Recommended Free Tools
On June 10, 2021, the U.S. Department of Justice announced that an international operation had disrupted Slilpp by seizing servers and domain names used by the marketplace. DOJ said more than 80 million credentials for over 1,400 account providers were available there. It attributed more than $200 million in U.S. losses to credentials sold through Slilpp, while emphasizing that the figure came from incomplete victim reports and the full impact was unknown.
What was the Slilpp marketplace?
DOJ described Slilpp as an online marketplace that had sold allegedly stolen account credentials since 2012. Listings included usernames and passwords for bank, online payment, mobile phone, retailer and other accounts. Vendors offered the credentials, and customers bought them through the marketplace’s forum and payment mechanism. Buyers allegedly used them for unauthorized transactions, including wire transfers. DOJ’s 2021 announcement summarized the allegations.
How did authorities disrupt Slilpp?
On June 10, 2021, the United States, Germany, the Netherlands and Romania coordinated action against the marketplace. DOJ said the FBI and foreign partners identified servers hosting Slilpp’s infrastructure and domains, which were seized through domestic and international legal processes. The action disrupted the marketplace; the announcement does not describe a complete accounting of every participant or affected account.
At the time of the announcement, U.S. law enforcement had charged or arrested more than a dozen people in connection with Slilpp, according to DOJ. That count reflects the status reported in June 2021, not a final total of cases.
Free tools Windows power users keep installed
One-click scans. No signup required.
#1 Best Overall
How many credentials were offered, and what were the losses?
DOJ reported that more than 80 million credentials covering over 1,400 account providers were available when the marketplace was disrupted. Those figures describe credentials offered through Slilpp, not a count of confirmed victims or accounts successfully accessed.
The department said credentials sold through Slilpp had been used to cause more than $200 million in U.S. losses. That amount was based on limited victim reports: DOJ said only a fraction of affected account providers had calculated their losses, so the full impact was unknown. It is not a final worldwide loss total.
What does a later Slilpp case show?
In a later case, DOJ said Russian citizen Georgiy Kavzharadze, who used the Slilpp handle “TeRorPP,” was sentenced to 40 months for selling stolen financial information. One DOJ announcement reported that his account listed more than 626,100 credentials and sold more than 297,300 from July 2016 through May 2021; the credentials were linked to $1.2 million in fraudulent transactions. These figures describe one vendor’s case, not the marketplace’s overall activity. Read the 2024 sentencing announcement.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What should someone do if they suspect their credentials were stolen?
DOJ encouraged victims of internet crime to report incidents to the FBI’s Internet Crime Complaint Center (IC3). Its Slilpp announcement does not provide a comprehensive account-recovery checklist or establish which specific people were affected. A report to IC3 is a way to alert authorities, not a substitute for contacting the affected account provider about access or transactions.
Quick Recap
Best Value
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
