91
submitted 2 days ago by [email protected] to c/[email protected]

Dozens of sellers on the freelancing platforming Fiverr claim to have access to a powerful data tool used by private investigators, law enforcement, and insurance firms which contains personal data on much of the U.S. population. The sellers are then advertising the ability to dig through that data for prospective buyers, including uncovering peoples’ Social Security numbers for as little as $30, according to listings viewed by 404 Media. Fiverr removed the listings after 404 Media inquired about the practice.

The advertised tool is TLOxp, maintained by the credit bureau TransUnion, and can also provide a target’s unlisted phone numbers, utilities, physical addresses, and more.

There is a good chance many of these listings are scams, designed to take peoples’ money without providing the requested data, or by sourcing it in another way and presenting the results as a TLOxp search. Regardless, the advertisements' existence presents a content moderation issue for Fiverr.

404 Media has previously reported on how TLOxp and similar tools have become a secret weapon in the digital underground, with hackers and fraudsters using the capabilities to dox people in minutes. The tools can be especially powerful because some use credit header data, which is personal information people provide to their financial institutions in the normal course of business of obtaining a credit card, which then trickles down to a wide web of other companies.

top 9 comments
sorted by: hot top controversial new old
[-] [email protected] 5 points 1 day ago

Can we get a list of donors to the heritage foundation?

[-] treadful 6 points 2 days ago

Article doesn't really go into how TLOxp can dox/unmask people.

[-] [email protected] 3 points 2 days ago

Probably because it's proprietary to TransUnion. Needless to say it's powerful and thorough.

[-] treadful 3 points 2 days ago

Needless to say it’s powerful and thorough.

I mean, this does need to be said. It's important details I was hoping to learn from the article. Otherwise it's spooky stories we can't actually build defenses for.

[-] [email protected] 3 points 2 days ago

If you are American you essentially have no defense short of going completely off the grid. TLOXP PROVIDES ACCESS TO:

  • Data on over 95% of the U.S. population
  • 350 million Social Security numbers
  • Over 225 million employment records
  • 4 billion phone records
  • 4 billion address records
  • 90 million adult Millennials age 18–36 Source, they also sell license plate reader data, and your actual driving data if you have a newer vehicle.
[-] treadful 1 points 1 day ago

Then I guess "dox" in this context is resolving your name to other PII? I originally read it as more of a way to unmask people online.

[-] [email protected] 3 points 1 day ago

Among the search parameters available, include IP address, social media profiles, and phone numbers, so it is definitely possible to unmask someone online, but their bread and butter is credit information which now a days includes everything about you (ever wonder how they make security questions to verify you off “public records”?)

[-] [email protected] 5 points 2 days ago

$30 seems expensive for a social. That's the kind of crime you buy in bulk

[-] [email protected] 2 points 2 days ago* (last edited 2 days ago)

Not if it's an estranged husband/wife looking for retribution, or a stalker, etc. Lots of individuals would be interested in a single person's info.

this post was submitted on 02 Jul 2024
91 points (98.9% liked)

News

21721 readers
3573 users here now

Welcome to the News community!

Rules:

1. Be civil


Attack the argument, not the person. No racism/sexism/bigotry. Good faith argumentation only. Trolling is uncivil and is grounds for removal and/or a community ban.


2. All posts should contain a source (url) that is as reliable and unbiased as possible and must only contain one link.


Obvious right or left wing sources will be removed at the mods discretion. We have an actively updated blocklist, which you can see here: https://lemmy.world/post/2246130 if you feel like any website is missing, contact the mods. Supporting links can be added in comments or posted seperately but not to the post body.


3. No bots, spam or self-promotion.


Only approved bots, which follow the guidelines for bots set by the instance, are allowed.


4. Post titles should be the same as the article used as source.


Posts which titles don’t match the source won’t be removed, but the autoMod will notify you, and if your title misrepresents the original article, the post will be deleted. If the site changed their headline, the bot might still contact you, just ignore it, we won’t delete your post.


5. Only recent news is allowed.


Posts must be news from the most recent 30 days.


6. All posts must be news articles.


No opinion pieces, Listicles, editorials or celebrity gossip is allowed. All posts will be judged on a case-by-case basis.


7. No duplicate posts.


If a source you used was already posted by someone else, the autoMod will leave a message. Please remove your post if the autoMod is correct. If the post that matches your post is very old, we refer you to rule 5.


8. Misinformation is prohibited.


Misinformation / propaganda is strictly prohibited. Any comment or post containing or linking to misinformation will be removed. If you feel that your post has been removed in error, credible sources must be provided.


9. No link shorteners.


The auto mod will contact you if a link shortener is detected, please delete your post if they are right.


10. Don't copy entire article in your post body


For copyright reasons, you are not allowed to copy an entire article into your post body. This is an instance wide rule, that is strictly enforced in this community.

founded 1 year ago
MODERATORS