Hackers Seen Using YouTube to Sell Stolen Credit Cards

Recent research by the online safety organization, Digital Citizens Alliance, uncovered numerous videos on Google Inc.’s (GOOG) YouTube platform that promote the sales of stolen credit card details. This disturbing revelation shines light on a significant portion of an $18 billion illicit industry.

The Alliance accused YouTube of unknowingly generating profits from these videos, as legitimate advertisements are displayed alongside them. A simple search for valid 2014 credit card details yielded nearly 16,000 results, as stated in the Alliance’s 13-page report.

A disconcerting example includes a video promoting stolen credit card details alongside a commercial for Target Corp. (TGT). In a high-profile case in December, Target fell victim to one of the largest data breaches in history, with hackers stealing information from millions of customers.

Tom Galvin, the executive director of the Digital Citizens Alliance, voiced his shock concerning numerous instances of stolen credit card sales on YouTube.

In response to these accusations, YouTube contends that its community guidelines explicitly prohibit illegal activities, including videos that support illegal sales.

Niki Christoff, a representative for YouTube, says that the company’s review teams vigilantly monitor videos that are flagged for potential policy violations. Every year, they remove millions of videos that violate YouTube’s policies.

Other online video services, like Microsoft Corp.’s (MSFT) Bing.com, which also carries similar content advertising stolen credit card sales, were not criticized by the Alliance.

The rise in cybercrime has led to an estimated $18 billion loss due to identity theft and account fraud risks in the previous year, according to Javelin Strategy & Research Inc. Several large corporations, like P.F. Chang’s China Bistro Inc. and Neiman Marcus Group Ltd, have reported recent data breaches.

The Alliance’s report criticizes the collaboration between hackers selling stolen credit card numbers and online platforms that distribute these advertisements. This illegal activity has been steadily rising on popular online platforms, including YouTube, for years.

Galvin was able to contact one of the sellers featured in a YouTube video, who offered different pricing structures dependent on the quantity of stolen credit card data purchased. The seller encouraged the use of stolen data and offered to sell a device for $250, capable of producing forged credit cards.

Despite Google’s strict advertising guidelines aiming to prevent ads from pairing with inappropriate content, corporations like American Express Co., Amazon.com Inc., and United Continental Holdings Inc. have had their advertisements displayed next to videos promoting credit card theft.

Digital video ad spending is projected to grow from $1.31 billion in 2013 to $1.76 billion this year, primarily due to the influence of YouTube and Facebook Inc. (FB), as per Bloomberg Industries research.

Even though Google agreed to a $500 million settlement with the U.S. government in 2011 for allowing Canadian pharmacies to advertise prescription medicine to Americans, the company emphasizes, “We hold ourselves accountable for our actions. Looking back, we never should have allowed these ads on Google.”

The Digital Citizens Alliance refrains from revealing its funding sources but states they receive support from “private individuals, leading health, pharmaceutical, creative sectors, online safety experts, and other communities concerned with Internet safety.” The board includes representatives from organizations that are sponsored by Google’s competitors and Google itself.

The Alliance’s goal is to notify companies whose advertisements are displayed next to videos that endorse credit card fraud. Their hope is to pressure these companies into pushing Google to eliminate such content from their platform.

This article was updated in 2025 to reflect current trends and insights.