WayAway also features a searchable collection of former Hydra store operators. But at the time of this writing, the forum has not yet launched. These users have authored nearly 242,000 posts which are dispersed across 11,303 topics. WayAway is one of the largest DNMs with over 162,000 registered users.
We recently analyzed what the leadership of this syndicate (Omg / RuTor) is like, and they never tire of reminding us about what kind of pigs are hiding under the masks of these benefactors. Whereas in reality, only users from Russia and Belarus can find shops operating in their proximity. Beyond Russia and Belarus, the market claims to serve various countries in the Caucasus and Central Asia region. This market first emerged in April 2022, according to a RuTor post. Based on our assessment, C2C transactions remain one of the top ways of moving illicit funds.
Identity Theft And Financial Fraud
- Trial Attorney Gaelin Bernstein of the Criminal Division’s Computer Crime and Intellectual Property Section and Assistant U.S. Attorney Segev Phillips for the Northern District of Ohio are prosecuting the case, with substantial assistance from the U.S.
- Launched in September 2022, Torzon Market operates on the Tor network and features over 11,600 illegal products, including drugs and hacking tools.
- In addition to its emphasis on stolen credentials, 2easy Market offers a variety of cybercrime tools, such as hacking services, exploit kits, and other resources for conducting cyberattacks.
- The Silk Road’s use of Tor and Bitcoin inspired other cybercriminals to adopt these technologies to build anonymous marketplaces, shaping the development of dark web commerce.
Focusing intelligence collection on specialised marketplaces yields better ROI for threat detection and proactive defence. Privacy-focused operators are shifting to Monero due to its default anonymity, compared to Bitcoin’s transparent ledger Darknet markets see BTC inflow drop to $2B. Abacus Market was launched in 2021 and now lists over 40,000 illicit goods, including hacking tools, counterfeit documents, and listings for drugs.

Discover Content
On one side, allegedly RuTor operators hacked its largest competitor, WayAway. Rival DNMs then began launching ‘black PR’ campaigns against one another, they even resorted to DDoSing each other during last summer, with competitors disrupting OMG! According to a popular DNM news aggregator, the trouble started when RuTor and OMG! Likely, they used similar tactics, and were able to successfully phish some number of Blacksprut users.
Why People Use Dark Web Marketplaces
Freshtools was established in 2019 and offers various stolen credentials, accounts, and host protocols like RDP. Among the dark web stores, WizardShop stands out for a few reasons. Torzon Market has established itself as a significant player in the darknet ecosystem, offering a secure, user-centric platform for anonymous trading. Torzon is one of the most notable dark web stores for a number of reasons. The platform’s activity has increased significantly over the past year, indicating its growing influence and market share in the underground economy.
Top Dark Web Marketplaces Of 2026: A Deeper Dive Into Illicit Trade Markets
Archetyp’s takedown might make headlines, but it won’t stop the trade of illicit drugs on the dark web. It had more than 600,000 users worldwide and 17,000 listings consisting mainly of illicit drugs including MDMA, cocaine and methamphetamine. This joint report prepared by the EMCDDA and Europol considers the latest findings from international research, fresh empirical data, and operational information and intelligence in order to illuminate how darknet markets function and how they relate to criminal behaviour.
Silk Road Dark Web: History And How It Shaped Online Crime

Heroin and other opioids do not have a significant presence online, as their sale is highly regulated and controlled. As these transactions are more insular and anonymous than in-person trade, it is more difficult to track user behaviour. According to the study, most darknet sales in 2023 fell into the ‘large retail’ category (US$100–US$499), at 37.8%, followed by ‘potential wholesale’ purchases (over US$1 000) at 31.9%. Darknet vendors are also becoming more sophisticated, with large sellers offering a wider range of products and focusing on high value transactions.

The Russian Market has been around since 2019 and is one of the more prominent dark web marketplaces. Unlike many other dark web markets, Cypher does not require buyers to deposit cryptocurrency upfront, which reduces the risk of exit scams. It allows vendors to sell without registration, which provides an added layer of anonymity, making it one of the more flexible and user-friendly markets on the dark web. With enhanced security features and a strong focus on financial fraud, STYX has become a go-to marketplace for those looking to engage in cybercrime on a more technical level

“This historic international seizure of firearms, deadly drugs, and illegal funds will save lives,” said Attorney General Pam Bondi. Operation RapTor was a global, coordinated effort by law enforcement in the United States, Europe, South America, and Asia to disrupt fentanyl and opioid trafficking, as well as the sales of other illicit goods and services, on the darknet, or dark web. The website was known for its illegal drug marketplace, among other illegal and legal product listings. “Anyone who tries to profit from the sale of illegal drugs – whether it’s on the streets or online – will face consequences. This case demonstrates the Department’s tireless commitment to protecting U.S. communities from the harms caused by fentanyl and darknet marketplaces and pursuing accountability for those who would endanger our communities no matter where they are located.” Chainalysis data shows darknet marketplace revenue dropped post-Hydra seizure in 2022 but recovered to $2 billion in Bitcoin inflows during 2024 Darknet market BTC inflow drop and shift to Monero.

This operation led by the German authorities marks the end of a criminal service that enabled the anonymous trade in high volumes of illicit drugs, including cocaine, MDMA, amphetamines, and synthetic opioids. In parallel, measures were taken in Germany and Sweden against one moderator and six of the marketplace’s highest vendors, and assets worth €7.8 million seized. Archetyp Market operated as a drug marketplace for over five years, amassing more than 600,000 users worldwide with a total transaction volume of at least €250 million. From at least April 2021 until May 2023, McDonald and others conspired to sell fentanyl and cocaine via multiple darknet marketplaces. According to court documents and statements made in court, Srinivasan and Ta used the “redlightlabs” darknet account to advertise and sell counterfeit M30 oxycodone pills containing fentanyl and other illicit drugs.
Data Collection
Unless the attribution and motivation of actors behind this activity remains unknown, it was confirmed RuTOR and its mirrors were unavailable for significant amount of time around that time. Some of the sellers and their ads published at WayWay had references to another marketplace called Solaris. Also identified were several notable sellers who migrated to Kraken from the now closed Hydra marketplace. According to a statement by WayWay founders responsible for launch of Kraken – the marketplace aims to become the best in category and providing "the most secure decentralized platform" in Dark Web. For example, there are at least 3 operators responsible for the security of the project, as well as over 15 moderators.
Law Enforcement And Regulatory Responses
Silk Road 2.0 was launched soon after the original Silk Road was seized and since that time there has been a proliferation of darknet markets.. The earliest modern online anonymous markets, often referred to as darknet markets or cryptomarkets, appeared in early 2010. The key difference is the anonymity afforded by accessing darknet markets. As darknet markets grow more fragmented and boutique, traditional law enforcement methods are becoming increasingly ineffective. Instead, they must gain access to multiple, hyper-secure markets and then regularly monitor this wide array of smaller, highly localized platforms.
Decentralized And Peer-to-Peer Marketplaces
A seizure banner has been published on the now-defunct marketplace. Law enforcement authorities across Europe have dismantled ‘Archetyp Market’, the most enduring dark web marketplace, following a large-scale operation involving six countries, supported by Europol and Eurojust, according to a press release today. She also received less-than-stellar drugs on two occasions. Some people really are better off using drugs (especially if their use helps them cope with serious trauma—and it often does). Being able to order drugs for self-medication so easily and discreetly, Marie continued, also kept misguided friends from trying to force her to quit.
Trump Pardons Silk Road Founder Ross Ulbricht
The Abacus Market links to the new dark web marketplace sections and took over much of the vacuum left by the AlphaBay takedown. One of the most common is the exit scam, where a marketplace suddenly disappears and takes everyone’s money with it. Some were taken down by law enforcement, others just vanished overnight with users’ money. It was the first big site where people could anonymously buy drugs using Bitcoin, and it gained a lot of attention, until it was shut down by the FBI in 2013. Henderson also wants you to know, whether you’ve ever been on the dark web or not, you’re likely impacted by stolen information sold there.
Such launches were not always a success; in February 2014 Utopia, the highly anticipated market based on Black Market Reloaded, opened only to shut down eight days later following rapid actions by Dutch law enforcement. In October 2013, Project Black Flag closed and stole their users' bitcoins in the panic shortly after Silk Road's shut down. The shutdown was described by news site DeepDotWeb as "the best advertising the dark net markets could have hoped for" following the proliferation of competing sites this caused, and The Guardian predicted others would take over the market that Silk Road previously dominated. The first marketplace to use both Tor and Bitcoin escrow was Silk Road, founded by Ross Ulbricht under pseudonym "Dread Pirate Roberts" in February 2011. It has been considered a "proto-Silk Road" but the use of payment services such as PayPal and Western Union allowed law enforcement to trace payments and it was subsequently shut down by the FBI in 2012. In 2012, it was closed and several operators and users were arrested as a result of Operation Adam Bomb, a two-year investigation led by the U.S.