An offense involving exploitation of a person through prohibited means such as coercion, force, or fraud as defined by law. It requires proof of exploitative purpose and the prohibited means and conduct specified in the offense elements. It does not include conduct lacking the required exploitation purpose or the legally required prohibited means. It targets systematic exploitation and supports severe sanctions and asset-based remedies. The concept is generally stable, though definitions and enforcement tools are updated over time.

Principle

Criminality is structured around commercialization and distribution: the act becomes trafficking when authentication secrets are treated as transferable commodities and monetized or systematically distributed to facilitate unauthorized access.

Demonstration

A marketplace advertises validated email/password pairs and sells them to buyers who use the credentials to access streaming accounts or to execute financial fraud; an actor runs a subscription service that supplies cracked passwords to subscribers.

Misapplication

Labeling informal password sharing within a family or between colleagues as trafficking, or treating a one-off offer of a password as an organized trafficking enterprise where no commerce or systematic distribution exists.

Consequence

Successful prosecution can disrupt illicit marketplaces, lead to seizure of proceeds and infrastructure, impose criminal penalties on sellers and buyers, and reduce vectors for account takeovers and downstream fraud.

Reversal

Legitimate password management services that store and share passwords under explicit consent and security protocols are not trafficking; law enforcement possession of passwords under warrant is lawful and not criminal trafficking.

Boundary

Covers commercialized, organized, or repeated transfer of passwords intended for unauthorized use; excludes private consensual sharing, corporate credential delegation governed by policy, and disclosure of non-authenticating personal information.

Semantic Tension

Tension arises with market terms like 'credential stuffing' and 'data breach sales': trafficking emphasizes the commerce and distribution mechanism, while credential stuffing emphasizes the automated reuse of harvested credentials for attacks.

Synthesis

Password trafficking is the marketization of authentication secrets: when passwords are commodified and distributed for profit or systematic misuse, the conduct becomes a trafficking offense because it creates and perpetuates access-based harms.