The JokerStash marketplace was one of the most significant underground platforms for the sale of stolen credit card data, personal information, and various cybercrime tools before its takedown. While much of the information surrounding JokerStash comes from law enforcement takedowns, research on dark web activities, and market analysis, there are several lesser-known stats and facts about the platform's operations and influence in the cybercrime world. Here are some JokerStash Marketplace Stats You Didn't Know:

1. Revenue Generated:

• Estimated Market Value: While exact figures are difficult to obtain due to the clandestine nature of the marketplace, it's estimated that JokerStash generated tens of millions of dollars in revenue. The marketplace primarily dealt in stolen credit card data, and even with the high risk of getting caught, its success came from the sheer volume of transactions, the high demand for fresh data, and the quality of the information provided.

• Top Sellers: Some top sellers on the platform reportedly earned hundreds of thousands of dollars a year by supplying fresh data in bulk.

2. Peak Traffic & User Base:

• Active Users: At its peak, JokerStash had an estimated 50,000 to 100,000 active users from across the world. This included buyers looking for stolen financial data, fraud tools, and personal identification packages, as well as sellers providing this information.

• Number of Transactions: It is estimated that JokerStash facilitated thousands of transactions daily. This included sales of full credit card details, login credentials, and other illicit goods.

3. Types of Data Sold:

• Stolen Credit Cards: Around 60% to 70% of the total transactions on JokerStash involved stolen credit card data, including CVVs, dumps (magnetic stripe data), and other details that could be used for fraudulent purchases. U.S.-based cards were especially sought after due to the relatively high value and ease of use for online fraud.

• Fullz (Complete Identity Packages): Approximately 25% to 30% of the marketplace’s transactions involved the sale of Fullz, which included a combination of stolen credit card data, Social Security numbers (SSNs), addresses, and other personal identifying information.

• Bank Account Data: Around 5% to 10% of the marketplace focused on selling compromised bank account information, including login credentials and wire transfer details.

4. Geographic Distribution of Buyers:

• Top Regions:

  • United States: By far, the most sought-after data came from the U.S., making up a significant portion of the sales on JokerStash. American credit card data was particularly valuable due to the prevalence of credit card use and relatively high fraud tolerance.

  • Europe: Western Europe, including countries like the UK, Germany, and France, were major contributors to the buyer base. However, Eastern Europe also had a large presence, with Russia, Ukraine, and other countries contributing to both buyers and sellers.

  • Latin America: Brazil and Mexico were notable consumers of compromised data, as there was a significant rise in cybercrime activity in these regions.

5. Data Volume and Freshness:

• Fresh Data Preference: Buyers were willing to pay a premium for fresh data. It was reported that fresh credit card dumps (those compromised within the last 30 days) could sell for $20 to $40 per card, while older, less usable data sold for much less. Sellers would often update their listings with fresh batches to attract buyers.

• Peak Times for Data Drops: Data drops were most commonly scheduled around Black Friday, Cyber Monday, and other major shopping events, which contributed to an influx of stolen data being available for sale.

6. Pricing Trends:

• Credit Card Data Pricing: On average, compromised credit card dumps (with track data) were sold for about $10 to $50 per card, depending on the card type, country of origin, and the freshness of the data. Premium cards, such as Visa Infinite or MasterCard World Elite, could fetch much higher prices.

• Fullz: Complete identity packages (Fullz) were priced higher, often ranging from $50 to $200 per set, depending on the completeness of the data and its usability for identity theft or fraud.

• Bulk Purchases: Buyers purchasing data in bulk (e.g., thousands of records) would receive discounted rates, sometimes dropping to as low as $5 per card for large quantities of low-quality data.

7. Security Measures on the Platform:

• Escrow Services: Around 90% of transactions on JokerStash used escrow services, which acted as a middleman to ensure both parties (buyers and sellers) were protected from fraud during transactions. This helped minimize disputes, even in a highly unregulated and illegal environment.

• Encrypted Communication: Sellers and buyers on the platform used PGP encryption (Pretty Good Privacy) and Tor (The Onion Router) to ensure their communications were encrypted and their transactions anonymous.

8. Law Enforcement Takedowns and Shuts:

• Multiple Shutdowns: JokerStash had faced multiple shutdowns and takedowns by law enforcement agencies, most notably in 2018 and 2021. Despite these takedowns, the marketplace would often resurface on different domains, demonstrating the resilience of underground marketplaces.

• FBI Infiltration: The FBI and other international law enforcement agencies were reportedly involved in infiltrating the platform, monitoring and tracking high-profile transactions. This led to several arrests of individuals involved in using or operating the marketplace.

9. Key Sellers and Their Impact:

• Top Sellers: Some sellers on the platform were responsible for generating large volumes of illicit transactions, with some even offering subscription services to buyers, guaranteeing regular access to fresh batches of stolen data for a fixed price.

• Market Influence: Certain sellers were considered “high-tier” vendors in the marketplace, offering premium products that were more difficult to trace and had higher success rates for fraud. These sellers were highly sought after by repeat buyers.

10. Closing and Takedown Impact:

• Closing in 2021: In January 2021, JokerStash was officially taken down by law enforcement, marking the end of one of the largest credit card fraud marketplaces. This takedown was a significant blow to the underground marketplace ecosystem, but cybercriminals quickly migrated to other platforms or re-emerged under different names.

• Impact on Cybercrime: The takedown caused a temporary disruption in the sale of financial data, but criminal activity quickly adapted. New platforms and dark web marketplaces emerged, and sellers from JokerStash migrated to these new platforms.

Conclusion:

JokerStash was a key player in the underground economy for stolen data and cybercrime tools. The platform was notable not just for the scale of its operations but also for its sophisticated methods of protecting transactions, maintaining user anonymity, and adapting to law enforcement efforts. Its closure in 2021 marked the end of an era for this type of marketplace, but its impact on cybercrime continues to be felt.

Note: Engaging in any activity related to these marketplaces or the sale of stolen data is illegal and unethical. The consequences of being involved in cybercrime can be severe, including criminal prosecution and imprisonment.