Fraud and identity theft are among the most common dark web-related crimes.

Currently, technology exists to scrape and download data from webpages, which can then be analyzed to identify a user's information. However, scrapers cannot access or remove personal data from dark websites because they are often protected by paywalls, rendering monitoring ineffective beyond reporting publicly available data breaches.

As long as users do not pay for illegal goods or services or acquire illegal content, they cannot be prosecuted. Those on the dark web include academics, researchers, and cybersecurity experts gathering threat intelligence on cybercriminals, cyberterrorists, and state actors, as well as protesters, activists, and grassroots organizers.

The untraceable cryptocurrency Monero is used in about 60% of transactions across more than 37 active marketplaces that sell copyrighted materials, private information, and phishing kits—tools that help bad actors more easily create fake sites to steal users' data—for financial fraud.

An HP analysis found that 77% of cybercriminal marketplaces require vendors to purchase a license to sell their products, which can cost up to $3,000. About 92% of these marketplaces also use a third-party dispute-resolution service to handle customer service issues, thereby promoting "honor among thieves."

Cybersecurity researcher John Hammond explores the effectiveness of a dark web search engine, leaks from ransomware group data breaches, and a categorized index of dark web links, including some that are alleged to host malware. Many dark web sites are no longer active or host scams to fool unsuspecting visitors.

Browsing the dark web requires onion routing, which prevents visitors from being identified and the locations from which they connect from being traced. This has been useful to activists in environments affected by political oppression or instability. However, those unfamiliar with navigating the space may encounter malware and network attacks from denizen hackers.

Researchers have uncovered online storefronts allegedly run by members of various mafia or hitmen that offer to harm or murder individuals in exchange for monetary payment. However, no known murder has been attributed to any of them, and cybercrime task forces believe them to be scams (warning—sensitive content).

The surface web (5%-10%) consists of indexed sites—those traditional search engines have visited and stored so users can discover them via web search. The remaining 90%-95% makes up the deep web, which is not indexed and includes email and banking portals that require login credentials. The dark web is unindexed and requires anonymizing software to visit.

Despite encrypting data and relaying it within the Tor network, traffic between the network exit and the final destination is no longer hidden and can be captured. Law enforcement agencies can also attempt to deanonymize users by monitoring and matching data signal patterns entering and leaving the network via a correlation algorithm.

A computer expert who created a system to track down sources of revenge porn and an investigative journalist joined forces to investigate digital abuse. Their investigations focused on so-called clear nets, websites that make up the web most users surf. Then, they turned their investigation toward the dark web, where they found a child abuse website with more than 1 million registered users.

Many pages on the dark web are not publicly broadcast and are available only to relevant parties on a need-to-know basis. Although some online directories list the URLs for these webpages, connecting to them still requires specialized software, as these pages block connections from traditional web browsers such as Chrome.

Within the Deep Web is the small and hidden Dark Web, which is inaccessible via traditional web browsers. Dark Web inhabitants are anonymous and use special software to access encrypted websites that can assist with both free speech and criminal activity.

Named after the ancient intercontinental trade network between China and the Roman Empire, the anonymous market was active from early 2011 to October 2013. Before it was shut down, approximately 10,000 products—70% of which were illegal and controlled prescription drugs—were bought and sold using the cryptocurrency.

Although encryption existed to mask the content of communications across the internet before the 1990s, those managing overseas network infrastructure could determine a spy's affiliation based on where they saw data sent to and received from. To keep this information secret, the US Naval Research Laboratory developed onion routing, which enabled anonymized web browsing. The release of the technology to the public obscured sensitive communications further by growing the volume of anonymous data.

Since the latest version of the onion routing protocol, dark web domain names consist of a random set of 56 alphanumeric characters followed by .onion (e.g., propublica.org → p53lf57qovyuvwsc6xnrppyply3vtqm7l6pcobkmyqsiofyeznfu5uqd.onion). The last character is always "d" due to the encryption algorithm's requirements.

Hackers using stolen credit cards would create "Fortnite" accounts and purchase V-bucks, the in-game currency. The hackers would then sell the entire "Fortnite" account on sites like eBay. For instance, an account with $100 worth of stolen V-bucks might sell $25 on eBay.

Encrypted networks allow users with internet access anywhere in the world to view blocked content and avoid surveillance when communicating evidence of abuse to independent journalists. The same networks can support democracies by helping activists coordinate protests on dark web forums.

It did not distinguish between visits to malicious sites and traffic to legitimate institutions with .onion domains, such as the BBC or Buzzfeed, and thus claimed that 6.7% of anonymized users engage in nefarious activity. The low percentage still highlights that most users of the technology underlying the dark web do not use it to browse the hidden portion of the internet.

To get a sense of the grim state of data security today, take a look at this infographic from TruthFinder that explains why 2018 was the year of the data breach tsunami.

Systems that can reproduce near perfect counterfeits of legitimate financial documents are increasingly prevalent and sophisticated. The international Association of Certified Fraud Examiners estimate organizations lose about 5% of revenue to fraud each year.

While those using an anonymized web browser, such as Tor, have been able to access the social network's .onion site since 2014, the announcement marks a major milestone by the tech giant, which has worked to ensure its users can bypass restrictions by various governments and continue visiting the site.

A recent case involving alleged trafficking in stolen human body parts charged that there was a nationwide network of individuals who bought and sold human remains. The charges alleged, among other things, that from 2018 through 2022, the manager of the morgue at Harvard Medical School's Anatomical Gifts Program stole organs and other parts of cadavers that had been donated for medical research and education. In late 2025, that Harvard morgue manager was sentenced to 96 months in prison.

While internet traffic within the network is concealed, public, nonsensitive data can be used to estimate the number of active users, the number of relay servers, network performance speed and reliability, etc. Researchers can use this data to indirectly identify political upheavals or censorship campaigns worldwide, such as the Arab Spring.

Many of the first researchers and hobbyists who created viruses and worms showed a natural curiosity in experimenting with and designing such software to make a name for themselves and advance the field of computer science. In the future, AI-augmented malware may adapt in real-time or design enhanced cryptojackers, infostealers, and ransomware for cybercriminals.

Artificial neural networks can identify an individual's physical characteristics when provided with training data, such as real footage of the person speaking. Graphics techniques overlay these with matching characteristics from another real or generated person to create novel footage of things that have never taken place in reality.

Because credit scores use a lot of personal information (such as whether or not someone makes credit card payments on time), some worry their privacy is being compromised in the data collection process.

This podcast episode details a 2017 credit bureau hack in which Equifax data about millions of Americans was compromised. It dives into the history of credit bureaus, specifically how they became legally allowed to access Americans' financial information without Americans actually volunteering it themselves.

By scanning the security chip on the back of passports and capturing images or video of a person, apps like Google Wallet and Apple Wallet create a digital version of the document. Some states have also developed their own apps for digital driver's licenses.

This term originally referred to secretly removing corpses from graves for sale—usually to medical schools where they were used for education. The practice dates back at least to the 1300s but still—much more rarely—persists today.

All the coverage of research into promising (but often unproven) medical treatments involving stem cells has created conditions allowing some people to engage in activities regulators describe as scams. As this news article explains, attorneys general in at least seven states have taken legal action against businesses that promised (costly) stem cell treatments but allegedly engaged in fraud.

While there are dozens of different types of cyber attacks, this article explains the top 20 most common network attack examples, including phishing, whale-phishing, and spear-phishing attacks. Learn how to best protect yourself.

Studies of human behavior show that survey respondents may lie to present themselves more favorably. By studying anonymous search data, researchers have uncovered hidden racism, mental health struggles, and interest in taboo or stigmatized topics.

This article includes tips on how to spot a Social Security scam, including information about what the real Social Security Administration will and will not do. For instance, the Social Security Administration will never threaten someone with benefits suspension or bank account seizure if they do not comply with a request.

Overall, financial crime drains $3T from the global economy, with organized crime making up nearly $2T of that total. Drug trafficking is the second-largest drain on the global economy.

The Global Organized Crime Index tracks annual shifts in organized crime, ranging from drug and human trafficking to financial crimes. The map shows crime levels for each country, as well as a profile of the country's annual shifts.