Updated September 7, 2026. Every figure below carries its own date and source. Prices and statistics change; the links do not.
Long weekend, phone in hand, nothing urgent. Good. This takes two minutes, asks for no account and no email, and ends with a number from 0 to 100 that tells you how easy your identity would be to steal today. Most people who take it land somewhere they did not expect. That is the point.
Take the Identity Risk Score quiz (2 minutes, 10 questions, no sign-up)
Why a score, and why now
Identity theft stopped being rare a long time ago. The Federal Trade Commission reported in June that people told the FTC they lost about $16 billion to fraud in 2025, the highest total on record, and that $3.5 billion of it went to imposter scams alone. Nearly one in three fraud reports was an imposter scam, and bank impersonators accounted for close to $1 billion of the losses (FTC, June 15, 2026).
The FBI's numbers point the same way. Its Internet Crime Complaint Center logged 1,008,597 complaints in 2025 and put reported losses at nearly $21 billion, with Americans over 60 reporting about $7.7 billion of that, up 37% in a year (FBI, April 6, 2026; full report at ic3.gov).
Notice what these numbers are not. They are not about hackers breaking encryption. The FTC's own summary says the costliest impersonation scams often begin with a fake security alert, usually one that looks like it came from your bank. In other words, the attack starts with something the scammer already knows about you: your bank, your email, sometimes your Social Security number. The quiz measures how much of that is already out there.
What a stolen identity sells for
The quiz ends with a dollar figure: an estimate of what your particular bundle of exposed data would fetch on a dark web marketplace. That estimate comes from published price research, not from anything about you personally. Two 2026 reports give the ranges:
| Item | SOCRadar Dark Web Price Index 2026 (as of July 29, 2026) | DeepStrike pricing roundup (as of August 24, 2026) |
|---|---|---|
| U.S. Social Security number | $1 to $6 | $1 to $6 |
| Full identity package ("fullz") | $20 to $100 or more | $20 to $100 or more |
| Online bank login | $200 to $500 | $200 to $1,000 or more |
| Payment card with CVV | $5 to $50 | $10 to $40 |
| Email or social media login | $20 to $50 (social accounts) | about $60 to $65 (Gmail) |
Sources: SOCRadar, DeepStrike. The two sets disagree at the edges, which is normal for an illegal market, so read them as ranges.
The number that surprises people is the first row. A Social Security number, the thing most Americans guard hardest, is the cheapest item on the list. It is cheap because it is common: it has leaked so many times that supply is enormous. The expensive items are the ones that turn a name into money on the same day: a working bank login, a card with the security code, an email account that can reset every other password you own.
How the score works
Ten questions, tap to answer, no typing. They cover the things that actually decide whether a stolen data point becomes a stolen account: whether your passwords repeat, whether you have ever checked your email against known breaches, whether two-factor authentication is on for email and banking, whether your credit reports are frozen, roughly how many old accounts you have lying around, and whether anything has felt off in the last year.
The result is a score from 0 to 100 in one of four bands: Guarded, Exposed, At Risk, Critical. Under it you get a dark web value breakdown built from the price ranges above, and then the part that matters: your two highest-leverage fixes, chosen from your own answers. Nothing is stored. The result lives in the link, which is why you can open it on another phone by scanning the QR code.
What to do with your number
Whatever band you land in, the same three moves cover most of the distance, and all three are free.
1. Freeze your credit reports
A security freeze stops anyone from opening a new credit account in your name until you lift it. It has been free at all three bureaus by federal law since September 2018 (FTC). It does not touch your existing cards, and lifting it for a legitimate application takes minutes. We wrote a step-by-step in the identity theft playbook.
2. Turn on two-factor authentication where it counts
Email first, then banking, then anything that holds a card. Email first because a scammer who controls your inbox can reset the rest (FTC guidance).
3. Find out what has already leaked
Check your email address against known breaches (Have I Been Pwned is free) and change any password that appears. If the same password is reused elsewhere, that is the one to replace first. For ongoing monitoring of the dark web and data brokers, see what Banrox is building on the Identity Protection and Privacy Protect pages.
Get your score now. The Identity Risk Score quiz takes two minutes, asks for no account, and tells you which of the three fixes above you already have covered.
Share it, but share the tell
The quiz has a share bar for WhatsApp, iMessage and X, plus a QR code that opens your exact result on another phone. The most useful share is not the score. It is the question that surprised you. If you did not know a Social Security number sells for less than a coffee, someone in your family does not know either.
If you have been a victim already, the federal one-stop is IdentityTheft.gov: report, get a recovery plan, and generate the letters you will need.
Sources
- FTC press release, June 15, 2026: people reported losing $3.5 billion to imposter scams in 2025
- FBI press release, April 6, 2026: 2025 Internet Crime Report and the report PDF
- SOCRadar, Dark Web Price Index 2026, July 29, 2026
- DeepStrike, Dark Web Data Pricing, updated August 24, 2026
- FTC, Free credit freezes are here, September 2018
- FTC, Use two-factor authentication to protect your accounts
Banrox Inc. is a technology company. Banrox is not a bank, does not lend money, and is not a credit repair organization. This article is educational and is not legal, tax or investment advice. The quiz's dollar figures are estimates from published marketplace research, not a valuation of your individual data.
