Germany had the lowest percentage of users in the population for both stimulants and sedatives. The work reports usage rates in EU countries slightly below those seen in the USA (20% lifetime usage vs between 7 and 13% in EU). Evolution was active from January 2014 until March 2015, when it closed due to an exit scam. It formed a combination of a carding forum, where card information (e.g., credit/debit/ID/etc.) is traded, and an underground drug market25. Darknet markets — also known as cryptomarkets — provide a largely anonymous platform for trading in a range of illicit goods and services.

Author & Researcher Services
DWMs are accessed through darknet browsers supporting the onion routing protocol (e.g., Tor), which provides anonymous communication connections35. Additionally, transactions are made with cryptocurrencies, mostly Bitcoin, which also provide anonymity to the transaction parties6,36. While the Bitcoin blockchain is publicly available on Bitcoin core37 or other third-party APIs such as Blockchain.com38, a market or a user can generate a new address for each transaction. To track the transactions of markets and users as entities, the data need to be pre-processed in order to map groups of addresses into entities. Conversely, transaction networks obtained from the blockchain contain the entire transaction data of the DWMs and U2U transactions, allowing a thorough investigation of the ecosystem as a whole. In fact, previous studies on DWM transaction networks have revealed crucial aspects of the ecosystem13,14,15.

Best Dарknet Markets For Drugs: Nexus And Abacus In 2025
In the context of cryptomarkets, this makes it a good measure of how well a (potential) vendor reaches different communities of potential buyers. As such, a vendor with a high betweenness is more likely to have a larger pool of buyers as they may be able to draw from more relatively distinct communities of buyers. Additionally, betweenness centrality has been shown to perform well in identifying key players in criminal networks14,20. The results highlight that the same measures are almost as effective at recognizing those that will do well in the future. This can partly be explained by those vendors that are already quite successful and will simply continue to do well.
Forensic Drug Intelligence And The Rise Of Cryptomarkets Part I: Studying The Australian Virtual Market
However, owing to the difficulty of identifying relevant transactions, most studies rely on user surveys17,18 and data scraped from DWM websites19,20,21,22,23,24. In particular, these studies are based on user reviews which carry many inaccuracies, for instance, with respect to the time and value of the transaction19, that further compound error in other measures. Moreover, data scraped from the DWMs cannot assess the U2U transactions which account for the largest fraction of the total trading volume of the ecosystem13. DWMs are also communication platforms, where users can meet and chat with other users either directly—using Whatsapp, phone, or email—or through specialised forums. We estimate that the trading volume of U2U pairs meeting on DWMs is increasing, reaching a peak in 2020 (during the COVID-19 pandemic). By contrast, trading volume on DWMs was negatively affected by COVID-19, mainly due to shipping delays37,38.
About Nature Portfolio
- The non-vendors, consisting of regular forum users and those vendors with no recorded sales at all, form a separate sixth group.
- Markets like Nexus and Abacus dominate due to their consistent link availability and encrypted onboarding.
- We represent the network of transactions by temporal networks where nodes are entities (markets and users), and directed edges represent a transaction pointing from the source to the destination entity and endowed with the time and value of the transaction.
- In this paper, we revealed the prevalence and structure of a large network of direct transactions between users who trade on the same DWM.
- Darknet market lists provide updated onion links, ensuring reliable access despite domain rotations.
However, the success of law enforcement is just one possible explanation for this decline. “Administrators often pull exit scams, in which the market ceases operations but publicly appears to still be active so that administrators can continue collecting money from purchases that will never be fulfilled,” Chainalysis said. Darknet markets have always commanded great interest in the crypto community, first sparked by the infamous Silk Road, which plagued Bitcoin’s reputation during its formative years. When considering the sedative market in other countries, caution needs to be exercised. Norbutas (2018) found that markets are constrained by their wider geography, particularly border controls, and the findings from within the Schengen area countries are complex.
Patterns recommended to avoid include hiring hitmen like Dread Pirate Roberts, and sharing handles for software questions on sites like Stack Exchange. Whilst a great many products are sold, drugs dominate the numbers of listings, with the drugs including cannabis, MDMA, modafinil,108109110 LSD, cocaine, and designer drugs. High-volume vendors launch standalone shops using Tor and Monero, reducing dependency on marketplaces. Sixth, we consider the cumulative mean interevent time for each entity i at time t, defined as the mean of the sequence of time interval between consecutive transactions of an entity until time t, which we denote by \(\phi _i(t)\). This feature is satisfied when \(\phi _i(t) \le \tau\), where \(\tau\) is the maximum value of mean interevent time. For each entity, we keep track of the cumulative values of the six features for each transaction performed by the entity over time.
Access This Article
Then, we reveal a concentration of activity around an elite group of participants, where a large fraction of the trading volume is driven by a small number of players. Specifically, we uncover distinct types of buyers and sellers based on their activity between markets and the U2U network, and detect a shift in the ecosystem’s activity towards the U2U network after a major external shock in the markets. We find that trading properties of buyers and sellers reflect the dominance of DWMs in the ecosystem. By formally describing the ecosystem of DWMs as a temporal network where nodes are the entities and directed edges are transactions pointing from source to destination, we consider different networks of buyers and sellers, promoting different functions in the ecosystem.
Appendix A Table 1: Drug Categorisations
Obtaining a label representing greater success and trustworthiness as a vendor now required sufficient positive feedback, but most important for us, the new ranking system also reported on the exact number of sales a vendor had made up to that point. The second major change to the cryptomarket came in early November 2014, as a by-product of the closure of six cryptomarkets following the joint international law enforcement operation dubbed “Onymous”5. After this disruption, Evolution showed a significant increase in overall activity until its closure. Surprisingly, although DWMs have gained significant attention from the scientific community and law enforcement agencies, little is known about the key players sustaining their unusual adaptability and responsive dynamics.
We find that half of the DWM users trade through U2U pairs generating a total trading volume greater than DWMs themselves. We then show that hundreds of thousands of DWM users form stable trading pairs that are persistent over time. Users in such stable pairs turn out to be the ones with the largest trading volume on DWMs. Then, we show that new U2U pairs often form while both users are active on the same DWM, suggesting the marketplace may serve as a catalyst for new direct trading relationships. Finally, we reveal that stable U2U pairs tend to survive DWM closures and that they were not affected by COVID-19, indicating that their trading activity is resilient to external shocks.

However, respectively nearly 99% and 97% of all vendors detected by PageRank are also found by the activity indicators. On the contrary, the activity indicators find respectively only 94% and 90% of the vendors included by betweenness centrality. Thus, betweenness centrality is able to detect the largest share of successful vendors not included by any of the activity indicators. Therefore, reducing the set of users for law enforcement to investigate using betweenness centrality may provide a fresh perspective.
- With the advent of several markets at the beginning of 2014, the number of multisellers rapidly grows, representing more than 20% of all sellers until the beginning of 2016 (see Supplementary Information Section S3).
- To study the performance of sellers, we analyse the quarterly median income, i.e., the quarterly median of the money received by each seller, for each category and multisellers, as shown in Fig.
- Dark web marketplaces ensure anonymity through decentralized networks, making them popular for discreet transactions.
- Next, we discuss the rationale and computation of our activity indicators and the four network measures employed, in the context of finding key players in cryptomarkets.
- Yes, using darknet markets can be risky, as law enforcement often monitors these markets for illegal activity.
- The results further support the recent efforts of law enforcement agencies to focus on individual sellers43,44,45, as well as, more recently, also buyers46,47.
Vendors with high completion rates gain trust, reflected in detailed review sections. PageRank computes the probability that a random walker, that follows one of the available neighboring edges or jumps to a random node with a particular probability, ends up at a given node. For the directed variant the choice of edge is restricted to following the direction of the edges and adding weights impacts the odds of following any given edge.
Our study indicates that a much higher number of highly active DWM users, on the order of tens of thousands, is involved in transactions with other DWM users. Moreover, our analysis paves the way to a deeper understanding of U2U transactions in online marketplaces. Recent results have shown that transaction networks and activity on DWMs and regulated online marketplaces share several robust macroscopic properties43. One might therefore hypothesise that U2U trading is also a prevalent feature on regulated online marketplaces. Darknet-hosted drug markets (‘cryptomarkets’) are an established model of illicit drug distribution which makes use of specialised online hosting and payment systems to link buyers and sellers remotely. Cryptomarkets appear to professionalise, gentrify and integrate drug markets.


To find out, our recent study surveyed 13 darknet drug vendors, via online encrypted interviews. These markets host hundreds, or in some cases thousands, of people who sell drugs, commonly referred to as “vendors”. The dark web offers vital anonymity for vendors and buyers, who use cryptocurrencies such as Bitcoin to process transactions.
Within the USA, CNS stimulants increased in popularity from an already high base over the time period studied, whilst the UK market shrunk relative to other drugs for sale in that region. This was also the case in India, though these products remained a substantial part of the Indian market activity. In other countries, these base levels and changes over the time period were either substantively or statistically insignificant (or both), with the exception of Austria which saw a large increase in sales of these CNS stimulants.