It is one of the most active and up to date markets and always provides new and updated malware and data. Its commitment to privacy, diverse product offerings, and robust security measures make it a preferred choice for users seeking discreet transactions within the darknet. Quality and validity of the data it provides justify its higher cost over other marketplaces. Its focus on financial fraud and high-value transactions has attracted a dedicated user base, contributing to its growing reputation and market value. It is a hub for financial cybercrime and offers a wide range of illicit services and stolen data that cater to sophisticated cybercriminals. In 2024, the platform grew significantly in popularity, partly because of its strategic acquisition of users from a number of recently shut-down marketplaces, such as AlphaBay and Incognito Market, which had recently closed their doors.
Russian Market
Then, after operation Bayonet, the number of sellers in all categories and multisellers significantly drops, as shown in Fig. During 2016 and 2017, AphaBay becomes the dominant market (see Fig. 3), polarizing sellers around its own ecosystem, such that the fraction of multisellers decreases to 10% of all sellers until its closure. In all panels, the dashed vertical line marks the time of operation Bayonet. The evolution of the different types of sellers and buyers. The large number of U2U-only sellers is in accordance with previous results that showed that the trading volume in the U2U network is significantly larger than that of DWMs13 (also see Supplementary Information Figure S8). Until the end of 2013, when Silk Road is the dominant market (see Fig. 3), market-only sellers is the dominant category, and there are no multisellers.
Established in 2022, WizardShop is one of the biggest data stores on the dark web, focusing mainly on carding and financial data. Established in 2022, Torzon market is one of the biggest and most diverse marketplaces on the dark web. Renowned for its extensive inventory of financial data and sophisticated operating methods, Brian’s Club is a key player in the underground economy of financial cybercrime. Abacus Market offers an extensive array of illegal goods and services across various categories, making it one of the most versatile marketplaces on the dark web.
Today’s announcement serves as an outstanding example of the worldwide impact Postal Inspectors can make through our ever-growing partnerships with federal and international law enforcement agencies. Postal Inspection Service has worked diligently for years to rid the mail of illicit drug trafficking and preserve the integrity of the mail,” said Chief Postal Inspector Gary Barksdale. “It has been an honor to work alongside our domestic and international law enforcement partners and pursue bad actors hiding on the Darknet. “The arrest of 179 of them in seven countries—with the seizure of their drug supplies and their money as well—shows that there will be no safe haven for drug dealing in cyberspace.” By leveraging complementary partnerships and surging resources across the U.S. government and Europol, Operation DisrupTor was used to significantly disrupt the online opioid trade and send a strong message that criminals operating on the Darknet are not beyond the reach of law enforcement. Darknet vendor accounts were identified and attributed to real individuals selling illicit goods on Darknet market sites such as AlphaBay, Dream, WallStreet, Nightmare, Empire, White House, DeepSea, Dark Market and others.
Silk Road 20
Historically, the largest users of Bitcoin Fog were darknet markets such as Agora, Silk Road, Silk Road 2.0, Evolution, and AlphaBay. At its launch, Sterlingov publicized Bitcoin Fog as a tool for anonymizing bitcoin transactions and evading law enforcement. “Through his illicit money laundering operation, Sterlingov helped criminals launder proceeds of drug trafficking, computer crime, identity theft, and the sexual exploitation of children. When law enforcement wasn’t able to recover any of the stolen money, the man hired a private blockchain investigator who traced more than $500,000 of the missing funds to customer accounts at Binance and other exchanges. But Pamela Clegg, a longtime blockchain investigator who has done work for crypto firms and banks, said the exchanges often take a more casual, less scientific approach to assessing suspicious transactions than banks do.
Russian Language Darknet Marketplaces Continue To Drive Overall Volume Of Illicit Drug Sales
- Just as Incognito built on the playbook of its predecessors, future markets will learn from RapTor.
- However, the very basics of money laundering in the real world now apply to the crypto world.”
- Following AlphaBay shutdown, Hydra emerged as the dominant market exhibiting the strongest observed dominance to date8,9,10.
- Therefore, we use a sliding window of \(\Delta t\) days to classify sellers, i.e., every day that an entity is classified as a seller, it remains as a seller for \(\Delta t\) days, including the first day.
- This prosecution also provides more proof that we have the skilled investigators and talented prosecutors needed to hold those who operate these darknet sites accountable.”
They benefit from limited domestic enforcement risk and a domestic supply of synthetic drugs and precursors, mostly sourced from China. Their longevity is generally short-lived, with most platforms shuttering or collapsing within two to three years due to law enforcement pressure, market volatility, or internal instability. “Drug dealers who would often only accept cash are now accepting cryptocurrencies, actually creating some advantages for law enforcement,” he said. “We’ve seen an uptick in the number of new darknet markets emerging.
The Bright Future Of Darknet Drug Trade
Based on Bitcoin Fog’s transaction activity over time, Sterlingov made millions in commissions from Bitcoin Fog transactions. The defendant advertised the site as “for people who have real problems for the law and we provide them the best possible service, and highest possible anonymity.” Those who had “real problems for the law” would mix “your bitcoins in our own pool with other users’ Bitcoins, and get paid back to other accounts from our mixed pool.” “In the deepest corners of the internet, he provided a home for criminals of all stripes, from drug traffickers to identity thieves, to store hundreds of millions of dollars in illicit proceeds. In addition to his term of imprisonment, Sterlingov was sentenced to pay a forfeiture money judgment in the amount of $395,563,025.39, and forfeiture of seized cryptocurrencies and monetary assets valued at approximately $1.76 million. A cryptocurrency mixer is a service that mixes potentially illegally derived cryptocurrency with others to obscure the trail back to the cryptocurrency’s original source.
Analytics Insight is an award-winning tech news publication that delivers in-depth insights into the major technology trends that impact the markets. Global cooperation, adaptive legal frameworks, and cross-border enforcement are crucial in addressing emerging threats. Cryptocurrencies offer financial innovation and decentralization but also pose risks related to money laundering, fraud, and cybercrime. AML/KYC regulations for Virtual Asset Service Providers (VASPs) mitigate risks, but privacy-focused cryptocurrencies challenge enforcement.

US Treasury Sanctions Iranian National For Operating Darknet Market Nemesis
(This platform is not the same as the crypto service Onchain, owned by Crypto.com.) He used some of the money to buy his wife a gift and take her to dinner. He put the money — $100,000 — into an individual retirement account (IRA). Over a nine-month period ending in mid-2024, that account moved $2 million in tether — more than a thousand times the average annual salary in Myanmar. Law enforcement in Minnesota also shared with ICIJ customer files Binance provided in response to a subpoena in the case. With unhosted wallets, users hold both the private and public keys, and are the only ones who can access their wallets.
Darknet Vendor And Pharmacist Charged With $270 Million Bitcoin Drug Trade
More than 55,000 of those orders involved powerful stimulants like methamphetamine and cocaine, while an additional 17,000 involved opioids such as heroin and fentanyl—drugs central to the opioid epidemic devastating U.S. communities. Cointelegraph is committed to providing independent, high-quality journalism across the crypto, blockchain, AI, and fintech industries. A risk assessment being conducted on their operation with an AML policy addressing these risks is the first step to combating financial crimes.” Jefferies further pointed out that drug dealers and other criminals may be turning toward crypto due to the increase of crypto ATMs, or BTMs, which have made it more accessible.

Smooth digital asset integration demands a well-considered strategy seasoned with innovation, regulation, and proactive risk management to make a secure financial future a reality. Achieving a balance between innovation and security requires a comprehensive regulatory framework that preserves decentralization while mitigating financial threats. However, their anonymity facilitates illegal use such as money laundering, fraud, and ransomware payments. Cryptocurrencies are using decentralization, transparency, and security, fostering financial inclusion and innovation in decentralized finance (DeFi) and tokenized assets.
OKX said that it has been working with the U.S. government on the matter, sometimes initiating engagement. OKX told ICIJ that it invests heavily in compliance and that it “took proactive steps to restrict relevant accounts” even before the group was labeled a money laundering concern. The company said that crypto technology does not allow it to block deposits into its system. “Users who transact with this service are subject to investigation by our compliance department, and appropriate action will be taken if any potential illicit activities are identified,” the firm said in a statement. “Normally that halts everything,” said Ross Delston, a lawyer and anti-money laundering specialist.

Parsarad’s indictment is not just the story of one marketplace’s demise—it is a signal that even in hostile jurisdictions and decentralized systems, there remains a path to accountability. Even in the face of disruption, new models are emerging, including Telegram-based platforms like Si Market and a first-of-its-kind darknet M&A between SuperMarket and DrugHub. These platforms have become deeply embedded in regional drug economies and remain relatively unchallenged since the takedown of Hydra in 2022. Other entities that operate on the darknet but deal in malware or stolen credentials are categorized separately as cybercrime platforms—not as DNMs.

The Darknet Ecosystem Remains Highly Adaptive
A federal judge issued a warrant for seizure for about 392 Bitcoin, valued at about $16 million, which US attorneys said was owned by a group of Darknet drug dealers. Additionally, JCODE targets the trafficking of weapons and other illicit goods and services on the internet. “Law enforcement is committed to tracking down criminals, no matter where they operate – be it on the streets or behind a computer screen.”
However, the trend is clear—illicit actors are expanding their strategies, forcing enforcement agencies to evolve their tracking methods to keep pace with increasingly sophisticated laundering techniques. In 2024, DeFi played an increasing role in storing, transferring, and obfuscating illicit crypto proceeds. As Treasury officials move to put in place new regulations to attack money laundering via Bitcoin and other cryptocurrencies, the case is a reminder that some treat the currencies much the same as cash. Attorneys said a group of Darknet drug dealers held much of their money in Bitcoin, and laundered $600,000 by buying a California squid permit and a 1974 Triumph fishing vessel. JCODE is an FBI-led Department of Justice initiative, which works closely with the DEA-led, multi-agency, Special Operations Division to support, coordinate and de-conflict investigations targeting for disruption and dismantlement of the online sale of illegal drugs, especially fentanyl and other opioids.
Exit Scam Unfolding
Additionally, it offers automatic purchases, buyer protection, and even a loyalty points program.Since its launch, it has conducted several massive data leaks. And it worked.This market focuses on stolen credit cards, personal identifiable information (PII), and SSH access credentials. If someone wants direct access to a server, a cPanel, or an email, this is the place to go.The market is in English and features a massive catalog with over 800,000 illegal products.
(a) The number of sellers for each category and multisellers per quarter. From the last quarter of 2013, U2U-only sellers become the largest category of sellers and remains as the largest throughout the rest of the observation period. Although Hydra is not a single dominant market as Silk Road was, its dominance is marked by a high market share, consistently staying above 80% in the last two years.