Your identity data can be bought for as little as $200

Dylan Crismale - Digital Content Editor

Last updated 21 April 2026

Cybersecurity businesses NordVPN and NordStellar have analysed around 75,000 dark web listings and worked out how much Australians' data is worth.

NordVPN's new calculator lets you see how much your accounts could cost on the dark web. An Australian payment card costs a median price of just $10, while the details on your Disney Plus account could fetch $7.25. A "fullz" package, which contains enough personal data to steal someone's identity, sets criminals back around $200. It can include things like your tax file number, date of birth and address.

Crypto accounts are among the most lucrative for scammers, with Kraken account details on offer for $150. Unlike bank cards which, involve complex fraud methods to fully access, a compromised crypto wallet can give criminals immediate access to funds if not properly secured.

Chief Technology Officer of NordVPN, Marijus Briedis said: "For less than a weekly grocery shop, a criminal can buy enough personal information to file fraudulent tax returns or start building a fake identity in someone else's name."

Scams like these are one of the common ways malicious actors steal people's personal information. According to the ACCC's Target Scams Report 2025, Australians lost over $2.18 billion to scams last year. Phishing scams (used to collect your personal details) accounted for $97.6 million of that loss.

All customers on the Telstra network (including MVNOs) benefit from Telstra Scam Protect feature, which alerts customers to suspicious incoming phone calls.

Australians can use NordVPN'sDark Web Monitor or the free site Have I Been Pwned to check for data breaches. Knowing your data is exposed is the first step to taking steps to prevent fraud.

Former Managing Editor of SafeWise Australia, Georgia Dixon, says, "Unfortunately, there's not a whole lot that Australians can do to prevent their data appearing on the dark web. However, the usual advice like using strong, unique passwords and multi-factor authentication, only using secure internet connections, avoiding entering sensitive data unless it's required, and regularly checking your financial accounts for suspicious activity can help minimise your chances of exposure."

Dylan Crismale

Digital Content Editor

Dylan Crismale is a Digital Content Editor at WhistleOut, has been writing for almost a decade across a variety of Australian publications. He previously worked as a writer at Finder covering energy, internet and mobile plans. Dylan is passionate about finding the best deals to save people money and educating people about tech. When he's not sat at his desk Dylan loves working out, bingeing TV and hanging out with friends.

Read full bio