Authorities seized Archetyp’s back-end servers in the Netherlands, froze €7.8 million in assets and arrested eight suspects, including a 30-year-old German national believed to be the platform’s founder. Led by Germany’s Federal Criminal Police Office (BKA) with support from the Netherlands and the Czech Republic, the operation extended to Spain, Sweden and Romania. Crucially, there were no explanations or updates from moderators. Users encountered ‘maintenance’ messages and several alternative access links failed to load. MC collected all the data for analysis.
We explored the intricate nexus between the estimated magnitude of the illicit drug market, derived from data from a significant Russian darknet market, Hydra (at least 69% coverage of the Russian population) . With the advent of the Silk Road, the first darknet marketplace, customers and vendors have collaborated to disseminate and acquire goods and services that were previously unavailable digitally 5,6. We aimed to use the dark web data and officially published indicators to identify the most vulnerable regions of Russia and the correlations between the pairs of variables to measure how illicit drug trade can affect population well-being. This study fills this gap with an analysis of the volume of drugs traded on the darknet market.
Why are these markets still seen as enticing places to sell drugs, despite the risks? McDonald operated under the monikers “Malachai Johnson,” “SouthSideOxy,” and “JefeDeMichoacan.” McDonald created, monitored, and maintained the darknet vendor profiles, including by updating drug listings and shipment options, tracking drug orders, and offloading Monero cryptocurrency received as drug deal payments into cryptocurrency wallets that McDonald controlled. From at least April 2021 until May 2023, McDonald and others conspired to sell fentanyl and cocaine via multiple darknet marketplaces. In a fourth example, a San Fernando Valley man, Brian McDonald, 23, was sentenced to more than 20 years in federal prison in the Central District of California for using darknet marketplaces to sell hundreds of thousands of dollars’ worth of fentanyl-laced pills and cocaine to buyers nationwide. According to court documents and statements made in court, these three prolific darknet vendors were collectively responsible for fulfilling over 13,000 drug orders shipped throughout the United States, ranging in size from user quantities, e.g., 5 pills, to “reseller” quantities, e.g., 10,000 pills.
Archetyp Comparable To Silk Road
The expanding use of cryptocurrencies by terrorist organizations and state-sponsored actors illustrates the dual-edged nature of technological innovations — providing both opportunity and risk. This adaptability underscores the need for constant evolution in enforcement strategies and international cooperation. A key theme throughout the year has been the resilience and adaptability of illicit networks. This shift stems from the demonstrated efficacy of blockchain analysis in tracing illicit transactions and aiding investigations. TRM has observed that these manufacturers have adapted their practices in response to intensified law enforcement efforts.
Dark Web’s Longest-standing Drug Market Seized In Multinational Effort
It's not surprising how drugs promoted in the forum are like RuTor’s most in-demand substances, highlighted by these Mephedrone postings and the top-featured products below. Product offerings are mostly drugs, as illustrated by the top banner. They propose within the framework of the drug cartel to establish a predatory "tax" percentage for stores of 8-10%, and do not hesitate to point out that there will only be shops and buyers in the red, and they will be covered in chocolate.”
US-backed Aid Company In Gaza Shutters Operations As Israel’s Military And Defense Minister Clash
We'll also discuss examples of major marketplaces, myths about the dark web, and tips on staying safe in case your personal data ever ends up there. These markets mimic traditional e-commerce websites, but instead of second-hand books or vintage jackets, they traffic in illegal goods and criminal services. Just as Archetyp filled the void left by the dismantling of other online drug markets that existed before it, its successor may already be taking shape. What may look like disruption from the outside is, in practice, a recovery playbook now hardwired into the design of online drug markets.
- We are encouraging future researchers to use our cascade of methods for sharpening and improving existing official and published data on every level.
- Archetyp was an online drug marketplace, and only accepted drug-related listings.
- Leading up to the operation announced Tuesday, German and U.S. authorities took down the “ Hydra ” dark web market in April last year.
- Notably, the Administrator of WayWay has exactly the same alias (aka "Kraken") who described the news of decentralized infrastructure having multiple data centers and nodes for the new project.
- Consequently, many vendors are migrating to alternative platforms, including Signal, Session, and WhatsApp.
Top Dark Web Marketplaces Of 2026: A Deeper Dive Into Illicit Trade Markets
Department of the Treasury’s Office of Foreign Assets Control (OFAC) announced sanctions against Parsarad for his role as the administrator of Nemesis Market. Together, we remain committed to keeping our neighborhoods safe and our streets free from illegal narcotics.” Certain substances covertly purchased by the government from Nemesis were confirmed by laboratory reports to be mixtures and substances containing fentanyl, a Schedule II controlled substance, and/or acetylfentanyl, heroin, and/or protonitazene, each a Schedule I controlled substance. An additional 17,000 orders were categorized as orders for opioids, including fentanyl, heroin, and oxycodone. Of these, more than 55,000 orders were categorized as orders for stimulants, including methamphetamine, cocaine, cocaine base (crack cocaine), and other controlled substances. The progress made in disrupting illicit networks demonstrates the impact of collective action, but sustained vigilance and adaptability — empowered by cutting-edge blockchain analytics — will be essential to securing the crypto ecosystem in the years ahead.
Illegal Activities On The Dark Web
FreshTools, founded in 2019, specializes in selling stolen account credentials and data, particularly webmail, RDPs (Remote Desktop Protocols), and cPanels. Unlike many other dark web markets, Cypher does not require buyers to deposit cryptocurrency upfront, which reduces the risk of exit scams. The marketplace requires merchants to pay fees to sell their products, helping ensure a certain level of quality control. The market is also known for its listings related to financial fraud, such as phishing tools and stolen credit card information. Launched in 2021, Abacus Market caters primarily to English-speaking users.
The dataset encompassed 3045 individual sellers marketing 6721 unique products via 58,563 distinct postings, each representing specific quantities sold in different Russian regions during 2019. Law enforcement warns that no site is safe previous markets even the biggest ones have all eventually fallen. This set the legal precedent that even Tor hidden markets are prosecutable.
Daughter Of Ex-South African Leader Zuma Is Accused Of Luring Men To Fight In Russia-Ukraine War
The reduction in the quality and user numbers of Western DNMs stands in contrast to the Russian-language ecosystem, where fierce competition and high profits are driving innovation. This migration is further bolstered by the fact that the majority of new Western DNMs launched in 2024 have been characterized by poor design features or security issues. At the time of seizure, there was a total of 17,000 listings on the website sold by 3,200 vendors. It did not host other black market listings such as those for firearms or prostitution. The onion site and the clearnet site were both replaced with a seizure banner that links to the investigative operation's website. The server infrastructure was hosted in a data center in the Netherlands and was also seized.
Despite some occasional service issues, Russian Market remains a favorite among cybercriminals seeking fresh access and financial data. Russian Market has been operating since 2019 and is one of the favorite destinations for those looking for stolen digital data, rather than physical products. All of this has made it one of the most reliable markets still active in 2025. Abacus Market appeared on the scene in 2021 and quickly became one of the heavyweights among English-speaking markets on the dark web.
Within each data extract, we calculated the total sum of grams for all drugs and each category of interest (opiates, cannabis, and all drugs excluding cannabis) per region. We implemented Spearman correlations analysis to find and measure levels of associations between darknet marketplace and official health statistics variables. The mandatory barring of leaving houses for people during the COVID-19 disaster limited the supply of drugs in Russia. This is why the study's primary purpose, like Yannikos and other studies 23-25, was to define it as bridging public health and the illicit drug market. Some researchers focused on anonymous digital marketplaces' customer reviews 12,19.
The seized drugs included 141 pounds of fentanyl or fentanyl-laced narcotics, more than 569 pounds of amphetamines, 95 pounds of cocaine, 95 pounds of MDMA and 22 pounds of LSD and ecstasy pills, authorities said. The United States saw 153 arrests as part of the international operation, followed by the United Kingdom, with 55, and Germany, with 52, according to the European Union law enforcement agency Europol, which coordinated it. Investigators received leads from local police departments investigating overdose deaths, including that of a 19-year-old man in Colorado who loved learning languages and building his own computers, according to FBI Deputy Director Paul Abbate. The number of arrests and amount of money seized were the most for any international Justice Department-led drug trafficking operation, he said. The Justice Department appreciates the cooperation and significant assistance provided by law enforcement partners in the British Virgin Islands, Germany, Lithuania, and Türkiye.
It’s been a constant back-and-forth between cybercriminals and law enforcement, with each new site trying to be smarter and more secure than the last. In 2019, there were approximately 8,400 active sites on the dark web, selling thousands of products and services daily. These sites cater to cybercriminals seeking valuable data, such as credit card numbers, login credentials, and personal information. Today’s cybercriminals spread their activities across multiple platforms, making them harder to track and shut down. Dark Web Marketplaces continue to thrive as central hubs for these illicit transactions.
Kraken, a WayAway partner and exclusive drug market, has been hyped as the successor to Hydra since May 2022. These users have authored nearly 242,000 posts which are dispersed across 11,303 topics. WayAway is one of the largest DNMs with over 162,000 registered users. Like RuTor, BlackSprut also offers cash-out services, including Bitcoin-to-Ruble and C2C transactions. This shop primarily deals in synthetic drugs like mephedrone, A-PVP, and ecstasy.
This joint report prepared by the EMCDDA and Europol considers the latest findings from international research, fresh empirical data, and operational information and intelligence in order to illuminate how darknet markets function and how they relate to criminal behaviour. The operation targeted Archetyp Market, a platform with over 600,000 users and transactions totaling at least 250 million euros, underscoring the scale and ongoing challenge of illicit drug sales facilitated by anonymizing technologies. Operating since 2020, 2easy Market is a dark web marketplace known primarily for its focus on stolen data and cybercrime services, particularly targeting compromised accounts and personal information.
BidenCash, established in 2022, is notorious for its involvement in selling stolen credit card information and personally identifiable information (PII). The market is known for its extensive product listings and reputation system that helps buyers evaluate the reliability of vendors. The market emphasizes anonymity and security, conducting transactions exclusively through cryptocurrencies like Bitcoin and Monero.
The shift toward specialized platforms with heightened security measures makes tracking illicit activity even more challenging, requiring innovative approaches and advanced tools. Further confounding efforts, these multiple markets are often scattered across different regions and jurisdictions, requiring significant international cooperation to drive operations. By offering heightened anonymity and stronger defenses against law enforcement, these markets attract criminals who feel they provide a safe environment.
