STEVE INSKEEP, HOST:
A lot of the email spam that winds up in people's mailboxes promises cheap medicines online. Viagra is among the drugs for sale this way. Many people who receive these emails may wonder who's selling this stuff and if anybody is really buying. Turns out the emails come from partnerships between spammers and rogue online pharmacies.
Tracey Samuelson of NPR's Planet Money Team reports on the dark side of the Internet.
TRACEY SAMUELSON, BYLINE: The inner workings of these industries actually emerged from a feud between two competing black-market pharmacies. In their heyday, they were two of the biggest rogue pharmacies in the world. Then someone hacked their digital files and they ended up in the hands of Brian Krebs, who reports on cyber security for his own site, Krebs on Security.
BRIAN KREBS: We're talking about the contact information, the bank account information, the email addresses, phone numbers, sometimes passport information, for many of the biggest spammers on the planet.
SAMUELSON: Plus the order history and credit card information of over a million customers of these two black market pharmacies, Rx-Promotion and SpamIt.
KREBS: These two programs, Rx-Promotion and SpamIt, probably are responsible for upwards of 50 or 60 percent of the spam that you or I got in our inboxes over the last five years. It's just a ridiculous amount of - of problems that these guys caused.
SAMUELSON: Stefan Savage, a professor of computer science and engineering at U.C. San Diego, also got a look at this data. And he used it to study the business model behind this usually hidden industry. At the center are these international pharmacies, often in places like Russia. But because they're in a shady business, selling prescription drugs without prescriptions, they can't simply run ads on TV. They need some other way to get the word out about their product, their pills. And historically, that's meant spam.
STEFAN SAVAGE: We wouldn't call what they're doing legitimate, it's illegal in this country, but the fundamental practice, is they are trying to advertise this product.
SAMUELSON: The spammer is like an independent contractor, they get paid on commission. And in these leaked documents, you can actually read conversations where an online pharmacy employee tries to recruit a hot new spammer to his team.
Hey. How about spamming for us? The employee asks in instant message. What are the payment conditions, the spammer replies? Well, the employee says, most people get to keep about 30 percent of their sales. But the spammer, he counters that he's really good at his job, that he has the ability to send 500 million spam emails in a single day. Eventually, the spammer and the online pharmacy employee, they agree the spammer will keep 40 percent of his sales.
So that's the advertising piece. But once a customer has chosen their drug of choice, then the pharmacy takes over. They find someone to process the credit card payment. And then, they actually have to get the drugs to the customer.
SAVAGE: They don't actually, typically, warehouse any drugs themselves. So they'll contract with third parties who have access, usually to generic drug manufacturing in India and China.
SAMUELSON: So now one question you might be asking is, are these drugs actually real? A guy named Dave Keck had that question as well when he ordered an acne medication called Accutane from a pharmacy in Latvia.
DAVE KECK: I called Walgreen's and they said it was going to be about $600 for a month's supply of what I researched is what I should take. And on this online pharmacy, I think it was like 40 bucks for same amount. So that was a no-brainer.
SAMUELSON: Keck knew the risk - both of taking a very strong drug without a doctor's supervision and of ordering drugs from abroad - it's technically illegal and he worried it might be a scam. But he decided to give it a go. He watched his credit card like a hawk for extra charges and then a few weeks later, he got a package from Turkey.
KECK: What I got from this pharmacy was in like kind of a binder. And they included one packaging of the actual medicine, but the rest was just kind of taped down to inside of this binder. So it looked pretty suspicious.
SAMUELSON: But the pills were in a sealed blister packs with branding that looked more legitimate. Just in Turkish. So Keck wondered whether the pills were real medicine or not. He figured no one would go through all this effort to just poison him.
KECK: No. I was thinking poison was going to be more expensive. These people probably just want to make money. So it's going to be a sugar pill or the real deal. And after I'd taken if for about a week, I was 100 percent sure that it was the real deal, just based on the side effects.
SAMUELSON: His skin dried up, his lips got really chapped, and his acne went away. So a lot of people who order from these pharmacies are ordering erectile dysfunction drugs like Viagra, but Stefan Savage, the researcher, says up to 15 percent of orders come from customers like Keck - people who turn to these sites to treat everyday health problems, likely because they can't afford legal avenues to buy their medications. And according to Savage, people seem to mostly get what they pay for.
SAVAGE: I'll say, over 800 orders, we've maybe only had one time when we didn't get something. For legal reasons, we can't buy every drug and we're not equipped to test everything. I will say the drugs that we have tested, the right active ingredient has appeared in the right amounts.
SAMUELSON: Not all online pharmacies operate in the black market, but the Food and Drug Administration says Americans should only order from sites that are licensed and located in the U.S. Otherwise, there might not be proper oversight. And if these drugs wind up making you sicker in the long run, it's actually not such a bargain.
Tracey Samuelson, NPR News.
(SOUNDBITE OF MUSIC)
INSKEEP: It's MORNING EDITION from NPR News.