A new interactive tool from NordVPN lets users calculate the value of their digital identities. And if you’re Canadian, it ain’t much.
Working in collaboration with the threat exposure management platform NordStellar, NordVPN analyzed almost 75,000 dark web marketplace listings and found that Canadians’ personal data is among the cheapest in the world. A stolen Canadian payment card sells for just around $2, a complete identity package goes for $40, and a Netflix account can be picked up for less than $5.
“Every online account you own has a price tag on the dark web,” said Marijus Briedis, chief technology officer (CTO) at NordVPN. “Your streaming subscriptions, your email, your bank login, your social media profiles. Most people would be shocked at how little it costs a criminal to buy their entire digital identity.”
A stolen Canadian payment card sells for a median price of just $2.21, making Canadian cards the second cheapest in the world, behind only Cyprus. In countries where stolen data is less common, such as Japan or Singapore, payment cards sell at a significant premium. Researchers found 415 Canadian card listings on the Dark Web.
The pattern extends beyond payment cards. A complete Canadian “fullz,” a package containing enough personal details to steal someone’s identity (including their Social Insurance Number, date of birth, and address), sells for about $40. Digital scans of Canadian passports also cost around $40, while driver’s licenses cost approximately $49.50.
“For less than the cost of a full tank of fuel, a criminal can buy enough personal information to file fraudulent tax returns or start building a fake identity in someone else’s name,” said Briedis.
- While personal email accounts sell in bulk for as little as $1 each, corporate email credentials are a different story. Stolen Canadian Office 365 accounts sell for a median price of $26.50, and alongside Office GoDaddy and GoDaddy webmail listings, researchers found more than 4,000 Canadian corporate email listings across these platforms on the dark web. That makes Canada the second most targeted country in the world for business email compromise, behind only the United States.
These accounts are valuable because they serve as entry points into entire corporate networks. Initial access brokers, criminals who specialize in breaching company defenses and selling that access to other hackers, overwhelmingly target North American and Western European corporate infrastructure.
Stolen Facebook accounts sell for around $38, with Facebook making up 40% of all social media account listings. A single Facebook login can unlock connected Instagram accounts, business pages, and advertising tools. TikTok accounts go for $60, while Snapchat accounts sell for around $34.50.
Streaming services are even cheaper. A Netflix account costs as little as $4.55, while Spotify goes for $28. Vendors operate these sales like legitimate businesses, offering “lifetime” access and replacing suspended accounts under warranty.
Crypto exchange accounts are among the most expensive items on the dark web. A stolen Coinbase account sells for a median price of $107.50, while Binance accounts go for $160. Unlike stolen credit cards, which require complex laundering operations, a compromised crypto wallet could provide direct access to liquid funds.
Even retail accounts have value. A stolen Amazon account sells for $50, and criminals use gift cards and store credits to launder money by purchasing items that can be easily resold.
“Most people think of identity theft as something that either won’t happen to them or something they’ll notice when it does,” said Briedis. “The reality is that your data could already be for sale, and you’d have no way of knowing unless you actively check.”