Fraud and identity theft are among the most common dark web-related crimes.

Watch an ethical hacker provide a tour of the dark web

Cybersecurity researcher John Hammond explores the effectiveness of a dark web search engine, leaks from ransomware group data breaches, and a categorized index of dark web links, including some that are alleged to host malware. Many dark web sites are no longer active or host scams to fool unsuspecting visitors.

Accessing the dark web is legal in the US, the EU, and most countries worldwide

As long as users do not pay for illegal goods or services or acquire illegal content, they cannot be prosecuted. Those on the dark web include academics, researchers, and cybersecurity experts gathering threat intelligence on cybercriminals, cyberterrorists, and state actors, as well as protesters, activists, and grassroots organizers.

Trudging through the dark web to expose child abuse

A computer expert who created a system to track down sources of revenge porn and an investigative journalist joined forces to investigate digital abuse. Their investigations focused on so-called clear nets, websites that make up the web most users surf. Then, they turned their investigation toward the dark web, where they found a child abuse website with more than 1 million registered users.

The dark web can expose anonymous users to potentially dangerous environments

Browsing the dark web requires onion routing, which prevents visitors from being identified and the locations from which they connect from being traced. This has been useful to activists in environments affected by political oppression or instability. However, those unfamiliar with navigating the space may encounter malware and network attacks from denizen hackers.

Technical vulnerabilities prevent full-proof anonymity when browsing the dark web

Despite encrypting data and relaying it within the Tor network, traffic between the network exit and the final destination is no longer hidden and can be captured. Law enforcement agencies can also attempt to deanonymize users by monitoring and matching data signal patterns entering and leaving the network via a correlation algorithm.

The dark web cannot be stumbled upon by accident

Many pages on the dark web are not publicly broadcast and are available only to relevant parties on a need-to-know basis. Although some online directories list the URLs for these webpages, connecting to them still requires specialized software, as these pages block connections from traditional web browsers such as Chrome.

Web scrapers extract data from a webpage's underlying HTML code and have been used to generate sales leads, collect competitor information, identify counterfeit products, and optimize sites for search engines.

As of 2025, an estimated $3.2B in annual revenue flows through dark web platforms

The untraceable cryptocurrency Monero is used in about 60% of transactions across more than 37 active marketplaces that sell copyrighted materials, private information, and phishing kits—tools that help bad actors more easily create fake sites to steal users' data—for financial fraud.

The dark web makes up about 0.01% of all the data on the internet

The surface web (5%-10%) consists of indexed sites—those traditional search engines have visited and stored so users can discover them via web search. The remaining 90%-95% makes up the deep web, which is not indexed and includes email and banking portals that require login credentials. The dark web is unindexed and requires anonymizing software to visit.

A 2020 study suggests just 6.7% of Tor network users visit sites on the dark web

It did not distinguish between visits to malicious sites and traffic to legitimate institutions with .onion domains, such as the BBC or Buzzfeed, and thus claimed that 6.7% of anonymized users engage in nefarious activity. The low percentage still highlights that most users of the technology underlying the dark web do not use it to browse the hidden portion of the internet.

A US Department of Defense research lab developed the technology for the dark web

Although encryption existed to mask the content of communications across the internet before the 1990s, those managing overseas network infrastructure could determine a spy's affiliation based on where they saw data sent to and received from. To keep this information secret, the US Naval Research Laboratory developed onion routing, which enabled anonymized web browsing. The release of the technology to the public obscured sensitive communications further by growing the volume of anonymous data.

Privacy concerns in the credit scoring system

Because credit scores use a lot of personal information (such as whether or not someone makes credit card payments on time), some worry their privacy is being compromised in the data collection process.

The dark web protects free speech from censorship and authoritarian oversight

Encrypted networks allow users with internet access anywhere in the world to view blocked content and avoid surveillance when communicating evidence of abuse to independent journalists. The same networks can support democracies by helping activists coordinate protests on dark web forums.

Marketplaces on the dark web provide eBay-like vendor feedback scores

An HP analysis found that 77% of cybercriminal marketplaces require vendors to purchase a license to sell their products, which can cost up to $3,000. About 92% of these marketplaces also use a third-party dispute-resolution service to handle customer service issues, thereby promoting "honor among thieves."

Explore content on the dark web safely with the Ahmia search engine, which has provided activists with digital addresses to anonymously send files to media outlets.

As of April 2022, a million people access Facebook on the dark web monthly

While those using an anonymized web browser, such as Tor, have been able to access the social network's .onion site since 2014, the announcement marks a major milestone by the tech giant, which has worked to ensure its users can bypass restrictions by various governments and continue visiting the site.

The deep web accounts for 90-95% of the internet

Within the Deep Web is the small and hidden Dark Web, which is inaccessible via traditional web browsers. Dark Web inhabitants are anonymous and use special software to access encrypted websites that can assist with both free speech and criminal activity.

Web crawlers and internet archives and back-ups limit perfect erasure of online data

Crawlers are programs that automatically browse the internet for links and index pages for search engines to pull up when page content matches search queries. Networks of global data centers also create copies of content as fail-safes for potential failures to ensure access isn't ever lost.

Explore metrics on the Tor network, the infrastructure of the dark web

While internet traffic within the network is concealed, public, nonsensitive data can be used to estimate the number of active users, the number of relay servers, network performance speed and reliability, etc. Researchers can use this data to indirectly identify political upheavals or censorship campaigns worldwide, such as the Arab Spring.

Individuals have been convicted of ordering assassinations from the dark web

Researchers have uncovered online storefronts allegedly run by members of various mafia or hitmen that offer to harm or murder individuals in exchange for monetary payment. However, no known murder has been attributed to any of them, and cybercrime task forces believe them to be scams (warning—sensitive content).

Algorithms built to detect credit card fraud can deny charges if they perceive the attempted purchase is unfamiliar or unusual based on historical data, even when a person has enough credit to make the purchase.

Social media platforms benefit not just from ensuring they have satisfied users, but also from the personal data they scoop up and can then sell to online advertisers.

Explore an interactive timeline of the world's biggest data breaches and hacks, led by the 2024 National Public Data breach, which involved almost three billion stolen records, including full names and Social Security numbers.

Google only sorts and searches a fraction of the overall internet

The "surface web," consisting of billions of public webpages, excludes nonindexed digital content, such as corporate intranets and email inboxes. A deeper layer, called the dark web, is also hidden and requires special software to access.

Instead of .com or similar, web addresses on the dark web end in 'd.onion'

Since the latest version of the onion routing protocol, dark web domain names consist of a random set of 56 alphanumeric characters followed by .onion (e.g., propublica.org → p53lf57qovyuvwsc6xnrppyply3vtqm7l6pcobkmyqsiofyeznfu5uqd.onion). The last character is always "d" due to the encryption algorithm's requirements.

Visualizing the consequence of data breaches

To get a sense of the grim state of data security today, take a look at this infographic from TruthFinder that explains why 2018 was the year of the data breach tsunami.

Try out ShieldFont, a specialized web font that swaps the HTML code corresponding to certain onscreen words to protect website content from AI scrapers.

Your device can become infected with malware by simply browsing the internet

During a drive-by download attack, security flaws in a program or operating system (e.g., Windows) used to access online content are exploited, and malicious code is downloaded—for example, when loading a hacked webpage—onto a user's device without their knowledge. Restricting internet browsing to safe sites and installing security updates helps prevent these attacks.

BNPL may be adding a layer of debt that doesn't show up in economic data

Given somewhat limited regulation in the BNPL space, data about its usage is limited—many BNPL firms have resisted sharing information about user purchases, finances, and more thus far. As more people begin using buy now, pay later services, experts are concerned about whether BNPL is adding a new layer of "hidden leverage" to the economy.

Listen to a podcast episode that goes inside the 2017 Equifax credit bureau hack

This podcast episode details a 2017 credit bureau hack in which Equifax data about millions of Americans was compromised. It dives into the history of credit bureaus, specifically how they became legally allowed to access Americans' financial information without Americans actually volunteering it themselves.

An explanation of hard credit checks vs. soft credit checks

Some buy now, pay later services do a soft credit check rather than a hard credit check, like credit card companies would do when someone applies for a card. While hard credit checks can impact your credit score, soft pulls typically do not.

As of 2025, there are no federal laws involving privacy and smart city technologies

Advancements in cloud technology and artificial intelligence allow cities to capture, store, and analyze more information than ever before. Experts warn that the unhindered ability to collect and use this data may infringe on residents' rights and endanger them if the data gets into the hands of malicious parties.

Has your information been compromised on the internet?

Have I Been Pwned allows you to search across multiple data breaches to see if your email address or phone number has been compromised.

As of 2026, age verification systems on online platforms have included the collection of personally identifying information, such as government IDs, and biometric age checks that rely on AI-based facial recognition.

Some employers are using new technology to surveil remote workers

'Bossware' tools help employers make sure their remote workers aren't slacking off on the job, using surveillance technology to monitor employee computer activity and more.

One in five Americans has an error on their credit report, according to the Federal Trade Commission

In 2026, four US senators sent letters to two of the nation's major credit bureaus (TransUnion and Experian) after an investigation revealed that they were fixing fewer errors on consumers' credit reports.

AI scraping for LLM training data has significantly strained Wikipedia's infrastructure

From January 2024 to April 2025, the site's bandwidth increased by 50% as automated bots downloaded terabytes of data for the large language models powering AI tools. The Wikimedia Foundation found that bots accounted for 65% of the highest demand requests (e.g., videos) despite representing just 35% of page views.

Unlike the models made by large AI companies, open-weight models can have their safeguards removed or weakened, a process that has become increasingly easy and may expose users to harmful information.