Our analysis also found that nearly two out of every three stolen cards being sold belonged to Americans. Interestingly, this was a similar finding in our research for the first half of 2019.
Several factors drive the over-representation of U.S. cards in criminal marketplaces. For one, U.S. consumers tend to use more credit cards, and they are perceived to have higher credit limits than consumers in other countries. Additionally, U.S. businesses and card issuers lagged behind other wealthy countries, such as ones in Europe, in the implementation of more secure chip-card technology.
The number of stolen cards originating in Russia continue to be underrepresented. In our previous report, just 336 cards came from Russia. In our most recent review, that number stayed relatively low at 238. These findings stand in stark contrast to the large proportion of Russian speakers found in criminal underground forums. In fact, our research found incidences in which threat actors selling digital crime tools forbid those tools from being used in Russia or CIS countries. One possible explanation for this occurrence, is that Russian threat actors are oftentimes allowed to operate with impunity, if their activities do not target Russians or align with the government’s interests.