Beginning in September 2021, Abacus Market has established itself as one of the leading dark web marketplaces. Our team searched the dark web and put together a list of the most active dark web marketplaces in order to assist you in monitoring illegal trade of products, cybercrime activity, and dark web trends in the dark web space. To expand their reach, some marketplaces established parallel channels on Telegram. Understanding what happens in these marketplaces is an important part of dark web monitoring.
Darknet Markets Explained
Federal investigators revealed that Binance accounts handled transactions worth more than $250 million for Hydra Market, a Russian darknet platform known to launder proceeds from illegal drugs, child sexual abuse materials, stolen credit cards and other crimes. The resources required to accurately trace crypto transactions make the task more difficult for both the exchanges and law enforcement. ICIJ also found that some of the biggest blockchain analytics firms, which position themselves as industry watchdogs, are hesitant to publicly name mainstream cryptocurrency exchanges in relation to dirty money. The industry claims cryptocurrency is easier to monitor than standard currency because transactions are recorded on a blockchain. ICIJ also found that a Binance-hosted address Treasury has attributed to a money launderer for Mexico’s violent Sinaloa drug cartel received nearly all its funding — more than $700,000 — from accounts at Coinbase, a U.S.-based cryptocurrency exchange.
Industry-Specific Cyber Threat Intelligence Powered By Agentic AI
The decentralized nature of crypto complicates enforcement, prompting governments to develop advanced tracking strategies. Sanctioned nations use cryptocurrencies to evade economic restrictions, conducting cross-border transactions and mining digital assets to generate revenue. Despite raising millions, terrorist groups face challenges as governments enhance blockchain surveillance and impose stricter compliance measures, limiting large-scale crypto financing. In response, governments are enhancing blockchain surveillance and enforcing stricter regulations to combat crypto-enabled cybercrime. Despite advancements in blockchain analytics and regulatory measures, privacy-focused technologies continue to pose challenges for oversight and Anti-Money Laundering (AML) enforcement. Cryptocurrencies have become integral to the dark web economy, enabling illicit transactions and fueling cybercrime activities.
Bitmine Scoops Up Another 28,625 Ethereum ($821M) As Market Bleeds – Details
Vortex is one of those markets that aims to stand out by being user-friendly, secure, and anonymous. As you might guess, it's geared toward the Canadian audience, which makes it somewhat unique within the dark web landscape.It offers over 9,000 listings, ranging from drugs and malware to scam guides and fraud tools. FreshTools has been around since 2019 and has earned its place as one of the most well-known underground markets, even though it doesn’t follow the traditional dark web rules. Everything is conducted within the Tor network, with payments made in Bitcoin or Monero, as is customary.One of its most curious features is its daily raffle system, funded by the market's commissions. Each of these “bots” represents a compromised device, and prices for access range from $3 to $10, depending on the quality and freshness of the data.However, it works by invitation only and is accessed through several mirrors on the Tor network. Despite some occasional service issues, Russian Market remains a favorite among cybercriminals seeking fresh access and financial data.

Police Thought They Beat The Darknet Drug Markets – They Didn’t
- In addition, Sterlingov was ordered to forfeit his interest in the Bitcoin Fog wallet, totaling approximately 1,345 bitcoin and currently valued at more than $103 million.
- Throughout the whole period of observation, the dominant category of buyers is market-U2U buyers followed by market-only buyers, representing on average 52% and 42% of all buyers, respectively.
- For instance, multisellers belong to set of market-only or market-U2U sellers, but not to the set of U2U-only sellers by definition.
- Exchanges are important in the crypto financial system because, like traditional banks, they allow customers to set up accounts, store funds and make payments but unlike bank deposits, crypto funds are not federally insured.
In addition, Jefferies mentioned that street crime is becoming more involved with crypto as well. While new procedures are being implemented to combat crimes related to crypto, new challenges have started to emerge, many of which stem from the short-lived success of Silk Road. It is rumored that Mandelker will help provide Chainalysis with insights on how to properly investigate crypto-related crimes, along with creating partnerships with federal officials. “It took a while to get the program going, but we already have about 30 students in the training program from a university in Monterey, California, that specializes in financial crime management.
Topics And Products Sold
This ecosystem, composed of the dark web marketplaces (DWMs) and the network of user-to-user (U2U) transactions11,12,13, has proven to be sensitive to changes in demand for goods and services and resilient against external shocks5,7,14,15. Then, we investigate both market star-graphs and user-to-user networks, and highlight the importance of a new class of users, namely ‘multihomers’, who operate on multiple marketplaces concurrently. We find that the dominance of markets is reflected in trading properties of buyers and sellers. First, we propose an algorithm that categorizes users either as buyers or sellers, and show that a large fraction of the trading volume is concentrated in a small group of elite market participants. Dark web marketplaces have been a significant outlet for illicit trade, serving millions of users worldwide for over a decade. A June 2016 report from the Global Drug Survey described how the markets are increasing in popularity, despite ongoing law enforcement action and scams.
Amongst the most notable was the first merger and acquisition between two marketplaces on the darknet — whereby the struggling SuperMarket was absorbed by the now-Superlisted DrugHub in an operation that lasted around one month. Onymous (the law enforcement takedown of the Silk Road 2.0 darknet marketplace together with a host of smaller DNMs in 2014) and Op. These platforms allow vendors to reach customers who are less technologically savvy, whilst also mitigating against market turbulence caused by darknet market exit scams or law enforcement takedowns. Authorities are strengthening forensic blockchain analysis and regulatory measures to counter crypto-enabled illicit financing while balancing financial innovation. Their pseudonymous nature enables criminals to exploit blockchain technology for financial crimes, challenging regulators and law enforcement. In sum, the anonymizer sent or received more than $78 million in transactions involving known darknet markets, counting only direct transactions.
Abacus Market Conducts Likely Exit Scam Amid Increasingly Unstable Western Darknet Marketplace Landscape

“Crypto offers criminals a financial system that’s very efficient compared to the old days when a cartel would have to stuff cash into the back of a Cadillac,” Griffin said. OKX said that it has been working with the U.S. government on the matter, sometimes initiating engagement. OKX told ICIJ that it invests heavily in compliance and that it “took proactive steps to restrict relevant accounts” even before the group was labeled a money laundering concern. The company said that crypto technology does not allow it to block deposits into its system. “Users who transact with this service are subject to investigation by our compliance department, and appropriate action will be taken if any potential illicit activities are identified,” the firm said in a statement. “Normally that halts everything,” said Ross Delston, a lawyer and anti-money laundering specialist.
Incognito, like other modern darknet platforms, operated entirely on cryptocurrency—primarily Bitcoin and Monero. In an extraordinary twist, Lin had previously worked for Taiwan’s Ministry of Foreign Affairs, where he trained law enforcement officials on the very blockchain analytics techniques used to take down platforms like his own. In that time, it facilitated more than USD 100 million in drug sales, including hundreds of kilograms of cocaine and methamphetamine, alongside heroin, LSD, MDMA, oxycodone, ketamine, and misbranded prescription drugs. One of the most high-profile targets of Operation RapTor—the largest coordinated global crackdown on darknet drug trafficking to date—was Incognito Market, a dark web narcotics marketplace that operated with remarkable scale, anonymity, and apparent impunity.
Around this time, the new Dread Pirate Roberts abruptly surrendered control of the site and froze its activity, including its escrow system. The market shares of various Silk Road successor sites were described by The Economist in May 2015. Other sites already existed when Silk Road was shut down and The Guardian predicted that these would take over the market that Silk Road previously dominated. The Farmer's Market was a Tor site similar to Silk Road, but which did not use bitcoins. Any changes in the price of bitcoins during transit were covered by Dread Pirate Roberts. Initially there were a limited number of new seller accounts available; new sellers had to purchase an account in an auction.

TRM currently assesses that between 20 and 30 significant drug-focused DNMs are active at any given time—a number that has remained remarkably consistent over the past several years. According to TRM Labs, there are clear on-chain links between Nemesis and Chinese drug precursor manufacturers, with funds sent directly from vendors to Chinese suppliers—demonstrating the nexus between crypto-fueled drug trafficking and global supply chains. More than 55,000 of those orders involved powerful stimulants like methamphetamine and cocaine, while an additional 17,000 involved opioids such as heroin and fentanyl—drugs central to the opioid epidemic devastating U.S. communities. Cointelegraph is committed to providing independent, high-quality journalism across the crypto, blockchain, AI, and fintech industries.
How Did Abacus Market’s Exit Impact The Darknet Ecosystem?

XRP’s market momentum accelerated this week as the cryptocurrency hit a key bullish target identified by a prominent trader, reinforcing… European nations play a significant role in the international darknet drug market, says the report. Drug marketplaces employ ratings and reviews for its sellers. The anonymous nature of dealings on the darknet is also said to be the main factor influencing the quality of drugs. Lately, law enforcement agencies from across the world are trying hard to bring dark net drug dealers to book. The rise of darknet marketplaces is attributed to the increased adoption of digital currencies like Bitcoin.
- Abacus Market, one of the largest remaining darknet drug marketplaces catering to Western users, has suddenly disappeared, triggering widespread speculation of a deliberate exit scam.
- “But as scams on more blockchains including Ethereum, Tron, and Solana have grown, so too has the use of DeFi protocols,” the report noted.
- "The retroactive operational security of bitcoin is low," says Qatar University researcher Husam Al Jawaheri.
- Immediately after a big takedown, users flood to remaining markets or spawn new ones a whack a mole cycle.
- He later pleaded guilty to narcotics conspiracy, money laundering, and conspiracy to sell adulterated and misbranded medications in the Southern District of New York.
On Aug. 18, 2021, Harmon pleaded guilty to conspiracy to commit money laundering. Harmon retained a percentage of these transactions as his commissions and fees for operating Helix. Helix was connected to Grams, a darknet search engine also run by Harmon. Parsarad’s indictment is not just the story of one marketplace’s demise—it is a signal that even in hostile jurisdictions and decentralized systems, there remains a path to accountability. Even in the face of disruption, new models are emerging, including Telegram-based platforms like Si Market and a first-of-its-kind darknet M&A between SuperMarket and DrugHub. These platforms have become deeply embedded in regional drug economies and remain relatively unchallenged since the takedown of Hydra in 2022.

Federal investigators traced Silk Road’s funds on the blockchain, linking them to Ross Ulbricht the Dread Pirate Roberts. Its fall began with a tip to U.S. agents and clever bitcoin tracking. It marketed itself as a black market bazaar and sold everything from marijuana to heroin, plus hacking tools and counterfeit IDs.
Cybercriminals gather on dark web stores to buy and sell illegal goods and stolen data. We developed Lunar to monitor the deep and dark web, including dark web marketplace sites. This is an outcome of the ecosystem’s resilience, largely supported by the migration of users15. This case was investigated as part of an FBI-led interagency Joint Criminal Opioid and Darknet Enforcement (J-CODE) operation. Upon visiting the site via the Tor browser, users were greeted by a graphic interface and prompted to log in with a unique username and password. For all of the money spent by police in these investigations, it’s fair to say that the net result from a user’s perspective is simply the inconvenience of a few searches, followed by registration at a new service.
If someone wants direct access to a server, a cPanel, or an email, this is the place to go.The market is in English and features a massive catalog with over 800,000 illegal products. By 2025, it is already a key player for those involved in the business of data theft and trafficking. It is entirely focused on financial cybercrime and offers much more than just stolen cards or basic logins.Here you will find malware logs, remote access (RDP), brute force accounts, complete identity packages, and access to financial platforms.