Darkish internet commerce in stolen journey paperwork surges

As international tourism recovers

Cybercriminals are making the most of a booming black marketplace for stolen journey paperwork, with a brand new investigation revealing that private data from thousands and thousands of travellers throughout the globe is being offered on the darkish internet for as little as $10.

Joint analysis by cybersecurity corporations NordVPN and Saily has uncovered a rising commerce on darkish internet marketplaces in scanned passports, visa stickers, airline loyalty accounts and resort reservations. The findings come at a time when international tourism is rebounding from the pandemic interval, making travellers extra susceptible to digital exploitation.

The investigation, carried out in June 2025, analysed listings throughout underground boards and darkish web pages. Researchers discovered that scanned international passports are extensively obtainable, with costs ranging between $10 and $200.

Verified passports from the European Union are among the many most costly, promoting for over $5,000. Faux visa stickers, fraudulent financial institution statements, and hacked frequent flyer accounts containing thousands and thousands of miles are additionally being traded, some for a whole lot of {dollars}.

Knowledge from the Worldwide Air Transport Affiliation (IATA) exhibits that international passenger site visitors has returned to close pre-pandemic ranges, with a 36.1 per cent improve recorded in 2024.

The Center East has performed a major position on this progress. Dubai Worldwide Airport remained the world’s busiest for worldwide passengers in 2024, dealing with almost 87 million travellers, whereas Doha and Riyadh noticed double-digit progress.

As extra individuals journey throughout borders, consultants say cybercriminals are exploiting a number of strategies to acquire private data. Malware can be utilized to extract recordsdata from telephones and laptops. Phishing assaults, typically disguised as official airline or visa service platforms, trick customers into importing passport scans. In some circumstances, attackers benefit from poor safety settings on cloud storage to entry delicate paperwork.

Researchers additionally discovered situations the place discarded boarding passes and misplaced paperwork at airports have been recovered and offered on-line. With biometric and digital verification now commonplace, a scanned passport and selfie can generally be sufficient to bypass ID checks. Criminals are utilizing deepfake expertise to impersonate customers and acquire entry to on-line accounts or providers.

Center Japanese travellers will not be immune. Within the Gulf, the place digital adoption is excessive and frequent worldwide journey is the norm, knowledge publicity dangers are rising. The UAE’s Telecommunications and Digital Authorities Regulatory Authority (TDRA) has beforehand warned residents in opposition to utilizing public Wi-Fi networks with out safety. Nevertheless, the latest findings present that much more safe platforms may be compromised via breaches or social engineering.

The report additionally highlights the sale of Reserving.com reservations at steep reductions on darkish internet marketplaces. Criminals are reselling these bookings, generally for over $250, enabling others to remain in accommodations below another person’s identify.

Loyalty accounts, notably these linked to airways primarily based within the Gulf and Europe, are additionally being focused for resale, elevating considerations in regards to the publicity of high-net-worth people and enterprise travellers.

In keeping with the researchers, the black market attraction of journey paperwork lies of their utility. A stolen passport or hacked account can be utilized to commit id fraud, guide journey, open credit score traces, or perform phishing campaigns. The private nature of the information makes it beneficial and difficult to detect promptly.

Authorities throughout the Center East area are being urged to extend consciousness and encourage travellers to guard their paperwork. Whereas encryption instruments and VPN providers provide some defence, the report stresses the significance of vigilance and warning when submitting private data on-line. Customers are suggested to keep away from importing scans to unofficial web sites and to observe their monetary and travel-related accounts usually.

Picture: Researchers discovered that scanned international passports are extensively obtainable, with costs ranging between $10 and $200. Credit score: Ekaterina Belinskaya