BidenCash [offline]
Active Since
February 2022
Dark Web or Clear Web
Dark web and clear web
BidenCash specializes in payment card data, commonly differentiated in cybercrime circles as either CVVs (the data needed to make fraudulent e-commerce purchases), dumps (the raw magnetic strip data needed to manufacture fake or “cloned” cards), or fullz, sourced from a number of “bases” (databases).
BidenCash listings vary in level of completeness, with most including the card’s BIN, security code, expiry date, and type (e.g. Visa or Mastercard, credit or debit). Some also include associated PII such as the DOB, SSN, phone number, email and physical address of the victim. BidenCash has released several free bases on underground forums as promotional material.
In spite of the use of his name and image, it is highly unlikely to be associated with the president of the United States. In fact, it is probably a reference to Trump’s Dumps, a predecessor that used former President Donald Trump’s likeness and was estimated to have made about $4.1 million before being seized by Russian authorities in February 2022. BidenCash was launched later that month.
update june 4 2025
BidenCash was seized by the U.S. Government in a coordinated law enforcement operation that included the U.S. Secret Service’s Cyber Investigative Section, the U.S. Secret Service’s Frankfurt Resident Office, and the FBI Albuquerque Field Office. Searchlight Cyber provided technical capabilities to support the operation.
The operation involved the seizure of 145 dark web and traditional internet domains, and cryptocurrency funds associated with the marketplace. According to the U.S. Department of Justice, the BidenCash marketplace domains are no longer operational and will redirect to a U.S. law enforcement-controlled server, preventing future criminal activity on these sites.
As part of its statement, the DoJ also released figures on the activity of the marketplace. According to their press release, the BidenCash marketplace had more than 117,000 customers and facilitated the trafficking of more than 15 million payment card numbers and personally identifiable information, generating more than $17 million in revenue during its operations.