FairMoney Dataset Claim Covers ~335,505 User Accounts
A forum actor posting as GoreTerminal has released what they claim is a filtered dataset belonging to FairMoney, a licensed digital bank in Nigeria that provides personal loans and mobile financial services. The actor states that the original dataset contained around 7 million users, but that the released file was filtered to records containing phone numbers and email addresses. The forum listing advertises approximately 335,505 user accounts, including 330,000+ phone numbers and 143,000+ email addresses, together with names, gender, location fields, customer and agent identifiers, device IMEI values, bank names, transaction references, transaction metadata and account or agent status fields. The dataset is offered as a free download. The claim is unverified.
▣Post details
!What the post claims
- Approximately 335,505 user accounts
- 330,000+ phone numbers
- 143,000+ email addresses
- Names and gender
- Customer names, IDs and mobile numbers
- User IDs
- Device IMEI values
- Bank names
- LGA and state information
- Agent usernames
- Recruiter and sponsor IDs
- Agent IDs and transaction IDs
- Offline transaction IDs
- Transaction references and narration
- Account type and status fields
- Agent type and status fields
- Original source allegedly held around 7M users
- Released file filtered for records with phones and emails
- Dataset distributed as a free download
◱Screenshots
☷Mapped techniques
The actor does not describe how FairMoney was accessed or how the data was extracted. The technique below is inferred from the structured records shown in the listing, not stated by the actor.
- Collection T1213 Data from Information Repositories Inferred The released material is described as a structured JSONL dataset containing customer, agent, device and transaction-related fields, which is consistent with collection from an internal information repository or application database.
⚠Potential impact
If authentic, the combination of names, phone numbers, email addresses, location data, customer identifiers, device IMEI values and financial transaction metadata could support highly targeted phishing, account impersonation, SIM-swap attempts and other forms of social engineering. Transaction references, bank names and account or agent metadata may also help attackers build convincing fraud narratives around legitimate financial activity. Because the dataset is being offered as a free download, the potential exposure is not limited to a single buyer and could spread rapidly across multiple criminal communities.
iStatus Unverified
The forum post includes a detailed field list, sample records, file sizes and a claimed breach timestamp. The actor states that a much larger source containing around 7 million users was filtered down to records containing phone numbers and email addresses, while the thread title advertises approximately 335,505 accounts. Dark Web Informer has not independently verified the authenticity of the dataset, the claimed source population or the stated breach date. No intrusion method is described in the post.
Dark Web Informer // Threat Intelligence
