Some of the sellers and their ads published at WayWay had references to another marketplace called Solaris. It also has its own forum with the same name for discussions between buyers and sellers. As of today, this marketplace is one of the most significant players in drugs sales in Dark Web. Major drug markets in the Dark Web are now worth around $315 million annually according to the United Nations Office on Drugs and Crime (UNODC). When it comes to cybercriminal enablement, markets like Kraken Market, the DNM Aggregator, and Exploit.in are go-to services, providing bad actors with tools to carry out ransomware attacks, hacks, and more.
- For example, there are at least 3 operators responsible for the security of the project, as well as over 15 moderators.
- It features over 40,000 listings including narcotics, counterfeit items, hacking tools, and stolen data.
- Kraken Market also captured the largest share of transfers potentially sent for the purpose of obfuscating funds, as well as buying illegal products.
- Likely, they used similar tactics, and were able to successfully phish some number of Blacksprut users.
- Vendors migrated to unstable alternatives such as Incognito and Bohemia, but none of these managed to consolidate trust or operational continuity.
- TRM Labs is the only blockchain intelligence provider with a specialist category unique to individual drug vendors — and this year, we saw incoming volumes sent to illicit vendor shops more than double.
Russian Language Darknet Marketplaces Continue To Drive Overall Volume Of Illicit Drug Sales

Still, the disruption of Hydra dealt a “huge blow“ to the ecosystem, according to multiple sources on the Dark Web. Darknet markets were one of two categories of crypto crime that saw revenues rise in 2023. In total, darknet markets and fraud shops received $1.7 billion last year, a rebound from 2022 — the year that saw the sizable Hydra Marketplace close.
The Shift Toward Smaller, More Niche Markets

Users of these markets usually access them through the Tor browser or other specialized software. Once they’re connected, they can browse product listings, communicate with vendors, make purchases and even leave reviews for other users. These markets are often structured like an online shopping website with vendors selling everything from drugs to weapons and counterfeit goods. The anonymity and lack of rules that define darknet marketplaces are exactly what make them breeding grounds for fraudulent activities.
International Law Enforcement Cooperation
They engage in financial crime and sell other people’s stolen personal information, since they’re under the veil of anonymity. Darknet-hosted drug markets (‘cryptomarkets’) are an established model of illicit drug distribution which makes use of specialised online hosting and payment systems to link buyers and sellers remotely. Cryptomarkets appear to professionalise, gentrify and integrate drug markets. Therefore, they can be hypothesised to have effects on drug availability by allowing purchases by people who use drugs (PWUD) outside of face-to-face networks that have typified drug distribution. They may attract new buyers and may change use patterns by offering a greater range of higher-potency drugs.
Crime Forums And Markets Specializing In Cybercrime Enablement

The ensuing war for darknet market dominance that began in 2022 continued into 2023, but no other market has since matched Hydra’s financial success. In addition, the surface web, including social media and e-commerce platforms, increasingly offers criminals – particularly in the illicit drug trade – a vast customer base, ease of use and a measure of anonymity. Wildlife trafficking is also becoming increasingly reliant on e-commerce, with Indonesia and China acting as major hubs for this trade. The dark web market changes all the time, but some dark web marketplaces have made a name for themselves as the biggest and busiest spots.
Ransomware actors and fraudsters are leveraging technological advancements, including cross-chain bridges and artificial intelligence, to bypass detection and scale their operations. The evolving landscape of crypto crime in 2024 highlights a complex interplay between advancing security measures and increasingly adaptive illicit actors. While efforts to curb illegal activities have shown promising results, threat actors continue to innovate — exploiting vulnerabilities within decentralized finance, blockchain infrastructure, and emerging technologies. The market frequently makes headlines for releasing massive troves of stolen data, often as a way to advertise its services.
- Archetyp’s takedown might make headlines, but it won’t stop the trade of illicit drugs on the dark web.
- Organizations need automated dark web monitoring to prevent cyberattacks.
- This provided a baseline understanding of the spread and prevalence of various drugs.
- Established in 2020, Awazon Market has quickly become one of the most famous darknet marketplaces.
- Of course, the promise of secrecy and unfiltered access might lure you in, but those same features are what make the environment so risky.
Archetyp Was One Of The Dark Web’s Biggest Drug Markets A Global Sting Has Shut It Down
The chart above shows that ASAP and Mega Darknet markets led the large retail and wholesale segments respectively. Looking closer at ASAP Market inflows, it won some share of revenue across all drug purchase types, receiving 37.1% of social supply, 35.7% of large retail, 16.5% of small retail, and 13.5% of wholesale purchases. One Archetyp Market moderator and six of the marketplace’s highest vendors were also arrested in Germany and Sweden. Postal Inspection Service and our partners around the world stand united. No matter where criminals hide, we will find them, dismantle their operations, and bring them to justice.
Just visiting these sites can attract attention from law enforcement, especially if you interact with known vendors or download suspicious content. Even if you’ve never visited these markets, your personal and financial data might already be there, having been leaked through a data breach. Criminals use this information for money laundering, opening bank accounts, applying for loans, and draining your finances.
Dark Web Drug Trafficking
Within hours, vendors were resurfacing on forums, scrambling to reconnect with buyers, showing proof of their identities and reassuring business continued as usual. In parallel, many began migrating to alternative markets, initially Abacus and TorZon Market, which became early landing zones. It was in this vacuum that Archetyp emerged, eventually becoming a key landing zone for vendors displaced by earlier market collapses. One of its defining features was its structured support for identity continuity.

Prior to its takedown by law enforcement, narcotics traffickers and cybercriminals openly traded in illegal drugs and services on Nemesis, which was designed with built-in money laundering features. Nemesis had over 30,000 active users and 1,000 vendors and facilitated the sale of nearly $30 million worth of drugs around the world between 2021 and 2024, including to the United States. Today’s sanctions designation is OFAC’s first action as a member of the Federal Bureau of Investigation (FBI)-led interagency Joint Criminal Opioid and Darknet Enforcement (JCODE) Team. Operation RapTor was a global, coordinated effort by law enforcement in the United States, Europe, South America, and Asia to disrupt fentanyl and opioid trafficking, as well as the sales of other illicit goods and services, on the darknet, or dark web. JCODE and Europol’s European Cybercrime Centre (EC3) continue to compile intelligence packages to identify entities of interest. These leads allow U.S. and international law enforcement agencies to identify darknet drug vendors and buyers, resulting in a series of coordinated, but separate, law enforcement investigations, reflected in the statistics announced today.

The cartels then use those chemicals to manufacture fentanyl that is later sold in the U.S. Individuals across the world can report suspicious criminal activity to the ICE Tip Line 24 hours a day, seven days a week at 866-DHS-2-ICE. Highly trained specialists take reports from both the public and law enforcement agencies on more than 400 laws enforced by ICE.
Discover Content
Operation RapTor involves law enforcement actions taken by JCODE member agencies, including the DEA, FBI, FDA OCI, HSI, IRS-CI, and USPIS. State, local, and other federal agencies also contributed to Operation RapTor investigations through task force participation and regional partnerships, as well as the multi-agency Special Operations Division. “Operation RapTor shows that the dark web is not beyond the reach of law enforcement,” said Head of Europol’s European Cybercrime Centre, Edvardas Šileris.
This is why the study’s primary purpose, like Yannikos and other studies 23-25, was to define it as bridging public health and the illicit drug market. By analyzing the scale and nature of drug availability, the frequency of offers, and the regional distribution of illegal drug activities on a Hydra market, we aim to link these findings with official indicators of illicit drug use disorders. We integrated metadata from official legal, police, courts, and health-related variables with darknet data for a comprehensive analysis but did not use apps as a data source as in another research 26. Having outlined the previous investigations and the significance of developing the new darknet drug markets research methodology, we now turn to the methods employed to investigate these issues. Fraud shops are vendors that typically operate on the dark web and facilitate the sale of stolen data and personally identifiable information (PII), which cybercriminals abuse in illicit activities like scamming, identity theft, and ransomware.