Fraud and identity theft are among the most common dark web-related crimes.

Credit monitoring services may oversell the benefits of dark web monitoring

Currently, technology exists to scrape and download data from webpages, which can then be analyzed to identify a user's information. However, scrapers cannot access or remove personal data from dark websites because they are often protected by paywalls, rendering monitoring ineffective beyond reporting publicly available data breaches.

Accessing the dark web is legal in the US, the EU, and most countries worldwide

As long as users do not pay for illegal goods or services or acquire illegal content, they cannot be prosecuted. Those on the dark web include academics, researchers, and cybersecurity experts gathering threat intelligence on cybercriminals, cyberterrorists, and state actors, as well as protesters, activists, and grassroots organizers.

As of 2025, an estimated $3.2B in annual revenue flows through dark web platforms

The untraceable cryptocurrency Monero is used in about 60% of transactions across more than 37 active marketplaces that sell copyrighted materials, private information, and phishing kits—tools that help bad actors more easily create fake sites to steal users' data—for financial fraud.

Marketplaces on the dark web provide eBay-like vendor feedback scores

An HP analysis found that 77% of cybercriminal marketplaces require vendors to purchase a license to sell their products, which can cost up to $3,000. About 92% of these marketplaces also use a third-party dispute-resolution service to handle customer service issues, thereby promoting "honor among thieves."

Watch an ethical hacker provide a tour of the dark web

Cybersecurity researcher John Hammond explores the effectiveness of a dark web search engine, leaks from ransomware group data breaches, and a categorized index of dark web links, including some that are alleged to host malware. Many dark web sites are no longer active or host scams to fool unsuspecting visitors.

The dark web can expose anonymous users to potentially dangerous environments

Browsing the dark web requires onion routing, which prevents visitors from being identified and the locations from which they connect from being traced. This has been useful to activists in environments affected by political oppression or instability. However, those unfamiliar with navigating the space may encounter malware and network attacks from denizen hackers.

Individuals have been convicted of ordering assassinations from the dark web

Researchers have uncovered online storefronts allegedly run by members of various mafia or hitmen that offer to harm or murder individuals in exchange for monetary payment. However, no known murder has been attributed to any of them, and cybercrime task forces believe them to be scams (warning—sensitive content).

The dark web makes up about 0.01% of all the data on the internet

The surface web (5%-10%) consists of indexed sites—those traditional search engines have visited and stored so users can discover them via web search. The remaining 90%-95% makes up the deep web, which is not indexed and includes email and banking portals that require login credentials. The dark web is unindexed and requires anonymizing software to visit.

Technical vulnerabilities prevent full-proof anonymity when browsing the dark web

Despite encrypting data and relaying it within the Tor network, traffic between the network exit and the final destination is no longer hidden and can be captured. Law enforcement agencies can also attempt to deanonymize users by monitoring and matching data signal patterns entering and leaving the network via a correlation algorithm.

Trudging through the dark web to expose child abuse

A computer expert who created a system to track down sources of revenge porn and an investigative journalist joined forces to investigate digital abuse. Their investigations focused on so-called clear nets, websites that make up the web most users surf. Then, they turned their investigation toward the dark web, where they found a child abuse website with more than 1 million registered users.

The dark web cannot be stumbled upon by accident

Many pages on the dark web are not publicly broadcast and are available only to relevant parties on a need-to-know basis. Although some online directories list the URLs for these webpages, connecting to them still requires specialized software, as these pages block connections from traditional web browsers such as Chrome.

The deep web accounts for 90-95% of the internet

Within the Deep Web is the small and hidden Dark Web, which is inaccessible via traditional web browsers. Dark Web inhabitants are anonymous and use special software to access encrypted websites that can assist with both free speech and criminal activity.

Explore an interactive timeline of the world's biggest data breaches and hacks, led by the 2024 National Public Data breach, which involved almost three billion stolen records, including full names and Social Security numbers.

Silk Road, the dark web's first widely used market, proved the real-world utility of bitcoin

Named after the ancient intercontinental trade network between China and the Roman Empire, the anonymous market was active from early 2011 to October 2013. Before it was shut down, approximately 10,000 products—70% of which were illegal and controlled prescription drugs—were bought and sold using the cryptocurrency.

A US Department of Defense research lab developed the technology for the dark web

Although encryption existed to mask the content of communications across the internet before the 1990s, those managing overseas network infrastructure could determine a spy's affiliation based on where they saw data sent to and received from. To keep this information secret, the US Naval Research Laboratory developed onion routing, which enabled anonymized web browsing. The release of the technology to the public obscured sensitive communications further by growing the volume of anonymous data.

Instead of .com or similar, web addresses on the dark web end in 'd.onion'

Since the latest version of the onion routing protocol, dark web domain names consist of a random set of 56 alphanumeric characters followed by .onion (e.g., propublica.org → p53lf57qovyuvwsc6xnrppyply3vtqm7l6pcobkmyqsiofyeznfu5uqd.onion). The last character is always "d" due to the encryption algorithm's requirements.

Hackers once used 'Fortnite' to clean money from stolen credit cards

Hackers using stolen credit cards would create "Fortnite" accounts and purchase V-bucks, the in-game currency. The hackers would then sell the entire "Fortnite" account on sites like eBay. For instance, an account with $100 worth of stolen V-bucks might sell $25 on eBay.

The dark web protects free speech from censorship and authoritarian oversight

Encrypted networks allow users with internet access anywhere in the world to view blocked content and avoid surveillance when communicating evidence of abuse to independent journalists. The same networks can support democracies by helping activists coordinate protests on dark web forums.

A 2020 study suggests just 6.7% of Tor network users visit sites on the dark web

It did not distinguish between visits to malicious sites and traffic to legitimate institutions with .onion domains, such as the BBC or Buzzfeed, and thus claimed that 6.7% of anonymized users engage in nefarious activity. The low percentage still highlights that most users of the technology underlying the dark web do not use it to browse the hidden portion of the internet.

Visualizing the consequence of data breaches

To get a sense of the grim state of data security today, take a look at this infographic from TruthFinder that explains why 2018 was the year of the data breach tsunami.

The FBI estimates that $1B is lost to international romance scammers through fake online relationships each year.

Algorithms built to detect credit card fraud can deny charges if they perceive the attempted purchase is unfamiliar or unusual based on historical data, even when a person has enough credit to make the purchase.

Explore content on the dark web safely with the Ahmia search engine, which has provided activists with digital addresses to anonymously send files to media outlets.

AI could be increasing the opportunities for financial fraud

Systems that can reproduce near perfect counterfeits of legitimate financial documents are increasingly prevalent and sophisticated. The international Association of Certified Fraud Examiners estimate organizations lose about 5% of revenue to fraud each year.

As of April 2022, a million people access Facebook on the dark web monthly

While those using an anonymized web browser, such as Tor, have been able to access the social network's .onion site since 2014, the announcement marks a major milestone by the tech giant, which has worked to ensure its users can bypass restrictions by various governments and continue visiting the site.

In 2023, at least 6 people were charged with stealing body parts

A recent case involving alleged trafficking in stolen human body parts charged that there was a nationwide network of individuals who bought and sold human remains. The charges alleged, among other things, that from 2018 through 2022, the manager of the morgue at Harvard Medical School's Anatomical Gifts Program stole organs and other parts of cadavers that had been donated for medical research and education. In late 2025, that Harvard morgue manager was sentenced to 96 months in prison.

Healthcare fraud may cost the US more than $100B annually—see this dashboard tracking healthcare fraud cases nationwide.

Explore metrics on the Tor network, the infrastructure of the dark web

While internet traffic within the network is concealed, public, nonsensitive data can be used to estimate the number of active users, the number of relay servers, network performance speed and reliability, etc. Researchers can use this data to indirectly identify political upheavals or censorship campaigns worldwide, such as the Arab Spring.

Malware has transitioned from notoriety-driven to profit- and data-driven

Many of the first researchers and hobbyists who created viruses and worms showed a natural curiosity in experimenting with and designing such software to make a name for themselves and advance the field of computer science. In the future, AI-augmented malware may adapt in real-time or design enhanced cryptojackers, infostealers, and ransomware for cybercriminals.

Malicious use of deepfakes can be found in scams, misinformation, and disinformation

Artificial neural networks can identify an individual's physical characteristics when provided with training data, such as real footage of the person speaking. Graphics techniques overlay these with matching characteristics from another real or generated person to create novel footage of things that have never taken place in reality.

Privacy concerns in the credit scoring system

Because credit scores use a lot of personal information (such as whether or not someone makes credit card payments on time), some worry their privacy is being compromised in the data collection process.

Listen to a podcast episode that goes inside the 2017 Equifax credit bureau hack

This podcast episode details a 2017 credit bureau hack in which Equifax data about millions of Americans was compromised. It dives into the history of credit bureaus, specifically how they became legally allowed to access Americans' financial information without Americans actually volunteering it themselves.

View a list of the 25 most common passwords according to an analysis of 2.5 terabytes of public data breaches.

Digital passports allow identity verification to be digitized

By scanning the security chip on the back of passports and capturing images or video of a person, apps like Google Wallet and Apple Wallet create a digital version of the document. Some states have also developed their own apps for digital driver's licenses.

Art theft is the third-largest source of criminal revenues worldwide.

The medical profession has a dark history of 'body snatching' for education

This term originally referred to secretly removing corpses from graves for sale—usually to medical schools where they were used for education. The practice dates back at least to the 1300s but still—much more rarely—persists today.

Social media platforms benefit not just from ensuring they have satisfied users, but also from the personal data they scoop up and can then sell to online advertisers.

The spread of fraudulent stem cell treatments

All the coverage of research into promising (but often unproven) medical treatments involving stem cells has created conditions allowing some people to engage in activities regulators describe as scams. As this news article explains, attorneys general in at least seven states have taken legal action against businesses that promised (costly) stem cell treatments but allegedly engaged in fraud.

20 of the most common cyberattacks

While there are dozens of different types of cyber attacks, this article explains the top 20 most common network attack examples, including phishing, whale-phishing, and spear-phishing attacks. Learn how to best protect yourself.

In 2019, a laptop loaded with six of the worst malware in history and described as 'an exhibit of historical weaponry' sold for $1.3M.

Why there are microchips in credit cards

Credit cards have evolved significantly since their invention in 1950, but security lagged in the US for years. Despite handling only a quarter of global transactions, the US once accounted for half of all credit card fraud. The 2013 Target data breach helped push the adoption of chip cards, reducing fraud but shifting risks to online scams.

Google Search trends reveal truths about society that traditional surveys miss

Studies of human behavior show that survey respondents may lie to present themselves more favorably. By studying anonymous search data, researchers have uncovered hidden racism, mental health struggles, and interest in taboo or stigmatized topics.

Web scrapers extract data from a webpage's underlying HTML code and have been used to generate sales leads, collect competitor information, identify counterfeit products, and optimize sites for search engines.

Consumers reported losing more than $126M to Social Security scams in 2023

This article includes tips on how to spot a Social Security scam, including information about what the real Social Security Administration will and will not do. For instance, the Social Security Administration will never threaten someone with benefits suspension or bank account seizure if they do not comply with a request.

Lack of regulation makes cryptocurrency a hotbed for money laundering.

Organized crime, including money laundering, drains $1.96T from the global economy annually

Overall, financial crime drains $3T from the global economy, with organized crime making up nearly $2T of that total. Drug trafficking is the second-largest drain on the global economy.

On credit and debit cards, magnetic stripes have been slowly replaced by microchips that use dynamic, encrypted data to prevent card cloning and counterfeit fraud.

See the increase in financial crimes globally on a map

The Global Organized Crime Index tracks annual shifts in organized crime, ranging from drug and human trafficking to financial crimes. The map shows crime levels for each country, as well as a profile of the country's annual shifts.

Read about why America is obsessed with the stories of financial scammers.

More than $2.6B has been laundered through US real estate in the past 20 years

All cash real estate transactions don't require extensive background and identity checks, creating a loophole for criminals who would otherwise be flagged for suspicious behavior to clean large amounts of money with one purchase. Real estate prices are easily manipulated and can be used to generate more income by renting the space, making it an attractive and common tool for money laundering.