Fullz

The term 'fullz' (singular 'full') is criminal slang for a comprehensive set of personally identifiable information (PII) about a victim. A standard fullz package typically includes the individual's full name, date of birth, address, national identity or Social Security number, and at least one payment card number with its expiry date and CVV. Premium packages may also contain bank account login credentials, email account access, mother's maiden name, and answers to common security questions.

Fullz are traded on dark-web marketplaces and encrypted forums. Pricing varies with data quality: a fullz with banking credentials commands a higher price than one containing only card details. The data typically originates from data breaches, phishing campaigns, or keyloggers installed via malware.

Criminals use fullz to open fraudulent accounts, apply for credit, file fake tax returns, conduct account takeover attacks, or sell on to other fraudsters. Victims often discover the theft only when credit applications are rejected or unexpected accounts appear on their credit file.