NordVPN research indicates stolen UK payment card details and digital identity documents are being sold cheaply on dark web marketplaces, enabling identity theft and fraud. The low cost of this data, such as card details for $12 and full identity packs for $40, facilitates incremental identity theft where small pieces of leaked information are combined into larger profiles. The report recommends securing accounts with unique passwords, multi-factor authentication, passkeys, regularly reviewing bank statements, and utilizing dark web monitoring tools.
Identity Stolen UK data, including bank cards and IDs, is cheap on the dark web, NordVPN reports May 18, 2026 Share By SC Staff (Adobe Stock Images) Tech Radar reports that stolen UK payment card details and digital identity packs are being sold cheaply on dark web marketplaces, according to NordVPN's research. Stolen UK payment card details are commonly available on dark web marketplaces for approximately $12, with comprehensive digital identity packs fetching around $40. This includes digital copies of passports and driving licenses, each valued at about $33. The low cost enables criminals to commit identity theft, account takeovers, and various forms of fraud. UK citizens are particularly targeted, with their data commanding higher prices than the European median. The research highlights that identity theft is becoming more incremental, with small pieces of leaked information combined to form larger profiles, making it harder to detect. NordVPN suggests securing online accounts with unique passwords and multi-factor authentication, and recommends using passkeys. Regularly reviewing bank statements and utilizing dark web monitoring tools can help identify potential data breaches and protect consumers. Source: Tech Radar SC Staff Related Privacy Trump administration’s voter data collection efforts face legal challenges SC Staff May 14, 2026 The Department of Justice's Office of Legal Counsel issued a memo arguing that a provision in the 1960 Civil Rights Act, requiring election officials to retain voter records for 22 months, grants the Attorney General the authority to obtain copies of these records. Identity House calls on Instructure to brief Congress on Canvas hack Steve Zurier May 13, 2026 ShinyHunters hit Canvas twice, exposing student data via XSS and identity compromise. Identity Palo Alto Networks launches Idira identity security platform for AI era SC Staff May 13, 2026 Idira integrates technology from CyberArk, acquired by Palo Alto Networks for $25 billion, extending privileged access management controls to machine and AI identities. Related Events Cybercast IAM for MSSPs: Real-World Deployments Mon May 18 Cybercast Privilege risk is in the lifecycle: A CISO discussion on modernizing identity control On-Demand Event Cybercast The industrialization of identity compromise On-Demand Event Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Basic Authentication Biometrics Certificate-Based Authentication Challenge-Handshake Authentication Protocol (CHAP) Digest Authentication Digital Certificate Discretionary Access Control (DAC) You can skip this ad in 5 seconds