In one particularly devastating case, a man lost his entire $80,000 pension. Using his credentials, cybercriminals committed a variety of online fraud activity over the course of six months. Given the tooling’s ability to capture new password updates, the perpetrators could easily maintain control over his accounts, and they opened bank accounts in his name and had his physical mail sent to an address where they could receive it. With a tight focus on drug listings, highly rated vendors, stealth shipping, and modern communications via Telegram and Session, Cipher continues to be a go-to source for darknet buyers looking for reliability, speed, and privacy.
For example, cannabis was the most popularly traded drug by domestic cryptomarket vendors, accounting for 25% of all recorded transactions. This was followed by prescription drugs (20%), ecstasy (16%), psychedelics such as magic mushrooms and LSD (12%), methamphetamine (12%) and cocaine (8%). Opioids such as heroin accounted for only 3% of all transactions undertaken by Australian cryptomarket vendors. With the constant threat of data breaches, compromised credentials, and intellectual property leaks, automated dark web monitoring helps organizations stay ahead by continuously scanning dark web forums, marketplaces, and other hidden platforms where cybercriminals trade stolen information. In addition to these tools, the market offers access to compromised accounts, VPN services, and digital identities, making it a hub for individuals involved in illegal activities like hacking, identity theft, and other forms of cybercrime.

‘It’s Happening Everywhere’: 1 In 3 ICE Detainees Held In Overcrowded Facilities, Data Show
However, Durov’s arrest has heightened fears that Telegram will now provide data on its users to law enforcement. Consequently, many vendors are migrating to alternative platforms, including Signal, Session, and WhatsApp. This exodus is expected to continue as Telegram enforces stricter measures to curtail criminal activities on its network and provide new opportunities for interdiction. As large platforms face disruption from law enforcement action, dark web infighting, and an influx of users from Telegram, there’s a growing shift toward smaller, more specialized marketplaces. These new niche sites are focused on specific illicit goods, offering enhanced security and a more targeted environment for buyers and sellers.
– Hydra Falls
Here’s a look at the top 10 dark web markets currently dominating this underground space. Beginning in 2019, the marketplace was victimized daily by DDoS attacks that slowed down its servers and damaged the customer experience, resulting in significant lost revenue. Sources claim that the administrators of Empire Market were paying an extortionist between $10,000 and $15,00 per week, just to refrain from constantly DDoSing their servers.
Ares Market
- Some of the sellers and their ads published at WayWay had references to another marketplace called Solaris.
- The Dutch national police’s Cyber Enabled Crime Team was involved in the operation, code-named SpecTor.
- However, a combination of law enforcement crackdowns, increasing instability from new users flooding the dark web from Telegram, and infighting among the larger markets has triggered a shift.
- However, it becomes difficult when they are trying to ship a bottle of moonshine.
- The investigation was conducted by the DEA, IRS, FBI, and Manchester Police Department.
UAPS, shown in the chart above, is one such example of a payment processor that many fraud shops, including the OFAC-designated Genesis Market, used in 2023. The value received by UAPS in this chart includes payments sent to multiple fraud shops using the service as a payment processor. Hampton was named in an 11-count indictment that charges him with various narcotics and weapons offenses that could result in a sentence of life in prison. According to court documents, he was active on at least nine darknet marketplaces where he typically used the moniker “Narco710.” Hampton allegedly sold nearly $2 million worth of narcotics on two of these darknet marketplaces alone.
On 16 June, any lingering doubt was quickly dispelled when Archetyp’s homepage displayed European law enforcement’s seizure banner – the most recognizable farewell message in the dark web – declaring that the page had been taken offline as part of a law enforcement operation. As Eurasian narco-DNMs continue to battle for market supremacy, the informed prognosis on the Russian dark web is a grim, especially for user safety, according to Telegram darknet chatter. “The absence of a monopolist with simple and understandable rules will lead to a deterioration in the quality of the goods. This, in turn, according to narcologists and darknet analysts, will greatly increase the likelihood of death when using illegal substances,” said a post authored on a Telegram channel widely circulated within the Russian darknet community. Anon Market, a new underground dark web marketplace popped up after the closure of Hydra. Anon Market has a wide range of offerings ranging from Drugs, Software, Tutorials, Forgery, Currencies, Databases and much more.
Common Scams On Dark Web Marketplaces
The EDTF’s mission is to disrupt, dismantle or render ineffective organizations involved in the laundering of proceeds of narcotics trafficking and other financial crimes. Since its inception in 1992, the task force has been responsible for the seizure of approximately $600 million and more than 2100 arrests. The indictment charges Pavey and Hamilton with conspiring with each other and others to engage in drug trafficking, computer fraud, access device fraud, counterfeiting, and money laundering.

After the Biker DLC, players can now purchase buildings for illegal drugs and counterfeit products manufacture, and distribute them through a darknet website called “The Open Road” where law enforcement cannot be notified of the player’s trade. To optimize the process of shopping on darknet marketplaces, I use two techniques. Firstly, I select a drug category I am interested in and sort goods by the newest first. This way I look for recent listings added by both old-timers and beginners. For example, on WHM, I found 16 MDMA listings at a price less than $2, excluding shipping payment. The cheapest MDMA I discovered cost $1.18 per gram with free delivery and 100% refund – a piece of cake, in my opinion.

🛡️ How Axis Intelligence Strengthens Cybersecurity

Volatility has by now become a routine process used by vendors, users and administrators alike after the fall of each dark web market. What may look like disruption from the outside is, in practice, a recovery playbook now hardwired into the design of online drug markets. Archetyp may be gone, but the features that drove its success are already being carried forward by others. Archetyp was more than just the next online drug market to fall, having absorbed much of the vendor traffic displaced by earlier market closures. Following the collapse of illegal dark web marketplace Monopoly Market in late 2023, which was widely suspected to have been the result of law enforcement action, the European dark web community entered a brief period of disarray. Vendors migrated to unstable alternatives such as Incognito and Bohemia, but none of these managed to consolidate trust or operational continuity.
- This helps the vendors or the newbies to remain the best manufacturer and seller.
- Vendors are paid direct by customers, protecting users’ funds from hackers or exit scams.
- By carefully navigating this path, vendors establish themselves as trusted players and become an integral part of the darknet ecosystem.
- One defendant in California led an organization that bought fentanyl in bulk, pressed it with methamphetamine into pills and sold millions of them to thousands of people on the dark web, he said.
- There was an increase in larger-value orders, coronavirus-themed deals, and cut-price custom deals, normally given to valued offline resellers.
Trump Revokes Secret Service Protection For Former VP Kamala Harris
In furtherance of Operation RapTor and in its first action as a JCODE member agency, the Office of Foreign Assets Control (OFAC) additionally sanctioned Iranian national Behrouz Parsarad for his role as the founder and operator of Nemesis Market following seizure of the market. Parsarad was also indicted by a federal grand jury in the Northern District of Ohio on drug trafficking charges related to the illegal business he ran on the dark web. Operation SpecTor was a coordinated international effort spanning three continents to disrupt fentanyl and opioid trafficking on the darknet, or dark web. The operation was conducted across the United States, Europe, and South America, and was a result of the continued partnership between JCODE and foreign law enforcement against the illegal sale of drugs and other illicit goods and services on the darknet. Operation SpecTor builds on the successes of prior years’ operations and takedowns of marketplaces, which result in the seizure of darknet infrastructure providing investigators across the world with investigative leads and evidence. These leads allow U.S. and international law enforcement agencies to identify darknet drug vendors and buyers, resulting in a series of coordinated, but separate, law enforcement investigations, resulting in the statistics announced today.
No Ask Vendor / Seller
It supports operations in multiple languages and operates on both clearnet and Tor. The arrest of Telegram’s founder, Pavel Durov, in August 2024 triggered a notable shift in the operational dynamics of the platform’s drug vendors. McDonald recruited and hired accomplices to help package and ship the narcotics they sold on the darknet. McDonald directed and helped these accomplices package and ship the narcotics. McDonald purchased bulk quantities of fentanyl and cocaine and then directed others to complete hundreds of drug sales involving large quantities of both fentanyl and cocaine. Listings included offerings of prescription medication that was falsely advertised as being authentic.
As for Genesis Market cybercriminals located in the Netherlands, three have already been convicted and received prison sentences considered severe for that jurisdiction. The third convicted cybercriminal — the biggest Dutch user and the number 10 user worldwide — received a four-year sentence. The chart above shows that ASAP and Mega Darknet markets led the large retail and wholesale segments respectively. Looking closer at ASAP Market inflows, it won some share of revenue across all drug purchase types, receiving 37.1% of social supply, 35.7% of large retail, 16.5% of small retail, and 13.5% of wholesale purchases.
In a nutshell, these should be prioritized over single-vendor markets for lesser chances of being scammed. Other risks, such as frauds perpetrated by customers and exit scams, were considered inevitable on the dark web, but also manageable. Both of these claims correspond with previous research showing that the dark web is perceived to be a safer place to buy and sell drugs. Fill out the form to speak with our team about investigative professional services.
One defendant in California led an organization that bought fentanyl in bulk, pressed it with methamphetamine into pills and sold millions of them to thousands of people on the dark web, he said. Individuals across the world can report suspicious criminal activity to the ICE Tip Line 24 hours a day, seven days a week at 866-DHS-2-ICE. Highly trained specialists take reports from both the public and law enforcement agencies on more than 400 laws enforced by ICE.