While efforts to curb illegal activities have shown promising results, threat actors continue to innovate — exploiting vulnerabilities within decentralized finance, blockchain infrastructure, and emerging technologies. The engine of the marketplace protects the total number of users registered on it, but based on the number of unique shops, likely it may exceed 15,000 unique actors. Mega provides an automated exchange service and a built-in wallet to process cryptocurrencies. To further attract buyers of drugs from other underground communities, the actors behind the Mega frequently organize “Black Friday” discounts to stimulate the sellers, by doing so offering lower commission rates from their sales. Today complicated geopolitical agendas affect legitimate business and trade, unfortunately, it doesn’t seem to be affecting criminal activity the with the same negativity. Based on the observed dynamics, criminal actors are actively engaging in new deals and thus attracting both buyers and sellers which is increasing the volumes of drugs for sales in the Dark Web.
Topics And Products Sold

The research was conducted while keeping a strict standard on data privacy to protect individual privacy throughout this study. The data and more detailed information about every variable are available through the references 27,28. Not all official variables were matched with parsed variables, so we rejected them for further analysis but kept them in Table 1 to demonstrate how many hypothetical matches were tested. The variables used in the correlation matrix in the study were related to drug use-related problems in 2019 (all variables are relative).
Table Of Contents
We have discovered, downloaded, and studied only 1 large darknet marketplace, “Hydra,” and selection and generalization biases can appear. The specific drug’s popularity on Hydra might be inflated due to vendor marketing strategies rather than real user preference. The study uses the internet or darknet data for public health research, providing a unique insight into the scale and nature of drug sales. Python scraping from a major darknet marketplace offers a novel technique to understand drug availability and consumption patterns, which are typically difficult to assess using traditional public health tools. The main drug sold online is cannabis, followed by synthetic drugs, cocaine and, to a lesser extent, opioids.
How Cryptocurrencies Enable Secure Trade On The Darknet
Additionally, threat actor ‘GermanDrugScout24’ advertised a wide array of illicit substances priced in euros. As for drugs, the ‘foreigness’ of the forum is further evident from the types of drugs promoted, as well as those that are more difficult, if not impossible, to find there (A-PVP and Mephedrone). For example, Vendor ‘SunshineShop’ recently advertised LSD at different price points and amounts. Unless there is a plausible connection between WayWay and Solaris, the teams running them entered a direct conflict right before the start of 2023.
Topic 3: Product Quality
- Though Genesis Market domains and servers were seized and antivirus programs have been updated, cybercriminals have already rebuilt illicit services like these.
- Here’s a look at the top 10 dark web markets currently dominating this underground space.
- They use pseudonymous wallets, privacy coins (like Monero), mixers, chain-hopping, and non-KYC platforms to obscure transaction trails.
- On a smaller scale, Mega Darknet Market placed a few ads with QR codes in public places like Moscow subway trains.
- Ultimately, we aimed to contribute to the development of a methodology to systematically measure the harm caused by darknet markets.
2022 and early 2023 saw the seizure of many major darknet markets by law enforcement. Some of the biggest markets have disappeared within just a few weeks in the latter half of 2022. While some of these markets were shuttered by law enforcement agencies – some took the easy way out with exit scams. Here are some of the now-defunct dark web markets that were notorious for cybercrime. Freshtools is a unique marketplace in that it does not only provide the stolen data, but it allows criminals to purchase MaaS which can cause further damage to the victims.

Total darknet market revenue fell from $2.3 billion in 2023 to $2 billion in 2024. Classic darknet markets sell diverse illegal goods; data stores focus on leaked or stolen data like credentials, databases, and ID records. The first category includes classic marketplaces, which serve as one-stop shops for a wide range of illegal goods. These platforms sell everything from drugs and fake IDs to weapons and hacking tools, resembling a digital black-market bazaar. Despite growing crackdowns from law enforcement agencies, the dark web remains a hotbed of criminal activity, offering everything from drugs to stolen data.
The Bright Future Of Darknet Drug Trade

In addition to its emphasis on stolen credentials, 2easy Market offers a variety of cybercrime tools, such as hacking services, exploit kits, and other resources for conducting cyberattacks. The market is especially well-known for providing access to freshly compromised data, often obtained from recent breaches and stealer logs. This platform has rapidly become a key player in the fraud market, trading in PII and SSH credentials while making use of both the clear and dark web. Fresh Tools Market has become a go-to platform for cybercriminals seeking access to malicious software such as keyloggers, Remote Access Trojans (RATs), and ransomware-as-a-service. Bohemia accepts Monero and Bitcoin as payment methods and places a strong emphasis on protecting user anonymity through PGP encryption.
Another Record Year For Ransomware Beckons As Crypto Profits Hit $460m
Opiates, while representing a smaller portion of overall drug use, have a significant presence, particularly in the Krasnodar region, which warrants further investigation. Substances other than cannabis are widely used worldwide, as shown by the ”grams without cannabis“ column. Evidence of a varied drug market includes the prevalence of substances other than cannabis in quantities that outweigh cannabis alone. The distribution of the supply of opiates by regions of Russia is more concentrated in the European and southern parts of the country.
Russia’s unique socioeconomic context, for instance, influences drug trade dynamics differently than in other countries. Our proposed research approach can fix this by implementing it in other marketplaces in other countries. The platforms, tools, actors and insights featured in this series are based on intelligence gathered from Searchlight’s extensive deep and dark web dataset. As a criminal market, it is deeply intertwined with a wide range of criminal activities, including cyber-dependent and financial crimes. As these illicit economies continue to flourish, tackling and dismantling the criminal networks involved will require more than technological advancements.
Top Dark Web Marketplaces Of 2025: A Deeper Dive Into Illicit Trade Markets
- Major drug markets in the Dark Web are now worth around $315 million annually according to the United Nations Office on Drugs and Crime (UNODC).
- Social ties and repeated exchanges between vendors and customers were named as the key elements of trust building between the actors (Munksgaard, 2023; Norbutas et al., 2020).
- These scores measure the pervasiveness and impact of various illicit economies and activities, and in 2023 all drug market indicators worsened compared to the previous iteration of the Index.
- Additionally, the integration of privacy-focused cryptocurrencies, such as Monero, has provided users with even greater anonymity options.
- The developed research method allows us to connect darknet drug sales data with official health, crime, and court information.
- These platforms, accessible via darknet links and onion addresses, ensure anonymity through encryption and cryptocurrency transactions.
This combination of technological advancements and user-centric design has solidified the position of darknet markets as a reliable option for drug trade in 2025. The expansion of cryptomarkets has also contributed to the growth of darknet drug trade. These platforms provide a decentralized marketplace where users can interact directly, bypassing intermediaries. The combination of blockchain technology and smart contracts has further enhanced transparency and trust within these ecosystems. In recent years, some darknet markets and fraud shops have been integrating crypto payment processors on their websites via APIs, possibly as a way to improve operational efficiency and increase security. Essentially, these payment processors provide a white label service for darknet markets and fraud shops, and a seamless checkout experience for those services’ customers.

This market also features an ‘Other’ section where users can browse delivery services, as well as bank/SIM cards, passports and other identity documents, hacking services, web design, and laboratory equipment/precursor chemicals. It’s not surprising how drugs promoted in the forum are like RuTor’s most in-demand substances, highlighted by these Mephedrone postings and the top-featured products below. Attacks on drug marketplaces may be interpreted as a possible fight for certain influence in that niche in Dark Web and likely arranged by competing powers representing different groups involved in drug trafficking internationally. “Exit scams occur when operators of marketplaces vanish with funds held in escrow,” TRM Labs explained, adding that Abacus’ sudden disappearance and lack of communication fits this pattern. “Typically, illicit transactions constitute at or below 1% of total crypto activities. While addressing these issues is essential, broadly labeling crypto negatively is inaccurate and counterproductive.”
Contribution To The Harm Assessment Of Darknet Markets: Topic Modelling Drug Reviews On Dark0de Reborn
Whilst a great many products are sold, drugs dominate the numbers of listings, with the drugs including cannabis, MDMA, modafinil,108109110 LSD, cocaine, and designer drugs. One of the central76 discussion forums was Reddit’s /r/DarkNetMarkets/,777879 which has been the subject of legal investigation, as well as the Tor-based discussion forum, The Hub. Sharing a lot of similarities with Exploit, the XSS cybercrime forum also attracts a mixture of threat actors – from simple hacking tool developers to ransomware operators.