The holiday season provides a glimpse into the ways the dark web economy continues to mirror standard commerce. In particular, we’re taking a look here at Black Friday sales on the dark web, just as we did last year.

One of the points we like to make most often here at Terbium Labs is that dark web mirrors the clear web far more than people tend to expect. Commerce is commerce: you need to display your items for sale, promote them, market them, back them up with reviews, differentiate them from competing products in the space, offer samples, and cut prices. This is as true on dark web markets as it is for your favorite retailers.


The holiday season is a busy time for fraud vendors in the dark web. The large volume of transactions makes it easier to capture cards from a single corrupted point of sale or from a vulnerable online merchant. At the same time, the unusual spending patterns make it difficult to track fraudulent activity as quickly as one might see during the “off season,” giving fraudsters a little more time to exploit the accounts to which they gain access.

Let’s take a look at some of the Black Friday specials that went on this year.

While stolen technology doesn’t fall into the standard definition fraud, this vendor is reselling “carded” items, or items they purchased with stolen payment cards. For Black Friday, this vendor is offering a $150 gift card to Amazon or iTunes with every purchase.

This vendor on a popular carding forum has a post announcing their newest “base” or collection of cards, just in time for Black Friday.

Meanwhile, on the major market Alphabay, this vendor is offering a “Black Friday Deal” on their premium UK Fullz.

Also on Alphabay, there’s an interesting listing from a vendor who promises a “$15,000 Guaranteed Black Friday Carding Assault” through live training and ongoing support throughout the season.