In today's digital age, personal information such as Social Security Numbers (SSNs) and dates of birth (DOBs) can play a crucial role in identity verification, financial transactions, and various applications. However, the increasing demand for these sensitive data points has led to a troubling market where individuals seek to buy SSN and DOB for various reasons, both legitimate and illegitimate. Understanding the implications and the market surrounding this practice is essential for safeguarding personal information.
SSNDOB trafficked in personal information such as names, dates of birth, credit card numbers, and Social Security numbers of about 24 million individuals in the U.S., generating its operators $19 million in sales revenue. The marketplace, he said at the time, sold Social Security numbers, birthdates and other personal data of U.S. residents for a per-record price of between 50 cents and $2.50 and charged $5 to $15 for credit checks. Perhaps most interesting of all though is the activity we see between SSNDOB and Joker’s Stash, a large darknet market focused on stolen credit card information and other PII that shut down in January 2021. "Perhaps most interesting of all though is the activity we see between SSNDOB and Joker’s Stash, a large darknet market focused on stolen credit card information and other PII that shut down in January 2021," explains Chainalysis' report. SSNDOB, an online marketplace that sold the names, social security numbers, and dates of birth of approximately 24 million US people, has been taken offline following an international law enforcement operation.
Buy SSN And DOB
Buying SSNs and DOBs can happen for a variety of reasons. Some may claim they need this information for legitimate purposes, such as verifying the identity of a person for a job application or loan approval. Unfortunately, others may buy SSN and DOB information for fraudulent activities, leading to identity theft and financial loss.
Most funds sent to SSNDOB have come from centralized and P2P cryptocurrency exchanges, as well as other services. However, some transfers have been much larger — as high as more than $100,000 worth of Bitcoin — suggesting that some “power users” are buying PII from the service in bulk. "Between December 2018 and June 2019, SSNDOB sent over $100,000 worth of Bitcoin to Joker’s Stash, suggesting the two markets may have had some relationship to one another, including possibly shared ownership." Other threat actors then used this information to perform financial fraud. While the website also sold the dates of birth for people in the United Kingdom, it was primarily used to sell the personal information of US citizens for as little as $0.50. The SSNDOB marketplace consisted of multiple sites acting as mirrors of each other to aid in preventing DDoS attacks or law enforcement operations.
Legitimate Uses of SSN and DOB
- The marketplace allowed cybercriminals to purchase "Social Security number, date of birth and full info of people" using bitcoin.
- It also says the marketplace provided customer support functions that were monitored by the operators, who tracked those who visited the marketplace and the flow of funds from the customers' accounts to their own accounts or wallets after a purchase was made.
- Over and over, illicit services that embrace cryptocurrency have opened themselves up to law enforcement scrutiny and been shut down, in large part because of the inherent transparency of blockchains.
- “Services like SSNDOB enable several different kinds of digital fraud by giving cybercriminals access to stolen PII,” researchers at Chainalysis wrote in a blog.
- Between December 2018 and June 2019, SSNDOB sent over $100,000 worth of Bitcoin to Joker’s Stash, suggesting the two markets may have had some relationship to one another, including possibly shared ownership.
Many organizations require SSNs and DOBs to comply with government regulations or to ensure customer safety and security. For example, financial institutions often need to buy SSN and DOB data to conduct background checks before approving loans or credit cards. Similarly, employers may seek this information to confirm the identity of potential hires and ensure they have a clean background.
The Risks of Buying SSN and DOB
- The consequences of buying a SN can be severe and include fines and even jail time.
- According to blockchain analysis firm Chainalysis, SSNDOB started receiving bitcoin payments as early as 2015 and had revenue of over $22 million.
- It is a federal crime to use someone else’s SSN to obtain employment, benefits, or other financial gain.
- As with most carding shops, you need to register an account before you can access the market.
Despite the potential legitimate uses, the practice of purchasing SSNs and DOBs carries significant risks. When individuals engage in this activity, they often open themselves up to potential legal repercussions. Additionally, if the information is not obtained through legal means, the consequences could lead to severe penalties, including fines and imprisonment.
Moreover, using purchased data can expose users to extreme risks of identity theft. Once someone has access to your SSN and DOB, they can open accounts in your name, misuse your personal information, and create serious financial headaches for their victims.
Protecting Your Information
Given the risks associated with buying SSN and DOB information, it is crucial for individuals to take proactive steps to protect their personal data. Regularly monitoring credit reports, utilizing fraud alerts, and employing identity theft protection services can mitigate potential threats. In addition, being vigilant about sharing personal information online and offline remains vital in safeguarding against unauthorized access.
Overall, while the market for buying SSN and DOB continues to exist, individuals must weigh the legitimate needs against the substantial risks involved. Awareness and proactive measures are key to ensuring personal information remains secure in this challenging landscape.
