How much is my credit card number worth on the black market?

Answers to your questions about the news.
April 24 2008 6:18 PM

Credit Card Numbers for Sale

How much does a Visa or MasterCard number go for these days?

A laptop and credit card
The more valuable stolen credits cards have been fraud-tested

Security experts at the InfoSecurity Europe conference are drawing attention to "data supermarkets" that sell stolen credit card numbers for a fixed price. According to a BBC story, "credit card details are cheap" on the black market while "the logfiles of big companies can go for up to $300." How much is my credit card number worth on the Internet?

As little as a few cents. Reliable statistics about data theft are notoriously hard to come by, and reports of cheap cards for sale are nothing new. Researchers who track the Internet Relay Chat servers where this sort of business is often done, however, are reporting that the lowest advertised prices of credit card numbers has been falling during the past two years. Symantec—a firm that sells security software to both consumers and businesses—reported earlier this month that credit card numbers were now selling for anywhere between 40 cents and $20. (Credit cards from Europe or smaller card companies typically cost up to twice as much as standard-issue American numbers, presumably due to their relative scarcity within the market.) By comparison, Symantec researchers found bank account numbers going for anywhere from $10 to $1,000, and "full identities"—which include date of birth, address, and social security and telephone numbers—selling for between $1 and $15 a pop.


How many card numbers are up for sale at a given time? A group of academics found  (PDF) that in a set of IRC channels they were able to access in 2006, 402 valid card numbers were appearing a day simply as teasers to attract new business. (The researchers couldn't tell, of course, if the cards were actually used or whether the linked accounts were active.)

The demand for very basic credit card information appears to be shrinking—in large part because those data are often not very valuable. Credit card companies foot most of the bill when your card number is pilfered: By law, a consumer is liable for only $50 when a stolen card is used, and most companies waive even that. As a result, the companies have stepped up their efforts to cut down on fraud, reducing the potential benefit from accessing a stolen card number. As opposed to bank accounts, for instance, it is far more difficult to use credit cards to quickly (and anonymously) take out cash before an account is shut off.

In addition, the market for stolen data has become segmented. The available statistics on the price of pilfered data is based on information found on public channels. More sophisticated data likely sells at higher prices in more restricted venues. Simple credit card numbers are often sold in bulk—Symantec found sales of 500 for $200—while more specialized products go for a good deal more. The big money now appears to be in a host of value-added services, as more sophisticated criminals have gotten in the business of validating data, compiling more complete dossiers of information or selling "bots" that allow the buyer to collect data himself. The more expensive credit card numbers have often been field-tested already, with a seller placing a small charge on the account to see whether it goes through and if the owner detects any fraud. And a file that includes passwords, the answer to a user's security questions, and his mother's maiden name—along with the credit card data—might go for a few hundred dollars.

Got a question about today's news? Ask the Explainer.

Explainer thanks Alessandro Acquisti and Jason Franklin of Carnegie Mellon University, L. Jean Camp of Indiana University, Don Jackson of SecureWorks, and Dean Turner of Symantec.



Blacks Don’t Have a Corporal Punishment Problem

Americans do. But when blacks exhibit the same behaviors as others, it becomes part of a greater black pathology. 

I Bought the Huge iPhone. I’m Already Thinking of Returning It.

Scotland Is Just the Beginning. Expect More Political Earthquakes in Europe.

Lifetime Didn’t Think the Steubenville Rape Case Was Dramatic Enough

So they added a little self-immolation.

Two Damn Good, Very Different Movies About Soldiers Returning From War

Medical Examiner

The Most Terrifying Thing About Ebola 

The disease threatens humanity by preying on humanity.

Students Aren’t Going to College Football Games as Much Anymore, and Schools Are Getting Worried

The Good Wife Is Cynical, Thrilling, and Grown-Up. It’s Also TV’s Best Drama.

  News & Politics
Sept. 19 2014 9:15 PM Chris Christie, Better Than Ever
Sept. 19 2014 6:35 PM Pabst Blue Ribbon is Being Sold to the Russians, Was So Over Anyway
Inside Higher Ed
Sept. 19 2014 1:34 PM Empty Seats, Fewer Donors? College football isn’t attracting the audience it used to.
  Double X
The XX Factor
Sept. 19 2014 4:58 PM Steubenville Gets the Lifetime Treatment (And a Cheerleader Erupts Into Flames)
  Slate Plus
Slate Picks
Sept. 19 2014 12:00 PM What Happened at Slate This Week? The Slatest editor tells us to read well-informed skepticism, media criticism, and more.
Brow Beat
Sept. 19 2014 4:48 PM You Should Be Listening to Sbtrkt
Future Tense
Sept. 19 2014 6:31 PM The One Big Problem With the Enormous New iPhone
  Health & Science
Medical Examiner
Sept. 19 2014 5:09 PM Did America Get Fat by Drinking Diet Soda?   A high-profile study points the finger at artificial sweeteners.
Sports Nut
Sept. 18 2014 11:42 AM Grandmaster Clash One of the most amazing feats in chess history just happened, and no one noticed.