What’s the Dark Web? How Do You Protect Yourself? | Capital One (2024)

March 14, 2023 |7 min read

    If you hear about your personal information showing up on the dark web, you may have plenty of questions.

    But like many things in life, knowledge is power, and a solid understanding of the dark web—and what to do if your information is compromised—can help you take steps to protect your identity and accounts.

    Key takeaways

    • The dark web is a part of the internet that can’t be accessed from standard browsers.
    • Using the dark web is legal, but it’sbeen used for illegal dealings, like buying stolen personal information, including Social Security numbers (SSNs), bank account information and passwords.
    • There are ways to prevent your information from ending up on the dark web, like creating unique passwords and using monitoring services.
    • If you use CreditWise from Capital One, it will scan the dark web for your personal information and send you an alert if it detects anything.

    What is the dark web?

    The World Wide Web is made up of three main layers: the surface web, the deep web and the dark web. When you search the web, read news from a webpage or shop for sneakers online, you’re most likely on the surface web. Many people are familiar with this part of the internet.

    If you sign in to your email account, you head into the deep web. This part of the web stores information protected by passwords. Your email, bank account and online health records are all on the deep web.

    The dark web is part of the deep web. And unlike the other layers of the web, the dark web can’t be seen from normal web browsers. Users can only access the dark web using special tools or software. Dark web users are anonymous, and their activity and IP addresses aren’t tracked.

    How does the dark web work?

    Websites on the dark web end in “.onion” rather than in endings like “.com” or “.gov.” Users need special dark web browsers to access these sites. One example is The Onion Router, or “Tor” for short. And just as an onion has many layers, Tor has many levels of encryption. This is what helps keep users anonymous.

    Is the dark web illegal?

    While its name may sound threatening, the dark web is used by some legitimate businesses and organizations. In fact, U.S. military researchers created dark web technology to send and receive messages anonymously.

    Some journalists use the dark web to protect the identity of sources or whistleblowers. News organizations also use it to make journalism accessible in places where it’s blocked.

    Still, because users are anonymous, the dark web is also used as an online black market by criminals for illegal activities like selling stolen information.

    What kind of personal data is on the dark web?

    Some of the most common personal data bought and sold on the dark web includes:

    • Credit card, debit card and bank account information
    • Personally identifiable information, like your name, date of birth, SSN or driver’s license number
    • Passwords to social media accounts and subscription services
    • Medical records
    • Phone numbers
    • Fake diplomas

    How does personal information end up on the dark web?

    If your personal information is spotted on the dark web, it could mean someone took the information without your permission.

    Criminals steal personal information in a variety of ways. Some try hacking into accounts or using malware to capture passwords. Others attempt to collect information through phishing scams and SIM swaps.

    But not all scams are high tech. Some thieves will even go through the trash to look for documents containing personal data.

    How can I find out whether my information is on the dark web?

    A monitoring tool can help you stay on top of your personal information. CreditWise is a free service that gives you the ability to detect suspicious activity.

    CreditWise scans the dark web—including thousands of unsafe sites, hacking forums and illegal digital marketplaces—and alerts you if it finds your SSN or email address so you can take action.

    In addition to alerting you about your information appearing on the dark web, CreditWise also monitors your Experian® and TransUnion® credit reports for any meaningful changes. That way, you’ll know about recent credit inquiries, delinquent accounts and more.

    What can I do if my information is found on the dark web?

    If your email address or SSN is found on the dark web, it doesn’t necessarily mean it’s been used by a fraudster to commit identity theft. But it’s still important to be vigilant and take steps to help protect yourself.

    If you are a CreditWise user and get an alert, you’ll get tips about things you can do to help protect your personal info.

    Worried your personal information might have been stolen? If it’s related to your email, the fix may be as simple as changing your password. If your SSN is involved, here are 4 steps to consider taking:

    • Freeze your credit for free. This will ensure that no one can access your credit reports, whichmakes it more difficult for a thief to use your name to open a new line of credit.
    • Place a fraud alert on your credit report. Just call the toll-free fraud number of any one of the three nationwide credit bureaus: Equifax®, Experian or TransUnion. This allows creditors to get a copy of your report as long as they take steps to verify your identity before opening an account in your name.
    • Contact your financial institutions. If you discover your credit card, debit card or bank account information has been shared on the dark web, it may be a good idea to contact your bank or credit card company. It might offer recommendations and what steps to take.
    • Keep tabs on your credit reports for suspicious activity. Learn how you can get free copies of your credit reports at AnnualCreditReport.com. You can also use CreditWise to see your TransUnion credit report.

    How to protect your information from the dark web

    Wondering how to protect yourself from identity theft? The Federal Trade Commission provides resources for dealing with lost or exposed information. There are additional steps you can take to help prevent hackers from accessing your information and sharing it online:

    1. Create strong, unique passwords for each of your online accounts

    Choosing a strong password for every online account can help protect your personal information. Even if a cybercriminal steals one of your passwords in a data breach, they will only be able to access one account. If you receive an alert that your information has been compromised, it’s worth changing your sign-in information as quickly as possible.

    2. Use a password manager on your computer and mobile devices

    Password managers are apps or browser plug-ins that encrypt—or scramble—and store all your passwords. Some may also create unique passwords automatically, which you can use when creating a new account. This can make it easier to keep track of your passwords—and make it more difficult for hackers to access your information.

    3. Consider dark web monitoring services

    Dark web monitoring services, like those available from CreditWise, scan the dark web for your personal information and notify you if they find your data online. That way, you can take protective measures like freezing your credit reports or contacting your financial institutions. You can also update breached account passwords to prevent any further leaks.

    The dark web in a nutshell

    The dark web is a hidden layer of the deep web, where users are anonymous and activity isn’t tracked. There are legitimate reasons to use the dark web, like protecting whistleblowers or sharing confidential information. But some users exploit the dark web and use it for illegal activities, such as buying or selling stolen personal information.

    Luckily, learning about the dark web and how it works can help you take steps to protect your identity. Dark web monitoring services can alert you if your information is found online, too. And this guide's7 ways to protect your identity online and offline can provide additional tips to safeguard your personal information.

    What’s the Dark Web? How Do You Protect Yourself? | Capital One (2024)

    FAQs

    What’s the Dark Web? How Do You Protect Yourself? | Capital One? ›

    It is generally implausible to remove data that has been disseminated within the Dark Web. Individuals whose PII has been discovered on the Dark Web are encouraged to enroll in an identity and credit monitoring service immediately.

    How do you remove your info from the dark web? ›

    It is generally implausible to remove data that has been disseminated within the Dark Web. Individuals whose PII has been discovered on the Dark Web are encouraged to enroll in an identity and credit monitoring service immediately.

    How do I protect myself against the dark web? ›

    If you do choose to visit the dark web, though, there are a few precautions you should take to stay safe:
    1. Always use an anonymous browser like Tor, and keep your security settings at the maximum value, even if this limits your browsing experience. ...
    2. Never download or buy anything on the dark web.

    How did my SSN get on the dark web? ›

    If your data has been stolen in a data breach, your SSN has likely been posted onto the Dark Web.

    What happens if you get a dark web alert? ›

    If you receive a dark web alert, fortunately, it doesn't mean that someone has already used your data. It just means that it has been found on the dark web, which means that it can be obtained from there. However, if you receive an alert, it still means that you have been a victim of data theft.

    Should I be worried if my information is on the dark web? ›

    Being notified that your information has been found in a data breach or on the dark web, as its name suggests, shouldn't be taken lightly. It's likely not an occasion to full-on panic, but it probably suggests some next steps.

    Can I check if my information is on the dark web? ›

    Run a free Dark Web scan

    This is a good place to start — however, free scanners only check for email addresses (and sometimes phone numbers). To see if your financial data, SSN, or IDs have been leaked, you need to sign up for a Dark Web monitoring service.

    Should I worry if my phone number is on the dark web? ›

    If cybercriminals get a hold of your phone number via the dark web, they can use it to: Send scam messages, make scam calls, or even blackmail you. Try to take control of your mobile device. Steal even more information about you.

    What is illegal to view on the dark web? ›

    Illegal Uses of the Dark Web

    Given its anonymous nature, the dark web is also used for illicit and even illegal purposes. These include the buying and selling of illegal drugs, weapons, passwords, and stolen identities, as well as the trading of illegal p*rnography and other potentially harmful materials.

    Can I remove my email from the dark web? ›

    Can you remove your email from the dark web? Unfortunately, if your email address has been compromised, there's nothing you can do to remove it from the dark web.

    How to check if your SSN is compromised? ›

    One of the best ways to check if someone stole your Social Security number is by reviewing your credit report and looking for any unrecognized financial activity. Threat actors will often use your Social Security number to open new bank accounts, apply for loans or withdraw money from your bank account.

    Can I lock my Social Security number? ›

    There are measures you can take to help prevent further unauthorized use of your SSN and other personal information. You can lock your SSN by calling the Social Security Administration or by creating an E-Verify account. Also, you can contact all three of the nationwide CRAs to place a freeze on your credit reports.

    How to scan the dark web? ›

    You can run a free dark web scan with Malwarebytes. If you're worried that your email or other personal details might have been exposed on the dark web, this tool offers a quick and easy way to find out. Submit your most-used email address and we'll give you a free report detailing any exposures.

    How do you remove your data from the dark web? ›

    Once your data is out and about on the dark web, it's out there for good. The only thing you can do now is damage control and risk mitigation. *Incidentally, there's no central regular internet control agency you can ask to delete your data online.

    How do I know if my password is on the dark web? ›

    Integral
    • Use a password manager. Hopefully, you know a password manager is a database of all of your passwords for your online accounts. ...
    • Use CyberNews Leaked Password Check. CyberNew checker is a great tool you can use to make sure your passwords aren't being sold on the dark web. ...
    • Use HaveIBeenPwned.
    Mar 7, 2023

    How to check dark web report? ›

    Set up your profile

    To start, open Google One, go to “Dark web report,” and tap Set Up > Start Monitoring. You'll then be able to choose exactly what information you'd like to keep an eye on, including your name, address, email, password, and phone number.

    How do I remove my personal information from the internet for free? ›

    How To Remove Your Information From the Internet
    1. Secure your online accounts.
    2. Remove your data from Google search results.
    3. Request that third-party websites remove your information.
    4. Delete old accounts and apps.
    5. Boost your social media privacy settings.
    6. Opt out of data broker lists.
    7. Use anti-tracking and privacy tools.
    Nov 30, 2023

    How does your personal information end up on the dark web? ›

    Data can end up on the dark web in several ways, including through data breaches, using public Wi-Fi, visiting a nonsecure website, and leaving an offline paper trail. A cybercriminal may hack into company databases and take personal data, such as email account addresses, passwords, and phone numbers.

    Can you remove your phone number from the dark web? ›

    It's virtually impossible to remove your mobile number from all websites, particularly on the dark web, but you can make it difficult for most people to find it. Start by opting out of people-search sites, then contact the remaining website owners to request that they remove your phone number.

    Top Articles
    Latest Posts
    Article information

    Author: Arielle Torp

    Last Updated:

    Views: 6064

    Rating: 4 / 5 (61 voted)

    Reviews: 92% of readers found this page helpful

    Author information

    Name: Arielle Torp

    Birthday: 1997-09-20

    Address: 87313 Erdman Vista, North Dustinborough, WA 37563

    Phone: +97216742823598

    Job: Central Technology Officer

    Hobby: Taekwondo, Macrame, Foreign language learning, Kite flying, Cooking, Skiing, Computer programming

    Introduction: My name is Arielle Torp, I am a comfortable, kind, zealous, lovely, jolly, colorful, adventurous person who loves writing and wants to share my knowledge and understanding with you.