Dark-Web Listings Offer Tax-Fraud Products and Tutorials, DarkOwl Reports

Summary
DarkOwl highlights 2023 listings offering tax-fraud products, personal information and tutorials across Telegram and dark-web forums. One tutorial download link could also be intended to deliver malware, the article says.
Key points
- DarkOwl analysts found recent tax-fraud listings on Telegram, Nemesis Market, CryptBB and XSS.
- A Telegram advertisement directed users to a channel allegedly selling W-2 forms and other personal information.
- A Nemesis Market vendor offered a 2023 tax-fraud product containing information for filing fraudulent returns, priced at $69.
- Listings included Australian tax-return fraud tutorials and a 2023–2024 tax-refund tutorial.
- The article says a tutorial download link could have been intended to install malware, but does not confirm that it did.
Article Details
- Event Type
- Darknet and deep-web listings advertising tax-fraud products and tutorials
- Impact
- Listings reportedly offered tax-return materials and personal information—including Social Security Numbers, driver’s-license information, past tax returns, and W-2 forms—to facilitate fraudulent tax filings and digital identity theft. A CryptBB tutorial’s download link could potentially be used to install malware, but the article presents this only as a possibility.
Products
CryptBBPosted on March 25, 2023 – This listing for Australian tax return fraud tutorials was posted on the authenticated hacking forum, CryptBB.Nemesis MarketPosted on March 16, 2023 – Nemesis Market is a dark web onion site that requires authentication to gain access.TelegramRead on to see examples of the various forms of tax fraud being proliferated on the the darknet, deep web, and adjacent platforms such as Telegram.XSSPosted on March 7, 2023 – This posting on the deep web site XSS is for a 2023 – 2024 “Tax Refund Method Tutorial.” Certain sections of the forum requirement payment via escrow services in order to receive full access.
