplaces, forums, and websites. We process this information to create an index of average prices for a wide variety of specific products.

Cloned Credit Cards and Cardholder Data

In December 2021, approximately 4.5 million credit cards went up on the Dark Web.

The average price for credit card details ranges from $1 (in the U.S., Canada, and Australia) to $ 20 each (in Hong Kong). However, as the table below shows, the general trend for these items was down.

Product Avg. Price USD (2021) Avg. Price USD (2022) YoY Difference
Credit card details, account balance up to 5,000 $240 $120 -$120
Credit card details, account balance up to 1,000 $150 $80 -$70
Stolen online banking logins, minimum 
2,000 on account $120 $65 -$55
Israel hacked credit card details with CVV $65 $25 -$40
Hacked (Global) credit card details with CVV $35 $15 -$20
Spain hacked credit card details with CVV $40 $25 -$15
Cloned American Express with PIN $35 $25 -$10
Canada hacked credit card details with CVV $28 $18 -$10
Australia hacked credit card details w/ CVV $30 $23 -$7
Cloned Mastercard with PIN $25 $20 -$5
Cloned VISA with PIN $25 $20 -$5
Stolen online banking logins, minimum 100 on account $40 $35 -$5
Walmart account with credit card attached $14 $10 -$4
USA hacked credit card details with CVV $20 $17 -$3
UK hacked credit card details with CVV $20 $20 $0

Here’s a screenshot of stolen credit cards sold on the dark web:

Dark Web Credit Cards

Payment Processing Services

As retailers accept mobile payments and other forms of online payment, payment processors have become increasingly common. The value of a hacked account will fluctuate because these entities vary in cybersecurity capabilities and insurance.

PayPal account details are easily the most abundant items listed on the Dark Web marketplace.

Given the laws of supply and demand, it’s no surprise that they are extremely inexpensive to buy. (The more expensive option would be transferred from a hacked account.)

Current prices

As you can see in the table below, processing account detail prices have dropped significantly in the past year due to the robust supply.

Product Avg. Price USD (2021) Avg. Price USD (2022) YoY Difference
PayPal transfer from stolen account, $1,000 – $3,000 balances $340 $45 -$295
Cashapp verified account $1,000 $800 -$200
Stolen PayPal account details, minimum $1,000 balances $120 $20 -$100
Stolen UK fully verified Skrill account details $200 $120 -$80
50 Hacked PayPal account logins $200 $150 -$50
Hacked PerfectMoney account $160 $110 -$50
PayPal transfers from stolen account, $100-$1,000 balance $50 $15 -$35
Movo.Cash Login $35 $14 -$21
Hacked Western Union Account $45 $25 -$20
Stolen PayPal account details, minimum $100 balances $30 $10 -$20
Western Union transfer from stolen account, $1,000+ balances $45 $30 -$15
Stolen PayPal account details, no balance $14 $15 +$1

Guides to cashing out these transfers without alerting the authorities often accompany the purchase of payment processing accounts, another commonly listed item. These guides sell for cents on the dollar.

However, whether they work and keep buyers out of trouble remains unclear.

PayPal Dark Web

New payment processing services

Our price index grew with the addition of nine payment processing services.

New Payment Processing Services Avg. Price USD (2022)
Verified Stripe account with payment gateway $1,000
Hacked Weststein Card account $710
Hacked TransferGo account $510
50 Hacked PayPal account logins $200
Hacked PerfectMoney account $160
Hacked UK Neteller account $70
Hacked Western Union Account $45
Movo.Cash Login $14
Stolen PayPal account details, no balance $14

Hacked Cryptocurrency Accounts

And here are our current crypto account listings for the current reporting period (2021-2022).

Product Avg. Price USD (2021) Avg. Price USD (2022) YoY Difference
Kraken verified account $810 $250 -$560
Cex.io verified account $710 $170 -$540
Hacked Coinbase verified account $610 $120 -$490
Coinfield.com verified account $410 $120 -$290
USA verified LocalBitcoins account $350 $120 -$230
Blockchain.com verified account $310 $90 -$220
Crypto.com verified account $300 $250 -$50

The hefty losses in value reflect jitters in traditional markets.

Although crypto and mainstream investments remained separate for many years, recent events coupled them.

So, investor uncertainty in stock and bond markets, for example, also showed up in the crypto markets. And Bitcoin being deposed as the currency of choice on the Dark Web shattered confidence in the BTC-based value of its offerings.

New Cryptocurrency Accounts Avg. Price USD (2022)
Xcoins verified account $320
bitit.io verified account $400
Bit2me verified account $120

Nevertheless, three new cryptocurrency-based products debuted on the Dark Web this year.

Hacked Binance Dark Web

Hacked Online Services & Entertainment Accounts

Do you need proof that cybercriminals have developed a taste for a huge variety of Dark Web data offerings?

If so, look no further than hacked social media accounts. Vendors even sell access to paid online subscription services at lower prices—if customers are willing to take the risk of discovery.

Product Avg. Price USD (2021) Avg. Price USD (2022) YoY Difference
Netflix account, 1-year subscription $44 $25 -$19
Bet365 account $50 $40 -$10
Kaspersky account $8 $5 -$3
NBA League Pass $8 $7 -$1
Various adult site accounts $5 $5 $5
Canva Pro yearly $6 $6 $0
CNBC Pro $3 $3 $0
Netflix 4K 1 year $4 $4 $0
HBO $4 $4 $0
Orange TV $4 $4 $0
Hulu $5 $5 $0
Uber hacked account $8 $15 $+$7
Uber driver hacked account $14 $35 $+21

However, as you can see by the tepid prices, only Uber-related accounts increased in value.

Haxked Services Dark Web

Everything else, to a use a popular term, languished.

Disney Plus Dark Web

People generally buy these accounts due to content restrictions on their own accounts. The hacked accounts may be from country that has a bigger streaming site library than their own. This is kinda weird because people can use a VPN to unblock streaming sites. For example, you can have Netflix unblocked with a VPN.

We have a dedicated page precisely for finding the best VPN for Netflix. Go there to find more info about Netflix and VPN servies.

Here’s a look at some examples of various hacked online accounts being sold:

Forged Documents (Scans)

You can buy forgeries as physical documents or digital scans if you know where and how to look on the Dark Web.

These highly customizable items can be changed with any detail a buyer might want.

All it takes are a few pieces of genuine information and some skill. Voila! Criminals can create a portfolio of fake, official-looking documents.

Here’s a list of the going rates for these forgeries:

Product Avg. Price USD (2021) Avg. Price USD (2022) YoY Difference
Utility bill templates $39 $25 -$14
New York driver’s license $80 $70 -$10
US business cheque templates $15 $10 -$5
Russian passport scan $100 $100 $0
USA selfie with holding ID $100 $120 +$20
Minnesota driver’s license $20 $150 +$130
NSW (Australia) driver’s license $20 $150 +$130
Alberta CA driver’s License (scan) $32 $165 +$133

Counterfeit currency (mainly in 20- and 50-USD denominations) is an extremely popular and easily available item.

The most popular currencies include euros, the British pound, and dollars from Canada, Australia, and the United States.

Some of these bills come with a UV pen-test guarantee. Typically, these especially high-quality counterfeit banknotes cost buyers approximately 30 percent of their face value.

Document scans that include a selfie with the owner are another valuable purchase.

They can be used for SIM swap attacks and personal data access requests in California and the European Union. (In a SIM swap exploit, an attacker takes over the mobile phone number of the real subscriber by asking the mobile telecom provider to link that number to a SIM card under the attacker’s control.)

Here are examples of fake digital documents being sold on the Dark Web.

Dark Web Scans

Forged Documents (Physical)

Buyers can also obtain forged physical documents on the Dark Web. These are the highest-priced items on the Dark Web markets by far.

Product Avg. Price USD (2021) Avg. Price USD (2022) YoY Difference
Maltese Passport $6,500 $3,800 -$2,700
Latvian National ID $500 $160 -$340
Netherlands Passport $4,000 $3,800 -$200
Poland Passport $4,000 $3,800 -$200
French Passport $4,000 $3,800 -$200
Various European Union passports $4,000 $3,800 -$200
Delaware ID $185 $150 -$350
Indiana ID $185 $150 -$35
Montana ID $150 $150 $0
Nevada ID $160 $160 $0
Texas ID $145 $150 +$5
Fake US Green Card $150 $160 +$10
New Jersey drivers license $150 $160 +$10
Louisiana ID $125 $150 +$25
Utah ID $125 $150 +$25
European Union National ID (avg.) $120 $160 +$40
US driver’s license $100 $150 +$50
Lithuanian passport $1,500 $3,800 +$2,300

These are examples of forged physical documents being sold on the Dark Web:

Dark Web Passports

Drivers’ license examples:

Dark Web Drivers' LIcenses

Email Database Dumps

Easy availability and low accuracy make data from email dump notoriously cheap. Most email dumps are aggregations and collections of other email breaches, so the quality standards are common—we get what we pay for.

Email Database Dumps Avg. Price USD (2022)
10 million USA email addresses $120
600k New Zealand emails $110
2,4 million Canada emails $100

Malware

When installed on compromised systems that run on Microsoft Windows, Android, and other operating systems, malware gives hackers complete access to machine capabilities. These can hijack computer resources via ransomware or steal user or patient information.

Social networks and fake online casinos are two common and attractive ways of installing malware onto websites. It’s a good idea not to download anything from sites or sources you don’t know and trust.

The following table lists items by their current prices, national origin, and quality indicators.

Product Avg. Price USD (2021) Avg. Price USD (2022) YoY Difference
Europe fresh, high-quality per 1,000 installs $2,500 $1,800 -$700
UK high-quality per 1,000 installs $2,200 $1,800 -$300
Europe low-quality, slow-speed, low success rate, per 1,000 installs $320 $120 -$200
USA, CA, UK, AU med quality, 70% success rate per 1,000 installs $1,400 $1,200 -$200
CA high-quality, per 1,000 installs $1,400 $1,200 -$200
USA high-quality, per 1,000 installs $1,900 $1,700 -$200
USA, CA, UK, AU low quality, slow speed, low success rate x 1000 installs $900 $800 -$100
Europe, aged, high-quality, per 1,000 installs $1,200 $1,100 -$100
USA only, medium-quality, 70% success rate, per 1,000 installs $1,000 $900 -$900
Europe, medium-quality, 70% success rate, per 1,000 installs $500 $450 -$50
Global, low quality, slow-speed, low success rate, per 1,000 installs $50 $45 -$5
Global, medium-quality, 70% success rate, per 1,000 $80 $115 +$35
Android OS per 1,000 installs $900 $950 +$50
Premium-quality, per 1,000 $5,000 $5,500 +$500

Here’s a sample of malware listed on the Dark Web:

DDOS Attacks

A distributed denial of service (DDoS) attack disrupts the use of websites and other Internet assets by blocking users from internet products and services.

The malware targets websites by sending thousands of connection requests, which overloads and crashes the website’s server. No information is stolen through these attacks, but they can be used to extort ransoms or hide other hacking activities.

Note that the DDoS attacks offered below are described by the target, thousands of access requests, quality, speed, and duration. (DDoS attacks can last seconds or days. As you might expect, buyers get the results they pay for.)

Product Avg. Price USD (2021) Avg. Price USD (2022) YoY Difference
Unprotected website, 10-50k requests per second, 1 month $1,000 $850 -$150
Unprotected website, 10-50k requests per second, 1 week $500 $450 -$50
Europe, low-quality, slow speed, low success rate per 1, 000 requests $320 $300 -$20
Unprotected website, 10-50k requests per second, 1 hour $15 $10 -$5
Unprotected website, 10-50k requests per second, 24 hours $50 $45 -$5
Premium protected website, 20-50k requests per second, multiple elite proxies, 24 hours $200 $200 $0

As in most of the products listed this year, prices fell or barely held their value.

How to Protect Yourself from Identity Theft

There are many ways to get hacked but many ways to prevent it. You can discourage unwelcome visitors to your accounts at home or in the office by using these recommendations.

If identity theft is your major concern, use the following tips to reduce the chance of unwelcome visitors.

Avoid public or unsecured WiFi

If you’re in a coffee shop or anywhere else you don’t trust network security, use a virtual private network (VPN) to encrypt all communications. But if an attacker has access to an unencrypted network that you’re using, it’s easy to view your account data and steal or alter your information. Check out my guide to the best VPNs if you are interested in picking one. This might seem to be a hassle.

Use safe ATM practices

Your local ATM is the doorway to your valuable personal data. Here are some ways to prevent it from giving cybercrooks the “Open sesame!”

Check for ATM skimmers. Skimmers are devices placed over an ATM. They are often replicas of the card reader, but their wiring sends your card information to a hacker, not your bank. Check for ATM skimmers by:

  • Pressing around the sides of the card slot. You’re looking for anything that feels loose. Skimmers are delicately mounted, so they’ll move when pressed with light pressure.
  • Checking for glue or tape around the edges. If you see any sticky material, stay away from the ATM and call the bank.
  • Stopping the transaction. If you have difficulty putting your card into the ATM, stop trying and report the situation to the bank.

Check for fake keypads. Fake keypads are sometimes placed over the legitimate ones to record your PIN. They’re also very loosely mounted. So, if the keypad jiggles around a bit, or if you notice the keypad is off-center, stop using it and contact the bank.

Keep your information private

ATMs are only one of many ways to reveal sensitive account information.

Don’t give sensitive information over the phone. Period. Even if the information is required for an important process such as signing up for Social Security or a new driver’s license. If possible, transfer the information in person.

Use anti-malware tools. Install anti-virus or other anti-malware software on your personal computer to check for malware. Then, make sure to set the update period to Automatic.

Practice Account and Password Hygiene

Anywhere you store personal data is a potential entry point for cyberattackers. Here are some ways to prevent illegal entry into your data stores.

  • Avoid using the same password for multiple accounts. This is the easiest way for an attacker to access your accounts. When a major list of account details is dumped on the dark web, your account details can be checked against other services such as email or banking, and you don’t want them to use the same password.
  • Delete accounts you don’t use anymore. Cyberattackers can compromise old information or use it in password resets or similar attacks. This is especially risky if you reuse passwords on multiple accounts.

Use a password manager. Software such as LastPass or Keepass can make it easy to use extra-strength passwords for all your accounts. (All you need is to remember a master password.) Better yet, many are free.

Rules, rules, rules! These guidelines might seem to be complicated, a real pain.

However, when you get used to following them, they’ll become second nature. That’s when you develop a sense of vital cybersecurity online and in daily life.

Why This Data is Important

You might be wondering what all these (admittedly nerdy) details mean to you. It’s true, Dark Web market data might not provide most people with useful insights.

However, the overall message should be clear. Your data is valuable to cybercrooks, and it doesn’t cost much to steal your identity or otherwise exploit you.

The sheer quantity of data available for purchase has created a bulk sales mentality for Dark Web customers.

The sad truth is that the growing supply of personal information on the Dark Web makes it cheaper—and therefore more likely—that your accounts will be hacked.

So, the chance of your getting hacked is unpredictable but growing unless you protect yourself.

Adopting a few simple rules and habits will make it harder for hackers to get your data and easier for you to get out of their crosshairs.

2023 Update and Summary:
The Dark Web data market has continued to grow in size and variety, with prices for information products dropping as supply increases.

As demand for security and customer service quality rises, Dark Web sites are adopting traditional marketing tactics such as discounts, coupons, and product reviews.

To protect oneself from identity theft, it is recommended to use the best VPNs to encrypt communications, practice safe ATM habits, maintain account and password hygiene, and avoid public or unsecured Wi-Fi.

Despite the increased availability of personal information on the Dark Web, individuals can still take measures to reduce the risk of being hacked.

Adopting simple rules and habits, such as using different passwords for different accounts and employing a password manager, can help keep personal data out of the reach of cybercriminals.

7 Comments

  • Anonymous

    May 12, 2023 8:27 pm

    I need help sir my Facebook id was hacked please give me i want to talk with you

  • Anonymous

    May 12, 2023 8:23 pm

    I need help sir my Facebook id was hacked

  • James

    May 5, 2023 10:55 pm

    I read and understand the term of the dark web, how can I join

  • NONE

    July 25, 2022 9:14 am

    Lol give me legit site who sells that 😀
    You’ll get scammed if you buy from Dark web

  • Shaf

    July 23, 2022 9:31 am

    Hi! This is fascinating data, and I understand you scanned various marketplaces and forums. I’m currently evaluating the impact of regulations on the price of information, and this is a really good source of data (as well as your other two indexes, 2020-2020). I’m interested in the original dataset you used to attain these average indexed figures for my research (with all due credit given to you, of course) – would it be possible to share the dataset for these indexes? Would love to talk more about this, or even just an insight as to how the methodology behind this took place!

  • Anonymous

    July 7, 2022 11:24 am

    The Maltese Passport is prices twice, with different prices.. why is this?

    • Miklos Zoltan

      July 7, 2022 11:26 am

      Seems to have been a mistake. Sorry about that. I have just checked and the $6,500 is the correct one. Edited.

Leave a Comment