Key Takeaways
- 64% of all dark web activity involves stolen data and databases
- Your personal data – phone, address, email – sells for as little as $1
- DDoS attacks can be hired from just $20; stealer malware subscriptions from $15/month
- Zero-day exploits fetch up to $150,000, showing the dark web serves every skill level
The Story Behind the Numbers
The dark web is a hidden part of the internet – invisible to search engines, accessible only through special software like Tor. Most people assume it doesn’t affect them. The data says otherwise.
A staggering 64.06% of all dark web activity involves stolen data and databases. Selling posts make up 59.32% of all activity – meaning the dark web is, above all, a marketplace.
What’s for sale? Everything from a stolen credit card ($5-$50) to a custom phishing page ($50-$2,000) to a zero-day software exploit reaching up to $150,000. Personal data is the cheapest commodity – your phone number, address, and email sell for as little as $1. A hacked PayPal or Revolut account averages $100. DDoS attacks, used to knock websites offline, are available from just $20, contributing to a threat landscape where daily DDoS attacks increased 236% since 2023.
The barrier to entry for cybercrime has never been lower.
| Item | Lowest Price | Highest Price |
|---|---|---|
| Malicious Software and Tools (malware and offensive tools sold on dark web forums) | ||
| Stealer malware (subscription) | $15 | $500 |
| Loader / RAT | $200 | $3,000 |
| Exploit | $200 | $5,000 |
| 0-Day Market (software vulnerability unknown to the developer – no patch exists) | ||
| Low-end 0-day | avg. $1,000 | — |
| Mid-tier 0-day | avg. $20,000 | — |
| High-end 0-day | avg. $150,000 | — |
| Spamming and DDoS Services (subscription-based attack and spam services) | ||
| SMS smishing (per message) | $0.05 | $1 |
| Email spam service | $1 | $5 |
| DDoS attack | $20 | $600 |
| Hacking Services (support services sold between threat actors) | ||
| AV / security bypass | $1,000 | $3,000 |
| Dropper / malware encryption | $50 | $500 |
| Phishing Kits and Templates (ready-made tools for phishing campaigns) | ||
| Phishing panel / spoofer | $50 | $500 |
| Custom scam page | $50 | $2,000 |
| Credit Cards (stolen credit card data by region) | ||
| US / UK credit card | $5 | $50 |
| EU / Gulf / APAC credit card | $1 | $20 |
| African credit card | $1 | $10 |
| Online Payment Accounts (e.g. PayPal, Venmo, Revolut – single averages reported) | ||
| Widely adopted platform (PayPal, Revolut) | avg. $100 | — |
| Limited adoption platform (ZEN, P100) | avg. $50 | — |
| Personal Information and Documents (sold mostly in bulk) | ||
| Driver’s license / national ID / credit score | $5 | $10 |
| Phone number / address / email | $1 | $5 |
| Money Laundering Services (fee as % of total crypto amount – not a flat price) | ||
| Low-fee laundering | 2% | 5% |
| Mid-range laundering | 5% | 10% |
| High-fee / full-service laundering | 10% | 20% |
| Social Media Accounts and Services (hacked accounts priced by platform influence) | ||
| LinkedIn account | $10 | $100 |
| Facebook account | $50 | $75 |
| Amazon Business Prime account | $25 | $100 |
| X (Twitter) account | $100 | $200 |
Why This Data is Important
These prices aren’t just statistics – they’re a direct threat to ordinary people. When your email appears in a data breach, it doesn’t sit unused. It gets packaged, priced, and sold within hours.
Understanding what criminals buy helps you protect yourself. The table above shows just how cheap your data is to criminals – a driver’s license for $5, a Facebook account for $50, a bank login for as little as $200. That low price point means there is constant demand, and constant incentive to steal more. A VPN encrypts your connection, making it far harder for criminals to intercept your data before it ever reaches a dark web marketplace – if you’re new to this, our beginner’s guide to VPNs is a solid starting point. And if your credentials have already been compromised, dark web monitoring services can alert you before attackers have the chance to use them.
Your data has a price. Knowing that price is the first step to protecting it.
Looking Ahead: Future Outlook
The dark web economy is becoming more accessible, not less. Stealer malware subscriptions start at just $15, putting large-scale credential theft within reach of low-skill criminals. Money laundering services – used to clean stolen crypto – charge as little as 2% of the amount processed. As AI-powered phishing tools and deepfake identity kits continue to drop in price, the volume and sophistication of attacks targeting everyday users will only grow.
Source & Methodology
Data in this article is sourced directly from the SOCRadar Annual Dark Web Report 2025. SOCRadar’s dedicated Dark Web team continuously monitors underground forums, marketplaces, and encrypted channels. All prices reflect observed market data from 2025 and are presented as ranges or averages as stated in the original report.