An FBI tip-off has led to the arrest of a northern beaches IT worker who allegedly made $300,000 selling stolen log-in details for streaming services including Netflix and Spotify.

Australian Federal Police say Evan McMahon, 21, scoured the corners of the Dark Web for log-in details previously leaked by other hackers, then made hundreds of thousands of dollars by selling the details in a practice known as "credential stuffing".

Evan Leslie McMahon has been charged with multiple cybercrime offences. Credit:Linkedin

The account details were sold on the Dark Web through a site called WickedGen, allowing purchasers to use others' Spotify, Netflix or Hulu accounts for $2 per month - less than a quarter of the price charged by the companies.

Prior to the website's closure, it boasted over 120,000 users and almost one million sets of account details from services.