TRM Labs estimates that total transactions, including Monero, may have reached $300–$400 million. This explanation failed to calm the market. Abacus had recently grown in dominance after Europol’s June takedown of Archetyp Market, handling $6.3 million in monthly sales and controlling over 70% of Bitcoin-enabled Western darknet trade.
Bitcoin News Today: Bitcoin Miners’ Revenue Wanes, Yet HPC Pivots Propel Stocks Higher
Some criminal internet forums such as the defunct Tor Carding Forum and the Russian Anonymous Marketplace function as markets with trusted members providing escrow services, and users engaging in off-forum messaging. Following on from the model developed by Silk Road, contemporary markets are characterized by their use of darknet anonymized access (typically Tor), Bitcoin or Monero payment with escrow services, and eBay-like vendor feedback systems. TRM Labs noted that darknet users tend to migrate to the next “reputable” option when a marketplace falls. Emerging trends shaping darknet marketplaces in 2025—insights into cryptocurrency trading and security. Its 13,000+ users and 1,100+ vendors prioritize speed and escrow security in darknet trading.
Terrorism And Illicit Finance

While executing search warrants in New Jersey and New York, federal law enforcement officers seized more than $330,000, close to 80,000 counterfeit Adderall pills, one firearm, and two industrial pill press machines. A fourth co-conspirator, Gregory Castillo-Rosario, who was arrested in October 2024, ran the Mrjohnson account. Attorney’s Office for the Eastern District of Virginia charged Joshua Vasquez, Joseph Vasquez, and Rafael Roman by criminal complaint with conspiracy to distribute 500 grams or more of methamphetamine. Prosecutors wrote in a sentencing memorandum, “The five victims of defendants’ crimes ranged in age from 19 to 51. Both defendants further admitted to distributing fentanyl-laced pills to two additional victims, both of whom suffered fatal drug overdoses shortly after they received the pills from Ta and Srinivasan.
Discover More About Threat Intelligence
It has an active forum and community along with an extensive user vetting process. It offers counterfeit documents, financial fraud tools, hacking and malware services. Active for a decade since 2014, it is a widely used credit card shop used to source stolen credit card information such as dumps, CVVs, Wholesale Accounts. Law enforcement agencies do monitor these spaces, and just because it’s anonymous doesn’t mean you’re invisible. Just visiting the dark web, or using a tool like Tor, isn’t illegal in most countries. It’s been a constant back-and-forth between cybercriminals and law enforcement, with each new site trying to be smarter and more secure than the last.
Torrez Market
Additionally, the implementation of decentralized marketplaces has further enhanced security by eliminating single points of failure. Below is an analysis of the top verified darknet marketplaces that have gained prominence for their efficiency and trustworthiness. Platforms like Dread and Darknet Live provide real-time discussions, vendor reviews, and security tips, ensuring users can navigate the darknet safely and efficiently. By 2025, markets like PhantomX, NebulaTrade, and EclipseMarket are expected to dominate, offering users a combination of privacy, reliability, and variety. The darknet has become a cornerstone for secure and efficient drug trade, offering users unparalleled privacy and reliability. In 2025, darknet markets continue to provide a secure and efficient platform for the trade of pharmaceuticals and recreational substances.
- Recently, TRM Labs reported that around $2.1 billion in crypto has been stolen in the first half of 2025.
- The marketplace’s sudden disappearance marks a significant turn in the ongoing volatility of darknet ecosystems, where trust, anonymity, and financial stakes collide in unpredictable and often short-lived ventures.
- On average, ransomware sold on the darknet for $56 with the best-selling product being purchased on 62 different occasions at $14 per sale.
- The dark net is famous for being a hub of black market websites for buying and selling products and services.
Deposits to the marketplace, which averaged around $230,000 daily throughout most of June, plummeted to just $13,000 per day between June 28 and July 10. According to blockchain intelligence firm TRM Labs, both the darknet platform and its clearnet mirror became inaccessible in early July 2024. However, the administrator of Dread, a darknet forum in contact with Abacus staff, has said they doubt police are behind this disappearance. TRM Labs stated that the recent rise in new users may have attracted more attention from authorities. TRM Labs noted that these patterns, withdrawal delays, user panic, and plummeting deposits, have been seen before on darknet sites that later vanished with customer money.

Crowdsourced Penetration Testing: Understanding The Risks For Better Decision-Making
Most dark markets have user review systems and vendor ratings to establish trust. Law enforcement agencies monitor it for criminal activities, but legitimate users rely on it for privacy protection. The darknet includes networks like Tor, I2P, and Freenet that provide anonymity for users. Companies must implement strong data security measures, employ encryption, and monitor for data breaches to protect customer and employee information.

Russian Market has operated since 2019, specialising in stolen credentials, stealer logs, and remote desktop access. Abacus Market was launched in 2021 and now lists over 40,000 illicit goods, including hacking tools, counterfeit documents, and listings for drugs. This survey highlights active and recently shuttered markets with actionable metrics and intelligence for threat hunters, CISOs, and red team leaders. On March 20, 2024, U.S., German, and Lithuanian law enforcement agencies seized Nemesis’ servers in a joint operation. In this capacity, Parsarad established Nemesis and held full control over the marketplace and its virtual currency wallets.
Bitcoin News Today: AI Bearish On Bitcoin’s $100k, Analysts Eye Post-Fed Turnaround
Accessing them may require .onion links and the Tor browser, but caution is advised due to legality and cybersecurity risks. They use pseudonymous wallets, privacy coins (like Monero), mixers, chain-hopping, and non-KYC platforms to obscure transaction trails. Cybersecurity experts should pay close attention to these trends, as they often indicate emerging threats and profit-generating tactics among the cybercriminal forums.
Fentanyl and fentanyl-laced drugs also arrive in the United States through Latin America based cartels. Another darknet market known for facilitating fentanyl sales to the United States was Canada-based AlphaBay. U.S.-based drug vendors on Abacus Market advertising a synthetic opioid called China White, which its customers can purchase using Bitcoin or Monero. Customer reviews found on the Abacus site indicate that some of its American vendors sell drug products laced with fentanyl. The chart above shows that ASAP and Mega Darknet markets led the large retail and wholesale segments respectively.
“Our coalition of law enforcement authorities across three continents proves that we all do better when we work together,” said Executive Director Catherine De Bolle of Europol. This year’s law enforcement operation was accompanied by a public awareness campaign called Operation ProtecTor aimed to promote public safety and spread awareness of resources for those struggling with substance abuse and who go through extreme lengths to obtain opioids. The stolen data included credit card numbers, expiration dates, Card Verification Value (CVV) numbers, account holder names, addresses, email addresses, and phone numbers. In late June 2025, Abacus users reported withdrawal issues and decreasing trust in the platform. TRM will continue to closely monitor the evolving DNM landscape, including emerging platforms, vendor migration patterns, and on-chain activity, to support efforts to disrupt illicit actors and safeguard the broader crypto ecosystem.

Use Tor Browser from torproject.org for safe onion routing—update regularly. Latest updates from the darknet trading world as of February 2025—key shifts and developments. Incognito Market runs 20,000+ listings and $2.8 million monthly trades with BTC and XMR, holding a 5% market stake. Archetyp Market delivers 28,000+ listings and $3.5 million in monthly trades using BTC and XMR, securing a 6% market share.