Dark Web Purchase Guide
Purchasing on the Dark Web can be tricky. Should you purchase the information being sold? Will it be
posted elsewhere if it is purchased? Why does each item cost a different amount?
These are just some of the questions organizations have regarding purchasing items on the Dark Web.
This document covers some best practices when making purchases on the Dark Web with a Threat
Command.
How to purchase information sold on the Dark Web
● Initiate request via “Ask an Analyst”
● If bulk alerts are requested, the analyst team responds with the number of credits required to
make the purchase.
● The requester is required to approve the request before the information is purchased.
● Information is purchased and sent via a secure link in the “Ask an Analyst” channel.
● The customer's account will be charged with the amount of credits according to the amount of
alerts purchased.
1
DW purchases a service package:
Package credits service will include purchase items, subject to the fair use policy, directly related to an
alert within the customer’s account dashboard only.
The service includes the basic item cost as presented in the source, in addition to the analyst labor costs
associated with the transaction.
For items with a base cost over $100, Rapid7 reserves the right to deny or approve the transaction on a
one-by-one basis. For these situations, an additional price (credits) might be asked to initiate the
transaction.
Fair Use Policy -
This policy prevents abuse and allows us to fully optimize the service capacity and maintain the quality of
our services for you, our valued customer.
The policy rules are based on at least two of the following sentences that should be respected to qualify
the usage as fair use:
● Item base cost should not exceed $100.
● The yearly usage of up to your package quantity.
Common Questions about Purchases on the Dark Web
1. How many credits will it cost to purchase the item being sold?
Each alert that the customer wants to purchase the information will cost one credit per alert but
is limited according to the Fair Use Policy.
2. Will the information be posted elsewhere on the Dark Web after purchasing it?
Unfortunately, there is no way to know for certain if specific information purchased will be posted
elsewhere in the future. What we can do is give our recommendations based on whether the
information purchased typically appears elsewhere in the future. In most cases, it is beneficial to
validate the information being sold prior to purchase. If found to be legitimate, the organization
can take the appropriate course of action to mitigate the risk.