The results provide insight into opioid trading in the anonymous markets and forums and may prove an effective mitigation data point for illuminating the opioid supply chain. “Over the years some markets … developed a robust catalog of illicit services like money laundering, fiat offramping, and products that enable cyber-criminal activities like ransomware and malware attacks. One such sophisticated darknet market, Hydra, offered all that and more,” Chainalysis explained.
- The business model of this marketplace is focused on enabling criminals to create their own online shops to sell drugs and other illegal goods.
- The accounts of organizations promoting drug harm reduction and social media personalities who post content about drugs and psychedelics, but who do not sell them, are being caught in the crossfire of efforts to get a grip on the issue.
- Yet the story is not clear cut, with some of the largest crime typologies experiencing decreases while others remained stable or even grew.
- But in 2019, media reported the cartel was managing their business from remote locales in Latin America and some of their key actors have been arrested by law enforcement.
- Tor’s clever traffic encryption system makes it very difficult for the police to know where these sites — and the people who use them — are located.
Abacus Market
Before the United Kingdom, where he lives, banned “legal highs” in 2016, he would purchase spice, mephedrone, kratom, salvia and psychedelics from specialty websites. He began doing this after the law cracked down on brick-and-mortar headshops. Lin’s undoing came in May 2024, when he was arrested while transiting through New York’s JFK Airport.
Ready To Explore Web Data At Scale?
Central to this effort is the use of advanced blockchain intelligence tools, which provide critical insights for tracing illicit transactions, identifying threat actors, and supporting enforcement actions. The progress made in disrupting illicit networks demonstrates the impact of collective action, but sustained vigilance and adaptability — empowered by cutting-edge blockchain analytics — will be essential to securing the crypto ecosystem in the years ahead. This has curtailed user confidence and stunted the ecosystem’s growth, creating a climate of distrust that is reminiscent of the aftermath of Op. Onymous (the law enforcement takedown of the Silk Road 2.0 darknet marketplace together with a host of smaller DNMs in 2014) and Op. Bayonet/GraveSac (the coordinated takedown of the AlphaBay and Hansa Market darknet marketplaces by US and European law enforcement in 2017), which left the Western DNM ecosystem reeling.

Dark Web Market Revenues Rebound But Sector Fragments
- While this topic may seem distant for most people, understanding how these spaces operate is crucial.
- This reported criminal enterprise conducted transactions valued at $430 million.
- However, Durov’s arrest has heightened fears that Telegram will now provide data on its users to law enforcement.
- This analysis is part of the GI-TOC’s series of articles delving into the results of the Global Organized Crime Index.
- The market facilitates trades in stolen credit card data, hacked bank accounts, and services to facilitate the laundering of cryptocurrency.
- For example, when China announced it would ban one fentanyl product, called U-47700, on July 1, one fentanyl dealer advertised a “hot sale” of the product through June.
In fact, the shutdown of the marketplace Evolution was discovered to be an exit scam, with the site’s operators shutting down abruptly to steal the approximately US $12 million in bitcoins that it was holding as an escrow 39. To better understand the potential bundling relationship of opioid suppliers across different marketplaces, we calculated the Jaccard similarity coefficient between the suppliers in different marketplaces (Figure 6). We found that 182 opioid supplier IDs appeared in both the marketplaces Evolution and Agora from January 2014 to July 2015. In particular, we observed that 84 opioid supplier IDs synchronized similar product listings in both marketplaces at the same time. This might be because the suppliers tend to promote their products across various marketplaces and to increase sales.
Explicit And Illegal Content

After perusing the items available on the anonymous online market (step 5), the buyer will add opioids to their shopping cart (step 6). When the buyer wants to check out and make a purchase using cryptocurrency (eg, Bitcoin), if the trader accepts payment through an anonymous online marketplace as an escrow, the buyer will place the listed amount of cryptocurrency in escrow (step 7). Otherwise, the buyer will pay the trader directly using cryptocurrency or any other payment method accepted by the trader (step 9) 7.

A Court Ruling On Bug Bounties Just Made The Internet Less Safe

Still, the EU has funded a three-year, €5 million (£4.5 million) project, project, TITANIUM, with the aim of de-anonymising criminal bitcoin users and providing “court-proof” evidence of underground market activity. Note that we should not overestimate the number of suppliers and buyers given the number of IDs found in this research, but we regarded it as the upper-bounded number of the opioid suppliers and buyers. This is because the same user could have different IDs, and the same ID in different marketplaces can point to different users. Owing to the anonymity of the underground marketplaces and forums, there exists no ground truth to link users with their IDs. Operation RapTor’s scale reflects a new era of international coordination. U.S. agencies like the FBI, DEA, IRS-CI, and HSI worked alongside Europol, the U.K.’s NCA, and law enforcement from over a dozen countries.

Axis Intelligence provides dark web surveillance solutions that help businesses identify leaked credentials, fraud attempts, and malware risks before they escalate. Since 2020, 2easy has sold massive stealer logs with sensitive data like passwords, bank cards, and initial access credentials. It supports operations in multiple languages and operates on both clearnet and Tor. This article reveals the top 10 dark web markets dominating in 2025, their unique characteristics, and the critical implications for enterprise cybersecurity. Saheed Aremu passionately advocates for digital privacy and cybersecurity in the modern digital age.
What Exactly Is Sold On These Marketplaces?
While cash, hawala and even traditional money services remain the default tools for terrorism financing, TRM research found a growing interest in and use of crypto by terrorist groups and their supporters to solicit donations and conduct cross-border payments. While Bitcoin remained dominant, the volume of drug sales that used the TRON blockchain more than quadrupled from the year before. There is likely to have been no single, definitive reason for the decrease in attack volumes. Rather, a combination of improved security measures, intensified law enforcement actions, and enhanced coordination among industry participants may have helped to curb the efficacy of hacking attempts. The total value of funds sent to sanctioned addresses and entities fell to USD 16.2 billion in 2023 from USD 25.4 billion in 2022.Sanctions designations rose three-fold, from 11 designation events in 2022 to 33 in 2023. Among the targets were twelve ransomware groups, six high risk exchanges and a cryptocurrency mixing service.
Money Laundering
This study would not have been possible without the support of the Higher School of Economics (HSE) Campus in Saint Petersburg (HSE University). And Grace A. Dow College of Health Professions provided academic and financial support, including publication and travel fees. Opiate usage is widespread in some areas, although it is significantly less common than cannabis use.
Certified Unbiased Reporting
Since the takedown of Nemesis, Parsarad has discussed setting up a new darknet marketplace to take the place of Nemesis with vendors that were once active on the marketplace. Dark web markets have exploded in scale and reach in 2025, becoming the most dangerous hubs for trading drugs, stolen data, and hacking tools. These anonymous marketplaces—operating mainly on the Tor network—are now a primary threat vector for businesses and cybersecurity professionals. Monero and Bitcoin are two of the most commonly used digital currencies on the dark web markets.
As for drug markets serving Western customers, ASAP Market held a 25.0% share, followed by Mega and Incognito. One of the most significant features of digital markets is that they facilitate the introduction of drugs to new areas, which in turn affects consumption patterns. By connecting with vendors worldwide, consumers can access drugs that were previously unavailable locally.
The Crime Supply Chain
The following graphs show the average amount of grams of psychoactive substances in a region adjusted per 100,000 population. The averages were obtained by averaging the data across all samples to get a more accurate result and eliminate the possible influence of seasonality, weekends, holidays, etc. Regional distribution of all drugs for sale presented on Hydra, in grams per 100,000 population in Russia. The research did not require the use of human participants or private information that could identify individuals. All data analyzed were aggregated, public data, hence protected against the collection or processing of personal data or any identifiable information. The research was conducted while keeping a strict standard on data privacy to protect individual privacy throughout this study.