DIGITAL LIFE

Brazilian identities sold for around $40 on the dark web
On the dark web, it's possible to buy stolen personal data, including complete identity packages, for just a few dollars. To illustrate how accessible this data has become, the cybersecurity company NordVPN created an interactive calculator that allows users to see how much their accounts and documents would cost.
“Every online account you have has a price on the dark web,” said Marijus Briedis, the company's Chief Technology Officer (CTO), in a statement. “Your streaming subscriptions, your email, your bank login, your social media profiles. Most people would be shocked at how cheap it is for a criminal to buy your entire digital identity,” he added.
Although the United States accounts for the majority of ads related to stolen payment cards—more than 70% of the total analyzed—on dark web marketplaces, data from South Americans, including Brazilians, appears frequently.
To give you an idea, a Brazilian payment card is sold for an average price of US$12.82. In countries where stolen data is less common, such as Japan and Singapore, prices are significantly higher.
In the case of a complete Brazilian package, known as "fullz," which contains information such as CPF (Brazilian taxpayer ID), date of birth, and address, the price is US$40.
"For less than the cost of a meal, a criminal can buy enough information to start building a false identity in someone else's name," Briedis pointed out.
He continued: "Most people think identity theft is something that won't happen to them or that it's something they would easily notice. The reality is that your data may already be for sale, and you wouldn't know without actively checking."
Corporate and exchange accounts are more expensive... NordVPN's tool reveals that stolen corporate accounts have a significantly higher value than common personal access. While personal email credentials can be traded for as little as $1, stolen Brazilian Office 365 accounts are sold for an average price of $26.50.
Social media accounts are popular assets on dark web marketplaces. Facebook accounts represent about 40% of ads involving social profiles, with an average price of $38. TikTok accounts go for $60 and Snapchat for $34.50.
Streaming accounts are relatively cheap. Netflix accounts go for $4.55 and Spotify for $28. On the other hand, cryptocurrency exchange accounts are among the most expensive items. A stolen Coinbase account has an average price of $107.50 and a Binance account, $160.
According to NordVPN's survey, retail accounts also have their value. A stolen Amazon account costs around US$50 and is used to buy products with gift cards and resell them.
To reduce the risk of having your data stolen and sold on the dark web, the company makes some recommendations:
Use tools that alert you when data becomes compromised, allowing for quick action.
Use unique passwords for each account, with reliable password managers.
Enable two-factor authentication whenever possible.
Limit the sharing of personal data.
Disable unnecessary cookies.
Do not provide sensitive information.
Review bank statements.
Reports indicate that personal identities of Brazilian citizens are indeed being sold on the dark web for approximately (40)
Key findings on Dark Web identity pricing
A recent analysis of underground marketplaces reveals that various forms of compromised Brazilian data are traded at relatively low prices:
Complete Identity Packages (Fullz): Comprehensive records—which may include full name, CPF (taxpayer ID), address, and banking credentials—typically cost around $40.
Social Media Accounts: Stolen Facebook accounts from Brazil are frequently traded for an average price of $38, while TikTok accounts can go for as much as $60.
Government and Corporate Access: Access to Brazilian Office 365 accounts averages $26.50, while compromised government or law enforcement email accounts can also be found for as little as $40.
Context of massive data leaks...These sales are often fueled by massive data breaches that have exposed millions of Brazilians:
Mega-leaks: Historical breaches have exposed over 223 million records, including names, CPFs, and facial images.
Bulk availability: While individual high-quality profiles sell for ~$40, bulk datasets containing millions of entries are sometimes auctioned for thousands of dollars or sold for as little as $1 per record in large quantities.
How to protect your identity...To mitigate risks from these data leaks, experts recommend several steps through the mundophone report and official tools:
Monitor your CPF: Use the Banco Central's Registrato tool to check for unauthorized bank accounts or loans opened in your name.
Enable Security Measures: Always use Two-Factor Authentication (2FA) and unique, strong passwords for every service.
Official Inquiries: If you suspect your data is part of a leak, you can use the Consumidor.gov.br portal to file complaints or seek information from companies regarding data handling.
mundophone

