But as soon as it was knocked offline, copycat sites were launched by anonymous operators to fill the gap. But in the past, approximately 20 per cent of UK drug users have scored online. Here are some of the now-defunct dark web markets that were notorious for cybercrime.
Market Operations
Archetyp was an online drug marketplace, and only accepted drug-related listings. This case demonstrates the Department’s tireless commitment to protecting U.S. communities from the harms caused by fentanyl and darknet marketplaces and pursuing accountability for those who would endanger our communities no matter where they are located.” These markets host hundreds, or in some cases thousands, of people who sell drugs, commonly referred to as “vendors”. According to court documents, Adams and Hosner operated the vendor accounts “igogrrawwr” and “its4real” on the darknet marketplaces ToRReZ and Darkode, respectively, through which they sold tens of thousands of counterfeit oxycodone pills containing fentanyl in exchange for cryptocurrency. According to court documents, between May 2021 and May 2022, Peck distributed narcotics from various darknet markets using the vendor profile “Syntropy.” After the transactions were carried out using cryptocurrency, Peck and co-conspirators Kevin Fusco and Vincent Banner mailed parcels containing fentanyl, heroin, and methamphetamine to cities around the country using the U.S. “The illicit movement of opioids poses a significant threat to public health and safety – whether by known transnational criminal gang members across international borders or anonymously through darknet spaces,” said Senior Official Performing the Duties of Deputy Director P.J. Lechleitner of Homeland Security Investigations (HSI).
“Addressing our nation’s drug overdose crisis and epidemic of substance use disorders is an issue of great concern and remains a top public health priority for the U.S. Postal Inspection Service leverages our specialized knowledge of the postal system as part of sophisticated dark web investigations such as Operation SpecTor with great results,” said Chief Postal Inspector Gary R. Barksdale of the U.S. We will continue to pursue bad actors engaged in these crimes to ensure they face justice, while protecting victims from these lethal substances.” “That's why we will continue to join forces with our law enforcement partners around the globe to attack this problem together. The interagency efforts are aimed to both identify those who use anonymizing technologies to purchase illicit narcotics and direct them to available resources. Today, the Department of Justice, and its Joint Criminal Opioid and Darknet Enforcement (JCODE) team and international partners, announced the results of Operation SpecTor, which included 288 arrests – the most ever for any JCODE operation and nearly double that of the prior operation.
Reporting Countries

Duxbury et al evaluated the role of trust in online drug markets by applying exponential random graph modelling to underground marketplace transactions. Anonymous online marketplaces and forums usually operate as hidden Tor services, which can only be resolved through Tor (an anonymity network). Anonymous online marketplaces are usually platforms for sellers and buyers to conduct transactions in a virtual environment. For instance, SilkRoad, the first modern darknet market and best known as a platform for selling illegal drugs, was launched in February 2011 and subsequently shut down in October 2013 . Subsequently, we conducted a comprehensive, large-scale, longitudinal study to demystify opioid trading activities in anonymous markets and forums. However, to the best of our knowledge, no large-scale study, which may cross multiple anonymous marketplaces and is cross-sectional, has been conducted to profile the opioid supply chain and unveil characteristics of opioid suppliers, commodities, and transactions.
Administrator Arrested

As large platforms face disruption from law enforcement action, dark web infighting, and an influx of users from Telegram, there’s a growing shift toward smaller, more specialized marketplaces. CHICAGO — A Homeland Security Investigations (HSI) New York investigation, in coordination with law enforcement partners, has resulted in charges against two men for allegedly operating Empire Market, a dark web marketplace that enabled users to anonymously buy and sell more than $430 million in illegal goods and services around the world. Keeping to the trend witnessed in 2023, Russian-language darknet marketplaces continue to be responsible for the vast majority of revenue generated, contributing over 97% to the overall volume of illicit drug sales (up more than 1% from 2023) in bitcoin and TRON. In this respect, the use of encrypted communication apps like Telegram and Signal have reduced the barriers to access for drug buyers to purchase products online, whilst also reducing fees that vendors pay to darknet markets for sales. Also thriving despite the heat from the authorities is the darknet’s principal gathering point, Dread, a bulletin board where dark web users discuss and review online drugs and vendors.
Market Types
The United States saw 153 arrests as part of the international operation, followed by the United Kingdom, with 55, and Germany, with 52, according to the European Union law enforcement agency Europol, which coordinated it. “Because of those drugs, that promising young man sadly died of an overdose last year.” “But some of the packages his family thought were full of computer parts actually contain drugs he had purchased off the dark net,” he said.
Amongst the most notable was the first merger and acquisition between two marketplaces on the darknet — whereby the struggling SuperMarket was absorbed by the now-Superlisted DrugHub in an operation that lasted around one month. Bayonet/GraveSac (the coordinated takedown of the AlphaBay and Hansa Market darknet marketplaces by US and European law enforcement in 2017), which left the Western DNM ecosystem reeling. In contrast to Russian-language DNMs, Western darknet marketplaces continued to struggle throughout 2024 as a result of sustained law enforcement action, coupled with several high profile exit scams. Despite the many challenges faced by darknet marketplaces over the course of 2024, these platforms have nevertheless seen a slight increase of income compared to 2023, generating more than USD 1.7 billion. These platforms allow vendors to reach customers who are less technologically savvy, whilst also mitigating against market turbulence caused by darknet market exit scams or law enforcement takedowns. The operation, coordinated by Europol and targeting the “Monopoly Market,” is the latest major takedown of sales platforms for drugs and other illicit goods on the dark web.
Catching Criminals On The Dark Web
We list the top 5 opioids with most listings and their average prices in 2014, 2015, 2019, and 2020 (Table 6). Among them, suboxone and subutex medicines are most frequently mentioned by 2917 times in listings and traces in 10 platforms, followed by roxy series (ie, roxy, roxi, roxies, and roxys) with 2022 times and Lean with 1256 times. In our study, we found that 23.78% (9896/41,614) listings and traces were identified with the help of 58 opioid jargons (Table 2).
There is a pressing need to understand the opioid supply chain to gain new insights into the mitigation of opioid use and effectively combat the opioid crisis. In a Vice documentary on drug sales on social media, it took the host just five minutes to connect with a dealer in London. The drug information organization Pill Report has told of people wiring cash to dealers and getting duped, with nothing sent to them. Moderators, empowered with custom AI and machine learning tools, remove millions of pieces of harmful content each day to keep the platform safe.” Between July and September 2024, Meta says that 96 percent of drug sales content that violated its terms was removed before a user reported it.
Operation Deep Sentinel
Launched in 2013, Dream Market was a top tier marketplace especially after AlphaBay’s fall. In effect, Operation Bayonet simultaneously shut down both markets, netting thousands of criminals and shattering community trust. When AlphaBay went offline on July 4, many fleeing users migrated to Hansa which was by then run covertly by police. Hundreds of kilograms of drugs and millions in Bitcoin were ultimately uncovered.

In May 2017, the Bloomsfield Market closed after investigations in Slovakia inadvertently led to the arrests of its operators. Further market diversification occurred in 2015, as did further developments around escrow and decentralization. February 2014 also marked the short lifespans of Black Goblin Market and CannabisRoad, two sites which closed after being deanonymized without much effort. Sheep Marketplace, which launched in March 2013, was one of the lesser known sites to gain popularity with Silk Road's closure. In October 2013, Project Black Flag closed and stole their users' bitcoins in the panic shortly after Silk Road's shut down. Atlantis, the first site to accept Litecoin as well as Bitcoin, closed in September 2013, just prior to the Silk Road raid, leaving users just one week to withdraw any coins.
At the end of August, the leading marketplace Agora announced its imminent temporary closure after reporting suspicious activity on their server, suspecting some kind of deanonymization bug in Tor. In March 2015, the Evolution marketplace performed an "exit scam", stealing escrowed bitcoins worth $12 million, half of the ecosystem's listing market share at that time. Such launches were not always a success; in February 2014 Utopia, the highly anticipated market based on Black Market Reloaded, opened only to shut down eight days later following rapid actions by Dutch law enforcement. Not long after those events, in December 2013, it ceased operation after two Florida men stole $6 million worth of users' Bitcoins. The first marketplace to use both Tor and Bitcoin escrow was Silk Road, founded by Ross Ulbricht under pseudonym "Dread Pirate Roberts" in February 2011. In 2012, it was closed and several operators and users were arrested as a result of Operation Adam Bomb, a two-year investigation led by the U.S.
Gibbons rejects the idea that shutdowns are a pointless and expensive waste of police time. Dread is as integral to the dark web infrastructure as Deepdotweb was, again proving that the police haven’t exactly won the war. I do not believe that checking a website’s uptime, nor verifying its encryption keys, is illegal in my jurisdiction.

In our study, a total of 248,359 listings from 10 anonymous online marketplaces and 1,138,961 traces (ie, threads of posts) from 6 underground forums were collected. In total, we collected 248,359 listings from 10 anonymous online marketplaces and 1,138,961 traces (ie, threads of posts) from 6 underground forums. Specifically, we collected approximately 248,359 unique listings and 1,138,961 unique forum traces (ie, threads of posts) from 10 anonymous online marketplaces and 6 forums. Third, we conducted a comprehensive, large-scale, longitudinal study to measure and characterize opioid trading in anonymous online marketplaces and forums.
In 2021, authorities took down the dark web marketplace DarkMarket, along with arresting the Australian man who was believed to be the operator of the website. That same operation also shut down the dark markets DeepSea, Berlusconi, White House, and Dark Market. In July 2017, the markets experienced their largest disruptions since Operation Onymous, when Operation Bayonet culminated in coordinated multinational seizures of both the Hansa and leading AlphaBay markets, sparking worldwide law enforcement investigations. From then on, through to 2016 there was a period of extended stability for the markets, until in April when the large Nucleus marketplace collapsed for unknown reasons, taking escrowed coins with it.
- According to Europol, the operation froze about €7.8 million in assets.
- Combining opioid jargon with known opioid product names 25-27, we generated an opioid keyword data set consisting of 311 opioid keywords with 13 categories.
- Archetyp was founded in May 2020 as an online marketplace to facilitate the illicit drug trade.
- The seized drugs included 141 pounds of fentanyl or fentanyl-laced narcotics, more than 569 pounds of amphetamines, 95 pounds of cocaine, 95 pounds of MDMA and 22 pounds of LSD and ecstasy pills, authorities said.
Exodus Market
The bank enabled buyers and sellers to stay anonymous from each other. To facilitate these financial transactions, Incognito Market had its own “bank,” which allowed its users to deposit cryptocurrency on the site into their own accounts. That revenue funded Incognito Market’s operations, including paying “employee” salaries and for computer servers. Testing on those tablets revealed that they were not authentic oxycodone at all and were, in fact, fentanyl pills.
You won't find drugs here, but you will find tons of credentials, RDP access, CVVs, and records stolen using malware.The platform works with data collected by well-known malware such as Lumma, RedLine, Raccoon, Vidar, and Aurora. Although some of these markets prohibit certain extreme content such as violence or exploitation, most operate with very few rules beyond ensuring the security and anonymity of their users. For everyone else, dark-web marketplaces are a pretty reasonable idea. After all, you can’t exactly use Paypal or your credit card to pay for illegal drugs. One obvious point is the challenge, for people without technical know-how, of accessing dark-web marketplaces through the necessary software.