But with blockchain intelligence advancing and global partnerships strengthening, law enforcement is better positioned than ever to detect, disrupt, and dismantle these operations. All transactions were conducted in cryptocurrency—primarily Bitcoin and Monero—allowing customers and vendors to move funds without using traditional financial rails. The post-Incognito environment likely saw vendors diversifying to multiple marketplaces and using new aliases, which contributes to the fragmentation mentioned earlier. For instance, some vendors have shifted to platforms like Telegram or WhatsApp (in closed groups) to sell drugs, which is a decentralization of the classic market model – harder to police, but also less efficient for buyers.
Exit Scam & Extortion
When a primary link becomes inaccessible, mirror links provide immediate alternatives, ensuring continuous availability of the marketplace. The Nexus market url is a prominent example of a dark web drug marketplace that facilitates a wide range of goods. Access to a darknet market is typically through a specific onion link or mirror, ensuring continuous availability. The darknet provides a resilient ecosystem for commerce, with platforms like the Nexus darknet market offering a sophisticated interface for transactions. Instead, he warned users that he had records of over 500,000 orders and more than 860,000 cryptocurrency transaction IDs.
Throughout the investigation, law enforcement also leveraged the darknet community’s own reactions to Incognito’s collapse. There were also unconfirmed rumors in the cybercrime community that Incognito’s sudden troubles (the withdrawal freezes) could have been linked to law enforcement pressure – though the evidence suggests it was Pharaoh’s own exit scam scheme. Taking down a major darknet marketplace is a complex undertaking, but in the case of Incognito Market, authorities deployed a multifaceted strategy that ultimately overcame the anonymity tools protecting “Pharaoh” and his operation. For example, the site became known for listings of high-purity narcotics (like Afghan heroin and premium cocaine) and had vendors shipping globally – indicating that major drug suppliers saw Incognito as a profitable channel. The platform required users to create accounts with usernames and passwords, and it likely encouraged or enforced PGP encryption for private messages (a common security practice on darknet sites).
Platforms like the Nexus darknet market exemplify this progress with their refined user interfaces, which streamline the process of browsing and purchasing items. Additionally, the market staff imposed a full ban on all opiates and opioids (hydrocodone, oxycodone, heroin, etc), along with all other narcotics that fall under the deliriant class, not just fentenyl like many other darknet markets. HSI is a worldwide law enforcement leader in Darknet and other cyber-related criminal investigations.
Credible reporting from the referenced agencies, in addition to contributions from ATF; Army CID; CBP; Department of Treasury’s FinCEN and Office of Foreign Assets Control; and NCIS enabled domestic law enforcement actions in support of Operation RapTOR. Operation RapTOR includes law enforcement actions taken by JCODE member agencies, to include ICE HSI; the DEA; FBI; FDA-OCI; IRS-CI; and USPIS; in addition to foreign partners listed below. Led by Europol’s European Cyber Crime Centre Operation RapTOR united the FBI-led JCODE team — comprised of ICE HSI and law enforcement partners from the United States, Europe, South America, and Asia — to disrupt fentanyl and opioid trafficking, as well as sale of other illicit goods and services on the Darknet. "Under the promise of anonymity, Lin's alleged operation offered the purchase of lethal drugs and fraudulent prescription medication on a global scale," said James Smith, an assistant director in the FBI's New York office. A 23-year-old man from Taiwan has been arrested on charges of selling at least $100 million worth of illegal drugs online through a site on the dark web known as the "Incognito Market." For four years Darknetlive was a rare unbiased source of news for users of Tor hidden services (the “darknet”).
- The message included a list of the "top" vendors who had paid the ransom to protect their customers and themselves.
- Incognito Market’s fall from a trusted darknet marketplace to a perpetrator of mass extortion serves as a stark reminder of the inherent risks in engaging with these illicit platforms.
- It was a breathtaking run for “Pharaoh,” but as the next section shows, law enforcement was meticulously closing in on this dark web chameleon.
- The operational foundation of modern darknet commerce rests on the integration of encrypted networks and cryptocurrency payments.
- RUI-SIANG LIN, 23, of Taiwan, pled guilty to one count of narcotics conspiracy, which carries a mandatory minimum sentence of 10 years in prison and a maximum potential sentence of life in prison; one count of money laundering, which carries a maximum potential sentence of 20 years in prison; and one count of conspiracy to sell adulterated and misbranded medication, which carries a maximum potential sentence of five years in prison.
Full Anonymity Of The Incognito Onion User
In total, Incognito Market promised to leak more than half a million drug transaction records if buyers and sellers didn't pay to remove them from the data dump. But if you've lulled people into a sense of security, I guess it's easier to extort them.” “Maybe the whole thing was set up to create a false sense of security,” Ormsby says. Then in March of this year, the site suddenly dropped offline, taking all the funds stored in buyers' and sellers' wallets with it. According to the FBI, the market took nearly a year to catch on, with virtually no sales during that time.
Incognito Marketplace Review
The cryptocurrency-focused publication CoinTelegraph highlighted these withdrawal problems on March 6, accusing Incognito Market of exit-scamming its users out of their Bitcoin and Monero deposits. Incognito Market claims it will publicly dump 557,000 orders and 862,000 cryptocurrency transaction IDs at the end of May unless vendors comply with their demands. In exchange for listing and selling narcotics as a vendor on Incognito Market, each vendor paid 5% of the purchase price of every narcotic sold to Incognito Market. HSI New York, in coordination with law enforcement partners, remains resolute in its commitment to protecting the public from individuals utilizing dangerous means to make a profit.” The EDTF is the premier money laundering task force in the nation and is comprised of more than 200 law enforcement personnel representing approximately thirty-five (35) federal, state, and local law enforcement and regulatory agencies.
New Anti Anti-Money Laundering Services For Crooks
Markets are increasingly implementing features such as multi-signature transactions and two-factor authentication, setting a new standard for secure and anonymous online trade. Current trends observed in the 2025 darknet market list indicate a clear movement towards enhanced security protocols. This financial layer is complemented by robust user verification processes and escrow services that protect both vendors and buyers, fostering a trusted environment for commerce. These links are regularly updated on community forums and dedicated link lists to maintain operational security.
Combating Transnational Crime
Its success also coincided with a broader rebound of darknet commerce; by 2023, dark web markets collectively grossed about $1.7 billion in cryptocurrency revenue, recovering from a slump after the 2022 takedown of the infamous Hydra market. We also explore the legal fallout and what Incognito’s downfall signals for the future of online black markets. Until that moment, Lin led a double life that astonished both law enforcement and the darknet community. The only question is whether law enforcement can shut down the market and arrest its operators before the exit scam takes place.” Incognito Market has priced its extortion for vendors based on their status or “level” within the marketplace.
As Special Agent Ivan Arvelo of HSI put it, the Darkweb and Cryptocurrency Task Force is leveraging “cutting edge techniques to target even the internet’s most savvy criminals” – and in this instance, they proved that point emphatically. For cybersecurity experts, this case reinforces the value of blockchain forensics, open-source intelligence, and cross-platform correlation in investigations. The arrest operation at the airport was coordinated and swift, giving Lin little time to react or attempt any digital sabotage (like wiping devices).
Easy Access To Your Favorite Darknet Shops
Building on the successes of prior years’ operations, Operation RapTOR furthered global efforts to dismantle darknet marketplaces, resulting in the seizure of darknet infrastructure from Nemesis, Tor2Door, Bohemia, and Kingdom Markets. Dozens of markets have come and gone, and to Tor users, mainstream media doesn’t seem to care when anything happens in their neighborhood. When Ross Ulbricht was arrested in 2013 for allegedly running the Silk Road drug marketplace, reporters went wild publishing over five hundred articles covering his case. Incognito, a darknet drug marketplace, purchased the news site Darknetlive in November 2022. It allowed users to buy and sell drugs, including cocaine, LSD, MDMA and prescription amphetamines, such as Adderall, using Bitcoin (BTC) and Monero (XMR) as payment methods.
The cryptocurrency-focused publication Cointelegraph.com reported Mar. 6 that Incognito was exit-scamming its users out of their bitcoins and Monero deposits. Anyway, if anything were to leak to law enforcement, I guess nobody never slipped up.” Under the promise of anonymity, Lin’s alleged operation offered the purchase of lethal drugs and fraudulent prescription medication on a global scale. On March 12, 2020, before Incognito Market launched, LIN emailed himself a rough diagram of a darknet marketplace. Incognito Market was an online narcotics bazaar that existed on the dark web. Although the FBI says Lin tried to swap his bitcoins for harder-to-trace monero before cashing out the cryptocurrency at an exchange, the criminal complaint points to timing and amount correlations that nonetheless allowed the FBI to follow his funds to a crypto exchange where he allegedly liquidated the dirty funds.
The information here may be outdated and links may no longer function. The mission of the EDTF is to disrupt, dismantle, or render ineffective, organizations involved in the laundering of proceeds of narcotics trafficking and other financial crimes. The EDTF encompasses a standalone Cyber Division as part of an effort to stay abreast of emerging criminal threats and in keeping with current and future investigative priorities. HSI New York leads and directs all operational and administrative activities of the El Dorado Task Force (EDTF). “The FDA is committed to continuing its work to disrupt and dismantle the illegal sales of drugs on the dark web, where such sales far too often have tragic consequences,” said the FDA’s Office of Criminal Investigations Kansas City Special Agent in Charge Charles Grinstead. Lin’s alleged actions of putting profits before public health were not only reckless and dangerous, but unconscionable.
“The FDA is committed to continuing its work to disrupt and dismantle the illegal sales of drugs on the dark web, where such sales far too often have tragic consequences,” said Special Agent in Charge Charles Grinstead of the Food and Drug Administration’s Office of Criminal Investigations (FDA-OCI) Kansas City Field Office. The El Dorado Task Force’s Darkweb and Cryptocurrency Task Force leverages cutting-edge techniques to target even the Internet’s most savvy criminals. “The defendant’s greed and disregard for others was further demonstrated by his alleged extortion attempt during the platform’s final days. “Drug traffickers who think they can operate outside the law on the dark web are wrong,” said Attorney General Merrick B. Garland.
For the darknet market users (buyers and vendors), Incognito’s rise and fall carries its own lessons, which influence the broader trends. The rise and fall of Incognito Market is a chapter in the ongoing evolution of darknet marketplaces – a world that has proven remarkably adaptive in the face of law enforcement crackdowns. Pharaoh openly advertised Antinalysis on Dread, framing it as a way to help darknet users and “those who needed complete privacy on the blockchain” evade law enforcement scrutiny.
Incognito Darknet
A sketch of a dark-web market's infrastructure that Lin emailed to himself eight months before allegedly creating Incognito Market, according to the DOJ. It describes functionality such as how “vendors” and “buyers” would register, make purchases, and encrypt shipping addresses. In the DOJ's criminal complaint against Lin, it points to a handwritten document the FBI pulled from his email, which appears to sketch out a flow chart for a dark-web market's mechanics. Among all those incongruities, though, it's the image of Lin giving his cryptocurrency crime training in St. Lucia—which Lin proudly posted to his LinkedIn account—that shocked Tom Robinson, a cofounder of the blockchain analysis firm Elliptic, who has long tracked Lin's alleged Pharoah alter ego. Readers are encouraged to explore local laws and understand probable lawful consequences for darknet technology use.
