They offer anonymity to their users by using and developing specialized tools. DWMs are accessed through darknet browsers supporting the onion routing protocol (e.g., Tor), which provides anonymous communication connections35. Additionally, transactions are made with cryptocurrencies, mostly Bitcoin, which also provide anonymity to the transaction parties6,36. While the Bitcoin blockchain is publicly available on Bitcoin core37 or other third-party APIs such as Blockchain.com38, a market or a user can generate a new address for each transaction. To track the transactions of markets and users as entities, the data need to be pre-processed in order to map groups of addresses into entities.
Similar Content Being Viewed By Others

One of the central76 discussion forums was Reddit’s /r/DarkNetMarkets/,777879 which has been the subject of legal investigation, as well as the Tor-based discussion forum, The Hub. Despite growing crackdowns from law enforcement agencies, the dark web remains a hotbed of criminal activity, offering everything from drugs to stolen data. Bitcoin, created in 2008, has become the most widely accepted virtual currency in the world.

Market Value And Popularity
First, it’s true that the amount of illicit activity from cryptocurrency is a tiny slice of the overall pie. “It’s a really tiny percentage, and as a percentage it’s going down all the time,” said Ormsby. Grauer – who studies the role of cryptocurrency in crime – believes that “the industry is becoming more safe overall.” This has broad consensus. Background research tasks included learning from past drug lords, researching legal matters, studying law enforcement agency tactics and obtaining legal representation.

While there may occasionally be multihomers who are active in several markets simultaneously (see Supplementary Information Section S3), multihomers predominantly operate in at most two markets throughout the period of observation. Hence we do not distinguish multisellers by the number of markets in which they operate. Dark web markets have exploded in scale and reach in 2025, becoming the most dangerous hubs for trading drugs, stolen data, and hacking tools. These anonymous marketplaces—operating mainly on the Tor network—are now a primary threat vector for businesses and cybersecurity professionals. And the fragmentation of illicit markets, particularly in drug sales, signals a shift toward decentralization — with criminal enterprises moving away from traditional darknet marketplaces toward more agile and resilient platforms.
Silk Road (marketplace)
Furthermore, we analyse the seller-to-seller (S2S) network, i.e., the network composed only of transactions among sellers, which can be regarded as a supply chain network of illicit goods and services. We highlight that these networks exhibit different resilience regimes in the presence of external shocks, the ecosystem’s resilience being mostly guaranteed by the network of buyers rather than sellers. Dark web marketplaces have been a significant outlet for illicit trade, serving millions of users worldwide for over a decade. This paper aims to identify the key players in Bitcoin transaction networks linked to dark markets and assess their role by analysing a dataset of 40 million Bitcoin transactions involving the 31 major markets in the period 2011–2021.

CoinDesk 20 Performance Update: Chainlink (LINK) Declines 43% As Index Trades Lower
We classify all entities either as sellers or buyers as a function of time. The result is a time series of lists of sellers and buyers for each period and for each market and the U2U network. The classification is performed in five steps (see Fig. 1), as detailed next. The number of sellers in each category and multisellers as a function of time is shown in Fig. Until the end of 2013, when Silk Road is the dominant market (see Fig. 3), market-only sellers is the dominant category, and there are no multisellers. From the last quarter of 2013, U2U-only sellers become the largest category of sellers and remains as the largest throughout the rest of the observation period.
Cypher Marketplace

Since the demise of Wall Street and Dream, two new markets, Empire and Nightmare – which both opened over a year ago – have grown rapidly as users have migrated over from closed sites. Today, Empire has over 28,000 drug listings and Nightmare has over 60,000. In the summer of 2017, Dream market, the second-biggest at that time, had just 48,000 deals. Despite these advancements, criminals continuously adapt, utilizing privacy coins and decentralized networks to evade detection. Challenges like cross-border enforcement and privacy concerns complicate regulation. To outpace criminals, continuous innovation in AI-driven analytics and forensic tools is necessary, ensuring real-time monitoring and intervention.
What Exactly Is Sold On These Marketplaces?
“The retroactive operational security of bitcoin is low,” says Qatar University researcher Husam Al Jawaheri. “When things are recorded in the blockchain, you can go back in history and reveal this information, to break the anonymity of users.” With the increasing popularity of virtual currency, Australian Courts are beginning to deal with sophisticated criminal activity involving bitcoins and the darknet which appears to be intended to disguise the supply of prohibited drugs and the proceeds of crime. Established in 2019, Russian Market is a well-known and highly regarded data store on the dark web, specializing in the sale of PII and various forms of stolen data. Despite its name, the marketplace operates primarily in English and serves a global audience. It has gained a reputation for being a reliable source of high-quality data for cybercriminals.
Emergence And Structure Of Decentralised Trade Networks Around Dark Web Marketplaces
- Operation DisrupTor illustrates the investigative power of federal and international partnerships to combat the borderless nature of online criminal activity.
- Today, the Department of Justice, through the Joint Criminal Opioid and Darknet Enforcement (JCODE) team joined Europol to announce the results of Operation DisrupTor, a coordinated international effort to disrupt opioid trafficking on the Darknet.
- Established in 2022, Torzon market is one of the biggest and most diverse marketplaces on the dark web.
- While darknet markets’ total share of incoming cryptocurrency activity remains extremely low at 0.08%, recent increased volume speaks to the resilience of darknet markets in the face of heightened law enforcement scrutiny.
- Earlier this month, cryptocurrency research firm Chainalysis noted that dark web transactions now account for just one percent of bitcoin transactions, down from 30 percent in 2012.
In this article, we take a look at the history of the relationship between Bitcoin and the Darknet, shed light on legendary cases such as Silk Road, and explain how cryptocurrencies were — and in some cases still are — used in illegal areas. Thanks to the evidence Stefan and his team gathered on the Robertsson brothers, Swedish courts were able to convict them of selling drugs on the darknet. While this week’s takedown recalls the 2013 shutdown of Silk Road, the evolution of darknet commerce is stark. Silk Road popularized the use of Bitcoin, anonymizing technologies like Tor, and vendor reputation systems.
Paralegal Specialists Angela De Falco and Divya Ramjee provided valuable assistance. The Court did not take into account the use of bitcoin and the darknet to disguise the offender conduct as having a direct bearing upon the assessment of the objective seriousness of the offence. Mr Collopy and Mr Cooley were charged with 30 counts of drug-related offences under South Australian drug laws, alleging trafficking, possession, supplying and attempting to supply prohibited drugs. The prohibited drugs were subsequently sent overseas to the US, the UK and Ireland, in order for them to be repackaged into smaller quantities. OKX removed XMR and other privacy-focused tokens including dash DASH$23.43 and ZCash (ZCH) at the end of 2023. For those who are averse to confrontation, and who are sufficiently tech-savvy, the dark web offers an alternative to the risk and violence of dealing drugs offline.
STYX Market

Despite advancements in blockchain analytics and regulatory measures, privacy-focused technologies continue to pose challenges for oversight and Anti-Money Laundering (AML) enforcement. Here, we set out to find the main actors in the DWM ecosystem and assess their systemic impact on a dataset of 40 million Bitcoin transactions involving the 31 major markets in the period 2011–2021. Importantly, the algorithm returns reasonable estimates for the number of sellers when compared against a benchmark of nine DWMs where estimates exist.
Topics And Products Sold
But as the Qatari researchers’ work shows, even improving your privacy practices can’t always erase years-old evidence from the internet, particularly when that evidence is captured in the unalterable record of the blockchain. Even deleting profile information that includes bitcoin addresses may not be enough if a post has been cached or captured by services like the Internet Archive, they point out. “If you’re vulnerable now, you’re vulnerable in the future,” Boshmaf says. Your cutting edge stealth today, in other words, might not save you from the ghosts of bitcoin opsec failures past. The FBI this morning executed approximately 20 residential search warrants across the District of Columbia, Maryland, and Los Angeles, following a year-long investigation into an alleged D.C.-based drug trafficking organization… In NSW, the case of R (Cth) v Mead 2017 NSWDC 1 concerned the use of bitcoin to disguise proceeds of crime.