Hacked PayPal accounts tripled in value during pandemic

But value of hacked credit cards decline, according to survey

Security researchers have discovered that the value of hacked PayPal accounts have spiked by 293% during the pandemic, almost tripling in a matter of months.

In an analysis of listings on 13 dark web marketplaces, researchers at pro-consumer website Comparitech found criminals were paying around 9.2 cents for every dollar in a hacked PayPal account. This is compared to a similar study conducted eight months prior, when buyers spent an average of 3.13 cents per dollar in the account.

The researchers found the average price of a PayPal account across all the marketplaces we examined was $196.50, with an average account balance of $2,133.61.

PayPal accounts have different tiers. Researchers found that individual accounts  cost $161.59 on average and had an average account balance of $1,732.85, or 9.32 cents per dollar. Premier accounts, on the other hand, cost $186.31 on average and had an average balance of $2, 029.95,or 9.18 cents per dollar. 

Business accounts were even more valuable, costing an average of $246 and carrying an average balance of $2,684.29, equating to 9.18 cents per dollar.

This contrasted with credit cards, including the credit card number, CVV, expiration date, cardholder name and postal code, which sell for $17.36 on average. While researchers said this is double the average price recorded from earlier this year, its value is decreasing. 

Related Resource

The state of ransomware in retail 2021

Insights into the current state of ransomware in the retail sector

Whitepaper front coverFree download

Previously, cyber criminals would pay out 0.42 cents for every dollar on the stolen card. Today, they pay 0.33 cents per dollar, or 306 times the price of the stolen card.

The report said the average price of a cloned, physical card is $171, or 5.75 cents per dollar of credit limit. Researchers noted there was a positive correlation between a cloned card’s credit limit and its price. The correlation was less strong but still apparent in sales of credit card details. The average credit limit on the listings researchers examined was $2,980.

The researcher also looked at the average price for cloned copies of each major brand of credit card to find out which types of credit cards are worth the most to criminals. MasterCard was worth the most at 6.47 cents per dollar, then Discover at 6.27 cents per dollar, Visa at 5.75 cents per dollar, and American Express at 5.13 cents per dollar.

Researchers said that while brand was one consideration, other factors can contribute to a higher price on the dark web, such as whether the product is a physical card (usually cloned) or digital (just the number and other information on the card), the expiration date (newer cards are more likely to be valid), and credit limit.

Featured Resources

The ultimate law enforcement agency guide to going mobile

Best practices for implementing a mobile device program

Free download

The business value of Red Hat OpenShift

Platform cost savings, ROI, and the challenges and opportunities of Red Hat OpenShift

Free download

Managing security and risk across the IT supply chain: A practical approach

Best practices for IT supply chain security

Free download

Digital remote monitoring and dispatch services’ impact on edge computing and data centres

Seven trends redefining remote monitoring and field service dispatch service requirements

Free download

Recommended

Acer Taiwan falls victim to cyber attack
hacking

Acer Taiwan falls victim to cyber attack

18 Oct 2021
Marsh McLennan reveals its cyber risk analytics center
risk management

Marsh McLennan reveals its cyber risk analytics center

15 Oct 2021
£100 contactless payment limit could place shoppers at risk, warn industry experts
Policy & legislation

£100 contactless payment limit could place shoppers at risk, warn industry experts

15 Oct 2021
Hackers used MSHTML exploit a week before patches were ready
zero-day exploit

Hackers used MSHTML exploit a week before patches were ready

14 Oct 2021

Most Popular

HPE wins networking contract with Birmingham 2022 Commonwealth Games
Network & Internet

HPE wins networking contract with Birmingham 2022 Commonwealth Games

15 Oct 2021
Veritas Backup Exec 21.3 review: Covers every angle
backup software

Veritas Backup Exec 21.3 review: Covers every angle

14 Oct 2021
What is cyber warfare?
Security

What is cyber warfare?

15 Oct 2021