Her work combines a keen investigative eye with a love for storytelling, making even the most intricate aspects of crypto accessible and engaging. Through her writing, Danielle aims to inspire readers to delve deeper into the weird and wonderful realm of digital finance. This case is just one of many examples where romance and AI technology is used in financial frauds, with victims very often too ashamed to report their losses. The FBI estimates that more than 40,000 people reported losses totaling about $3.5 billion from cryptocurrency fraud last year. Just recently, Shreya Datta, a tech professional based in Philadelphia, was defrauded out of $450,000 by a con artist posing as a French wine trader named “Ancel” on the dating app Hinge. The scam, known as “pig butchering,” involves criminals using feigned love and affection to trick victims into making fake crypto investments.
Collective Dynamics Of Dark Web Marketplaces
The report also pointed out an increase in crypto-linked sanctions by the United States Office of Foreign Assets Control (OFAC) in 2023, with sanctions more than doubling to include 18 people or entities. These sanctions, often targeting groups or people rather than major markets or mixers, accounted for 61.5% of all illicit crypto transaction volumes, totaling $14.9 billion. According to the “2024 Crypto Crime Report” that was released by Chainalysis on Feb. 29, darknet marketplaces saw a resurgence in 2023, generating revenue of at least $1.7 billion. This marked a major recovery from the downturn seen in 2022 after the shutdown of Hydra, the then-largest darknet marketplace. Despite no single platform emerging as a clear successor to Hydra, a concerning number of smaller, niche-focused marketplaces have flourished, collectively driving the sector’s revenue growth. Mega Darknet Market led this group, drawing over $500 billion in crypto inflows.
Our classification shows that the number of sellers is significantly smaller than the number of buyers, as shown in Figs. The number of actors in the ecosystem is affected by several factors, especially market closures. Notably, the number of buyers and sellers significantly drops after the operation Bayonet in the last quarter of 2017, which shut down AlphaBay and Hansa markets, causing a major shock in the ecosystem34. However, the number of buyers rapidly recovers, which does not happen to sellers.

In fact, the Dark Web is a small subset of a much larger Deep Web — a part of the internet containing all the pages hidden from search engines for privacy and security reasons. Meanwhile, the visible part of the internet all users can access is known as the Surface Web, and it hosts an estimated 19 terabytes of data. We’ve heard a lot about the Dark Web in recent years — but how much do we really know about this mysterious part of the internet? In this overview of recent Dark Web statistics, we’ll start by examining the darknet in the context of the World Wide Web. The Moneyzine.com stats team will then look at the usage data for Tor, the go-to browser for accessing the Dark Web. Finally, we’ll focus on the notorious Dark Web marketplaces, explore their history, and review the latest prices of various illicit items.

Its focus on financial fraud and high-value transactions has attracted a dedicated user base, contributing to its growing reputation and market value. Valued at approximately $15 million, Abacus Market is one of the most lucrative platforms in the dark web ecosystem. In 2024, the platform grew significantly in popularity, partly because of its strategic acquisition of users from a number of recently shut-down marketplaces, such as AlphaBay and Incognito Market, which had recently closed their doors. A thriving category of illicit goods and services sold on dark web markets is that of scans of personal documents.
The Number Of Services Providing AV Evasion For Malware (cryptors) Will Increase
Despite most darknet markets banning the sale of fentanyl in their terms of service, nearly all mainstream Western-facing markets have vendors that sell fentanyl-laced products. While it received a relatively small share of large retail purchases as shown in the previous chart, Abacus Market is one such example. Though many customers are concentrated in Australia, Abacus has vendors and customers around the world, including the United States. Throughout the history of the darknet market ecosystem, at different turns one marketplace has typically played the dominant role. The last several years’ examples include Silk Road, AlphaBay, Wall Street Market, and Hydra, most recently.
The same report found that the healthcare industry also saw a growing number of attacks in 2022, an 86% increase year over year. The dark web is used by the media, the intelligence community, whistleblowers, and citizens seeking assurance that their Internet use won’t be restricted or monitored. However, as the name implies, this more secretive part of the web has a darker side, filled with threats and illegal activity. This platform has rapidly become a key player in the fraud market, trading in PII and SSH credentials while making use of both the clear and dark web. FreshTools, founded in 2019, specializes in selling stolen account credentials and data, particularly webmail, RDPs (Remote Desktop Protocols), and cPanels. Its user base is primarily English-speaking, and it appeals to more sophisticated cybercriminals.
Payment Processing Services
Additionally, transactions are made with cryptocurrencies, mostly Bitcoin, which also provide anonymity to the transaction parties6,36. While the Bitcoin blockchain is publicly available on Bitcoin core37 or other third-party APIs such as Blockchain.com38, a market or a user can generate a new address for each transaction. To track the transactions of markets and users as entities, the data need to be pre-processed in order to map groups of addresses into entities. Organizations and individuals should use a password manager to suggest and store passwords to reduce password reuse (which increases attacker access in a credential hacking attack).3. Once your information is out there, you will likely experience more frequent social engineering attacks and these attacks will likely include more personalized information.
To be classified as a seller, an entity must simultaneously satisfy the six feature threshold criteria, as follows. Also identified were several notable sellers who migrated to Kraken from the now closed Hydra marketplace. Around November 2022 the Administrator of WayWay started a new thread about the planned launch for a new marketplace called Kraken. Notably, the Administrator of WayWay has exactly the same alias (aka “Kraken”) who described the news of decentralized infrastructure having multiple data centers and nodes for the new project. It’s not surprising how drugs promoted in the forum are like RuTor’s most in-demand substances, highlighted by these Mephedrone postings and the top-featured products below.

What Do Darknet Drug Markets Look Like In 2023?
It is a hub for financial cybercrime and offers a wide range of illicit services and stolen data that cater to sophisticated cybercriminals. So far, 2023 has presented darknet drug markets with a number of challenges – however, their ability to bounce back despite these clearly shows they won’t be going anywhere anytime soon. The rise of social media for ‘low-level’ drug transactions suggests that darknet drug markets will continue to adapt their response, focusing on wholesale drug distributors, rather than the end consumer. According to research from various security sources, a number of markets reared their heads as key players after Hydra’s shut down, each taking it in turn to lead the market.
Countries With The Highest Number Of Indirect Tor Browser Connections In 2023
They lure crypto users to scam sites and Telegram bots under various guises, and add crypto-stealing functionality to infostealers and banking Trojans. With the price of Bitcoin setting record after record, the popularity of drainers specifically designed to steal cryptocurrency tokens from victims’ wallets is likely to persist in the coming year. The dark web isn’t going anywhere anytime soon, and in order to protect yourself online, it’s important you become aware of what to expect. The deep and dark web play a significant role in facilitating illegal activities and pose challenges for law enforcement. Today’s biggest cyber threats aren’t exactly the same as they were yesterday or will be tomorrow.
DDoS Attacks
- Notably, the number of multisellers suffers the largest drop of \(-99\%\) by the end of the first quarter of 2018.
- These different regimes suggest that the ecosystem’s resilience is mainly supported by the high demand of buyers rather than the response of the sellers.
- Examples include the sale of high-quality products with low risk for contamination (including lacing and cutting), vendor-tested products, sharing of trip reports, and online discussion of harm reduction practices.
- Launched in 2020, Cypher Marketplace sells fraudulent documents, stolen credit cards, fake IDs, and malware.
- As for drug markets serving Western customers, ASAP Market held a 25.0% share, followed by Mega and Incognito.
2a, where the overall ecosystem volume quickly recovers after market closures. This is an outcome of the ecosystem’s resilience, largely supported by the migration of users15. Correspondingly, the multihoming activity is a mechanism that contributes to the ecosystem’s resilience. Because they are already active in more than one market, the migration cost for the multihomers is usually smaller compared to that for non-multihomer users, especially for sellers, that need to rebuilt their reputation23.
Buyers And Sellers
We developed Lunar to monitor the deep and dark web, including dark web marketplace sites. As encryption, anonymity and privacy are central to the design of the darknet and its various drug markets, up-to-date information on drug trends is difficult to come by. Analysis from the World Drug Report 2023 suggests that whilst the average buyer is spending more on drug transactions (rising from $100 per transaction in 2018 to $500 in 2021), the number of active buyers and transactions have notably decreased. As it’s inaccessible via the surface web, users require a software known as The Onion Router (or TOR) to get to the darknet. Originally created by the US Government, TOR is an anonymising browser that allows users to enter the darknet and blocks their identity. Adding to this layer of security and anonymity is the use of cryptocurrency to make transactions on the darknet.
Until the end of 2013, when Silk Road is the dominant market (see Fig. 3), market-only sellers is the dominant category, and there are no multisellers. From the last quarter of 2013, U2U-only sellers become the largest category of sellers and remains as the largest throughout the rest of the observation period. The large number of U2U-only sellers is in accordance with previous results that showed that the trading volume in the U2U network is significantly larger than that of DWMs13 (also see Supplementary Information Figure S8). The marketplace also facilitated sales of false identification documents, hacking tools and services, and money laundering services for bitcoin. Hydra Market, which was considered to be the world’s largest and oldest darknet marketplace of illegal items and services, was seized and shut down by German authorities in coordination with U.S. law enforcement Tuesday, the U.S. We expect to see the number of attacks through contractors leading to data breaches at major end targets to continue to grow in 2025.
Can WiFi Owners See Your Internet History?
Cazes and his wife amassed numerous high value assets, including luxury vehicles, residences and a hotel in Thailand. Cazes also possessed millions of dollars in cryptocurrency, which has been seized by the FBI and the Drug Enforcement Administration (DEA). In total, Abacus Market generated nearly USD 100 million in Bitcoin-enabled sales. However, considering that Monero — a privacy coin — typically accounts for two-thirds to three-quarters of total volume, Abacus’s sales are likely closer to between USD 300 million and USD 400 million. Abacus’s exit follows the June 16, 2025 law enforcement seizure of Archetyp Market, marking the latest in a series of shutdowns in the Western DNM ecosystem.
For example, the US alone has an estimated 572,142 daily users, while Germany has about 323,549 as per the latest statistics. The dark web isn’t going away, so you need to understand the risks and take necessary precautions to stay safe online. While the deep and dark web serve legitimate purposes, they also facilitate illegal activities and create difficulties for law enforcement. One of the many creepy Dark Web facts is that marketplaces don’t just sell forged and stolen documents and credentials — they also sell malicious software hackers can use to infect their targets. As of 2023’s first quarter, top-quality malware sold for $4,500 per 1,000 installations.