Hackers can make good money selling your Facebook login, Gmail password, or credit card number on underground sites. Here’s the breakdown of how much.

1. A new report shows the average prices that hackers are willing to pay in exchange for control of different online accounts that have been compromised.
2. Selling stolen login credentials is a common practice on the dark web, a collection of underground networks, where hackers will pay a high price for access to personal data, counterfeit documents, and hacked social media accounts.
3. Compromised Gmail and Facebook accounts are among the priciest stolen logins, possibly because they could be leveraged to gain broader access or trick other people into handing over information.

Researchers with Privacy Affairs, the research arm of cybersecurity firm NordVPN, analysed hundreds of recent listings on the dark web, where hackers routinely exchange stolen credentials. The researchers indexed the average prices of different types of logins for sale.

A hacked Facebook account goes for $US74.50 on average, while Instagram accounts averaged $US55.45 and Twitter logins went for $US49 on average.

Daniel Markuson, a NordVPN analyst, said in a statement that the selling prices for compromised social media accounts are “relatively low,” but noted that hackers typically access accounts in order to pull off more lucrative scams.

“This information can be used in many fraudulent activities, including identity theft, so its protection shouldn’t be underestimated,” Markuson said in a statement.

A hacked Gmail account averaged a higher selling price – $US155,73, on average – due in part to the fact that it could potentially provide a wide range of insight into a target’s life and other accounts.

Even more lucrative than social media accounts are payment processing service accounts, which hackers use to send cash transfers from other grifts in order to avoid detection by law enforcement. Hackers offered to use stolen PayPal accounts to transfer amounts ranging from $US1,000 to $US3,000 in exchange for a $US320 fee on average, according to the report.

Meanwhile, information on people’s credit cards and debit cards sell for less – anywhere from $US15 to $US35 on average – in part because those transactions are easily traceable.

The report recommends that people regularly change their passwords to avoid having their accounts compromised. Services like Have I Been Pawned are available to check whether a login and password have been stolen in a past breach. Using a password manager can also help keep accounts secure.