Phishing: How Stolen Data is Used and Sold

According to cybersecurity firm Kaspersky, users in Europe clicked on more than 131 million malicious phishing links in 2025. Phishing attacks primarily target login credentials for online accounts (88.5%), personal data (9.5%), and bank card details (2%).
Cybercriminals collect the stolen data into 'dumps' and sell them on dark web forums, with prices reaching up to $50 for bulk sales. Higher-value accounts, such as cryptocurrency platforms, bank accounts, and e-government portals, are sold at premium prices.
Kaspersky recommends that users block compromised bank cards, change passwords, check active sessions, and use reliable security solutions.