Like many dark web marketplaces, it operates anonymously, using Tor (The Onion Router) to mask the identities of users and ensure the marketplace's operations remain hidden from law enforcement. The platform has gained a reputation for dealing primarily in financial fraud, specifically credit card fraud, and is considered a hotspot for cybercriminals looking to exploit stolen payment information.
Here’s a closer look at Feshop:
1. Overview of Feshop:
Primary Function: Feshop specializes in selling stolen credit card data (referred to as "CC dumps"), full identity packages (known as Fullz), and other illicit goods such as fraud tools and bank account details. It is often used by cybercriminals who are looking to commit credit card fraud or launch phishing and identity theft operations.
Market Niche: Unlike general illicit marketplaces that sell a range of illegal goods, Feshop primarily focuses on financial fraud, making it a specific hub for individuals involved in cybercrime related to stolen payment information.
2. Types of Products Sold on Feshop:
Feshop is a marketplace for a variety of goods that enable cybercriminals to engage in credit card fraud, identity theft, and bank fraud. Some of the key products available include:
A. Stolen Credit Card Data (CC Dumps):
CC Dumps: These are stolen credit card data that includes the track data from the magnetic stripe of a credit card (known as dump data), which can be used to clone or counterfeit credit cards. Buyers can use these dumps for carding — a fraudulent activity where stolen card information is used to make unauthorized purchases or withdrawals.
CVV/CVV2: This data includes the card verification number (CVV), which is used for online transactions. Sellers typically offer fresh CVV data, which has not been flagged or reported by financial institutions yet, making it valuable to buyers.
Pricing: Stolen credit card data on Feshop is typically sold in bulk, with pricing based on the freshness and type of card data (e.g., Visa, Mastercard, American Express). Fresh dumps can cost anywhere between $20 to $50 per card depending on the quality and security of the data.
B. Fullz (Complete Identity Packages):
Fullz: A Fullz package includes not just credit card information but also personal identifying information (PII), such as names, addresses, Social Security numbers (SSNs), dates of birth (DOB), and sometimes even bank account details or login credentials.
Uses: These Fullz packages are often used for identity theft, applying for fraudulent loans, or opening bank accounts in someone else's name.
Pricing: The price for a Fullz package varies based on the completeness of the data and the perceived quality of the information. Some high-quality Fullz sets can sell for as much as $100 to $200.
C. Bank Account Data:
Bank Login Credentials: Feshop also offers stolen bank account details, including login credentials to online banking accounts. These can be used to access and drain accounts, or they can be sold to other criminals looking to commit wire fraud.
Wire Transfer Information: Some sellers also offer SWIFT codes or IBAN numbers needed for international wire transfers, which can be used to launder money or steal funds.
D. Fraud Tools and Services:
Carding Tools: Feshop is known to sell software and services that help with carding, such as CVV generators (tools that generate valid credit card numbers and CVVs) or skimming devices used to steal credit card data.
Phishing Kits: Sellers on Feshop also offer phishing kits that enable buyers to launch phishing attacks against individuals, steal their login credentials, and use those details to commit fraud.
3. Marketplace Features:
Feshop offers a number of features that help both buyers and sellers navigate the market:
A. Escrow Service:
Escrow is commonly used in dark web marketplaces to protect both buyers and sellers from fraud. It ensures that the buyer will receive the product before the seller gets paid, while the seller can be confident that the buyer won’t back out after the exchange is made.
This service is particularly useful for transactions involving large amounts of money or high-value products like fresh credit card dumps.
B. Reputation and Ratings:
Feedback Systems: Like many dark web marketplaces, Feshop uses a rating system that allows buyers and sellers to rate each other. This helps create a reputation system where trustworthy vendors and buyers are more likely to receive positive feedback, making it easier for future users to avoid scams.
Verified Vendors: Some sellers on Feshop are verified vendors, meaning they have been vetted by the marketplace or through user feedback. These sellers are often more reliable, and their goods (e.g., fresh credit card data) are typically of higher quality.
4. User Base:
Global Reach: Feshop, like many dark web marketplaces, serves users from all over the world. Its user base includes cybercriminals, fraudsters, and hackers who are specifically interested in using stolen financial data to commit crimes such as credit card fraud, identity theft, and money laundering.
Tech-Savvy Buyers: The buyers on Feshop tend to be familiar with advanced hacking and fraud techniques, and they may use sophisticated methods to access the data they purchase, such as card-not-present fraud, social engineering, or SIM-swapping.
5. Law Enforcement and Takedown Risks:
Ongoing Law Enforcement Scrutiny: Feshop, like many dark web marketplaces, operates under the constant threat of being taken down by law enforcement agencies such as the FBI, Europol, or Interpol. These agencies routinely monitor dark web activity and work to dismantle illegal marketplaces.
Shutdowns and Resurfaces: The marketplace has likely faced shutdown attempts, but like other illicit markets, it has the potential to reappear under a different name or domain. Cybercriminals frequently migrate to new platforms or restart the marketplace with slight modifications to evade detection.
6. Legal Implications:
Illegal Activities: Engaging in the buying or selling of stolen credit card information, fraud tools, and other illicit goods is illegal and punishable under law. Those involved in these activities can face severe legal consequences, including criminal prosecution, fines, and imprisonment.
Identity Theft and Fraud: Those who are victims of fraud or identity theft due to transactions on marketplaces like Feshop can suffer significant financial losses, damage to their credit score, and long-term impacts on their personal lives.
7. Alternatives to Feshop and Cybersecurity Measures:
If you have been affected by credit card fraud or identity theft resulting from illicit marketplaces like Feshop, it's crucial to take immediate action. This may include:
Freezing your credit with the three major credit bureaus.
Contacting financial institutions to alert them of any fraudulent activity.
Reporting the issue to law enforcement and organizations like the FBI’s Internet Crime Complaint Center (IC3).
Using identity theft protection services to monitor your financial accounts.
Conclusion:
Feshop serves as a notorious hub on the dark web for individuals involved in financial crimes like credit card fraud, identity theft, and the sale of fraud tools. The marketplace’s relative success comes from offering high-quality products that cater to fraudsters worldwide. However, engaging in any activities associated with Feshop or similar marketplaces is illegal and unethical. Law enforcement is actively targeting these platforms, and getting involved in them can lead to serious legal consequences.
If you suspect you have fallen victim to fraud from platforms like Feshop, taking prompt action to protect your identity and finances is critical. Always stay aware of the risks and the legal ramifications of engaging in such activities.
