Usually, it takes a few weeks for buyers to transfer to alternative or new sites. When cops shut that site, they knew users would migrate to any service they could – and many fed to Hansa market, which the cops had seized and allowed to continue operating so they could capture user data. Market URLs change rapidly nowadays on the dark web, to escape malicious hacking by blackmailers.
Scams And Fraud Declined
It is expected new marketplaces will emerge in 2023 (like the recently launched Kraken) to expand influence. The key 10 marketplaces outlined in this report will continue to keep fighting for market monopolization. As outlined in the report, geopolitics and drug trafficking have become inextricably linked, that’s why the volume of shadow economy in the Dark Web will remain to grow and accelerated by ongoing tensions. The law enforcement community needs to develop new ways to monitor illegal drug trades in the Dark Web and adjust their tactics to the dynamically changing threat landscape. In our study, a total of 248,359 listings from 10 anonymous online marketplaces and 1,138,961 traces (ie, threads of posts) from 6 underground forums were collected.
Almost Half Of All Illicit Crypto Volume Occurred On The TRON Blockchain

Though the platform’s administrator later claimed the extortion threat was a “joke,” the damage had been done. Mega Darknet Market is the dominant drug supply source for drug vendors on other darknet sites, holding a 63.4% share of that market. When looking at darknet drug markets serving Russia-based customers, Kraken Market captured 30.9% of market share, with Blacksprut and Mega Darknet markets closely following.
Underground Opioid Trading
Customers wiring funds with crypto-linked entities that have a jurisdictional profile that doesn’t align with the customer’s background (e.g. retail company based in US, sending wires to exchanges in multiple other jurisdictions). Business purposes that don’t align with the counterparty’s services (e.g. a “crypto investment” to a crypto payment processor service) indicate suspicious intentions behind the transfer. Attackers have increasingly focused on vendors and service providers like CDK Global and Blue Yonder to maximize downstream impacts. This tactic has been particularly disruptive in the technology and manufacturing sectors, where dependencies are high. This includes ISIS and its affiliates in multiple countries around the world, as well as Iranian-backed groups like Hamas and Palestinian Islamic Jihad (PIJ), which have received hundreds of thousands of dollars in cryptocurrency over the past few years. Nevertheless, to date cryptocurrency use (especially as it relates to fundraising campaigns) appears to be primarily confined to small-scale transactions.
Advocates Of Dark Web Drug Sales & Ulbricht

And beware—while many explore out of curiosity or for research purposes, it’s important to remember that engaging with these platforms, even as an observer, can lead to serious legal and ethical consequences. Some users utilize reagent testing kits, but testing is not always reliable and varies widely in accuracy. Chris Monteiro believes the police should radically reassess their strategies towards dark net cyber-crime. “We would encourage anyone who is a victim of crime to report it to the authorities.” Although all the vendors use pseudonyms, for fairly obvious reasons, they keep the same fake name to build up a reputation.
World Market Darknet
As of today, this marketplace is one of the most significant players in drugs sales in Dark Web. Beyond Russia, RuTor services the CIS countries of Azerbaijan, Armenia, Belarus, Georgia, Kazakhstan, Kyrgyzstan, Moldova, Tajikistan, Turkmenistan, and much of Uzbekistan. As observed in our data set, the opioid suppliers in the marketplaces Evolution, Pandora, and Silk Road accepted escrow as a method of payment. In fact, the shutdown of the marketplace Evolution was discovered to be an exit scam, with the site’s operators shutting down abruptly to steal the approximately US $12 million in bitcoins that it was holding as an escrow 39. To better understand the potential bundling relationship of opioid suppliers across different marketplaces, we calculated the Jaccard similarity coefficient between the suppliers in different marketplaces (Figure 6). We found that 182 opioid supplier IDs appeared in both the marketplaces Evolution and Agora from January 2014 to July 2015.
From Silk Road To RapTor: The Evolution Of Darknet Markets
According to the Index, the online purchasing of synthetic drugs may suggest the existence of an established cyber environment, which implies a heightened risk of cyber-dependent criminality. The ubiquity of the internet has transformed black markets, with shadowy street transactions now taking place in sophisticated digital marketplaces. According to Europol’s 2025 Serious and Organised Crime Threat Assessment report, nearly all forms of serious and organized crime now have a digital footprint. Criminals are leveraging the online domain to increase efficiency and maintain anonymity, and darknet markets are generating US$5–7.5 million in daily revenue.
WeTheNorth Market
If a state-level agency was able to monitor computers that served as entry and exit relays, simulation studies showed that high-powered statistical analysis could yield identifying information for 25 to 50 percent of monitored traffic. Darknet websites were nearly invulnerable to this strategy, since they accepted communications only from Tor. However, the site visitors’ computers may have contained identifying information, which could be revealed inadvertently in an error message. One obvious point is the challenge, for people without technical know-how, of accessing dark-web marketplaces through the necessary software. I would be able to do it with the help of my friends’ advice; without it, I’d be stuck relying on online guides that I might not feel comfortable trusting.
- After that, an opioid buyer often leaves review comments under the product listing or discusses the purchasing experience in the forum (step 12).
- Sure, you might come across listings for legit products like handcrafted jewelry or digital art, but those are few and far between.
- He died in early 2017 from “acute fentanyl intoxication.” He had received a package from an online seller just 30 days before his death.
- Brian usually buys his illegal drugs from “traditional dealers,” as he put it.
- While a number claim to sell “fentanyl-free” dope, reviews indicate that they’re lying.
The largest driver of the overall decline was a 30% fall in sanctions volume, from USD 25.3 billion in 2022 to USD 16.2 billion in 2023. The total proportion of illicit funds on the blockchain fell by 9%, from 0.70% in 2022 to 0.63% in 2023. And while still massive, at USD 34.8 billion, the volume of illicit funds was 30% lower than the USD 49.5 billion recorded in 2022. Chainalysis also noted that some markets are openly advertising their wares in Russia, with giant 3D billboards (Kraken Market) and QR codes on subway trains (Mega Darknet Market). Marie had never purchased drugs in the conventional way—and still hasn’t. In order to gain control of victims’ computers, the malware Genesis Market employed used a legacy Bitcoin address to determine the command-and-control (C2) server, from which cybercriminals initiated remote access to infected devices.

The Dark Web As A Platform For Crime: An Exploration Of Illicit Drug, Firearm, CSAM, And Cybercrime Markets

Bayonet/GraveSac (the coordinated takedown of the AlphaBay and Hansa Market darknet marketplaces by US and European law enforcement in 2017), which left the Western DNM ecosystem reeling. Only four Russian-language DNMs left the approximately 20-strong ecosystem in 2024. The departure of market leaders such as Solaris Market — which ceased operations in autumn 2024 — is a rare occurrence. HSI New York leads and directs all operational and administrative activities of the El Dorado Task Force (EDTF).
The EDTF is the premier money laundering task force in the nation and comprises more than 200 law enforcement personnel representing approximately 35 federal, state and local law enforcement and regulatory agencies. The EDTF encompasses a standalone Cyber Division as part of an effort to stay abreast of emerging criminal threats and in keeping with current and future investigative priorities. The EDTF’s mission is to disrupt, dismantle or render ineffective organizations involved in the laundering of proceeds of narcotics trafficking and other financial crimes.
Technically speaking, Silk Road 2.0 is an anonymous market for anything (with some exceptions, such as child pornography), which means there are also sections for alcohol, art, counterfeit, even books. Listings included a complete boxset of The Sopranos; a hundred-dollar Marine Depot Aquarium Supplies voucher, and fake UK birth certificates. “History has taught us that this ecosystem is very, very resilient,” Christin says.
For instance, after the closure of Genesis Market, its website came back after a few weeks. If someone has the market’s code to the infrastructure, no matter how much effort law enforcement puts in, it will keep coming back on another server or can be built again with the same branding. According to a recent trend, the dark marketplaces faced a decline in revenue. Chainanalysis, a blockchain analysis firm, conducted research that shows that the revenue decreased from $3.1 billion (2021) to $2 billion (2024).
To collect the listing information of 5 anonymous online marketplaces (ie, Apollon, Avaris, Darkbay, Empire, and The Versus Project), we conducted a whole-site crawl. The crawler was implemented in Python and used the Selenium module to launch browsers and to send crawling requests 24. To avoid blocking from the marketplace, we provided as an input to the scraper a session cookie that we obtained by manually logging into the marketplace and solving a Completely Automated Public Turing test to tell Computers and Humans Apart (CAPTCHA). However, some sites, namely, the Empire Market, forced users to log out when the life span of the session cookie was expired. In addition, we set parameters such as sleeping time to limit the speed of crawling.