People’s identities are being sold on the dark web for just £30