Incognito Market was available globally to anyone with internet access using the Tor web browser on the “dark web” or “darknet.” Incognito Market was designed to facilitate seamless narcotics transactions, incorporating many features of legitimate e-commerce sites such as branding, advertising, and customer service. According to court documents and statements made in court, Incognito Market was an online narcotics bazaar that started on the dark web in October 2020. The impact of Operation RapTor can be attributed to the tireless work of U.S. and international law enforcement partners. “We will continue to monitor, investigate and bring to justice those who misuse the internet in a quest for profits with reckless disregard for the risk to public health and safety.” “No matter where criminals hide, we will find them, dismantle their operations, and bring them to justice.
The expanding use of cryptocurrencies by terrorist organizations and state-sponsored actors illustrates the dual-edged nature of technological innovations — providing both opportunity and risk. This adaptability underscores the need for constant evolution in enforcement strategies and international cooperation. A key theme throughout the year has been the resilience and adaptability of illicit networks. This shift stems from the demonstrated efficacy of blockchain analysis in tracing illicit transactions and aiding investigations. TRM has observed that these manufacturers have adapted their practices in response to intensified law enforcement efforts.
A Brief History Of DNMs
Privacy-focused operators are shifting to Monero due to its default anonymity, compared to Bitcoin’s transparent ledger Darknet markets see BTC inflow drop to $2B. Abacus Market was launched in 2021 and now lists over 40,000 illicit goods, including hacking tools, counterfeit documents, and listings for drugs. It is one of the most active and up to date markets and always provides new and updated malware and data. Freshtools is a unique marketplace in that it does not only provide the stolen data, but it allows criminals to purchase MaaS which can cause further damage to the victims. Its commitment to privacy, diverse product offerings, and robust security measures make it a preferred choice for users seeking discreet transactions within the darknet.
Santa Monica Orders Waymo To Stop Noisy Overnight Operations At Charging Stations Neighbors Rejoice
The seizures brought in lots of traffic to other markets making TradeRoute and Dream Market the most popular markets at the time. Later that month, the long-lived Outlaw market closed down citing a major bitcoin cryptocurrency wallet theft; however, speculation remained that it was an exit scam. On April 28, investigations into the Italian Darknet Community (IDC) forum-based marketplace led to a number of key arrests.
Data Parsing And Categorizing
In addition, the United States and international law enforcement partners made 270 arrests of dark web vendors, buyers, and administrators in Austria, Brazil, France, Germany, Netherlands, South Korea, Spain, Switzerland, United Kingdom, and the United States. The arrest of Telegram’s founder, Pavel Durov, in August 2024 triggered a notable shift in the operational dynamics of the platform's drug vendors. TRM Labs is the only blockchain intelligence provider with a specialist category unique to individual drug vendors — and this year, we saw incoming volumes sent to illicit vendor shops more than double. This incident also marked the never-before-seen attempt of its administrator, Pharoah (arrested in May 2024 and revealed to be 23 year-old Taiwanese national Rui-Siang Lin), to extort the marketplace’s users. Cryptocurrency-enabled online sales of illicit drugs saw a year-on-year growth of over 19% between 2023 and 2024, nearing USD 2.4 billion. In August 2015 it was announced that Interpol now offers a dedicated Dark Web training program featuring technical information on Tor and cybersecurity and simulated darknet market takedowns.
Russian Language Darknet Marketplaces Continue To Drive Overall Volume Of Illicit Drug Sales
But with blockchain intelligence advancing and global partnerships strengthening, law enforcement is better positioned than ever to detect, disrupt, and dismantle these operations. Just as Incognito built on the playbook of its predecessors, future markets will learn from RapTor. TRM has identified structured withdrawals from the market to personal wallets and then to services with less stringent KYC. Operational security has increased, with mandatory PGP encryption, two-factor authentication, and more frequent use of VPNs and anonymization tools. With the right partnerships, tools, and pressure at key chokepoints—such as when crypto is converted into fiat—law enforcement can still follow the money, identify key actors, and dismantle networks once thought untouchable. All transactions were conducted in cryptocurrency—primarily Bitcoin and Monero—allowing customers and vendors to move funds without using traditional financial rails.
Abacus Market: Facilitating Illicit Drug Trade
In October 2013, Project Black Flag closed and stole their users' bitcoins in the panic shortly after Silk Road's shut down. The shutdown was described by news site DeepDotWeb as "the best advertising the dark net markets could have hoped for" following the proliferation of competing sites this caused, and The Guardian predicted others would take over the market that Silk Road previously dominated. The first marketplace to use both Tor and Bitcoin escrow was Silk Road, founded by Ross Ulbricht under pseudonym "Dread Pirate Roberts" in February 2011. It has been considered a "proto-Silk Road" but the use of payment services such as PayPal and Western Union allowed law enforcement to trace payments and it was subsequently shut down by the FBI in 2012. In 2012, it was closed and several operators and users were arrested as a result of Operation Adam Bomb, a two-year investigation led by the U.S.
Having possession of the two private keys, PGP Key and Bitcoin Key would easily prove to the feds that the arrested (if arrested) is the vendor on the site. Some platforms even provide self-destructing messages, adding an extra layer of security. This is because suppose you get caught by the cops and they take your computer and open it and they can just see that you’re logged in as a vendor on the site.
Dark web search engines have become essential for enterprise security teams that need early … …More about Dark Web Search Engines in 2025 – Enterprise Monitoring, APIs and IOC Hunting They used “free data dumps” and emotional marketing to build trust before vanishing—an enduring lesson in the risks of social engineering. BidenCash and other exit-scam markets such as Torzon and Kingdom Market collapsed between 2022 and 2024.
How To Host Hidden Services On TOR Using Whonix?
It supported 5,400 vendors and about 1.15 million customers worldwide. Unlike overt seizures, Dream’s shutdown was an exit by administrators, a pattern sometimes seen when market owners bail out. This announcement coincided with Operation SaboTor, a multinational effort targeting opioid vendors. Launched in 2013, Dream Market was a top tier marketplace especially after AlphaBay’s fall.
- On March 20, 2024, U.S., German, and Lithuanian law enforcement agencies seized Nemesis’ servers in a joint operation.
- Experts expect the vacuum to be filled by smaller rings, but warned that Hydra’s end proves no market, however entrenched, is untouchable.
- My advice is not to select reputable dark web vendors and stick to novices instead.
- The vendors could never run a darknet marketplace because it would stress them out and have negative effects on their health.
The story of dark web marketplaces kicks off with Silk Road, launched in 2011. Users can browse and purchase various illicit items, making these marketplaces a hub for unlawful activity. The first category includes classic marketplaces, which serve as one-stop shops for a wide range of illegal goods. Despite growing crackdowns from law enforcement agencies, the dark web remains a hotbed of criminal activity, offering everything from drugs to stolen data.
The data were compiled into a table consisting of 85 rows representing the regions and 22 columns representing the adjusted sums of drugs in grams per region at a single time point. Within each data extract, we calculated the total sum of grams for all drugs and each category of interest (opiates, cannabis, and all drugs excluding cannabis) per region. The mandatory barring of leaving houses for people during the COVID-19 disaster limited the supply of drugs in Russia.
Cybersecurity researchers have uncovered a dangerous tool causing a stir on the dark web and within It helps us stay more vigilant, better protect ourselves, and make informed decisions online. It blends illegal trade with extra features like gambling, all while maintaining a clear and accessible structure. WeTheNorth, or simply WTN, was launched in 2021, and its name is a nod to the famous Toronto Raptors slogan. Additionally, it offers automatic purchases, buyer protection, and even a loyalty points program.Since its launch, it has conducted several massive data leaks. And it worked.This market focuses on stolen credit cards, personal identifiable information (PII), and SSH access credentials.
By maintaining anonymity, vendors safeguard their profits and avoid legal consequences. Darknet vendors use encryption tools and virtual private networks (VPNs)to protect their identities and communications. Darknet vendors primarily rely on cryptocurrencies like Bitcoin and Monero (XMR) for transactions. This helps the vendors or the newbies to remain the best manufacturer and seller. And the vendors have to hold back till the BTC value goes back to at least 20%. Moving on to making money on the darkweb by selling drugs, not a lot can be made initially.
What Are The Scams Done By Some Vendors On The Darknet Markets
And, perhaps the most aggressive marketing stunt the darknet market ecosystem has seen yet, in December of that year, Kraken Market wrapped a bus in an advertisement that included a QR code for the market’s website. The chart above shows that, while values haven’t risen back to 2021 levels, darknet market revenue has slightly rebounded since Hydra’s closure in 2022. The ensuing war for darknet market dominance that began in 2022 continued into 2023, but no other market has since matched Hydra’s financial success. Darknet marketplaces in 2025 illustrate a resilient and evolving underground economy. Focusing intelligence collection on specialised marketplaces yields better ROI for threat detection and proactive defence.
Figure 1 presents the comprehensive cycle of collecting, modifying, and analyzing data at every step, ensuring the utmost accuracy and reliability. In the next step, we have meticulously gathered official data on Russian regions from the Ministry of Health of Russia, police reports, court reports, and the prison system . These platforms, operating within the Onion Router (TOR) network (a network that allows anonymous browsing), are anonymous and transient; therefore, specific market names are omitted. Jardine Lindner and others 20,21 conducted a study design using a big data research design to gain insights into the dark web's impact on cannabis use in the United States. Interviews with merchants and consumers are a crucial part of understanding the mechanisms of the Internet market 5-8.
How Darknet Market Lists Enhance Secure Drug Trade
Prosecutors wrote in a sentencing memorandum, “The five victims of defendants’ crimes ranged in age from 19 to 51. Ta and Srinivasan admitted in their plea agreements to causing the fentanyl overdose deaths of three victims. District Judge David O. Carter called this case “the most sophisticated fentanyl distribution ring that this court has seen.”
Digital Risk Protection Threat Intelligence Dark Web Monitoring Cybersecurity Platforms Security Tools By leveraging automated dark web monitoring, organizations can mitigate risks, and take preventive measures before the leaked data is exploited. Manual monitoring of the dark web is inefficient and risky due to the sheer volume of data involved. The market is especially well-known for providing access to freshly compromised data, often obtained from recent breaches and stealer logs. The market emphasizes anonymity and security, conducting transactions exclusively through cryptocurrencies like Bitcoin and Monero.
