On the other hand, it’s notorious for enabling illegal activity, including drug sales, weapons trafficking, counterfeit ID trading, hacking services, and the exchange of stolen personal data. Even after Silk Road went down, dark web marketplaces haven’t slowed down. Stopping their growth takes serious effort from US agencies like the FBI, often working hand-in-hand with international law enforcement.
Based on our observations from analysis on dark web data using Lunar, we’ve identified the top 7 marketplaces on the dark web in 2025. We developed Lunar to monitor the deep and dark web, including dark web marketplace sites. “Operation RapTor shows that the dark web is not beyond the reach of law enforcement,” said Head of Europol’s European Cybercrime Centre, Edvardas Šileris. “Through close cooperation and intelligence sharing, officers across three continents identified and arrested suspects, sending a clear message to those who think they can hide in the shadows. Europol will continue working with our partners to make the internet safer for everyone.” Historically, DNMs have been known for the illicit drug trade, but in recent years have differentiated themselves with unique service offerings.
- The dark web is a hidden section of the internet that you cannot reach with common search engines like Bing or Google.
- In 2024, it recorded on-chain revenue of $43.3 million, a 183 per cent increase, driven by vendor migrations post-shutdown of competitors, according to Chainalysis’ 2023 market report Darknet revenue in 2023.
- In addition to that activity, markets like these host vendors that advertise their own cashout or swapping services, resulting in tens of millions of dollars in laundered funds.
- They often sell across multiple markets or operate standalone storefronts via encrypted apps like Telegram and Signal.
Ready To Explore Web Data At Scale?
For example, in Russia-based DNMs, the illicit drug trade remains predominant. Since last year’s Crypto Crime Report, the top performing Russia-based DNMs have held steady, but Kraken DNM overtook Mega as the leading DNM by annual revenue in 2024. Some fake sellers take your crypto and never ship what you ordered, or phishing sites that look like real marketplaces but steal your login info.
Combating Transnational Crime
By aggregating verified links and providing up-to-date information, these lists reduce the time users spend searching for reliable markets. They also include user reviews and ratings, helping newcomers identify trustworthy vendors and avoid scams. The integration of cryptocurrencies like Bitcoin and Monero remains a cornerstone of these platforms. Bitcoin, with its widespread adoption, offers a balance between accessibility and security, while Monero provides enhanced privacy features, making it the preferred choice for users prioritizing anonymity. These currencies enable seamless cross-border transactions without the need for intermediaries, reducing costs and increasing efficiency.
Security Links
Described by Attorney General Pam Bondi as a historic blow to the digital drug trade, the operation targeted individuals in the United States, Austria, Brazil, France, Germany, the Netherlands, South Korea, Spain, Switzerland, and the United Kingdom. It marks the most significant JCODE operation to date, building on years of enforcement actions and marketplace takedowns, including Kingdom Market, Tor2Door, Bohemia, and Nemesis. If you cannot think of any valid reasons why the stuff costs so cheap in a darknet marketplace, it’s likely a low-grade product. Use logic and math to find goods in the popular vendor shops perfectly balanced in terms of price and quality. While darknet markets aren’t entirely risk free they generally offer a much safer alternative than buying drugs or other things in person.
ICE, Europol, Law Enforcement Partners, Dismantle Major Illicit Drug Networks In Global Darknet Crackdown
Onymous (the law enforcement takedown of the Silk Road 2.0 darknet marketplace together with a host of smaller DNMs in 2014) and Op. Bayonet/GraveSac (the coordinated takedown of the AlphaBay and Hansa Market darknet marketplaces by US and European law enforcement in 2017), which left the Western DNM ecosystem reeling. In contrast to Russian-language DNMs, Western darknet marketplaces continued to struggle throughout 2024 as a result of sustained law enforcement action, coupled with several high profile exit scams. In 2025, darknet marketplaces primarily accept Monero (XMR) and Bitcoin (BTC). Privacy-focused operators are shifting to Monero due to its default anonymity, compared to Bitcoin’s transparent ledger Darknet markets see BTC inflow drop to $2B.
Category Deep-dive: Sanctioned Entities Continued To Drive Illicit Crypto Volume In 2024
They also use 2FA, PGP, Private Mirros and Multi Signature to name some of the security features. The Darknet is often utilized for secure communication, discreet information or file sharing, anonymous research without identity exposure, and occasionally for engaging in illicit activities. It is also recognized for hosting underground black markets(darknet markets), whistleblowing platforms, and discussion boards that champion freedom of speech.
Crime Forums And Markets Specializing In Cybercrime Enablement
Throughout the history of the darknet market ecosystem, at different turns one marketplace has typically played the dominant role. The last several years’ examples include Silk Road, AlphaBay, Wall Street Market, and Hydra, most recently. Historically, as law enforcement closed each dominant marketplace, a new leader emerged. We can see this pattern on the chart below, which shows the level of market share controlled by the dominant market of each epoch. The recovery pattern is fairly consistent until the Hydra Marketplace closure, after which no dominant darknet market emerged.
This can be stopped if law enforcement agencies can break any link, particularly dark web marketplaces, in the chain. Hence, it should be the top priority to track these platforms and shut them down as quickly as possible. Some vendors offer services to help people “clean” illegally obtained funds using cryptocurrency and fake transactions.
Darknet Marketplaces (DNMs) And How They’re Accessed
For example, in the screenshot below, an American vendor lists protonitazene powder, and advertises its uses as a counterfeit for oxycodone, also referred to as “M30” (i.e. 30 mg). When looking at crypto inflows to DNMs in 2024, the data indicate that wholesale drug purchases were dominant, averaging between 71 and 81% of this year’s total market share. For online pharmacies, wholesale purchases led in 2024, followed by large retail. One of the central76 discussion forums was Reddit’s /r/DarkNetMarkets/,777879 which has been the subject of legal investigation, as well as the Tor-based discussion forum, The Hub.
Known for its publicity stunt releasing millions of stolen card details for free, BidenCash specializes in credit card fraud and identity theft. Fentanyl and fentanyl-laced drugs also arrive in the United States through Latin America based cartels. U.S. customers predominantly purchase drugs from these groups that are known to have used crypto to source fentanyl precursor chemicals from labs based in China. The cartels then use those chemicals to manufacture fentanyl that is later sold in the U.S.
How DNMs Operate
- While 2024 was likely a record year for crypto crime revenue overall, darknet market (DNM) and fraud shop inflows fell, with DNMs receiving just over $2 billion in BTC on-chain, and fraud shops $225 million.
- Why are these markets still seen as enticing places to sell drugs, despite the risks?
- However, in June 2025, BidenCash’s relevant domains (around 145) were seized by the US Department of Justice.
- Ghost guns, assembled with prefabricated parts and without required serial numbers, are nearly always designed to be semi-automatic firearms, and are almost impossible to trace.
- Additional layers, such as two-factor authentication (2FA), encrypted PGP messaging, and built-in wallet security, significantly enhance protection against theft and hacking.
- This ensures that funds are only released once both parties confirm the transaction, significantly reducing the risk of fraud.
As a result, drug precursor manufacturers have begun to shift to new analogs and substances, while adopting alternative methods to cryptocurrency to obscure their financial footprints. Cryptocurrency-enabled online sales of illicit drugs saw a year-on-year growth of over 19% between 2023 and 2024, nearing USD 2.4 billion. A Jamaican national who intended to distribute controlled substances that were shipped from California to Ohio through a global logistics company, and was residing in the U.S. illegally, has been… WizardShop has solidified its status as one of the best data stores in the dark web by providing an impressive quantity of quality data as well as providing a trustworthy, easy to use interface allowing criminals easy and secure buying and selling.
Despite their controversial nature, these marketplaces continue to evolve, offering a glimpse into the darker side of online commerce. As cyber threat intelligence professionals monitor these markets, they gain insights into emerging threats and malicious activities that can impact organizations and individuals. Monero and Bitcoin are two of the most commonly used digital currencies on the dark web markets. However, Monero, on the other hand, is untraceable and the most trusted payment method on these markets. Therefore, most cybersecurity experts recommend using Monero while shopping on darknet markets.
