Inside the Multibillion-Dollar Trade of Personal Data, Synthetic Identities, and Tax Records—and What Can Be Done to Stop It
VANCOUVER, BC – June 15, 2025 – In the underbelly of the internet, the value of a human being isn’t measured in talent or merit, but in personally identifiable information (PII). Names, birthdates, addresses, Social Security numbers, and Tax Identification Numbers (TINs) are stolen, packaged, and sold like commodities to criminal networks, fraud syndicates, and synthetic identity fabricators worldwide.
What was once isolated credit card theft has now evolved into a full-fledged digital identity marketplace, where entire lives—complete with biometric templates, social media histories, and tax records—can be purchased for less than the price of a cup of coffee.
This press release by Amicus International Consulting unpacks the global infrastructure behind identity theft, how the dark web monetizes your most personal data, and what banks, governments, and individuals must do to defend against the rapid proliferation of identity commodification.
The Evolution of Identity Theft: From Single Numbers to Full Lives
In the early 2000s, cybercriminals trafficked in isolated credit card numbers or login credentials. By 2015, data breaches had grown to encompass entire customer databases. Today, in 2025, what’s for sale is far more dangerous: full-spectrum identity packages.
Known on the dark web as “fullz”, these kits can include:
Full legal name and alias history
Birth date and place
Current and prior addresses
Social Security Number (SSN) or national ID number
Tax Identification Number (TIN)
Bank account details
Credit reports and scores
Biometric patterns (face, fingerprint, iris scans)
Driver’s license scans
Employment and education history
Social media accounts and passwords
Passport scans
These comprehensive identity packages enable buyers to open bank accounts, apply for loans, commit tax fraud, or create synthetic identities that circumvent standard Know Your Customer (KYC) checks.
Case Study: The $12 Identity That Bought a Condo
In 2023, cybersecurity analysts discovered a synthetic identity associated with five bank accounts in Singapore, Canada, and the UAE. The origin? A “fullz” was purchased for USD 12 on a darknet marketplace hosted on the I2P network.
That identity included:
A genuine TIN stolen from a deceased U.S. citizen
A passport image manipulated from a Nigerian national ID
A fake employment verification letter produced using an LLM (Language Learning Model)
Bank statements from a dormant European account
A social media presence generated by an AI image model and auto-posting scripts
Over 14 months, the synthetic identity laundered USD 1.8 million through real estate flipping, cryptocurrency investments, and shell company transfers—before being finally detected by Amicus-led compliance auditors.
Where the Data Comes From: Breach to Black Market
The dark web’s identity bazaar thrives on leaks, breaches, and insider sales. Sources include:
1. Healthcare Systems
Hospitals and insurers are frequent targets of breaches due to their weak legacy systems. These databases contain SSNs, TINs, and biometrics.
2. Financial Institutions
Bank employee credentials are often sold or phished, giving attackers access to thousands of account holders’ data.
3. Education Platforms
Universities store vast student records, often including passports, transcripts, TINs, and international residency details.
4. Government Databases
Leaked or stolen from outdated systems or rogue employees, identity registries in certain developing nations are notorious for internal fraud.
5. Data Aggregators
Marketing companies and social media platforms collect and store staggering amounts of personally identifiable information (PII), which can be breached en masse.
The Price of a Life: Dark Web Valuation of PII
Amicus International’s 2025 survey of 20 darknet markets revealed the average pricing for stolen data:
| Identity Component | Average Price (USD) |
|---|---|
| U.S. Fullz (SSN + TIN + DOB) | $9–$15 |
| EU Passport Scan | $35–$70 |
| Biometric Bundle (face, prints) | $45–$90 |
| Full Credit Report | $10–$18 |
| Utility Bill (proof of address) | $3–$8 |
| Synthetic ID “Starter Kit” | $60–$150 |
These data points are often bundled into packages tailored for specific types of fraud, such as mortgage fraud, tax return theft, or digital residency applications.
The Role of TINs in Identity Commodification
Tax Identification Numbers are especially prized because:
They unlock access to banking systems in FATCA-compliant countries
They enable digital onboarding for investment accounts
They validate synthetic identities when linked to a clean credit history
They allow tax return fraud, particularly in countries like the U.S., with refundable credits
In many cases, synthetic identities pair real TINs from deceased individuals or stolen child records with fake names and AI-generated faces. This allows them to pass automated compliance filters used by financial institutions.
Case Study: The Child Whose Identity Bought a Yacht
In 2024, a four-year-old’s stolen Social Security Number and Taxpayer Identification Number (TIN) were used to open two bank accounts, obtain three credit cards, and purchase a $260,000 boat using a synthetic identity built on top of her data.
The fraud went undetected for 14 months—until the parents were denied a school loan on her behalf due to excessive “delinquent debt.”
Forensic investigation found the child’s fullz had been sold on a darknet forum after a breach of a U.S. pediatric health insurer.
How the Market Is Structured
The modern dark web identity market is industrialized, with the following ecosystem:
Breach Brokers: Hackers who obtain and list bulk data
PII Aggregators: Criminals who organize the data into usable formats
Forger Vendors: Creators of fake utility bills, bank letters, and documents
Synthetic Identity Trainers: Use AI to enhance profiles and simulate “digital normality”
Access Sellers: Sell logins to government portals, bank platforms, or tax agencies
Resellers: Distribute identity kits to less technical users across Telegram, Signal, and decentralized forums
Amicus has identified over 1,400 active identity-related vendors on the dark web in 2025, representing a 38% increase from 2023.
Government and Institutional Failures
Despite awareness, institutional systems remain poorly equipped to halt the trade of digital lives. Challenges include:
Fragmented identity records between state and federal systems
Lack of biometric linking for TIN issuance
Minimal real-time breach response in the tax and healthcare sectors
Overreliance on static verification (date of birth, mother’s maiden name, ZIP code)
No universal cross-border TIN validation system
What Amicus International Recommends
To combat the commodification of identity, Amicus offers a multi-pronged solution:
1. TIN Redundancy Audits
For banks, lenders, and fintechs, we determine whether a TIN is associated with multiple identities across jurisdictions.
2. Dark Web Identity Monitoring
For governments and enterprises: continuous scanning of dark markets for exposed personally identifiable information (PII) and associated synthetic fraud campaigns.
3. Beneficial Ownership Verification Tools
We provide real-person confirmation for company directors, trustees, and shareholders, blocking synthetic entities.
4. Biometric-Integrated TIN Structuring
In select jurisdictions, we structure TIN issuance processes that integrate live facial recognition and AI-bot resistance.
5. Client Risk Shielding
For private clients, we offer dark web exposure analysis, identity sanitization services, and secure TIN reassignment.
The Human Cost of Stolen Identities
Behind every synthetic identity is a real person—someone whose child can’t apply for school, whose taxes are audited for fraud, or who is denied credit because of a crime they didn’t commit.
Identity theft isn’t just digital—it’s existential. It erases people from their own lives, sometimes permanently.
Amicus believes that no system is secure until every person’s identity is protected from commodification.
📞 Contact Information
Phone: +1 (604) 200-5402
Email: [email protected]
Website: www.amicusint.ca
About Amicus International Consulting
Amicus International Consulting is a global leader in identity protection, TIN auditing, dark web risk intelligence, and secure legal identity restructuring. With operations in over 60 countries, Amicus empowers governments, banks, and individuals to detect, prevent, and recover from identity commodification.
