티스토리 뷰

Your ID Number Might Be Getting Sold Right This Very Moment

 

Have you ever gotten a random call out of the blue saying "Congratulations, your loan application has been approved!" or received a text from a shopping mall you never signed up for telling you to change your password? I used to just brush it off as spam too. But it turns out this might not just be a coincidence.

Right now, somewhere on the internet, your name, ID number, and bank account info could be listed with a price tag of just a few thousand won. Creepy, right? Honestly, I got chills when I first heard about this. Today, let's dig into what's really happening out there and how to check if your information has been leaked.

First, let's understand what the dark web is

When you hear "dark web," it sounds like something straight out of a movie about hackers, right? But honestly, the concept is pretty simple. You know how we normally use Naver and Google? Those are just regular internet. The dark web is a hidden internet space that you can't even access with a regular browser. You need a special program called a 'Tor browser' to get in.

It's almost impossible to trace who's accessing this space. That's why illegal transactions happen openly there. Drugs, hacking tools, and yes—personal information trading. That's exactly why it's so hard for police to crack down on.

TIP If you're just curious and try to access the dark web as a regular person, you risk getting hit with malware or becoming entangled in crime. Don't even think about trying to go in there!

Where and how is my personal information leaking?

Honestly, this is the scariest part. Your info gets leaked even when you haven't done anything wrong. The most common way is through company hacking. When a shopping mall, delivery app, or gym app that you signed up for gets hacked, all your personal info—name, phone number, address, and sometimes even payment details—gets stolen wholesale.

The second way is phishing. Phishing comes from fishing, and it literally means they're fishing for you. They send you a link via KakaoTalk or text saying "Confirm delivery address," get you to click it, install a malicious app on your phone, and steal your information. The crazy part is, these scams have gotten so sophisticated that even experts get confused.

Warning These texts are 100% phishing: "Your account has been locked," "Delivery address mismatch - verification needed," "Health insurance refund application." If there's a link attached, don't click it. Always go directly to the official app or website to check.

The third way is through third-party personal information sharing agreements that we unknowingly consent to. You know when you install an app and just hit "agree to all" without reading the terms? Well, buried in there are often clauses saying it's okay to sell your info to marketing companies.

You'll be shocked to learn how much personal info sells for on the dark web

This part really blew me away. Do you know how much your precious personal information goes for on the dark web? It's sold in massive quantities for way cheaper than you'd think. Here's what security experts found in their investigations:

Type of Information Estimated Dark Web Price (per item) How It's Misused
Name + Phone Number $0.10 - $0.50 per item Spam calls, voice phishing
Full Personal Info (with ID number) $1 - $5 per item Identity theft, loan fraud
Bank Account + Password $5 - $30 per item Direct financial theft
Credit Card Info (number + expiry + CVC) $10 - $100 per item Unauthorized charges, overseas shopping fraud
Bulk Personal Info Packages (thousands of records) $100s - $1000s per package Telemarketing, mass phishing

My ID number going for like five bucks... I honestly don't know whether to be angry or just sad about it. But here's the really terrifying part: once it's sold, it keeps getting sold. Since it's a digital file, it can be copied infinitely. So once your info leaks, it can keep circulating for years.

According to recent security news, dark web brokers have gone beyond just selling information—they're now offering "custom" services where they collect specific people's information and sell it. For example, they filter and sell data like "men in their 30s, employed, living in Seoul, earning over 50 million won annually." The people buying this stuff are usually voice phishing rings or illegal loan companies.

TIP Dark web brokers are particularly interested in "fresh" data. The more recently leaked information is, the more expensive it gets. So whenever you hear news about a hacking incident, make sure to check if it affects any services you use!

How to check right now if your information has been compromised

Okay, this is the most important part. "So what do I do?" Let me answer that for you. We can't just leave it at being scared, right? Fortunately, there are ways to check if your information has been leaked.

1
Use Korea Internet & Security Agency (KISA)'s Personal Information Exposure Response Service. You can go to privacy.kisa.or.kr and check for free whether your personal information has been exposed online. It checks if sensitive information like your ID number or bank account is floating around on the web. It's simpler than you'd think, so I recommend doing it right now!
2
Check email leaks with the Have I Been Pwned website. Go to haveibeenpwned.com, enter your email address, and it'll tell you if your email was included in any data breaches worldwide. It's in English so it might feel a bit unfamiliar, but you just type your email in the search box and hit enter. "Pwned" is hacker slang for "gotten." If a red screen appears, your data's been leaked.
3
Sign up for the Financial Supervisory Service's Identity Theft Prevention Service. On fine.fss.or.kr, you can see at a glance if any financial accounts or loans have been opened in your name. You can also call your telecom provider's customer service (114) and say "I want to sign up for identity theft prevention service." This blocks new cell phone accounts from being opened under your name. Please do this one—identity theft through cell phone activation is the most common type.
Warning If you find out your info was leaked, don't panic and click on random links. If you get a text or pop-up saying "Apply for personal information leak compensation," it's probably a second-round phishing attempt. Always go directly to official agency websites to handle things.

And your daily habits matter too. So many people use the same password across multiple sites, but if one gets hacked, they all do. Use different passwords for each site, and if possible, make them with a combination of numbers, letters, and special characters. If they're hard to remember, turning on two-factor authentication like 'Naver OTP' or 'Google OTP' is super helpful.

Frequently Asked Questions

Q. What's the first thing I should do if I find out my personal information has been leaked?

A. First, change your password on that service immediately, and change the passwords on any other sites where you used the same one. If financial info was included, call your bank right away to set up alerts for unusual transactions, and you can even request that they freeze your account if needed. If you've actually experienced damages, you can report it to the Police Cyber Crime Report System (ecrm.police.go.kr).

Q. Can I directly check if my information is on the dark web?

A. It's really risky and technically difficult for regular people to access the dark web and check themselves. You should use official services like 'Have I Been Pwned' that I mentioned earlier, or some security companies offer paid dark web monitoring services. Trying to access the dark web on your own could actually result in you getting infected with malware or becoming entangled in crime, so please don't try it alone!

I know today's topic was heavy and scary, right? But honestly, just being aware of this stuff is huge protection. Getting hit by something you didn't know about is always the worst feeling. After reading this, you only need to do one thing. Visit one of those websites I mentioned and check if your email or information has been leaked. It takes less than 5 minutes. Remember—protecting your information and your family's is ultimately up to you! 💙

#DarkWeb #PersonalDataLeak #DataPrivacy #VoicePhishingPrevention #InfoSecurity #IDNumberLeak #CyberSecurity #CheckYourData