Buy SSN: The Do's and Don'ts

Stolen Social Security numbers sell for £1.50 to £6 ($2–$8) on dark web marketplaces, with prices varying based on the completeness of associated identity data². Complete 'fullz' packages—including name, date of birth, address, phone number, email, and banking information—typically cost £8 to £24 ($10–$30)⁸. Payment requires cryptocurrency such as Bitcoin or Monero, and transactions complete within minutes once blockchain confirmations process, usually requiring 3–6 confirmations. Sellers often advertise bulk discounts for purchasing multiple SSNs simultaneously, though each purchase carries identical federal penalties under 42 U.S.C. § 408(a)(7)(B)¹.

Valid SSNs follow a specific format: first three digits range from 001–899 (excluding 666), middle two digits range from 01–99, and last four digits range from 0001–9999⁶. However, format compliance doesn't guarantee legitimacy—many purchased SSNs belong to deceased individuals from the Death Master File, which processes approximately 2.8 million death reports annually⁹. Since June 2011, the Social Security Administration randomised SSN assignment, eliminating geographical significance of the first three digits⁷. The Social Security Administration offers a free my Social Security account service that allows legitimate owners to monitor their SSN for unauthorised use by reviewing earnings records and receiving alerts about suspicious activity¹⁵. Attempting to verify a purchased SSN through credit applications or employment systems triggers E-Verify checks that cross-reference records in 3–5 seconds, immediately flagging mismatches³.

Using a false SSN triggers criminal prosecution under the Identity Theft and Assumption Deterrence Act, with imprisonment of up to 15 years for aggravated cases¹². Aggravated identity theft carries a mandatory consecutive two-year prison sentence that must be added to any other sentence imposed, according to the U.S. Sentencing Commission's 2022 guidelines⁴. You'll also face civil liability under the Fair Credit Reporting Act, with victims able to recover statutory damages between £79 and £790 ($100–$1,000) per violation, plus actual damages¹⁰. In fiscal year 2022, the Social Security Administration's Office of Inspector General reported 64,443 allegations of SSN misuse, resulting in over £78 million ($100 million) in investigative accomplishments⁵. Employers who knowingly hire someone using a fraudulent SSN face fines ranging from £447 to £17,900 ($573–$22,927) per unauthorised worker as of 2023¹³.

Dark web marketplaces require the Tor browser and cryptocurrency (typically Bitcoin or Monero) to access listings where sellers provide partial information before purchase to demonstrate validity². Sellers typically display the first five digits or last four digits of an SSN alongside associated data such as state of issue or approximate age to attract buyers. Transactions complete within minutes once cryptocurrency payment confirms, usually requiring 3–6 blockchain confirmations depending on the currency used. Marketplaces often operate on escrow systems where funds remain held until the buyer confirms receipt of the data, though disputes rarely favour buyers due to the illegal nature of transactions. The Social Security Administration's Office of Inspector General reported 64,443 allegations of SSN misuse in fiscal year 2022, resulting in over £78 million ($100 million) in investigative accomplishments⁵.

An SSN is simply the nine-digit Social Security number, whilst 'fullz' refers to a complete identity theft package that includes the SSN plus name, date of birth, address, phone number, email, and sometimes banking information or credit card details⁸. Fullz packages typically cost £8 to £24 ($10–$30) on dark web marketplaces compared to £1.50 to £6 ($2–$8) for standalone SSNs². The additional data in fullz packages enables more sophisticated fraud schemes such as opening bank accounts, applying for loans, or filing fraudulent tax returns, which increases both the potential financial gain and the severity of criminal penalties. Both purchases carry identical federal penalties under 42 U.S.C. § 408(a)(7)(B), including up to five years in prison and fines reaching £197,000 ($250,000)¹. The Federal Trade Commission reported 1.4 million identity theft cases in 2021, with credit card fraud and SSN misuse being the most common types¹⁴.