These platforms, accessible via darknet links and onion addresses, offer anonymity and convenience for users. “Working through the JCODE initiative, IRS Criminal Investigation and our international partners led the largest and most impactful takedown to date — seizing over $200 million in assets, removing deadly drugs and weapons from circulation, and holding more than 270 individuals accountable. "By cowardly hiding online, these traffickers have wreaked havoc across our country and directly fueled the fentanyl crisis and gun violence impacting our American communities and neighborhoods. But the ease and accessibility of their crimes ends today," said FBI Director Kash Patel.
Then, in April 2014 "Grams", a search engine for these drugs sites, was launched and included "trending" searches and advertising space. Dark net markets provide a tried and tested solution to this abundance of choice. When you buy drugs from street dealers, your choice is limited by geography and who you know. Technically speaking, Silk Road 2.0 is an anonymous market for anything (with some exceptions, such as child pornography), which means there are also sections for alcohol, art, counterfeit, even books.
Category Deep-dive: Illicit Drug Sales Grew And Expanded Outside Of Darknet Marketplaces In 2024
Moreover, we notice that most of the top opioids have a lower mean price than their retail prices. We also noticed that heroin dropped by 60%, whereas codeine increased by 32% from 2014 to 2019, which is roughly in line with the temporal trend of popularity of opioid substances on Reddit from 2014 to 2018, as mentioned in the study by Balsamo et al . Note that we should not overestimate the number of suppliers and buyers given the number of IDs found in this research, but we regarded it as the upper-bounded number of the opioid suppliers and buyers. Both K9 and M30 were mostly found in Darkbay, within 384 listings in the year 2020, whereas Lean appeared 141 times in Empire listings. We evaluated our method on our annotated data set, which yields an accuracy of over 90% for each property extraction, as shown in Table 5.
It dominated Russian and Eastern European trade in drugs and stolen data. Dark web marketplaces have come and gone in a long running cat and mouse game. Immediately after a big takedown, users flood to remaining markets or spawn new ones a whack a mole cycle. For instance, Hansa’s police run honeypot netted thousands of user identities, and dream markets collapse still provokes sting operations.
This finding is roughly in line with the observation of 57 opioid vendors’ origin in a marketplace named Cryptomarket during the period of October 2015 through April 2016, which was reported by Duxbury et al . We found that 182 opioid supplier IDs appeared in both the marketplaces Evolution and Agora from January 2014 to July 2015. To better understand the potential bundling relationship of opioid suppliers across different marketplaces, we calculated the Jaccard similarity coefficient between the suppliers in different marketplaces (Figure 6). Number of monthly newly-appeared and disappeared listings in the marketplaces Agora and Evolution.
Interpol-led Crackdown On Environmental Crime Leads To 225 Arrests In Latin America
“HSI is on the front lines of a digital battlefield, deploying cutting-edge tech, relentless enforcement, and global coordination to hunt down these predators. This historic takedown, led by Europol, resulted in the highest number of seizures in JCODE’s history. Immigration and Customs Enforcement, in collaboration with Europol, the Joint Criminal Opioid and Darknet Enforcement Team, and various national and international partners, announced the results of Operation RapTOR May 22. Borrowing marketing practices from Russian-speaking DNMs, graffiti with the “Breaking Bad” logo and URL has recently been sighted in Liverpool, as well as other British and EU cities.
Hundreds Nabbed In Global Crackdown On Dark-web Drug Marketplace
Its focus on financial fraud and high-value transactions has attracted a dedicated user base, contributing to its growing reputation and market value. Valued at approximately $15 million, Abacus Market is one of the most lucrative platforms in the dark web ecosystem. Another limitation is pointed out in the paper that multiple online suppliers might belong to the same vendor. For example, there might be varying types of heroin or fentanyl, but we could not subcategorize them due to the lack of precise ontology. Although a large body of current research is focused on pathways for treatment of opioid use disorder and analyzing deaths per treatment capacity of substance use providers, these research areas are limited to the demand side of the opioid epidemic 40,41.
- As DOJ noted, the conspiracy involved laundering darknet proceeds through exchanges and peer-to-peer brokers.
- “As law enforcement authorities gained access to the vendors’ extensive buyer lists, thousands of customers across the globe are now at risk of prosecution as well.”
- They use pseudonymous wallets, privacy coins (like Monero), mixers, chain-hopping, and non-KYC platforms to obscure transaction trails.
- There is a pressing need to understand the opioid supply chain to gain new insights into the mitigation of opioid use and effectively combat the opioid crisis.
- “Under the JCODE umbrella, law enforcement agencies across the globe have joined forces to take down criminals who use the darknet to buy and sell narcotics.
Cyble Titan Endpoint Security
One defendant in California led an organization that bought fentanyl in bulk, pressed it into pills with methamphetamine and sold millions of pills to thousands of people on the dark web, he said. They use pseudonymous wallets, privacy coins (like Monero), mixers, chain-hopping, and non-KYC platforms to obscure transaction trails. Cybersecurity experts should pay close attention to these trends, as they often indicate emerging threats and profit-generating tactics among the cybercriminal forums. BidenCash’s rapid rise and focus on financial data make it a significant concern for cybersecurity professionals. It has a bidding feature, with new batches of stolen data being frequently added. It maintains a very strict level of user verification and integration with an official Telegram account to provide real-time updates to users.
Report Fraud, Waste & Abuse
As Europol’s Rob Wainwright noted, users flocked to Hansa expecting refuge, only to be swept up in a trap. On July 19 20, 2017 the Dutch and Europol publicly announced Hansa’s takedown, having collected data on 10,000 buyer addresses and seized 1,000 BTC in escrow. When AlphaBay went offline on July 4, many fleeing users migrated to Hansa which was by then run covertly by police. The site’s creator, Alexandre Cazes, was arrested in Thailand on July 5 and later died in custody. In July 2017 a global law enforcement coalition Operation Bayonet struck.
Treasury Sanctions Head Of Online Darknet Marketplace Tied To Fentanyl Sales
LEuropean Union law enforcement agency Europol says police around the world have seized an online marketplace and arrested nearly 300 people allegedly involved in buying and selling drugs on the dark web. This operation led by the German authorities marks the end of a criminal service that enabled the anonymous trade in high volumes of illicit drugs, including cocaine, MDMA, amphetamines, and synthetic opioids. Research by the National Drug and Alcohol Research Centre at the University of New South Wales found that Archetyp was the largest of the 11 darknet markets monitored in May 2024 by number of listings, with an average of 8,607. The defendants allegedly sold drugs on darknet marketplaces in exchange for cryptocurrency under the monikers “NuveoDelux,” “Mrjohnson,” and “AllStateRx.” Operation RapTor builds on the successes of prior years’ operations and takedowns of marketplaces, which resulted in the seizure of darknet infrastructure from Nemesis, Tor2Door, Bohemia, and Kingdom Markets, providing investigators across the world with investigative leads and evidence. With the closure of giants such as AlphaBay, many sellers and buyers migrated to Abacus in search of a new home, and boy did they find it.This marketplace has over 40,000 listings, offering everything from illegal drugs, fake documents, stolen credit cards, and fake IDs to phishing kits and hacking tools.
The U.S. Attorney’s Office for the Eastern District of California is prosecuting the case. Federal law enforcement officers executed a search warrant at a hotel in Riverside county where Adams and Hosner were residing and recovered more than 10,000 counterfeit oxycodone pills as well as approximately 60 grams of methamphetamine. Adams and Hosner shipped these fentanyl pills to buyers throughout the United States, using the USPS, UPS, and other means of delivery. • On May 12, 2022, a federal grand jury returned a two-count indictment charging Holly Adams, 31, and Devlin Hosner, 33, of Indio, California, with conspiracy to distribute and possess with intent to distribute fentanyl and methamphetamine, and with conspiracy to launder money. The U.S. Attorney’s Office for the Central District of California is prosecuting the case.
As you might guess, it's geared toward the Canadian audience, which makes it somewhat unique within the dark web landscape.It offers over 9,000 listings, ranging from drugs and malware to scam guides and fraud tools. Suppliers and buyers communicate directly, something that is not so common in other markets.Thanks to its real-time inventory updates and highly specific search options, STYX has become a real alternative to traditional large markets. You won't find drugs here, but you will find tons of credentials, RDP access, CVVs, and records stolen using malware.The platform works with data collected by well-known malware such as Lumma, RedLine, Raccoon, Vidar, and Aurora. Although some of these markets prohibit certain extreme content such as violence or exploitation, most operate with very few rules beyond ensuring the security and anonymity of their users. Some of the best-known names include Abacus Market, Russian Market, and BriansClub, all with thousands of illegal items available.Despite closures by authorities or the typical “exit scams” (when a marketplace disappears with all the money), these sites continue to pop up.
All transactions were conducted in cryptocurrency—primarily Bitcoin and Monero—allowing customers and vendors to move funds without using traditional financial rails. That revenue went to fund the site’s operations, including servers and what the DOJ described as “employee” salaries. Upon visiting the site via the Tor browser, users were greeted by a graphic interface and prompted to log in with a unique username and password. Operation Deep Sentinel June 2025 was the Europe led operation that seized Archetyp Market. Operation Bayonet was the 2017 joint law enforcement effort that took down AlphaBay and Hansa. This unprecedented coordinated takedown froze millions in Bitcoin and led to indictments of Hydra’s operators.
The May 2019 seizure of news and links site DeepDotWeb for conspiring with the markets created a temporary disruption around market navigation. The seizures brought in lots of traffic to other markets making TradeRoute and Dream Market the most popular markets at the time. On April 28, investigations into the Italian Darknet Community (IDC) forum-based marketplace led to a number of key arrests. At the end of August, the leading marketplace Agora announced its imminent temporary closure after reporting suspicious activity on their server, suspecting some kind of deanonymization bug in Tor.
