top of page
Writer's pictureKathryn Kandra

The Dark Web Has You! (And Your Credit Card Information)



In 2023, the information of 119 million stolen payment cards was posted freely or for sale online, according to a Recorded Future study. Most of this stolen card info, or 71.4 million cards, ended up being sold on the dark web. That’s a huge number already, and it’s only going to climb higher in 2024.


But what exactly is the dark web? How does it promote credit card fraud? And what does that mean for cardholders, businesses, and banks? Buckle up and we’ll take you through it. Fair warning: it’s a scary read.


What is the Dark Web?

We all know the internet is vast, but what some don’t know is that the websites we browse, the videos we stream, and the news we read only make up the surface of the web. So, what’s underneath? That’s the deep web—and lurking in its deepest, darkest corners of the deep web is the infamous dark web.


Think of the internet like an ocean. The surface web—what some casually call the "World Wide Web"—is, well, the surface. The surface web is made up of all the web sites that can be found by a search engine, like news sites, social media, public websites, and more. Below the surface is the vast expanse of churning water called the deep web. The deep web is huge and includes lots of secure web pages and information, like email inboxes, bank accounts, private databases, medical records, and legal documents. It's not accessible via your regular Google search, and it’s not meant to be. It's protected, secure, and used for many legitimate purposes.


The dark web is the part of the ocean that’s so deep that no sunlight reaches it. It’s not easily accessible, and probably full of strange creatures. The dark web is essentially an extension of the deep web, where users take advantage of the deep web’s anonymity for private and often illicit purposes. Using the dark web, people can create and access hidden web sites without being traced. These sites use complex encryption to hide users’ identities and locations, which makes it the perfect place for cybercrime.


Dangers of the Dark Web

It’s not illegal to use the dark web, but once you start using its anonymity for evil, you’re on the wrong side of the law. And it’s a place where your personal data is at serious risk.

Criminals log on to the dark web to buy and sell drugs, illicit acts, and victims’ personal information, which ranges from usernames and passwords to social security numbers, home addresses, and credit card details. According to Privacy Affairs' Dark Web Price Index for 2023, stolen credit card data is among the most valuable information traded on the dark web. One security company’s analysis of their clients found that credit card data was the most advertised threat type on dark web channels at the end of 2023, making up 81% of overall illicit offerings.


Credit Card Fraud and the Dark Web

The dark web makes it relatively easy for a criminal to log on, buy or otherwise access someone’s payment card information, and then use that information to buy something online. From 2022 to 2023, the number of compromised credit cards found on the dark web increased by 25%, and the U.S. saw a whopping 50% rise in stolen credit card data in the same period—a sinister correlation.


One of the main ways credit card information ends up on the dark web is through data breaches. According to the Recorded Future study, in 2023 there were at least 1500 documented breaches where card information ended up on the dark web. Other than data breaches, card information also lands on the dark web due to cyber-attacks, phishing scams, and even card skimming. Cards are commonly skimmed at restaurants and retail stores. Online shopping isn’t safe from skimming either: cybercriminals use e-skimmers (malicious code inserted into checkout pages) to steal credit card info and in 2023, 5,700 e-skimmers were found on various online shopping sites.


And the cost of all this fraud? Not pretty. According to one Security.org survey, the median fraudulent charge per card in 2024 is $100. Recorded Future calculated that in 2023, fraudulent card charges added up to $9.4 billion in preventable losses for card issuers worldwide. The Security.org survey also concluded that in July 2024, unauthorized card purchases already exceeded $5 billion in the U.S. alone. Not to mention the additional costs to cardholders and merchants. These additional costs include damaged credit scores, lost merchandise, and considerable stress and time.


How to Protect Your Credit Card from the Dark Web

Now, here’s the big question: what can you do to protect yourself from having your credit card data sold on the dark web? First, it’s a good idea to check if your data has already been leaked. Commercial web monitoring services allow you to search for your personal information to see if your data has already been compromised and put on the dark web.


If you find that your credit card data is already floating around the dark web, don’t panic. You should contact your credit card issuer immediately, monitor your accounts for suspicious activity, check your credit report, and place a fraud alert on your credit file to help protect against future fraud.


You can prevent your credit card data from getting on the dark web and being sold in the first place by following best practices for credit card security:


Strong Encryption and Secure Data Storage

Make sure your devices and online accounts are locked down with strong encryption.


Two-Factor Authentication (2FA)

Always enable 2FA where possible. It’s an extra layer of security that can make a huge difference.


Regular Updates

Keep your software up to date to stay protected against the latest threats.


EVC Cards

EVC (Ellipse Verification Code) cards generate a new security code every time you tap or dip them in a transaction. This makes it almost impossible for a criminal to successfully sell your credit card information on the dark web, because by the time it sells, your card’s security code will most like have already changed. This stops dark web-related credit card fraud before it even occurs.




The dark web is a, well, dark place where stolen credit card data and other personal information is sold for profit. As the dark web grows, so does the risk of your own credit card data being caught in the crossfire. However, with a proper life vest, you can save yourself from drowning in the depths of the dark web.

コメント


bottom of page