The entity “DNM Aggregator” that appears within each category refers to a service we’ve identified as being in control of multiple, disparate darknet markets. Western drug flows in particular come from US-domiciled exchanges and trace flows from those to darknet markets. By contrast, it appears today’s darknet markets largely serve specific niches and have individually organized themselves into unique criminal functions, which we determined when examining the origin points for darknet market inflows last year. Throughout the history of the darknet market ecosystem, at different turns one marketplace has typically played the dominant role.
Certified Balanced Reporting
When you buy drugs from street dealers, your choice is limited by geography and who you know. Heroin, opium, cocaine, acid, prescription drugs are all readily available. But as soon as it was knocked offline, copycat sites were launched by anonymous operators to fill the gap.
Dark Web Telegram Groups Cybersecurity Teams Should Monitor
The variables used in the correlation matrix in the study were related to drug use-related problems in 2019 (all variables are relative). The references to the primary data sources are available in the table “Russian Drug Use Disorders Database” . We carefully considered the data structure and conducted spatial analysis to ensure a robust analysis. Thus, we could estimate the dynamics of market scene changes during a relatively extended period. The data collection and analysis steps are presented on the flowchart in Figure 1 and explained below. Figure 1 presents the comprehensive cycle of collecting, modifying, and analyzing data at every step, ensuring the utmost accuracy and reliability.
How Your Money Is Spent
“We will continue to monitor, investigate and bring to justice those who misuse the internet in a quest for profits with reckless disregard for the risk to public health and safety.” Postal Inspection Service and our partners around the world stand united,” said Chief Postal Inspector Gary Barksdale of the United States Postal Inspection Service. “Thanks to the unwavering efforts by ICE’s Homeland Security Investigations (HSI), Europol and our international partners, we’re cracking the code of the so-called ‘safe spaces’ for cybercriminals—they are in our sights and we’re not backing down.” This critical strike against dark web networks fueling the fentanyl crisis marks a proud moment in our ongoing effort to protect communities worldwide.” “This unprecedented operation is a testament to the power of global partnership and the unwavering dedication of our team,” said Chief Guy Ficco of IRS Criminal Investigation (IRS-CI). “Through close cooperation and intelligence sharing, officers across three continents identified and arrested suspects, sending a clear message to those who think they can hide in the shadows.
The ubiquity of the internet has transformed black markets, with shadowy street transactions now taking place in sophisticated digital marketplaces. Resecurity expects mobile communication channels and mobile apps to soon replace traditional underground communities, forums, and marketplaces in order to facilitate quick information exchanges between Dark Web actors. Threat actors have begun developing proprietary mobile apps allowing buyers and sellers of illegal goods to communicate in close to real-time mode, as well as transmitting information about "packages" with delivered drugs via alternative digital channels. The engine of the marketplace protects the total number of users registered on it, but based on the number of unique shops, likely it may exceed 15,000 unique actors. Based on the observed dynamics, criminal actors are actively engaging in new deals and thus attracting both buyers and sellers which is increasing the volumes of drugs for sales in the Dark Web.
- Because they live on the fringes, these sites are remarkably innovative.
- Postal Inspection Service Washington Division; Inspector in Charge Lesley Allison of the US Postal Inspection Service Pittsburgh Division for; and Acting Special Agent in Charge Christopher Heck of the U.S.
- Competing platforms use cyber-attacks to bring down each other's websites, while hackers attempt to reveal the identity of competitors.
- In addition to offering narcotics for sale, Nemesis facilitated the sale of a wide variety of other goods and services such as false identification documents and professional hacking services that enabled buyers to hire hackers to illegally seize control of the online accounts and communications of selected victims.
The Surprising Ease Of Buying Fentanyl Online
Stashes can be discovered by children, animals, and opportunistic drug users, leading to potential overdoses and death. In the UK, the “Breaking Bad” drugs forum launched its own dead drop initiative with a video advertisement. TRM research found that vendors using dead drops in Hungary, the Czech Republic, and Greece prefer Telegram, Session, and other end-to-end encrypted messenger services to DNMs.
The rise in revenue came after a torrid 2022 for the industry after its largest player, Hydra, was shut down by the German authorities. By offering so many options, these sites also just make it easier for psychonauts to explore what’s out there. No method of acquiring illegal substances is perfect.
How Law Enforcement Tracks Down Dark Web Criminals
These platforms allow vendors to reach customers who are less technologically savvy, whilst also mitigating against market turbulence caused by darknet market exit scams or law enforcement takedowns. There are still many unknowns that make it hard for us to make informed policy decisions about darknet drug marketplaces. It sold online classes for couriers — the workers who would place the drugs at dead drops — that taught how to reduce risks, along with an intricate system of ratings and reviews, an internal ad market for vendors and a mechanism for dispute resolution by the administration. By uprooting on the darknet markets, governments frustrate easy access to deadly drugs trade and reduce generalized trust in darknet markets. Successor after successor has since popped up, with drug-related darknet marketplaces surviving an average of 232 days before their shutdown and inevitable reincarnation.
“You have to be essentially on a list, get invited to the list, to view it at a certain time and place, because obviously it's the most tracked by law enforcement,” Lott said. The sellers are wary of being infiltrated by law enforcement, so don’t let just anyone in. They're selling things that anything essentially illegal that people are going to put a value on to pay to see or experience,” Lott said. Due to their large numbers and low status in the illicit drug economy, these couriers also make up a disproportionate number of arrests and imprisonments relative to senior operatives.
Investigations
- Numerous drug shops operate in major cities including Kiev, Lviv, Kharkov.
- Regional distribution of all drugs for sale presented on Hydra, in grams per 100,000 population in Russia.
- But the most shocking thing about these sites is not how many there are, but how they are changing the drugs industry.
- The Secret Service is among multiple government agencies that fight illegal activity on the dark web.
- The United States Postal Inspection Service, and the United States Attorney’s Office for the Southern District of Texas provided substantial assistance.
McDonald recruited and hired accomplices to help package and ship the narcotics they sold on the darknet. A fourth co-conspirator, Gregory Castillo-Rosario, who was arrested in October 2024, ran the Mrjohnson account. Prosecutors wrote in a sentencing memorandum, “The five victims of defendants’ crimes ranged in age from 19 to 51.
Similar to Hydra Market, a number of Russian darknet markets have risen up the rankings, the largest of which appears to be Mega Darknet Market, which received $40m in March alone. During the searches, law enforcement recovered 10 firearms, over 20,000 counterfeit oxycodone pills that contained fentanyl, an industrial pill press, and other manufacturing and distribution supplies. Blair posted advertisements for the controlled substances on Tor2Door and four other marketplaces and accepted payment in cyrptocurrency. On the marketplace Tor2Door, Blair and Pezzelle advertised their controlled substances using the monikers “YVS” and “YVendor Supplier” which they touted as “a syndicate of professionals that specialize in making the best products the markets have to offer. SANTA ANA, California – An Orange County man and South Los Angeles man were sentenced today to federal prison for supplying fentanyl-laced pills to a drug trafficking ring that sold these drugs to more than 1,000 customers nationwide via the dark web. The Justice Department appreciates the cooperation and significant assistance provided by law enforcement partners in the British Virgin Islands, Germany, Lithuania, and Türkiye.
Market Operations
As for cybercriminal administration, the category includes inflows from ransomware affiliate wallets. In the chart below, we see that the DNM Aggregator emerged as the clear leader among fraud shops enabling cybercrime, and Exploit.in and Kraken Market almost equally sold tools used to facilitate ransomware attacks. The cartels then use those chemicals to manufacture fentanyl that is later sold in the U.S.
The risk of overdose, people in his camp argue, is high because drugs are a poorly regulated product sold by unscrupulous middlemen. The Senate subcommittee did not look closely at darknet sites, the investigator told me, because they found so much on the open web. To buy his fentanyl, the man uses “darknet” sites, which are unlisted on search engines, rely on a special private browser for access, and don’t tie his username to his identity. An investigator on the committee, who was not authorized to speak publicly about the findings, said these represent a tiny fraction of the hundreds of fentanyl-selling sites on the web. "More users are going online whilst untested sites are popping up. In recent months the National Crime Agency, the organisation tasked with policing the dark net in the UK, has helped shut down several large dark net marketplaces.
Financial Institutions
While anonymity tools make it hard, skilled investigators take advantage of mistakes and covert operations to break cases. Famous examples Silk Road, AlphaBay, Hydra were shut down by law enforcement. The dark web essentially has a black market for any illicit need. Cybercriminals can even hire services like money laundering or DDoS for hire.
It's not surprising how drugs promoted in the forum are like RuTor’s most in-demand substances, highlighted by these Mephedrone postings and the top-featured products below. Product offerings are mostly drugs, as illustrated by the top banner. They propose within the framework of the drug cartel to establish a predatory "tax" percentage for stores of 8-10%, and do not hesitate to point out that there will only be shops and buyers in the red, and they will be covered in chocolate.” The community remains online and available for drug sellers 24/7 despite repeated DDoS attacks. Below, is a picture of the top 10 vendors and services on the platform.
