Six Digits of Status: The ICQ Number Black Market That Made Sneaker Resellers Look Like Amateurs

Somewhere around 1998, a teenager on EFnet explained to his friend, with complete sincerity, that his ICQ number was better than his friend's ICQ number. Not because it did anything different. Not because it unlocked features or granted access to secret content. Simply because it was shorter. The friend understood immediately. This was the world ICQ built, and it was glorious and stupid in equal measure.

ICQ — the name was a pun on "I Seek You," which felt incredibly clever in 1996 and has only aged slightly worse than a Geocities guestbook — launched in November of that year, created by an Israeli company called Mirabilis. The concept was simple: real-time messaging over the internet, with a contact list, presence indicators, and that sound. You know the sound. The "uh-oh" notification that became the Pavlovian trigger for an entire generation. Your pulse literally changed when you heard it. Don't pretend otherwise.

Every user got a UIN — a Universal Identification Number — assigned sequentially. The earlier you signed up, the lower your number. And lower, in the economy of ICQ status, meant better.

The Hierarchy Was Immediate and Merciless

By the time ICQ hit its peak in the late 1990s, the UIN caste system was fully established. Nine-digit numbers were for normies, for people who'd discovered ICQ because their cousin mentioned it, for the unwashed masses who probably also had Hotmail accounts with numbers in the username. Eight digits were fine. Seven digits suggested you'd been around. Six digits meant you were there early, you were plugged in, you were someone.

Five digits and below? Those numbers were mythological. They belonged to Mirabilis employees, early testers, and a small population of people who had somehow been in exactly the right place at exactly the right time in 1996. Finding a five-digit ICQ number in the wild was like finding a first-edition anything. People would stop conversations to ask about it. "Wait, is that actually a five-digit UIN?" Yes. Yes it is. Try to keep it together.

The number wasn't just a number. It was a timestamp. It was proof of presence at the beginning of something. In a medium where everyone was new and nobody had credentials, a low ICQ UIN was one of the few ways to demonstrate that you had been online before it was a thing everyone did. It was the digital equivalent of having attended a band's first show before they got famous, except you could display it in every conversation you ever had.

The IRC Channels That Ran the Theft Economy

Where there is status, there is a black market. The IRC underground had been trading and stealing digital assets since before most ICQ users had heard of IRC, and low-digit UINs were simply the next commodity.

Channels on EFnet and DALnet — the usual suspects — ran what amounted to full clearinghouses for stolen ICQ accounts. The operation was straightforward in concept if not in execution: find an account with a desirable UIN, gain access to it through some combination of social engineering, password guessing, phishing, or exploiting ICQ's notoriously porous account recovery system, then either use it yourself or trade it.

The trading economy had its own pricing structure. A six-digit UIN in good standing — meaning the original owner hadn't raised a support ticket yet — might trade for warez, for shell access, for other ICQ accounts in bulk, or occasionally for actual money. Five-digit numbers, when they appeared, caused genuine excitement. The channels would briefly resemble a trading floor, with people making offers in rapid succession while whoever held the account played them against each other.

Mirabilis's account recovery system was, charitably, not built with adversarial conditions in mind. For a significant stretch of ICQ's history, recovering an account required information that was either publicly visible in the user's profile or easily guessable — email addresses, birth dates, screen names that matched their IRC handles. The IRC community, which had spent years developing social engineering skills for exactly this kind of situation, found the whole thing almost insultingly easy.

The AOL Acquisition and the Great Sellout Discourse

In June 1998, AOL acquired Mirabilis for somewhere between $287 million and $407 million depending on which report you read, in a deal that was one of the first major tech acquisitions that the internet community actually cared about and argued about at length. The reaction in IRC channels was immediate and almost uniformly negative, with the intensity that only early internet communities could muster when they felt something they'd claimed as their own had been handed to a corporation.

AOL was, in the cultural vocabulary of 1998 IRC, the enemy. AOL was what happened when normal people got online. AOL was September that never ended — a reference to the Usenet tradition of every September bringing a new wave of clueless college freshmen, which AOL had turned into a permanent condition by giving millions of non-technical Americans their first internet connection via those ubiquitous CD-ROMs. ICQ being absorbed by AOL felt like your favorite underground band signing to a major label and immediately releasing a Christmas album.

The concern, voiced loudly across every relevant IRC channel, was that AOL would ruin ICQ by merging it with AIM, or by making it worse, or simply by associating it with AOL, which was considered ruination enough. These concerns were not entirely wrong, though the actual death of ICQ was slower and stranger than anyone predicted.

The Clone Scene and the Eastern European Holdouts

As AIM and then MSN Messenger started pulling Western users away from ICQ through the early 2000s, something interesting happened in Eastern Europe: ICQ didn't die there. It grew. Russia, Ukraine, and several neighboring countries developed massive ICQ user bases that persisted long after American and Western European users had moved on to other platforms. At its peak, ICQ was the dominant messaging platform across much of the former Soviet Union in a way it never quite achieved in the US.

This created a parallel universe of ICQ development. Third-party clients proliferated — QIP, Miranda IM, and a dozen others that offered features the official client lacked, because the official client by that point was being managed by AOL with the enthusiasm of someone maintaining a property they'd forgotten they owned. The clone and third-party ecosystem kept the protocol alive through sheer enthusiasm, the same way the open-source community kept other abandoned platforms breathing through determined refusal to let go.

The UIN black market had a second life in this ecosystem. Eastern European forums ran their own trading operations, and the cultural weight of a low-digit number translated perfectly across language barriers. Status is universal. The flex requires no translation.

The Uh-Oh That Never Came Back

ICQ still technically exists, which is one of the stranger facts about internet history. Mail.ru Group acquired it from AOL in 2010, and it has continued to operate in some form ever since, primarily for its Russian user base. The UIN system still functions. Your old number, if you remember it, is probably still registered to you or to whoever stole it from you sometime around 2001.

The sound, though — that "uh-oh" — is the thing people remember. More than the number status, more than the black market, more than the AOL drama, what ICQ gave a generation was a specific audio cue that meant someone wanted to talk to you, right now, across whatever distance separated you. Before smartphones made constant connectivity mundane, that sound was remarkable. Someone, somewhere, had sought you out.

The UIN arms race was silly. The theft economy was genuinely kind of bad. The status hierarchy it created was the sort of thing that only makes sense inside a specific cultural bubble. But it was also the first time a lot of people understood that your identity online could be a thing worth having, worth protecting, and apparently worth stealing. Everything that came after — verified accounts, follower counts, social media clout — is just a higher-resolution version of the same basic insight that a shorter number was worth more than a longer one, and someone was always willing to take yours if you weren't careful.