Based on our assessment, C2C transactions remain one of the top ways of moving illicit funds. Meanwhile, the top shop on RuTor is Chemical-Mix, which like the larger forum, can be accessed on the clear web. Here is a posting from the 6th ranked vendor on RuTor, ‘Crystal-Mafia’ that shows what the drug looks like. Take for example, drug seller ‘Candy Shop’ and money laundering service provider ‘bitcoin bank’. Many Hydra vendors have also migrated to RuTor, particularly in the immediate aftermath of the forum’s seizure. Beyond Russia, RuTor services the CIS countries of Azerbaijan, Armenia, Belarus, Georgia, Kazakhstan, Kyrgyzstan, Moldova, Tajikistan, Turkmenistan, and much of Uzbekistan.

Dark Web Drug Trafficking
One of the most common is the exit scam, where a marketplace suddenly disappears and takes everyone’s money with it. It’s been a constant back-and-forth between cybercriminals and law enforcement, with each new site trying to be smarter and more secure than the last. Some were taken down by law enforcement, others just vanished overnight with users’ money. It was the first big site where people could anonymously buy drugs using Bitcoin, and it gained a lot of attention, until it was shut down by the FBI in 2013.
Risk Of Being Monitored By Authorities

After AlphaBay closed, Abacus Market took its place as the world’s largest underground darknet marketplaces. Cybercriminals gather on dark web stores to buy and sell illegal goods and stolen data. Based on our observations from analysis on dark web data using Lunar, we’ve identified the top 7 marketplaces on the dark web in 2025. Its fall disrupted a huge part of the global drug trade, showing that even sprawling, language specific markets can be dismantled. For instance, Hansa’s police run honeypot netted thousands of user identities, and dream markets collapse still provokes sting operations. It specialized in narcotics fentanyl, heroin, cocaine, stolen financial data, fake documents, and even in house money laundering/mixing services.
Simultaneously, Dutch police quietly took over Hansa Market, a Tor site popular in Europe in June 2017. In July 2017 a global law enforcement coalition Operation Bayonet struck. After Silk Road’s fall, AlphaBay rose in late 2014 as the largest dark web market ever. By late 2013 it had 13,000 drug listings and was used by thousands of dealers and over 100,000 buyers. It marketed itself as a black market bazaar and sold everything from marijuana to heroin, plus hacking tools and counterfeit IDs. In practice, authorities combine blockchain forensics, metadata analysis and international raids to dismantle these sites.
Unlike many other dark web markets, Cypher does not require buyers to deposit cryptocurrency upfront, which reduces the risk of exit scams. The marketplace requires merchants to pay fees to sell their products, helping ensure a certain level of quality control. Mega Market is known for its user-friendly interface and high security, including support for PGP encryption and two-factor authentication. The market is also known for its listings related to financial fraud, such as phishing tools and stolen credit card information.
Chinese Cyberspies Snoop On Russian IT Biz In Rare East-on-east Attack
Until it shut down in March 2024, Incognito Market sold more than $100 million of narcotics—including hundreds of kilograms of cocaine and methamphetamine. According to court documents and statements made in court, Incognito Market was an online narcotics bazaar that started on the dark web in October 2020. The impact of Operation RapTor can be attributed to the tireless work of U.S. and international law enforcement partners.

Drugs Arrive By Mail, 'very Discreetly'
Instead, they must gain access to multiple, hyper-secure markets and then regularly monitor this wide array of smaller, highly localized platforms. As major players tear each other apart, new, niche markets are carving out their own territories, often with a sharp focus on specific categories of illicit goods. Many of these big markets are now engaged in cyber warfare, with vendors and operators attacking each other to assert dominance, often leading to disruptions and shutdowns.
The Top 3 Sources For Drug Trafficking On The Dark And Deep Web
No matter where criminals hide, we will find them, dismantle their operations, and bring them to justice. “Working through the JCODE initiative, IRS Criminal Investigation and our international partners led the largest and most impactful takedown to date — seizing over $200 million in assets, removing deadly drugs and weapons from circulation, and holding more than 270 individuals accountable. These actions provided investigators across the globe with invaluable leads and evidence, strengthening the ongoing fight against cybercrime and illicit activities on the darknet. In addition, the United States and international law enforcement partners made 270 arrests of dark web vendors, buyers, and administrators in Austria, Brazil, France, Germany, Netherlands, South Korea, Spain, Switzerland, United Kingdom, and the United States. "The war on drugs is a complete failure, a bottomless money pit." "Waste your resources on seizing petty websites because they know the use of darknet services is ever growing," another user wrote.
A Synthetic Age: The Evolution Of Methamphetamine Markets In Eastern And Southern Africa

Illicit drug markets have evolved with IT, moving digital to the “darknet.” Previous research has analyzed darknet market listings and customer reviews. Studying illicit drug circulation and its effects on population health is complicated due to the criminalization of trade and consumption. "Highly anonymized, elusive, and unregulated, the Dark Web is an ideal landscape for vendors selling illicit substances. The substances, in addition to the markets themselves, that are available on the Dark Web at any given time are difficult to predict. To offer insight into and characterize Dark Web markets, we conducted a study of the substances available on the Dark Web, both historically—between 2012 and 2019—and at present, between 2022 and 2023. Therefore, the present study offers, to our knowledge, a first snapshot in time of the categorical and chronological distribution and availability of various illicit psychoactive substances on Dark Web cryptomarkets. “With this takedown, law enforcement has taken out one of the dark web’s longest-running drug markets, cutting off a major supply line for some of the world’s most dangerous substances.
Our research database contains geospatial data, which allows us to analyze separate cities, towns, or even villages in the Russian Federation if such a question is raised or funding is found. Another future direction can be cluster analysis, using our research database, whereby people's incomes, group regions, and correlations are seen inside these clusters. We are encouraging future researchers to use our cascade of methods for sharpening and improving existing official and published data on every level. The open-source nature of all analytical instruments (Python, R, PHP hypertext preprocessor, a scripting language) allows further research to repeat or continue our study on other darknet platforms to investigate other regional specifics.

Incognito Market sold illegal narcotics and misbranded prescription medication, including, heroin, cocaine, LSD, MDMA, oxycodone, methamphetamines, ketamine, and alprazolam. The FBI is committed to targeting and dismantling all criminal enterprises, especially those whose leaders distribute illegal substances on the dark web.” “For nearly four years, Rui-Siang Lin allegedly operated ‘Incognito Market,’ one of the largest online platforms for narcotics sales, conducting $100 million in illicit narcotics transactions and reaped millions of dollars in personal profits,” said Assistant Director in Charge James Smith of the FBI New York Field Office. “The dedicated prosecutors from the Southern District of New York and our law enforcement partners will pursue criminal actors regardless of whether they operate on street corners or in the dark corners of the internet. “As alleged, Rui-Siang Lin was the architect of Incognito, a $100 million dark web scheme to traffic deadly drugs to the United States and around the world. Europol said police operations took place last week across Germany, the Netherlands, Romania, Spain and Sweden to dismantle the dark web Archetyp Market.
- The dark web, on the other hand, is a small part of the deep web that requires special tools like the Tor browser to access.
- The market owners set up a phishing website to get the attacker's password, and subsequently revealed collaboration between the attacker and the administrator of Mr Nice Guy's market who was also planning to scam his users.
- Abacus Market appeared on the scene in 2021 and quickly became one of the heavyweights among English-speaking markets on the dark web.
- The first category includes classic marketplaces, which serve as one-stop shops for a wide range of illegal goods.
- Buying directly from an online dealer—as opposed to through one of the marketplaces—is generally inadvisable.
- And Grace A. Dow College of Health Professions provided academic and financial support, including publication and travel fees.
Missing The Wider Landscape Of Digital Harms
On Apr 5, 2022, German police with US help seized Hydra’s servers and crypto wallets. Its admins announced the shutdown as authorities FBI, Europol, others were exposing dozens of its vendors in a sting Operation SaboTor. Around the same time, Dutch police had secretly taken over Hansa Market, then shut it down publicly on July 19, 2017.
- Whilst a great many products are sold, drugs dominate the numbers of listings, with the drugs including cannabis, MDMA, modafinil, LSD, cocaine, and designer drugs.
- Abacus Market is one of the newer darknet marketplaces that quickly filled the gap left by AlphaBay's takedown.
- The Republic of Karelia and the Chukotka have higher drug use rates than other regions of similar populations.
- The durability of these markets tells us that if policing responses keep following the same playbook, they will keep getting the same results.
- The dark web is a portion of the Internet that is inaccessible to normal search engines.
Archetyp was Europe’s longest running and bloodiest market in the 2020s. Experts expect the vacuum to be filled by smaller rings, but warned that Hydra’s end proves no market, however entrenched, is untouchable. Millions in crypto were recovered, and top Russian vendors and buyers were exposed to investigators. On April 5, 2022, German federal police BKA and U.S. partners struck.