Anatomy of a Spam Viagra Purchase
A sample of spam transactions finds most pass through just three banks, study finds. — What happens if you buy something advertised on a spam email? This graphic shows the flow of Internet traffic and money following a purchase of Viagra from a spam email.
Context & Ripple Effects
This study closes a loop that researchers have been circling since 2008, when they hijacked the Storm Worm botnet itself to measure how much spam actually earns, and followed a 2009 survey showing 12% of e-mail users had tried buying something from spam. Those efforts established demand and revenue; what was missing was the plumbing between buyer and seller.
By tracing real Viagra purchases end to end, the study moves the analysis from the inbox to the payment system — and lands on a striking concentration: most spam transactions route through just three banks. That reframes spam as less a distributed problem than a payments problem with a short list of gatekeepers.
First-order effects
- The three acquiring banks handling most spam payments now face direct pressure from card networks and law enforcement, since cutting off those accounts would sever the revenue path for the affiliate programs behind pharmaceutical spam.
- Spam operations selling Viagra-style goods lose their assumption of anonymous, replaceable payment rails — every purchase traced adds reputational and compliance risk to specific institutions rather than an amorphous botnet.
Second-order effects
- Payment processors and acquiring banks are pushed toward stricter merchant vetting for high-risk categories like pharmaceuticals, raising transaction costs and account-churn for legitimate gray-market sellers in the same verticals.
- Anti-spam economics shift: if filtering the inbox is expensive and imperfect, pressuring three banks becomes a cheaper lever, drawing security vendors and researchers toward payment-flow forensics as a product and research area.
Third-order effects
- If the pattern holds, spam enforcement migrates upstream from content filters to the financial system, making bank due diligence on high-risk merchants a structural control point for the entire spam economy.
- The affiliate-model behind pharmaceutical spam depends on rapid re-registration when one processor drops it, so sustained bank-level action would force the ecosystem toward more fragmented or offshore payment structures — an arms race at the money layer rather than the message layer.
The trend: Anti-spam strategy is shifting from filtering messages at the inbox to disrupting the payment chokepoints through which spam revenue flows.