Research from NordVPN reveals that stolen payment card details in the UK are being offered for around £9 (approximately $12) on dark web marketplaces. More comprehensive ‘digital identity packs’ are being sold for around £30 ($40). Commonly sold items include payment cards and digital copies of passports and driving licenses, each valued at £26.
UK citizens represent a significant target for data theft, with their stolen information commanding higher prices. Payment card data in the UK is priced “slightly above” the European median, according to NordVPN, while identity documents attract “comparatively high prices.” Criminals can accumulate sufficient data for fraud for as little as the cost of a coffee.
Marijus Briedis, CTO of NordVPN, expressed concern over the incremental nature of identity theft, which makes it difficult for consumers to detect attacks. He stated, “Most people still think identity theft is something dramatic and obvious, when in fact it can begin quietly, with a few personal details or copied documents being traded online.”
To help consumers understand potential risks, NordVPN has introduced an interactive dark web calculator that estimates the value of an individual’s data based on their online accounts and identities. Regular personal emails can be sold for as little as $1, while access to corporate accounts can command higher prices due to their potential value.
NordVPN emphasizes the vulnerability of Meta-owned social media accounts, as a single login can provide access to platforms like Facebook and Instagram. To mitigate risks, NordVPN recommends using unique passwords for each account along with multi-factor authentication. The company also encourages adopting passkeys, which enhance security as they cannot be stolen or copied from password managers.
Briedis concluded, “The earlier people understand what their data is worth and how exposed they may be, the better chance they have of protecting themselves.”
