Report: Uber accounts more valuable than stolen credit cards

Your Uber account might be worth more to a cybercriminal than a stolen credit card, according to a new report by CNBC. (MGN Online)

Your Uber account might be worth more to a cybercriminal than a stolen credit card, according to a new report by CNBC.

Sourcing the security company Trend Micro, CNBC reported "stolen Uber account information on underground marketplaces sells for an average of $3.78 per account, while personally identifiable information (PII) was listed for $1 to $3.30 on average."

PII, CNBC explained, encompasses information that can be use to commit identity fraud, including Social Security numbers and birthday.

That information "varies in price depending on the specific information for sale," CNBC's Harriet Taylor reported.

Experts told Taylor that the following accounts are also for sale: PayPal, with a guaranteed $500 balance, for $6.43, Facebook for $3.02, Google Voice for 97 cents and Netflix for 76 cents."

"By contrast, U.S. issued credit card credentials, sold in bundles, were listed for no more than 22 cents each."

According to one expert Taylor interviewed "the reason why credit cards are worth less to crooks at this point is because banks and credit card issuers have developed more sophisticated fraud detection systems, rending stolen cards worthless very quickly."

On the other hand, a stolen Uber account "can either be used to build a fuller picture of a victim for identity theft, or they can be used to charge phantom rides," Taylor wrote, once again sourcing experts.

"A phantom ride," Taylor explained "is when a criminal sets up a fake driver account, and charges nonexistent rides to stolen accounts."

Taylor reported that tech companies, including Uber "are aware of the threat," and even, "employ teams to monitor accounts for strange activity, alerting users when accounts may have been compromised."

An Uber spokesperson told Taylor their security teams are, "laser focused on protecting the integrity of our community's Uber accounts."

A spokesperson from Facebook told Taylor they utilize, "a variety of methods to detect and prevent compromised accounts."

Netflix, Taylor reported "employs numerous tactics to prevent and detect fraudulent activity," quoting a representative from the streaming service.

Taylor described that the fact that people often use the same password "across multiple accounts makes security particularly challenging."

One expert Taylor spoke to suggested: "the time has come to move away from passwords."

close video ad
Unmutetoggle ad audio on off