It’s the place where you can buy or sell stolen credit card numbers, SSH login credentials, and personally identifiable information (PII). In fact, they have a Telegram channel to offer users with live updates. STYX market features a robust verification process, making it look more exclusive. All payments on the platform are via Bitcoin (BTC) and Monero (XMR) for anonymous transactions. Torzon market made its debut in September 2022, and ever since, it has been on an upward trajectory. What makes this market popular is the fact that it’s less expensive compared to the rest.
- The research, therefore, questions the long-term success of such law enforcement actions (Horton-Eddison & Cristofaro, 2017), presenting them as the extension of the (failed) war on drugs approach to online drug markets (Martin et al., 2023).
- By late 2013 it had 13,000 drug listings and was used by thousands of dealers and over 100,000 buyers.
- Changes in personal circumstances impact the professional lives of many, especially during global pandemics, and darknet market operators are no exception.
- In fact, it now features more than 11,600 illegal items, which include hacking tools, hard drugs, and all types of cybercrime services.
- During the cleaning process, we removed duplicates, since users often posted the same review for different products and orders.
- Fraud shops are vendors that typically operate on the dark web and facilitate the sale of stolen data and personally identifiable information (PII), which cybercriminals abuse in illicit activities like scamming, identity theft, and ransomware.
Some illicit actors may simply move to other existing high-risk exchanges, particularly in areas with weak anti-money laundering (AML) controls, including Russia-based platforms that operate outside of U.S. jurisdiction. With Garantex’s core infrastructure dismantled, its illicit client base will likely seek new avenues to launder funds. As well as CSAM, scams, stolen funds, ransomware operators and administrators, exploit kit developers, and illegal goods vendors. In comparison, most compliant centralized exchanges (CEXs) see illicit transactions account for just 0.14% of their total volume. This may seem like a small percentage at first glance, but at a scale of $96 billion, that translates to over $1.3 billion in illicit funds funneled through the exchange.

Illicit Flows
Major drug markets in the Dark Web are now worth around $315 million annually according to the United Nations Office on Drugs and Crime (UNODC). Monitoring active marketplaces offers early access to malware kits, credential dumps, and fraud tools. Abacus Market was launched in 2021 and now lists over 40,000 illicit goods, including hacking tools, counterfeit documents, and listings for drugs. Irish police arrested the suspected Bohemia/Cannabia suspect on money laundering charges, potentially underscoring how converting cryptocurrency into currency isn’t risk free. Today’s drugs marketplace administrators are cautious about their online traces. What’s the difference between classic marketplaces and data stores?

That’s exactly what happens when it comes to the dark web marketplaces. Darknet markets received US$2 billion in 2024, down from the nearly US$2.3 billion in 2023, while fraud shop volume is down by slightly more than half to US$220.1 million. Pig butchering is a type of scam in which victims are tricked into giving more and more money to a seemingly sound investment until the scammer disappears with the funds. It found that stolen funds and scams are still prolific.
- Abacus Market quickly rose to prominence by attracting former AlphaBay users and providing a comprehensive platform for a wide range of illicit activities.
- The darknet has become a cornerstone for secure and efficient drug trade, offering users unparalleled privacy and reliability.
- “What we have seen is that these networks have heavy exposure to market-leading crypto exchanges,” said a U.K.
- The largest number of listings on dark web forums from mid-2023 to the end of H were related to organizations in Europe (27%), Asia (24%), and North America (17%).
- Cybercriminals actively sold access with privileged local administrator rights (36%) and Active Directory domain administrator rights (26%).
Inspector General Sites

Emphasizing anonymity, darknets and dark markets operate on a technical level that significantly differs from the conventional surface web. Darknets and dark markets have propelled the growth of cybercrime by offering a platform for the sale and exchange of malicious tools and services. It is one of the most active and up to date markets and always provides new and updated malware and data. Freshtools is a unique marketplace in that it does not only provide the stolen data, but it allows criminals to purchase MaaS which can cause further damage to the victims.
Pharmaceuticals And Digital Goods Thrive On Darknet Platforms
The first thing on the minds of many users when it comes to the dark web environment is illegal drugs. However, you can find some legal items in the darknet marketplace. DeFi is a financial system that allows people, businesses or entities to conduct direct transactions on the blockchain network through the use of cryptocurrencies, without middlemen. Although the largest share of stolen funds was robbed from decentralised finance (DeFi) services, centralised services were the most targeted in the second and third quarters, the report said. Stablecoins are a type of cryptocurrency that have their values pegged, or tied, to that of another currency, commodity or financial instrument. “As cryptocurrency has gained greater acceptance, illicit on-chain activity, too, has become more varied.
Implications For Security Leaders
By far the largest darknet market by volume was Hydra, launched in late 2015 in Russia. Silk Road’s demise proved that even Tor hidden sites could be penetrated by good detective work, prompting many users to flee to successor markets. These hidden markets promise anonymity, but in practice, users often slip up. Dark web marketplaces are hidden online bazaars on Tor or similar networks where anonymous vendors sell illicit goods. The shift away from BTC to XMR for transactions has also played a role in the evolving landscape of these illicit services.
Payment Methods Overview
For example, some illicit actors primarily operate off-chain, but move funds on-chain for laundering,” the report noted. In general, the total value in crypto crime excludes revenue from non-crypto-native crime, such as traditional drug trafficking, and other crimes in which crypto may be used as a means of payment or laundering. Between 2020 and 2024, the total amount of cryptocurrencies that went to illicit addresses peaked at US$54.3 billion in 2022, which factored in FTX creditor claims. The total value of cryptocurrencies sent to illicit addresses in 2024 is expected to hit a high of US$51 billion over time. Insights, news and analysis of the crypto market straight to your inbox Furthermore, law enforcement worldwide has stepped up its efforts, seized assets, and disrupted key money laundering networks.
A blockchain is a digital ledger that stores information across a worldwide computer network. To trace Huione’s activity, ICIJ developed its own methods for analyzing transactions done in the stablecoin tether. In the U.S. alone, the FBI estimates Americans lost $9.3 billion to crypto crimes in 2024, a 67% increase from the previous year. “Crypto offers criminals a financial system that’s very efficient compared to the old days when a cartel would have to stuff cash into the back of a Cadillac,” Griffin said.
Figure 20 Cost Of Access To Financial Organizations (H2 2023–H1

Access learning resources to build your knowledge of crypto basics On-demand learning modules to build blockchain and crypto compliance expertise. Upskill your team on cryptoasset basics with on-demand learning Turn your team into crypto experts with ongoing education and certifications
Budget, Financial Reporting, Planning And Performance
Customer reviews found on the Abacus site indicate that some of its American vendors sell drug products laced with fentanyl. Mega clearly dominated the realm of wholesale drug purchases, capturing 51.9% of that segment. Though Mega Darknet Market typically serves a Russian customer base, the drug revenue shown in the chart above likely came from customers based in Europe. Looking closer at ASAP Market inflows, it won some share of revenue across all drug purchase types, receiving 37.1% of social supply, 35.7% of large retail, 16.5% of small retail, and 13.5% of wholesale purchases. Kraken Market also captured the largest share of transfers potentially sent for the purpose of obfuscating funds, as well as buying illegal products. Darknet market role specialization provides one possible explanation as to why the ecosystem has yet to see a dominant player.
Associated Content
Items on a typical centralized darknet market are listed from a range of vendors in an eBay-like marketplace format. In July 2017, the markets experienced their largest disruptions since Operation Onymous, when Operation Bayonet culminated in coordinated multinational seizures of both the Hansa and leading AlphaBay markets, sparking worldwide law enforcement investigations. Later that month, the long-lived Outlaw market closed down citing a major bitcoin cryptocurrency wallet theft; however, speculation remained that it was an exit scam. On July 31, the Italian police in conjunction with Europol shut down the Italian language Babylon darknet market seizing 11,254 Bitcoin wallet addresses and 1 million euros.

These reveal the true scale for example, Hansa’s covert run logged over 38,000 transactions and dozens of thousands of user messages. In practice, no market in the past decade has survived indefinitely. When you buy or sell illegal goods online, you are not hidden from law enforcement, Europol’s director emphasized after a Dream Market bust.
The kind of operation which damages trust among the actors by actual data or financial loss of the users is more effective than simply removing a market from the darknet (Bradley & Stringhini, 2019). The research, therefore, questions the long-term success of such law enforcement actions (Horton-Eddison & Cristofaro, 2017), presenting them as the extension of the (failed) war on drugs approach to online drug markets (Martin et al., 2023). The reliability of the whole process is manifested in the built-in reputation systems of darknet markets (Laferrière & Décary-Hétu, 2023; Masson & Bancroft, 2018; Przepiorka et al., 2017).