They often sell across multiple markets or operate standalone storefronts via encrypted apps like Telegram and Signal. One particularly revealing moment came in February 2024, when Incognito users reported that BTC withdrawals were disabled—likely part of a deliberate “exit scam.” Lin, or others acting on his behalf, threatened to leak vendor identities to law enforcement unless paid. It marks the most significant JCODE operation to date, building on years of enforcement actions and marketplace takedowns, including Kingdom Market, Tor2Door, Bohemia, and Nemesis.
Common Scams On Dark Web Marketplaces
The combination of advanced technology, user-centric design, and a commitment to privacy ensures that darknet markets remain a viable option for secure and reliable drug trade in 2025. Classic darknet markets sell diverse illegal goods; data stores focus on leaked or stolen data like credentials, databases, and ID records. Some researchers offer cryptocurrency transaction monitoring, with a tiny portion offering data documented from the initial request for a drug purchase through the final qualitative examination of all received samples from 3 vendors on the “dream market” darknet marketplace .
Federal Financial Data

When a whole marketplace is illegal, such an infrastructure is far harder to build. When Silk Road moved a chunk of the drug trade online, it had to help sellers and buyers solve a potentially serious coordination and trust problem. Drug vendors operated on the marketplace, paid fees for it, and competed with each other for customers. The illegal drug trade in the United States has evolved substantially over the last 20 years.
“By cowardly hiding online, these traffickers have wreaked havoc across our country and directly fueled the fentanyl crisis and gun violence impacting our American communities and neighborhoods. This platform has rapidly become a key player in the fraud market, trading in PII and SSH credentials while making use of both the clear and dark web. BidenCash, established in 2022, is notorious for its involvement in selling stolen credit card information and personally identifiable information (PII). Since its inception, the market has catered to criminals looking for high-quality counterfeit items, such as fake IDs, passports, and branded luxury goods. FreshTools, founded in 2019, specializes in selling stolen account credentials and data, particularly webmail, RDPs (Remote Desktop Protocols), and cPanels.
It marketed itself as a black market bazaar and sold everything from marijuana to heroin, plus hacking tools and counterfeit IDs. In practice, authorities combine blockchain forensics, metadata analysis and international raids to dismantle these sites. OFAC’s Economic Sanctions Enforcement Guidelines provide more information regarding OFAC’s enforcement of U.S. sanctions, including the factors that OFAC generally considers when determining an appropriate response to an apparent violation. In addition, financial institutions and other persons that engage in certain transactions or activities with the sanctioned individual may expose themselves to sanctions or be subject to an enforcement action. Unless authorized by a general or specific license issued by OFAC, or exempt, OFAC’s regulations generally prohibit all transactions by U.S. persons or within (or transiting) the United States that involve any property or interests in property of designated or otherwise blocked persons.
Operations
They may also raise privacy and surveillance concerns, warning that aggressive cyber policies risk collateral impacts on online freedom and legitimate users of anonymity technologies. Archetyp Market was one of the few marketplaces allowing the sale of highly potent synthetic opioids such as fentanyl, contributing to broader health threats and overdose risks in Europe and beyond. Authorities from multiple countries, including Germany, the Netherlands, Spain, Sweden and the United States, worked together to investigate and take down a major online criminal marketplace, demonstrating the need for cross-border efforts to combat cyber-enabled crime.
Alphabay rose to prominence with 400,000+ users and $600M yearly trades, ending in a 2017 bust. A timeline of darknet marketplace evolution, from Silk Road to 2025’s top players. With 11,000+ users and 850+ vendors, it’s a reliable veteran in dark pool trading since 2019.
Dark Web Drug Trafficking
And if unwanted fentanyl does crop up online, buyers can easily warn each other by way of the review system or the forums. But when you buy online, you can read reviews and look at the forums. Because of how quickly transactions happen, especially on the street, you don’t even have a way to verify anything. Comprehensive review systems hold vendors accountable.
Efficient Drug Trade On Darknet Markets
By analyzing the scale and nature of drug availability, the frequency of offers, and the regional distribution of illegal drug activities on a Hydra market, we aim to link these findings with official indicators of illicit drug use disorders. We explored the intricate nexus between the estimated magnitude of the illicit drug market, derived from data from a significant Russian darknet market, Hydra (at least 69% coverage of the Russian population) . We aimed to use the dark web data and officially published indicators to identify the most vulnerable regions of Russia and the correlations between the pairs of variables to measure how illicit drug trade can affect population well-being. This study fills this gap with an analysis of the volume of drugs traded on the darknet market.
Based on the observed dynamics, criminal actors are actively engaging in new deals and thus attracting both buyers and sellers which is increasing the volumes of drugs for sales in the Dark Web. Same time, Solaris has also announced a significant upgrade to their payment system and blocked all payouts for 2 days around the same time which may confirm some activities behind the scenes, likely related to improvements of security of the marketplace. According to them, their marketplace is completely safe and they spent significant financial means to maintain the infrastructure, but competitors and other malicious parties attempted to abuse their reputation.

Implications For Security Leaders
A user’s choice of platform thus usually depends on the type of drug sought. Darknet vendors are also becoming more sophisticated, with large sellers offering a wider range of products and focusing on high value transactions. Similarly, methamphetamine use has surged in rural American areas, with rates now surpassing those in urban areas, likely due in part to easier access through online platforms. Darknet markets operate like legitimate websites, featuring product descriptions, images and vendor ratings, but use sophisticated encryption technology and cryptocurrencies to ensure anonymity. “The war on drugs is a complete failure, a bottomless money pit.” “Waste your resources on seizing petty websites because they know the use of darknet services is ever growing,” another user wrote.
Data Sheets

Archetyp launched in May 2020 and quickly grew to become one of the most popular dark web markets with an estimated total transaction volume of €250 million (A$446 million). The durability of these markets tells us that if policing responses keep following the same playbook, they will keep getting the same results. In the first arc of the anime series Lupin the 3rd Part V, Lupin III steals digital currency from the “Marco Polo” darknet market.
Most dark web drug shipments originate from the US and Northern and Western Europe, as well as Russia. Heroin and other opioids do not have a significant presence online, as their sale is highly regulated and controlled. According to the study, most darknet sales in 2023 fell into the ‘large retail’ category (US$100–US$499), at 37.8%, followed by ‘potential wholesale’ purchases (over US$1 000) at 31.9%.

Administrator Arrested
The largest number of arrests — 153 — were made in the United States, followed by the United Kingdom with 55 and Germany with 52, according to the European Union law enforcement agency Europol, which coordinated the worldwide operation. “Because of those drugs, that promising young man sadly died of an overdose last year.” “But some of the packages his family thought were full of computer parts actually contain drugs he had purchased off the dark net,” he said.
- Killnet has attracted a lot of attention because of past DDOS attacks against NATO, U.S. law enforcement, and multiple EU government agencies during the peak of war in Ukraine.
- The dark web offers vital anonymity for vendors and buyers, who use cryptocurrencies such as Bitcoin to process transactions.
- Additionally, the rise of decentralized marketplaces minimizes the risk of shutdowns, offering users a more stable environment for trade.
- Deploying 300 officers across multiple countries simultaneously is a logistical feat, reflecting a high level of international cooperation.
- Recent projects have scanned a variety of digital markets to gain a better knowledge of these markets’ offers, country disparities, and availability of specific substances.
The cycle Christin describes—law enforcement takedowns followed by a slow but robust recovery—has played out on the dark web again and again, repeating roughly every year or two. “History has taught us that this ecosystem is very, very resilient,” Christin says. “Satisfied customer, will be back,” writes one user on the product page of a meth dealer with the handle shardyshardface. This case was investigated as part of an FBI-led interagency Joint Criminal Opioid and Darknet Enforcement (J-CODE) operation. Assistant U.S. Attorney Segev Phillips for the Northern District of Ohio and Trial Attorney Gaelin Bernstein of the Criminal Division’s Computer Crime and Intellectual Property Section are prosecuting the case, with substantial assistance from the U.S. The Justice Department’s Office of International Affairs and Cybercrime Liaison Prosecutor to Eurojust provided significant assistance.
It offers a wide range of illicit goods, including illegal drugs, counterfeit items, fake IDs, passports, and software keys. Quality and validity of the data it provides justify its higher cost over other marketplaces. Abacus Market offers an extensive array of illegal goods and services across various categories, making it one of the most versatile marketplaces on the dark web.
In 2019, a minimum of 124 kilograms of drugs circulated daily in small batches on the Russian darknet. Research tools include public health surveys and medical reports but lack neutral data on drugs’ spread and impact. Studying illicit drug circulation and its effects on population health is complicated due to the criminalization of trade and consumption. The shift toward specialized platforms with heightened security measures makes tracking illicit activity even more challenging, requiring innovative approaches and advanced tools. Further confounding efforts, these multiple markets are often scattered across different regions and jurisdictions, requiring significant international cooperation to drive operations. By offering heightened anonymity and stronger defenses against law enforcement, these markets attract criminals who feel they provide a safe environment.