Finally, despite his supposed expertise in cryptocurrency tracing and digital privacy, it was Lin's own relatively sloppy money trails that, the DOJ claims, helped the FBI to trace his real identity. The statement boasted that 30 officers had learned “nuances of the dark web" and cryptocurrency tracing skills from Lin, who had “used his professional background and qualifications in the field" to teach them how to better combat cybercrime. The information is for educational and research use with the focus on complying with the law.
Rise Of Incognito Market And Its Darknet Empire

The darknet market list for 2025 shows a trend towards enhanced security and user verification to protect vendors and buyers. Dubbed “Antinalysis” and “AMLBot,” the services purport to offer a glimpse into how one’s payment activity might be flagged by law enforcement agencies and private companies that try to link suspicious cryptocurrency transactions to real people. "This arrest underscores the dedicated, ongoing efforts of law enforcement to identify and dismantle illicit drug networks operating from every shadowy recess of the marketplace," NYPD Commissioner Edward A. Caban said in a statement. For the darknet market users (buyers and vendors), Incognito’s rise and fall carries its own lessons, which influence the broader trends.
When Pharaoh attempted to extort his users, many panicked vendors likely reached out to trusted contacts or even law enforcement for help. The authorities said that for almost four years, Rui-Siang Lin operated and owned the Incognito Market, an online marketplace on the dark web that users worldwide visited to buy and sell illegal narcotics. Borrowing from the playbook of ransomware purveyors, the darknet narcotics bazaar Incognito Market has begun extorting all of its vendors and buyers, threatening to publish cryptocurrency transaction and chat records of users who refuse to pay a fee ranging from $100 to $20,000. “As alleged, Rui-Siang Lin operated a sophisticated and dangerous online narcotics marketplace through which he profited millions of dollars at the community’s expense,” said US Attorney Damian Williams for the Southern District of New York. These darknet sites function as a comprehensive darknet drug store, with darknet market links updated regularly to maintain operational security.
Smooth Operation Of The Incognito Darknet Market
It opened in October 2020 and, as reported by KrebsOnSecurity, closed last March when its operators extorted both buyers and sellers of fees ranging from $100 to $2,000 in exchange for not revealing text messages and transaction records showing their participation in the marketplace. The cryptocurrency-focused publication Cointelegraph.com reported Mar. 6 that Incognito was exit-scamming its users out of their bitcoins and Monero deposits. Anyway, if anything were to leak to law enforcement, I guess nobody never slipped up.” Under the promise of anonymity, Lin’s alleged operation offered the purchase of lethal drugs and fraudulent prescription medication on a global scale.
How The November 2025 Bitcoin Crash Fractured The Cybercriminal Economy
The FBI is committed to targeting and dismantling all criminal enterprises, especially those whose leaders distribute illegal substances on the dark web.” “As alleged, Rui-Siang Lin was the architect of Incognito, a $100 million dark web scheme to traffic deadly drugs to the U.S. and around the world. After a narcotics transaction was completed, cryptocurrency from the buyer’s account was transferred to the seller’s account, less the 5% fee that Incognito collected.
The pseudo-anonymous nature of these currencies allows for the transfer of value without directly linking financial accounts to personal identities. For financial transactions, Bitcoin and increasingly, privacy-focused coins like Monero, serve as the primary mediums of exchange. This network-level security is the first critical barrier against external observation. Access to these platforms is achieved through specialized software that routes traffic through multiple layers of encryption, effectively anonymizing the user's location and identity.

"Incognito Market" Founder Arrested At JFK Airport, Accused Of Selling $100 Million Of Illegal Drugs On The Dark Web
Operation RapTOR includes law enforcement actions taken by JCODE member agencies, to include ICE HSI; the DEA; FBI; FDA-OCI; IRS-CI; and USPIS; in addition to foreign partners listed below. Led by Europol’s European Cyber Crime Centre Operation RapTOR united the FBI-led JCODE team — comprised of ICE HSI and law enforcement partners from the United States, Europe, South America, and Asia — to disrupt fentanyl and opioid trafficking, as well as sale of other illicit goods and services on the Darknet. "Under the promise of anonymity, Lin's alleged operation offered the purchase of lethal drugs and fraudulent prescription medication on a global scale," said James Smith, an assistant director in the FBI's New York office. A 23-year-old man from Taiwan has been arrested on charges of selling at least $100 million worth of illegal drugs online through a site on the dark web known as the "Incognito Market."
He threatened to reveal all the transaction details on Incognito, including the names of buyers and sellers, which could identify people involved in illegal orders. The payments ranged from $100 to $20,000, depending on how many transactions each person had handled. It began by freezing their cryptocurrency funds, so they couldn’t withdraw their money. This resulted in all the mirrors to appear offline so that others wouldn't fall for the extortion. The team behind Incognito Market also created libre forum, a darknet discussion board. The market’s staff created the “Incognite foundation”, with the intent “to maximize freedom, welfare, and privacy for all”.
Who Verifies The Safety Of Tor Users? #
- On the other hand, smaller markets might individually have fewer resources to defend against attacks or infiltration.
- But by late 2021, Incognito had started to attract users, and by the middle of 2022, the market had drawn enough vendors and sellers to generate more than $1.5 million a month in sales.
- Original marketplace URLs get regularly updated for security reasons, hence the reason for verification.
- “This arrest underscores the dedicated, ongoing efforts of law enforcement to identify and dismantle illicit drug networks operating from every shadowy recess of the marketplace,” said Commissioner Edward A. Caban of the New York Police Department (NYPD).
- He was willing to poke the bear – antagonizing law enforcement openly – while continuing to profit from his market.
- The message ominously warns, “We got one final little nasty surprise for y’all,” and details the operators’ intention to release transaction data accumulated over years, exposing the personal messages, transaction info, and order details of its users.
The takedown of Incognito Market in particular demonstrated that investigators have become adept at following the money in cryptocurrency and coordinating globally to apprehend suspects. However, these ideas face practical hurdles, and for now, the traditional centralized hidden service model still dominates because it’s user-friendly. Another trend signaled by Incognito’s story is the blurring of lines between the cyber underworld and the legitimate tech world. By incorporating Monero and even providing an on-site exchange between BTC and XMR, Incognito was following a trend towards safeguarding user anonymity on the financial side. The court proceedings so far have reaffirmed that the dark web is not beyond the reach of the law, and they foreshadow aggressive actions against any successors who dare to fill Incognito Market’s shoes. Legally, the charges against Lin also set precedents in how darknet activities are prosecuted.
Crypto’s Role And Law Enforcement’s Leverage
Overall, Incognito is a somewhat clunky but effective darknet marketplace filled with digital goods and scam-related products. Incognito Link is committed to keeping our platform secure by using the latest security measures to protect the identity and information of Incognito users. Monero allows our Incognito customers to make purchases with complete anonymity, providing additional protection from external participants in the Incognito darknet link market. Many vendors around the world partner with Incognito Darknet because the Incognito Darknet Store has some of the lowest fees on the market and a good reputation among vendors. “For example, in November 2023, an undercover law enforcement agent received several tablets that purported to be oxycodone, which were purchased on Incognito Market. “Under the promise of anonymity, Lin’s alleged operation offered the purchase of lethal drugs and fraudulent prescription medication on a global scale.”

Markets: Incognito

This move positioned Pharaoh as something of a champion of privacy in the eyes of darknet denizens. According to prosecutors, Lin “had ultimate decision-making authority over every aspect of the multimillion-dollar operation”. He recruited a small staff (“employees” in the DOJ filings) to handle tasks like site maintenance, customer support, and possibly dispute resolution. However, agents were able to correlate the amounts and timing of transactions from the identified wallet to deposits at a certain exchange, effectively following the money despite the detour into Monero. He tried to swap large amounts of Bitcoin for Monero (to obscure their origin) and then cash out through a cryptocurrency exchange.
- What’s striking is how Lin used this data as a weapon, basically forcing his own users to pay or face legal action.
- Few journalists care to cover the darknet today – much less to report on its safety issues.
- Authorities estimate that from its launch in late 2020 until its closure in March 2024, Incognito facilitated over $100 million USD in narcotics sales worldwide.
- Bitcoin and other privacy-focused coins are the standard for anonymous payments, effectively separating financial transactions from real-world identities.
- Incognito Market sold illegal narcotics and misbranded prescription medication, including heroin, cocaine, LSD, MDMA, oxycodone, methamphetamines, ketamine, and alprazolam.
The Paradox Of PHP’s Ubiquity And Its Architectural Security Debt

In that capacity, he was even dispatched overseas as a “diplomatic specialist” training law enforcement officers in cybersecurity and cryptocurrency tracing. This diagram (later uncovered by investigators) outlined how users would register, how vendors would add or edit product listings, and how purchases would be processed on the server side. This desperate move sent vendors scrambling to salvage what they could; many abandoned Incognito immediately, fleeing to alternative markets even as they feared their personal data might be exposed. By enabling global anonymous trade, Incognito and markets like it helped transform the illicit drug trade – shifting portions of it off the streets and onto encrypted online platforms.
Mr. Lin’s alleged actions of putting profits before public health were not only reckless and dangerous, but unconscionable. OCDETF identifies, disrupts, and dismantles the highest-level criminal organizations that threaten the U.S. using a prosecutor-led, intelligence-drive, multi-agency approach. This effort is part of an Organized Crime Drug Enforcement Task Forces (“OCDETF”) operation.
How To Find The Official Incognito Market Link
It decentralizes the escrow process, placing more control directly into the hands of the vendor and buyer. This method requires multiple cryptographic keys to authorize a payment, drastically reducing the risk of fund loss if a market is compromised or exits. A primary development is the widespread adoption of multi-signature wallets for Bitcoin transactions. This escrow model, powered by cryptocurrency, protects both parties by preventing direct, non-reversible payments and reducing the risk of fraud.