Stolen UK payment cards are being sold on the dark web for an average of £6.27 - less than the cost of a pint.