Since 2020, 2easy has sold massive stealer logs with sensitive data like passwords, bank cards, and initial access credentials. It supports operations in multiple languages and operates on both clearnet and Tor. Known for its publicity stunt releasing millions of stolen card details for free, BidenCash specializes in credit card fraud and identity theft. The Dutch national police’s Cyber Enabled Crime Team was involved in the operation, code-named SpecTor. The operation resulted in the seizure of 50.8 million euros ($53.4 million) — in cash and virtual currencies, nearly 1,900 pounds of drugs and 117 firearms in a series of raids in several countries. One defendant in California led an organization that bought fentanyl in bulk, pressed it with methamphetamine into pills and sold millions of them to thousands of people on the dark web, he said.

This vetting process helps keep the community “clean” from spies, law enforcement, or anyone who might pose a risk. According to a recent trend, the dark marketplaces faced a decline in revenue. Chainanalysis, a blockchain analysis firm, conducted research that shows that the revenue decreased from $3.1 billion (2021) to $2 billion (2024).
Trump Ends Harris’ Secret Service Detail, Extended By Biden Order
“Are there any trustworthy markets left?” one user wrote, complaining that they used the dark web markets as a source for anti-seizure drug Lyrica and now had no good source. “This is so fucked up man, we have the right to do whatever we want to our bodies.” Operation RapTor involves law enforcement actions taken by JCODE member agencies, including the DEA, FBI, FDA OCI, HSI, IRS-CI, and USPIS. State, local, and other federal agencies also contributed to Operation RapTor investigations through task force participation and regional partnerships, as well as the multi-agency Special Operations Division. According to court documents and statements made in court, Srinivasan and Ta used the “redlightlabs” darknet account to advertise and sell counterfeit M30 oxycodone pills containing fentanyl and other illicit drugs. Srinivasan also used the encrypted messaging application Wickr to communicate with and sell drugs to customers.
- In fact, by 2013, a Guardian article revealed that about 70% of listings were drug-related.
- And so, the cycle continues – one closure followed by the next platform launch.
- From June 11 to 13, 2025, law enforcement authorities in Germany, the Netherlands, Romania, Spain, Sweden, and the United States executed a series of synchronized actions targeting the platform’s administrator, moderators, top vendors, and core infrastructure.
- Despite these risks, digital drug markets are often seen as a safer alternative to street dealing, attracting new users who might have avoided traditional markets due to fear of violence or law enforcement.
- Experience the power of The DarkBlue Intelligence Suite and get proactive in your fight against cybercrime.
- As Telegram has end-to-end encryption and anonymous profiles, it makes it an ideal choice for threat actors and hackers to take advantage of.
Arrest Of Telegram Founder Sparks Platform Migrations For Drug Vendors
This silence marked a break from routine and triggered a wave of frantic speculation, with discussions on both the dark web and the clear web debating whether the platform had been infiltrated by law enforcement or if its administrators were staging an exit scam. Background research tasks included learning from past drug lords, researching legal matters, studying law enforcement agency tactics and obtaining legal representation. Patterns recommended to avoid include hiring hitmen like Dread Pirate Roberts, and sharing handles for software questions on sites like Stack Exchange. Exchange rates and cryptocurrency are both relevant to the Darkweb in many ways.
Access This Article

Sanctioned entities, terrorist organizations, and ransomware groups have shifted tactics in response to global crackdowns, embracing new technologies and methods to obscure their activities. This adaptability underscores the need for constant evolution in enforcement strategies and international cooperation. The evolving landscape of crypto crime in 2024 highlights a complex interplay between advancing security measures and increasingly adaptive illicit actors.
Making Cybercrime Easy For Anyone

Instead of meeting or mailing, sellers hid the packages in locations across the urban landscape, such as parks, streets and yards of multi-apartment buildings, and then put the listing on their page on Hydra. What customers bought were coordinates and instructions to find the product. MDMA prices, on and offline, are often a good indicator of supply-chain status.
One Of The Most Popular Dark Web Markets
A study 60 examined trust and reputation building on Darknet marketplaces where vendors and customers exchange illicit drugs and other goods using hidden internet services. They qualitatively analyze data from a study on small-scale drug dealing and case studies on four online vendors. They find trust is established differently online through anonymizing software, cryptocurrencies, escrow services, and customer feedback systems.
Market Operations
Even people with zero technical knowledge can buy phishing kits, ransomware, or stolen logins. Later, in 2013, Silk Road caught the attention of law enforcement and policymakers like US Senator Charles Schumer, who publicly called for a federal crackdown. That push led to the arrest of Ross Ulbricht, the founder of Silk Road, after a long and intense investigation. Once many users begin to rely on the site and store funds in escrow, the operators disappear, taking all the money with them and leaving their customers and clients with nothing.
Opponents of strict dark web policing sometimes argue that such operations drive criminal activity to even more hidden or encrypted platforms, making detection harder. They may also raise privacy and surveillance concerns, warning that aggressive cyber policies risk collateral impacts on online freedom and legitimate users of anonymity technologies. Articles categorized as “left” provide more commentary on societal impacts, such as links between the marketplace and organized crime in Sweden, or focus on harm caused by synthetic opioids.
Freshtools is a unique marketplace in that it does not only provide the stolen data, but it allows criminals to purchase MaaS which can cause further damage to the victims. It is one of the most active and up to date markets and always provides new and updated malware and data. Established in 2019, Russian Market is a well-known and highly regarded data store on the dark web, specializing in the sale of PII and various forms of stolen data. Despite its name, the marketplace operates primarily in English and serves a global audience.

Machine learning and artificial intelligence techniques can analyze large amounts of social media data to identify patterns and trends related to the illicit drug trade and drug trafficking in the Darkweb. Data mining and classification algorithms can be applied to big data sets to identify suspicious activity and potential threats, making tracking and disrupting illegal drug networks in the Darkweb easier. However, if we’re being honest, the majority of activity on darknet markets involves illegal or heavily regulated items.
The Shift Toward Smaller, More Niche Markets
Learn how to automate financial risk reports using AI and news data with this guide for product managers, featuring tools from Webz.io and OpenAI. Its focus on financial fraud and high-value transactions has attracted a dedicated user base, contributing to its growing reputation and market value. STYX Market focuses specifically on financial fraud, making it a go-to destination for cybercriminals engaged in this activity. Listings included offerings of prescription medication that was falsely advertised as being authentic. For example, in November 2023, while operating in an undercover capacity on Incognito Market, a law enforcement agent purchased and received several tablets purported to be oxycodone.
Silk Road (marketplace)
This might be because the suppliers tend to promote their products across various marketplaces and to increase sales. (The name is a pun on Tor, the anonymity browser that enables dark web access.) Last year’s Operation DisrupTor netted a similar number of arrests and double the drug seizures. DarkMarket is also not the only dark web marketplace to have its servers seized. It is a hub for financial cybercrime and offers a wide range of illicit services and stolen data that cater to sophisticated cybercriminals. Why are these markets still seen as enticing places to sell drugs, despite the risks?
- When Archetyp went fully offline in June 2025, it triggered the same recovery reflexes seen after past collapses.
- Buying directly from an online dealer—as opposed to through one of the marketplaces—is generally inadvisable.
- To better understand the potential bundling relationship of opioid suppliers across different marketplaces, we calculated the Jaccard similarity coefficient between the suppliers in different marketplaces (Figure 6).
- Seizures of cocaine reached a record level in 2021 in West and Central Africa, a significant transit region for cocaine.
- The anecdotally reported lower presence of unwanted fentanyl in dark-web drugs is an attraction for many in an era when opioid markets have been flooded with it.
- Even with the increase in law enforcement pressure, the dark web market still achieved a revenue of $2 billion in 2024.
Mackey et al 13 collected tweets related to the opioid topic to identify illicit online pharmacies and study the illegal sale of opioids in online marketing. Cherian et al 12 gathered codeine misuse data from Instagram posts to understand how misuse is happening and its misused form. However, to the best of our knowledge, no large-scale study, which may cross multiple anonymous marketplaces and is cross-sectional, has been conducted to profile the opioid supply chain and unveil characteristics of opioid suppliers, commodities, and transactions. In their study 65, investigated how Darknet market users establish and compare drug quality. They use a two-stage method, analyzing a user forum and conducting qualitative interviews with Darknet users. They find that quality can mean reliability, purity, potency, and predictability of effect and that users draw on embodied, craft, and chemical knowledge to assess quality.