Though the platform’s administrator later claimed the extortion threat was a “joke,” the damage had been done. Vendors on Incognito paid a registration fee and a 5% commission on every sale. That revenue went to fund the site’s operations, including servers and what the DOJ described as “employee” salaries.
NCB Busts Top Darknet-based Drug Vendor; Seizes Drugs And Cryptocurrency
A seizure notice now appears on the marketplace’s homepage, along with a Cyberpunk-style warning video dramatizing the police operation. In December 2023, the BKA and ZIT seized another major darknet marketplace, the ‘Kingdom Market,’ and arrested one of the administrators in the United States. “Waste your resources on seizing petty websites because they know the use of darknet services is ever growing,” another user wrote.
Common Scams And Fraudulent Activities On Darknet Markets
Just as there are new entrants, the dark web has its veteran markets too, and Brian’s Club is one such market. It has been in operation for more than a decade since its debut in 2014. Brian’s Club is one of the best place to buy stolen credit card info, including CVVs, dumps, and even full account packages without revealing your identity. In fact, everything is in English, and the site picks up users everywhere in the world.
Minneapolis Gunman’s Hate-filled Manifesto, Border Patrol Arrests Firefighters: Unbiased Updates, Aug 29, 2025
In the end, he was sentenced to life in prison for running one of the largest and most scandalous dark web cases in history. Many people go to the dark web to buy things they can’t find elsewhere, but what if what you’re buying is also trying to harm you? Scammers on darknet markets claim to offer legit tools or services, but instead provide you with malicious software that can infect your device. As we mentioned earlier, not everything sold on dark web markets is illegal. As terrible as its reputation may be, some vendors sell legitimate goods or services. Some customers even use the dark web to make anonymous purchases, especially in areas where privacy is a huge concern.
And when it comes to paying, the site sticks to Bitcoin (BTC) and Monero (XMR) to keep transactions private. The dark web is designed in such a manner that it hides the identities and locations of its visitors. This extra privacy makes it much harder for authorities to track down who runs these markets and where they are located. For these reasons, most of these stores naturally like the dark web due to its protection. Still, it’s unclear whether even 150 arrests will be enough to slow things down. As Monaco noted Tuesday, the dark web drug racket was already a billion-dollar industry before the pandemic drove it to new heights.
Torzon Market
“Some claim they don’t do it, then don’t police vendors; some claim they don’t do it, but then they do. Some will be selling precursor products but not finished products.” One particularly revealing moment came in February 2024, when Incognito users reported that BTC withdrawals were disabled—likely part of a deliberate “exit scam.” Lin, or others acting on his behalf, threatened to leak vendor identities to law enforcement unless paid. That extortion threat, combined with increased tracing and investigative pressure, led many users to flee the platform, dramatically reducing deposits and facilitating law enforcement’s final takedown.
For operations security he suggests avoiding storing conversation logs, varying writing styles, avoiding mobile phone-based tracking and leaking false personal details to further obfuscate one’s identity. One of the central76 discussion forums was Reddit’s /r/DarkNetMarkets/,777879 which has been the subject of legal investigation, as well as the Tor-based discussion forum, The Hub. In 2023, the NCB had busted the then biggest darknet based LSD cartel named ‘Zambada’, seized 29,013 blots of LSD, 472 gm MDMA, and ₹51.38 lakh in cash, and arrested 14 persons. The alleged kingpins of that network are currently in judicial custody.
Silk Road And Early Markets
While these outfits are not traditional DNMs, their success highlights how drug vendors are scaling their operations throughout Russian-speaking countries. In spite of Hydra Market’s disruption in 2022, former Hydra affiliates still found operating in today’s DNMs rely heavily on these infrastructure providers. Last December, a Russian court imposed a life sentence on Stanislav Moiseyev, Hydra Market’s suspected founder and operator, although the Moscow prosecutor’s office did not publicly tie the guilty verdict to Hydra.
- Established in 2018, J-CODE seeks to detect, disrupt, and dismantle the most prolific criminal enterprises that rely on the internet or advanced technology to facilitate the trafficking of opioids.
- Officials announced they recovered over two metric tons of drugs, a haul that included a hefty 144 kilograms of fentanyl or fentanyl-laced substances, alongside some 180 firearms.
- In 2017, Dutch police took control of Hansa, a booming darknet market, and the FBI shut down AlphaBay, an even larger competitor.
- In 2024, fraud shop inflows declined by 50% YoY, a sharp downturn from the last three years.
- One China-based pill press manufacturer which advertises on clearnet business-to-business (B2B) websites has on-chain ties to drug vendors on Abacus Market.
A new, Reddit-style forum site called Dread, hosted on a Tor hidden service, has already replaced the seized DeepDotWeb as a community hub, where users discuss which site to use when one is taken down by police or turns out to be run by scammers. In 2023, the New York Police Department (NYPD) Intelligence Bureau, which predominantly handles counter terrorism cases, received a tip about two people in New York City involved in manufacturing and selling ghost guns. Using a series of search warrants and subpoenas, the NYPD found the suspects’ online raw material purchases, and uncovered a crypto dimension to the case, not publicly shared until now. Suspects were exchanging large sums of fiat for cryptocurrency by transferring cash into a mainstream CEX account and buying BTC, which they used to purchase stolen credit cards and identities from fraud shops on the dark web. The Reactor graph below shows five purchases made to fraud shops, four of which passed through intermediary addresses.
Crimes Of The Times: Introducing Pandora’s Box: The Fall Of LA’s Sheriff
“We have very creative people who are themselves very innovative within the law and using a variety of tools to catch people who think they can hide in the dark net,” Wray said at Tuesday’s press conference. The largest number of arrests were made in the U.S., which is in the grips of an overdose crisis. Synthetic opioids, mostly fentanyl, kill more Americans every year than died in the Vietnam, Iraq and Afghanistan wars combined. Avalyan is charged with one count of distribution of cocaine, one count of distribution of MDMA, and one count of distribution of distribution of methamphetamine. Gevorgyan is charged with one count of possession with intent to distribute MDMA and one count of possession with intent to distribute ketamine. Grigoryan is charged with one count of possession with intent to distribute methamphetamine.
Last week, one of the dark web’s most prominent drug marketplaces – Archetyp – was shut down in an international, multi-agency law enforcement operation following years of investigations. It was touted as a major policing win and was accompanied by a slick cyberpunk-themed video. Federal prosecutors have charged two men with running a dark web marketplace that allowed customers to purchase counterfeit money and other illegal goods, including drugs and stolen credit card information, worth more than $430 million. While DNM and fraud shop revenues declined in 2024 following years of concerted international law enforcement efforts, these platforms have managed to sustain their operations by adopting new tactics. As reported last year, some drug shops have been outsourcing services like website hosting and payment processing. IKlad.biz and Klad.cc, shown in the chart above, are examples of those infrastructure providers.
These software are also capable of launching DDoS attacks and phishing campaigns. On the dark web, you don’t need to be a technical expert to design ransomware, and that’s dangerous. Even people with little to no knowledge can buy ready-made ransomware and launch attacks on their victims. If for any reason, you decide to visit these hidden corners of the web, ensure you at least study and understand the common traps.
The demand hasn’t gone away, and suppliers will certainly try, at least, to meet it. The Dutch national police’s Cyber Enabled Crime Team was involved in the operation, codenamed SpecTor. “Typically, illicit transactions constitute at or below 1% of total crypto activities. While addressing these issues is essential, broadly labeling crypto negatively is inaccurate and counterproductive.” On-chain data from BitInfoCharts shows that the daily number of monero transactions has halved from this time last year. Fill out the form to speak with our team about investigative professional services.
Revenues for the fraud shops on the right side of the chart declined, suggesting their dependence on UAPS for payment infrastructure. As for online pharmacies, these have predominantly catered to wholesale and large retail customers in the last several years, and 2024 saw growth in wholesale purchases toward the end of last year. Like DNMs, online pharmacies receive most of their revenues from larger drug resellers. Europol said police operations took place last week across Germany, the Netherlands, Romania, Spain and Sweden to dismantle the dark web Archetyp Market. He recommends verifying market employees carefully, and to weed out law enforcement infiltration through barium meal tests. The estimated street value of the seized drugs is about ₹35.12 lakh, with LSD blots priced at ₹2,500-₹4,000 each.
Archetyp launched in May 2020 and quickly grew to become one of the most popular dark web markets with an estimated total transaction volume of €250 million (A$446 million). It had more than 600,000 users worldwide and 17,000 listings consisting mainly of illicit drugs including MDMA, cocaine and methamphetamine. HSI is a worldwide law enforcement leader in Darknet and other cyber-related criminal investigations. The DHS Cyber Crimes Center (C3) combats cybercrime, online child sexual exploitation, and criminal exploitation of the internet with state-of-the-art forensic technology. The Center investigates large-scale cybercrime threats and provides expertise on cybercrime investigations to the field. It also uses global law enforcement networks, like Europol, to combat cybercrime threats.
