The vendor’s listing of a protonitazene analog boldly states that the compound has a potency 20x greater than that of fentanyl, as seen below. Once received by the buyer, the compound could be pressed into counterfeit pills, like M30s, and further distributed to end consumers. In addition to fentanyl, the presence of nitazenes in the global supply of dangerous synthetic opioids has increased, and China-based vendors have established themselves as the initial source. Nitazenes are a type of synthetic opioid with a similar potency to fentanyl. The US and Europe have seen an increase in nitazine-related overdose deaths in recent years, perhaps due to the halt in the heroin supply following the Taliban’s crackdown. Due to the novelty of these substances (and the fact that many are analogs) the true number of overdoses in Europe could be higher, as forensic drug testing may lag behind the pace of the crisis.
Cryptocurrency is the lifeblood of darknet markets, powering transactions across our top 10 rankings with over $50 million traded monthly as of February 27, 2025. This section delves into the crypto trading landscape of onion marketplaces, exploring adoption trends, wallet strategies, and conversion tools for navigating crypto trading platforms in 2025. From BTC’s speed to XMR’s privacy, USDT’s cost efficiency, and LTC’s lightweight design, these currencies shape the economics of dark pool trading hubs. Our calculator below helps traders convert between BTC, XMR, and USDT, reflecting real-time preferences in the anonymous marketplace ecosystem.
Access This Chapter
Monero (XMR) offers untraceable transactions, cutting tracking risks—BTC’s blockchain exposed 10% of trades in 2024, dropping its use from 80% to 60% in 2025. XMR’s 40% adoption (e.g., Incognito) reflects this shift, though BTC’s speed suits fast trades on Bohemia. Trade only on markets with escrow—our top 10 average 94%+ success, reducing fraud by 25%. Verify escrow terms (e.g., Abacus’s 98% rate) and release funds only after delivery confirmation, avoiding direct deals that spike scam rates to 40% on non-escrow platforms. Use PGP (e.g., GPG or Kleopatra) to encrypt vendor messages—unencrypted comms risk interception by 10% of darknet actors in 2025.
- Vortex Market stands out from other darknet markets due to its intuitive interface, which allows users to easily navigate through an extensive catalogue of goods and services.
- Shocks tend to induce serious structural changes in the multiseller network, but impact the multibuyer network much less severely.
- Therefore, as long as this dark part of the internet exists, these marketplaces will flourish and emerge.
- Saheed earned his degree in Technology and Ethics from the University of Lagos in Nigeria.
How DNMs Operate

Monitoring active marketplaces offers early access to malware kits, credential dumps, and fraud tools. Tracking vendor migration—such as from Archetyp to Exodus—provides insight into tactical shifts. Focusing intelligence collection on specialised marketplaces yields better ROI for threat detection and proactive defence. As reported last year, some drug shops have been outsourcing services like website hosting and payment processing. IKlad.biz and Klad.cc, shown in the chart above, are examples of those infrastructure providers.
Another such feature is wallet-less escrow, also known as direct deposit. Wallet-less escrow makes it impossible for markets to exit scam users by removing the need for them to deposit funds to a wallet controlled by the market. Instead, they receive a new disposable wallet for every order they place, and the cryptocurrency they deposit goes straight to the vendor — the market itself never actually controls it. Cryptonia was an active market that incorporated both multi-signature transactions and wallet-less escrow, though it recently closed down voluntarily.
Similar Content Being Viewed By Others
However, unlike the multiseller network, the S2S network recovers during 2019 and 2020, but slower than the multibuyer network recovery. Therefore, the S2S network appears to be more resilient than the multiseller network but less than the multibuyer network. The same pattern is observed in the whole S2S network (see Supplementary Information Section S5). Nevertheless, by analysing the income of each multiseller, we observe that the median income still reflects their high income, as shown in Fig. Individually, they are able to yield significant high incomes compared to other types of sellers.
– Hydra Collapse

Believe it or not, some dark web marketplaces have pretty advanced systems for building trust. Sellers often need to pay a deposit to prove they’re serious, and they build their reputation through positive reviews. These sites cater to cybercriminals seeking valuable data, such as credit card numbers, login credentials, and personal information. As of 2020, nearly 57% of the dark web was estimated to contain illegal content, including violence and extremist platforms.
Cryptocurrency And Illicit Finance

We also list all of the top NFT collections available, including the related NFT coins and tokens.. We collect latest sale and transaction data, plus upcoming NFT collection launches onchain. NFTs are a new and innovative part of the crypto ecosystem that have the potential to change and update many business models for the Web 3 world. Price volatility has long been one of the features of the cryptocurrency market. When asset prices move quickly in either direction and the market itself is relatively thin, it can sometimes be difficult to conduct transactions as might be needed.
What’s The Benefit Of Escrow Systems?
Despite a 2019 breach that exposed over 26 million credit cards, it continues to operate, indicating sustained trust in its data pipelines. With these stolen credentials, the suspects purchased ghost gun parts and tools from a variety of legitimate websites, which they used to build ghost guns with a 3D printer, and sell for cash. A Manhattan district attorney successfully used this evidence to bring charges against one of the suspects. Conversely, some fraud shops saw an increase in activity and higher revenues on-chain. The chart below shows fraud shops that performed well after the UAPS takedown, indicating that the customer migration was swift, and favored longstanding, trusted fraud shops like Vclub and Bankomat. In addition to various benzodiazepines, stimulants, and psychedelics, one longstanding China-based research chemical manufacturer also sells nitazenes.

We showed that some of the links of this user-to-user (U2U) network are ephemeral while other persist in time. We highlighted that a significant fraction of stable U2U pairs formed as their members were trading with the same DWM, suggesting that DWMs may play a role in promoting the formation of stable U2U pairs. We showed that the relationships between users forming stable pairs persist even after the DWM shuts down and are not significantly affected by COVID-19, suggesting overall resilience of stable pairs to external shocks. According to court records and the TRM Labs investigation, the end of Incognito was foreshadowed by chaos. Though the platform’s administrator later claimed the extortion threat was a “joke,” the damage had been done. According to TRM Labs, Incognito launched in October 2020 and remained active until March 2024.
A Brief History Of DNMs
- Freshtools is a unique marketplace in that it does not only provide the stolen data, but it allows criminals to purchase MaaS which can cause further damage to the victims.
- They may be attributed to a residual amount of Bitcoins in an address or transactions between two business partners where no good is actually given in return, respectively.
- It supports operations in multiple languages and operates on both clearnet and Tor.
- In Arizona, lawmakers passed a Bitcoin reserve law, enabling seized crypto to be held as public reserves.
Its interface is characterised by simplicity and convenience, which has earned it high marks from users in numerous surveys… Emerging trends shaping darknet marketplaces in 2025—insights into cryptocurrency trading and security. The top performers in darknet marketplaces for 2025, excelling in trade volume, vendor ratings, and market influence.
Incognito’s payment system pulls a 95% success rate, clearing 90% of disputes in 36 hours—a sign of its focus on user trust. Its Tor routing keeps a 93% uptime, with rare dips linked to security updates, not outside threats like DDoS. Currency leans toward privacy—BTC handles 55% of trades for speed, while XMR’s untraceable nature hits 45%, up from 35% in 2024, as users chase anonymity amid growing law enforcement watch. The design is sleek and modern, with detailed seller profiles (4.7/5 average from 30,000+ reviews), real-time deal logs, and filters by category, price, and rating, making it a safe, user-friendly pick. Archetyp’s payment protection is a big part of its rep, hitting a 96% success rate—one of the strongest in our top ten—and clearing 85% of disputes within 24 hours with an active moderation team. This keeps trust solid between buyers and sellers, a key piece of its 95% seller rating, backed by over 40,000 reviews.
This multi-role classification, to be implemented in future work, can help gain a more nuanced understanding of the ecosystem and the structure of the dark web supply chains. Overall, our study provides a first step towards the understanding of how users of DWMs collectively behave outside organised marketplaces. Vendors on Incognito paid a registration fee and a 5% commission on every sale.