Skip to content
Share:

What to Do if Your Information Is Found on the Dark Web

By: Louis DeNicola - Experian

Published: July 5, 2022

What to Do if Your Information Is Found on the Dark Web

If a dark web scan reveals your info is available online, you should:

  1. Change your passwords
  2. Add multifactor authentication to your accounts
  3. Try to add SIM-swapping protection to your phone
  4. Report the theft of your personal information and accounts
  5. Freeze your credit
  6. Stay proactive

If you've heard of the dark web, you might be worried that criminals can use it to steal your identity and access accounts. And you have a valid reason for being concerned.

The dark web is a part of the internet that's a little more difficult to access than the rest of the internet, and there are dark web marketplaces where people sell illicit goods and information, including stolen accounts and personal details. If you find your information on the dark web, take immediate action to update your passwords, report any fraudulent credit card charges and secure your accounts.

You can check to see where your information appears with a free dark web scan. And while there might not be a simple way to get your information removed from the dark web, you can take measures to protect your accounts and identity.

1. Change Your Passwords

One of the first things you can do is make sure someone can't use your stolen login information to access your accounts. A simple way to do this is to change any passwords associated with accounts that are reportedly on the dark web.

If you use the same password—or similar password variations—for multiple accounts, you may want to change the other accounts' passwords as well. Use a strong password that can't be easily guessed or hacked, or consider using a password manager to create complex passwords for you.

2. Add Multifactor Authentication to Your Accounts

Multifactor authentication (MFA) is when an account requires you to verify your identity using two or more authentication methods. For example, you might have to enter a code sent to your phone when you try to log in to your bank account. By confirming the code, you're verifying that you know the username and password and have control of the phone associated with the account.

Adding MFA can help keep others out of your account even if your username and password are leaked on the dark web. Some accounts automatically require MFA, but others offer it as an optional feature. Sometimes, it won't be an option even if you want to enable MFA.

When you can turn it on, you may be able to choose from different types of authentication, such as receiving a text message or email, using your fingerprint, or using a code or push notification from an authentication app. In general, text message and email MFA are the least secure options, but they're still better than nothing.

3. Try to Add SIM-Swapping Protection to Your Phone

SIM swapping is when someone temporarily takes over your phone line using the same SIM swapping procedure that you'd use to activate a new phone. Criminals do this by tricking or paying off mobile phone carriers' employees. They then can have your text message MFA codes sent to a phone they control so they can access your accounts.

Some mobile phone carriers have a security feature that keeps your number from being ported to a new phone until you contact the company to disable the security. However, you may need to contact your carrier to activate the feature.

4. Report the Theft of Your Personal and Account Information

You may find that your personal information is being sold or shared online, including your:

  • Name and address
  • Social Security number
  • Driver's license and passport
  • Medical records and account numbers
  • Financial account numbers and details
  • Emails, usernames and passwords

Criminals can use this information in a variety of ways, such as to impersonate you or create a fake identity using your Social Security number. They may even make a driver's license or medical insurance card using your information and then use the documents if they're arrested or want to get a medical procedure.

You can report the theft of this information to the Federal Trade Commission on IdentityTheft.gov. You'll then receive a personalized plan with the next steps you can take based on what was stolen.

5. Freeze Your Credit

Freezing your credit reports with all three major credit bureaus?Experian, TransUnion and Equifax?can help keep someone else from opening an account in your name. Once your reports are frozen, creditors can't access your credit report to make new lending decisions. However, your report can still be accessed for other reasons, such as if your current creditor wants to review your report or if you want to check your credit.

You can freeze and unfreeze your credit for free and as often as you'd like, but you'll need to contact each credit bureau directly. Also, don't forget to unfreeze or temporarily "thaw" your reports when you apply for a new credit card or loan. If that seems like too much work, you can add a fraud alert to your credit report that asks lenders to verify your identity before approving credit in your name.

6. Stay Proactive

Having safety measures in place can help protect you from identity theft regardless of whether your information is on the dark web. Here's how:

  • Use a password manager. A password manager can help you create, securely store and fill in unique and strong passwords for all your accounts.
  • Learn how to detect social engineering. Many hacks and scams are successful because someone gets tricked into sharing their login or personal information with a fraudster. Detecting and avoiding phishing, smishing and vishing scams can be important for keeping your information and finances safe. One rule of thumb: Never click on a link or provide information in an email or text unless you have verified the sender's authenticity.
  • Get identity theft monitoring. Monitoring services, such as Experian IdentityWorksSM, can alert you if your personal information is detected in a variety of databases and if there are suspicious changes in your credit report. It also includes identity theft insurance, which can help you cover costs associated with recovering your identity.

Found Out What's Already Online

There are different tools you can use to see if your information is on the dark web, has been leaked in a data breach or is easily accessible on the surface (in other words, not dark) web. Experian's free dark web scan can look for your email address, phone number and Social Security number, and Experian's personal privacy scan can search for your information on people finder sites.


This article was originally written for and published on Experian.com by Louis DeNicola on May 12, 2022. 
View all posts

Members' Voice Testimonials

This credit union is the best, I love the customer service and you can't beat the interest rates. I'm happy to be a member of this great credit union.

The branch manager introduced herself and was extremely helpful. She stated that if there is anything we ever need to please let her know. Very positive experience!

Greta was absolutely amazing - as always. She makes me and my parents feel valued and supported. We are forever grateful. [The Credit Union] has been hugely supportive over many years. And we feel known and cared for.

Long as I have been with the credit union, I haven't had any problems. I also like the protection on my account.

My overall experience at the credit union was exceptional. The staff was hospitable offering water, my service was timely and professional and the office was well lit and clean.

As a member for more than 40 years, i have always had great service from the USSFCU and know that they stand behind their great reputation.

A top rate Credit Union, [I'm] privileged to be part of! Thank you for all you do for our family! USSFCU Credit Union was able to resolve our financial situation - vehicle, personal loans, customer service/recommendations, within 6 months. We belonged to another credit union for over 20 years, with results not even close to comparison. We switched ...

Your people and products are amazing. The recent [online banking] overhaul is phenomenal. [I've] been electronic banking since Tele action phone banking - paying bills with my push button landline decades ago. USSFCU is light years ahead of everyone else in terms of ease of use and client experience!

I have been a member for more than 30 years. I no longer reside in the DC area but continue to bank with USSFCU because of the ease and the customer service.

I have been a member for over 50 years, and I have always gotten good service with loans, when I had to have service at a branch, and when I needed to have money sent to me from my savings account. The personnel have always been friendly and treated me with respect.

I especially appreciate being able to quickly speak with someone (not a robot) and that person has always been knowledgeable and helpful.

Excellent customer service streamlined and transparent process. The representatives are efficient, knowledgeable, and understanding of the type of loans offered by Credit Union.

The USSFCU behaves as a credit union ought to behave. The staff works with and for the members, not for a corporate board. Interest rates for a car loan, a home improvement loan, and a mortgage are low and terms are transparent.

Staff are courteous and friendly to work with. Very knowledgeable about services and products offered or available. Excellent follow-up with customers.

I have appreciated USSFCU services for many years since I left my work on Capitol Hill. I have appreciated the occasional webinars on purchasing a home or retirement planning.

I have been a member since 2006, and have always appreciated the customer service response to any concern or query. In addition, as I have traveled extensively, USSFCU has provided support and access.

Read More testimonials.