Archetyp was seized by the BKA in June 2025 in an operation called Operation Deep Sentinel. Because of this, they decided to set up Archetyp, and to support the European drug scene and advocate for drug liberalization. After trying LSD at age 20, they reflected on their life of alcohol abuse and drug-related anti-social behavior and realized that it did not fit with the prosocial desires they had as a child. Operation RapTor involves law enforcement actions taken by JCODE member agencies, including the DEA, FBI, FDA OCI, HSI, IRS-CI, and USPIS. McDonald recruited and hired accomplices to help package and ship the narcotics they sold on the darknet.
Dark Web Marketplaces: Major Takedowns And How Police Dismantle Them
- In December 2014, a study by Gareth Owen from the University of Portsmouth suggested the second most popular sites on Tor were darknet markets.
- As Europol’s deputy director put it, the action cuts off a major supply line and signals there’s no safe haven for these crimes.
- In addition, we did not observe big changes in the top opioid commodity origins from 2014 to 2020.
- On March 21, 2018, Reddit administrators shut down the popular subreddit /r/DarkNetMarkets citing new changes to their content policy that forbids the sale of "Drugs, including alcohol and tobacco, or any controlled substances".
This in turn led to political pressure from Senator Chuck Schumer on the US DEA and Department of Justice to shut it down, which they finally did in October 2013 after a lengthy investigation. It has been considered a "proto-Silk Road" but the use of payment services such as PayPal and Western Union allowed law enforcement to trace payments and it was subsequently shut down by the FBI in 2012. Since the year 2000, some of the emerging cyber-arms industry operates online, including the Eastern European "Cyber-arms Bazaar", trafficking in the most powerful crimeware and hacking tools. With the development and popularization of the World Wide Web and e-commerce in the 1990s, the tools to discuss or conduct illicit transactions became more widely available. Though e-commerce on the dark web started around 2006, illicit goods were among the first items to be transacted using the internet, when in the early 1970s students at Stanford University and Massachusetts Institute of Technology used the ARPANET to coordinate the purchase of cannabis.
Treasury International Capital (TIC) System
One administrator, later identified as a 23-year-old Taiwanese national, was arrested in May 2024. According to TRM’s 2025 Crypto Crime Report, Russian-language DNMs accounted for over 97% of global drug trafficking volume via crypto in 2024. TRM currently assesses that between 20 and 30 significant drug-focused DNMs are active at any given time—a number that has remained remarkably consistent over the past several years. Parsarad also allegedly provided laundering services for vendors by using mixing protocols and retained a cut of all transactions processed through Nemesis. The progress made in disrupting illicit networks demonstrates the impact of collective action, but sustained vigilance and adaptability — empowered by cutting-edge blockchain analytics — will be essential to securing the crypto ecosystem in the years ahead. The expanding use of cryptocurrencies by terrorist organizations and state-sponsored actors illustrates the dual-edged nature of technological innovations — providing both opportunity and risk.
ICE Fallen Officers
For example, the ample in-person supply of MDMA in the Netherlands may drive the differences observed between cryptomarket and offline sources. To put it to the test, a team of researchers analyzed the composition of over 60,000 drug samples—some purchased from the dark web, some bought in-person.
Then, in the transfer learning stage, the aforementioned models are transferred using manually labeled 800 positive samples (Dp) and 800 negative samples (Dc; Table 3), with the purpose of adjusting the model to fulfill the promotion posts and opioid review detection. First, 2 neural network models with 3 hidden layers are trained on the data sets (Table 3) for model initialization. To identify forum posts related to opioid commodity promotion and review, our methodology was designed to filter forum posts with opioid keywords and then use a classifier to the posts with the topics of interest.
Man Who Allegedly Led Alhambra Police On Deadly Pursuit Charged With Murder
The market owners set up a phishing website to get the attacker's password, and subsequently revealed collaboration between the attacker and the administrator of Mr Nice Guy's market who was also planning to scam his users. In April, TheRealDeal, the first open cyber-arms market for software exploits as well as drugs, launched to the interest of computer security experts. Following these events commentators suggested that further market decentralization could be required, such as the service OpenBazaar, in order to protect buyers and vendors from this risk in the future as well as more widespread support from "multi-sig" cryptocurrency payments. However Black Bank, which as of April 2015update captured 5% of the darknet market's listings, announced on May 18, 2015, its closure for "maintenance" before disappearing in a similar scam.
In addition, they used cryptocurrency to launder their money so that the illegal proceeds of their drug trafficking would be difficult to trace. Between 11 and 13 June, a series of coordinated actions took place across Germany, the Netherlands, Romania, Spain, Sweden, targeting the platform’s administrator, moderators, key vendors, and technical infrastructure. At the time of seizure, there was a total of 17,000 listings on the website sold by 3,200 vendors. They were however American vendors and consumers, as well as distributors from China and Mexico.
Specifically, our modification used a series of opioid keywords collected to generate their benign corpora embeddings and then searched for words whose underground corpora embeddings were close to the opioid keywords’ benign corpora embeddings. Our modification of the semantic comparison model will generate comparable word embeddings for opioid jargon words in legitimate documents (ie, benign corpora embedding) and in underground corpora (ie, underground corpora embedding). In the meantime, these 2 vectors are still comparable because they are used together in the neural network to train a single skip-gram model for predicting the surrounding windows of context words. Hence, every word has 2 vectors, each describing the word’s relations with other words in one corpus. Our opioid jargon identification procedure implemented a modified semantic comparison model . For forum corpora, we gathered 1,138,961 traces (spanning from June 2011 to July 2015) from the underground forums The Hub, Silk Road, Black Market, Evolution, Hydra, and Pandora.
Investigations
- Among the dark web stores, WizardShop stands out for a few reasons.
- Data sharing is not applicable to this article as no new data were created or analyzed in this study.
- Henderson says their investigations are often joint efforts with multiple agencies, both domestically and internationally.
- It was the first big site where people could anonymously buy drugs using Bitcoin, and it gained a lot of attention, until it was shut down by the FBI in 2013.
- For example, the chart below shows transactions involving an online drugs vendor traced to the ROK, who receives customer funds from mainstream cryptocurrency exchanges.
OFAC sanctioned Parsarad in March 2025, describing him as the marketplace’s sole administrator and noting he had communicated with vendors about relaunching a successor platform. More than 55,000 of those orders involved powerful stimulants like methamphetamine and cocaine, while an additional 17,000 involved opioids such as heroin and fentanyl—drugs central to the opioid epidemic devastating U.S. communities. 2024 also saw the establishment of the first Telegram-only Western darknet marketplace, Si Market, which now hosts more than 40 vendors specializing in the sale of psychedelics, cannabis, and cannabis-related products. This incident also marked the never-before-seen attempt of its administrator, Pharoah (arrested in May 2024 and revealed to be 23 year-old Taiwanese national Rui-Siang Lin), to extort the marketplace’s users. Onymous (the law enforcement takedown of the Silk Road 2.0 darknet marketplace together with a host of smaller DNMs in 2014) and Op. 2024 saw 42% fewer new darknet marketplaces (DNMs) launched year over year, with the proportion of Monero-only DNMs launched increasing from little more than a third in 2023 to nearly half in 2024.
The Use Of Crypto In Vendor Shop Drug Sales Surged In 2024
By 2025, agencies also use dark web search Engines and honeypots to infiltrate markets. On March 20, 2024, U.S., German, and Lithuanian law enforcement agencies seized Nemesis’ servers in a joint operation. In this capacity, Parsarad established Nemesis and held full control over the marketplace and its virtual currency wallets. In addition to offering narcotics for sale, Nemesis facilitated the sale of a wide variety of other goods and services such as false identification documents and professional hacking services that enabled buyers to hire hackers to illegally seize control of the online accounts and communications of selected victims. If a drug checking service knows where a substance came from, they can decide whether it’s more appropriate to share any alarming results locally or online.
To expand their reach, some marketplaces established parallel channels on Telegram. Regularly monitoring the top dark web markets gives your SOC team an insider’s view of the latest malware and phishing kit trends, plus real-time knowledge related to relevant compromised PII. Cybercriminals gather on dark web stores to buy and sell illegal goods and stolen data. We developed Lunar to monitor the deep and dark web, including dark web marketplace sites. In fact, the shutdown of the marketplace Evolution was discovered to be an exit scam, with the site’s operators shutting down abruptly to steal the approximately US $12 million in bitcoins that it was holding as an escrow .
Dark Net Drug Markets Kept Alive By Great Customer Service
Our study determined the underground marketplace and forum list based on darknet site search engines and previous research works . In this way, we generated a rich underground marketplace opioid vocabulary of 311 opioid keywords with 13 categories. Recently, Balsamo et al used a language model to expand vocabularies for opioid substances, routes of administration, and drug tampering on Reddit data from 2014 to 2018 and investigated some important consumption-related aspects of the nonmedical abuse of opioid substances. Note that the escrow mechanism is widely deployed in the anonymous online market because it helps to build trust and resolve disputes between sellers and buyers. The opioid trader will also use an anonymous online forum (eg, The Hub Forum) to post promotional information to attract potential customers (step 3). The first darknet market of notoriety was Silk Road, which opened at the end of January 2011 and was seized by the US Federal Bureau of Investigation (FBI) in October 2013 (DEA, 2013).
Darknet Markets Explained
It is one of the most active and up to date markets and always provides new and updated malware and data. Freshtools is a unique marketplace in that it does not only provide the stolen data, but it allows criminals to purchase MaaS which can cause further damage to the victims. Established in 2022, Torzon market is one of the biggest and most diverse marketplaces on the dark web. Beginning in September 2021, Abacus Market has established itself as one of the leading dark web marketplaces. This further complicates monitoring efforts because now you need to search for the related Telegram channels and track activity there and on the marketplace itself.
Silk Road's use of all of Tor, Bitcoin escrow and feedback systems would set the standard for new darknet markets for the coming years. In December 2014, a study by Gareth Owen from the University of Portsmouth suggested the second most popular sites on Tor were darknet markets. They used darknet markets, including Monopoly, Versus, ASAP, AlphaBay, Wall Street, Archetyp, Bohemia, Empire, Dream and White House. Apart from the dark web markets that are operating online today, some raided platforms influenced many markets. Security researchers have been monitoring forums within the cybercriminal underworld to investigate the leading markets operating in 2026. Some dark web marketplaces even host content that’s not just illegal but extremely harmful, so it’s really important to understand the risks before diving in.
