Singapore identities are being sold on the dark web for $275

By Georgia Dixon

Last updated 21 April 2026

man looking at phone surrounded by digital documents for sale

Considering Singaporeans hold the most powerful passport in the world, it shouldn't come as a surprise that our identity documents fetch a pretty penny on the dark web. According to new data from NordVPN and NordStellar, Singaporean personal data is some of the most valuable to hackers and identity thieves.

According to a tool developed by the cybersecurity company, a full suite of Singaporean identity data (including passport information, ID, driver's license, and email account) can be purchased for as little as $275.

Singaporean social media accounts, streaming services, payment platforms, and even online shopping accounts are all listed for sale on the dark web, with Facebook accounts going for $48, Netflix accounts for $6, Visa and Mastercard information from $16, Amazon accounts for $64, and even Steam game libraries for $101.

“Most people think of identity theft as something that either won’t happen to them or something they’ll notice when it does,” says Marijus Briedis, chief technology officer at NordVPN.

“The reality is that your data could already be for sale, and you’d have no way of knowing unless you actively check.”

How Singaporeans can protect themselves from digital identity theft

Unfortunately, no software is 100% protected against cybersecurity threats, so unless you abstain from using every single website or platform that requires you to enter sensitive personal information, simply using the internet comes with some level of risk.

Likewise, once your data has leaked, there's not a whole lot that you can do to get it back. The dark web is completely decentralised, meaning there's no authority to contact if your personal information finds its way there.

There are, however, simple steps that every Singaporean can take to reduce their risk of data leaks.

Use strong, unique passwords for every different account, with a password manager to keep track of them.
Enable multi-factor authentication on any account that supports it. This added layer of security can stop hackers in their tracks.
Only access sensitive accounts when on a secure internet connection. If you absolutely must use a public network, consider using a VPN for added protection.
Never share personal information online unless absolutely necessary.
Conduct regular checks of your financial accounts to monitor for suspicious activity before a potentially larger attack.