Account Market Intelligence
Every verified open-source observation, newest first. Each entry feeds the platform pages, the price index and the research registry automatically — verifying an observation recalculates that platform's score and price percentiles.
Submit evidenceSubmissions are reviewed before publication. Excerpts are sanitized: no seller identities, contact details, invite links, credentials or marketplace locations are stored or shown. Asking prices are not realized prices.
A consumer-credit bureau summary of a published dark-web price index lists an average advertised price of 60 US dollars for a hacked Gmail account, against 20 to 25 dollars for a hacked social media account and 1 to 20 dollars for streaming service logins.
View sourceAcademic measurement of a criminal impersonation market recorded 10,193 sold user profiles over 161 days, with estimated trade of up to roughly 700 profiles per day and buyer preference driven by geography and attached resources.
View sourceKrebs on Security reported on a service that pays people for access to their existing email accounts and then rents that access on to customers who need established mailboxes to complete sign-ups elsewhere in bulk. Renters receive only the verification messages, not full control of the mailbox, which is described as a way of monetising aged, reputable email addresses.
View sourceThreat-intelligence research documents dedicated shops selling access to compromised webmail accounts, reporting an average advertised price of about USD 25 for a single webmail account.
View sourceTrend Micro documents services that resell one-time SMS verification codes so that buyers can register accounts in bulk on major platforms including Google. The researchers found one such service drawing its numbers from a botnet of thousands of compromised Android handsets whose owners were unaware their devices were intercepting verification messages.
View sourceGoogle's Threat Analysis Group disclosed action against a botnet of roughly one million Windows machines whose operators stole Google account credentials and ran ancillary criminal services, including one selling access to systems pre-loaded with stolen credentials. Google terminated the associated accounts and cloud projects and filed civil litigation against the operators.
View sourceGoogle's civil complaint alleges the defendants operated a botnet that harvested Google account login credentials at scale and monetised that access through paid criminal services, including the sale of access to machines loaded with stolen credentials. The filing is a court record of alleged account-market activity rather than a marketplace listing.
View sourceReporting on a published dark-web price index covering listings captured up to May 2021, which recorded an advertised price of 80 US dollars for a compromised Gmail account — higher than the figures the same index recorded for cloned payment cards or for online banking logins holding at least 100 dollars.
View sourceGoogle researchers working with university partners studied the market for phone-verified Google accounts, obtaining 4,695 such accounts from underground sellers and analysing roughly 300,000 phone-verified accounts Google had disabled for abuse. Sellers depended heavily on free internet-telephony numbers and short-lived numbers concentrated in a small number of countries, and the paper reports advertised prices for Google phone-verified accounts falling by 30 to 40 percent as that number supply spread.
View sourceMarket activity is an external indicator of abuse incentives, not a measurement of fraudulent accounts on the underlying platform. Prices are never inferred — an observation without a published figure is recorded without one. See the methodology for scoring and confidence rules.