Man having coofee indoors.

Dark Web Monitoring§

Identity thieves can buy or sell your personal information on hard-to-find dark web sites and forums. Dark Web Monitoring searches the dark web and notifies you should your information be found.

What is Dark Web Monitoring? 

Dark Web Monitoring is a service which regularly searches places on the dark web where information is traded and sold, looking for your information. If your information is found, you get a notification.

Norton™ 360

With Norton 360 plans, when you first sign up, LifeLock will begin monitoring the dark web for your e-mail address. After you sign up, you can add more information for Dark Web Monitoring§ as well:

  • Driver’s license number
  • Mother’s maiden name
  • 5 insurance ID numbers (e.g. medical,property)
  • 5 addresses
  • 5 email addresses
  • 5 phone numbers
  • 10 bank or investment account numbers
  • 10 credit card numbers
  • 10 gamer tags

Norton™ 360 with LifeLock™

Dark Web Monitoring§ in Norton 360 with LifeLock plans enable you to add even more information:

  • Driver’s license number
  • Mother’s maiden name
  • 5 insurance ID numbers (e.g. medical,property)
  • 5 addresses
  • 5 email addresses
  • 5 phone numbers
  • 10 bank or investment account numbers
  • 10 credit card numbers
  • 10 gamer tags
  • Social Security Number
  • Date of Birth
  • Name
Young woman cell phone balcony.

Is your information on the dark web?

If you don’t know something is a problem, how can you take action?

Dark Web Monitoring enables you to gain awareness and take action if you are notified that your information has been found on the dark web.

For instance, if you learn that your email address or an account number has been found on the dark web, you can update the password you use to log into that account to a new, unique and complex password.

Young man working at home.

From Data Breach to Dark Web Sale 


You thought you were careful online: You’re cautious about “oversharing” and which websites you visit. But then maybe you get an email from a reputable online store that their system was compromised, and your information was included in the breach. You later hear on the news that the data taken in that breach was found listed for sale on the dark web. 

Data breaches can occur more often than what is reported in the news, and not just to big-name companies. What about third-parties that your trusted companies work with, or small local offices? How about your local doctor or dentist’s office—what if their files were breached?


Dark Web Monitoring monitors the dark web for your information and notifies you if it’s found, so you can take action.

Young woman working at home.

“But I don’t shop online”


You don’t shop online, but you use your credit card to purchase goods in physical retail stores. Then, maybe you learn of a data breach that specifically includes credit and debit card data used at Point-of-Sale (POS) systems for in-store purchases, and it includes a store at which you shop.


Norton 360 plans include Dark Web Monitoring which searches for your personal information on the dark web, and notifies you if we discover potential threats to your identity. 

What is the dark web?

The dark web is a small part of the web where anonymity is prized and nefarious activities can run amok. Like two people meeting in a dark alley to exchange cash for illegal goods, cybercriminals can meet anonymously on the dark web to buy and sell information illegally, too. 

Surface Web, Deep Web, Dark Web

The World Wide Web can be described in different parts: the surface web, deep web and dark web:

Female hands typing.

Surface Web

The surface web is made of up webpages that are indexed by search engines like Google™ or Bing. According to one 2020 estimate, the surface web is over 5,000,000,000 web pages.1

Young man hand with keyboard.

Deep Web

The deep web is made up of webpages that are not readily accessible and have some type of wall preventing just anyone from visiting. This includes everyday things like your email account, your banking websites, your healthcare information portal and many more types of sites that require a step to authenticate you before allowing access, such as a log in or a paywall.  

Commonly cited research estimates that the deep web is 400 to 550 times the size of the surface web.2

Dark web person typing.

Dark Web

The dark web is a set of anonymously hosted websites within the deep web that are accessible through anonymizing software, commonly “TOR” (The Onion Router). Dark web sites include online marketplaces for buying and selling illicit goods, including personal information that can be used for identity theft.  

Policing the dark web

Law enforcement has an eye on dark web marketplaces

Just like there are many online retailers on the surface web, there are a number of dark web marketplaces where buyers and sellers exchange illegal goods.

According to the U.S. Federal Bureau of Investigation (FBI): “Once a criminal organization gets a hold of your name, Social Security number, date of birth, health insurance info, and more—it will likely sell every bit of it on the dark web. Once that happens, the buyer can open credit card or bank accounts, apply for loans, or commit any number of crimes in your name."3

International authorities are always fighting cybercrime, and they do gain victories in shutting down large illicit websites like the ones described below. However, other dark web centers of commerce remain and new ones are created to take advantage of money that can be made on the dark web. It’s a never-ending battle.

AlphaBay and Hansa

In 2017, Europol and the U.S. Department of Justice completed what was, at the time, the largest-ever sting operation against the dark web’s black markets. These authorities seized control of two of the biggest dark web marketplaces and used them to identify thousands of dark web site administrators, sellers and buyers.

After quietly seizing control of the first site, Hansa, they then seized and shut down the largest dark web marketplace at the time, known as Alpha Bay. It’s estimated that AlphaBay generated over a billion dollars in sales of drugs, stolen data and other illegal goods over its three years in operation.

Once the authorities shut down AlphaBay, its users flocked to other dark web marketplaces, including Hansa. This enabled authorities to capture the information on thousands of site administrators, sellers and buyers, and bring to justice many of those trading in illegal goods on the dark web.

Silk Road

The Silk Road was one of the first dark web sites to become a successful anonymous marketplace for unlawful goods and services. It was founded in 2011 shut down in 2013, and its creator was ultimately sentenced to life in prison. Shortly before its shut down, the FBI reported that some of the many types of illegal items for sale on the Silk Road included:

  • Forgeries: Offers to produce fake driver’s licenses, passports, Social Security cards, credit card statements and other forms of false identification
  • Digital goods: Malicious software and hacked accounts at various online services
  • Services: Computer hacking services, including hacking into social networking accounts of the buyer’s choosing
Image woman tablet dowm productshot.

Dark Web Monitoring§

We search the dark web for your personal information and notify you of potential threats.

The dark web is a place where personal information can be bought and sold. Dark Web Monitoring helps shine a light on the dark web, notifying you if your information is found. We can monitor for: Driver’s license number, mother’s maiden name, physical and email addresses, phone numbers, bank account numbers, and credit card numbers.

Dark Web Monitoring§ is available in Norton 360 plans, and Norton 360 with LifeLock plans which have broader, more comprehensive monitoring including Social Security Number and date of birth.

Learn more


Explore Norton 360 
& Norton 360 with LifeLock plans

Frequently asked questions

The dark web is a set of anonymously hosted websites within the deep web that are accessible through anonymizing software, commonly “TOR” (The Onion Router). Dark web sites include online marketplaces for buying and selling illicit goods, and that includes personal information that can be used for identity theft, among other things.

We go beyond easily accessible sites and marketplaces, patrolling private forums, social web, deep web and dark web to detect exposed information and stolen data with our advanced monitoring technology.

Since the dark web is constantly changing, no one can guarantee that they monitor 100% of the dark web and private forums. Dark Web Monitoring goes beyond easily accessible sites and marketplaces, infiltrating private forums, social web, deep web and dark web.

No one can prevent all cybercrime or identity theft.

§ Monitored information varies based on plan. Feature defaults to monitor your email address only and begins immediately. Sign in to your account to enter more information for monitoring.

1 | The size of the World Wide Web (The Internet),”, July 23, 2020.

2 “White Paper: The Deep Web: Surfacing Hidden Value,” Bergman, Michael K., Aug. 2001.;view=text;rgn=main;idno=3336451.0007.104   

3 “FBI Tech Tuesday: Building a Digital Defense Against ID Theft,” Beth Anne Steele, May 15, 2018.    

The Norton and LifeLock Brands are part of NortonLifeLock Inc. LifeLock identity theft protection is not available in all countries.

Copyright © 2022 NortonLifeLock Inc. All rights reserved. NortonLifeLock, the NortonLifeLock Logo, the Checkmark Logo, Norton, LifeLock, and the LockMan Logo are trademarks or registered trademarks of NortonLifeLock Inc. or its affiliates in the United States and other countries. Firefox is a trademark of Mozilla Foundation. Android, Google Chrome, Google Play and the Google Play logo are trademarks of Google, LLC. Mac, iPhone, iPad, Apple and the Apple logo are trademarks of Apple Inc., registered in the U.S. and other countries. App Store is a service mark of Apple Inc. Alexa and all related logos are trademarks of, Inc. or its affiliates. Microsoft and the Window logo are trademarks of Microsoft Corporation in the U.S. and other countries. The Android robot is reproduced or modified from work created and shared by Google and used according to terms described in the Creative Commons 3.0 Attribution License. Other names may be trademarks of their respective owners.