British identity packages, including ID scans, selfies, and personal data dossiers, are being sold on the dark web for as little as £30, according to new research by anti-money laundering experts AMLTRIX. The group analysed 25 active dark web marketplaces in December 2024, uncovering widespread sale of stolen UK documents.
Higher-value items include KYC-verified UK business bank accounts, priced between £900 and £2,000, with accounts from major banks like NatWest and Barclays at the upper end. A NatWest spokesperson stated the bank takes financial crime seriously and works with partners across the digital ecosystem.
Other items found include hacked UK Amazon accounts for £15, Netflix login details for £10, and counterfeit Bank of England notes sold at 25–35% of face value, with some vendors claiming they pass UV checks. Full identity packs with ID and selfie are cheap enough for criminals to buy in bulk, said AMLTRIX co-founder Gabrielius Erikas Bilkstys.
The research highlights that stolen data can be reused repeatedly for identity theft, often without the victim's knowledge until debt collectors or law enforcement become involved. AMLTRIX noted that while much data is legitimate, some listings are scams targeting other criminals.
UK fraud prevention service Cifas recorded over 118,000 identity fraud cases between January and June 2024. David Wall, a cyber crime expert at the University of Leeds, said the problem exists at individual and organisational levels, with data packages providing initial access for ransomware attacks.
In 2024, 43% of UK businesses reported a cybersecurity breach or attack, according to the Department for Science, Innovation and Technology. Bilkstys urged organisations to recognise the dark web as tightly connected to everyday phishing and data breaches, not a distant threat.
