Quality and validity of the data it provides justify its higher cost over other marketplaces. The platform’s popularity continues to grow, attracting both new and returning customers. Valued at approximately $15 million, Abacus Market is one of the most lucrative platforms in the dark web ecosystem. In 2024, the platform grew significantly in popularity, partly because of its strategic acquisition of users from a number of recently shut-down marketplaces, such as AlphaBay and Incognito Market, which had recently closed their doors. Apart from the dark web markets that are operating online today, some raided platforms influenced many markets. Others are looking for stolen data, hacking services, or even banned books and political content.
In particular, MALLET is retrained and evaluated via 10-fold cross-validation. We also applied the MALLET topic modeling toolkit (package cc.mallet.topics MALLET’s class in JavaDoc API) on the same data set to predict the type of topic. The baseline model was applied directly to the labeled data (Table 3) and evaluated using 10-fold cross-validation. We used the metrics of precision and recall to compare the performance of different topic modeling methods.
History Of Dark Web Marketplaces

Further confounding efforts, these multiple markets are often scattered across different regions and jurisdictions, requiring significant international cooperation to drive operations. In 2025, agencies will need to deploy a combination of advanced cyber tools, including AI-driven pattern recognition, blockchain analysis, and network infiltration strategies, to track illicit activity across multiple channels. Historically, Telegram has been a favored platform for selling drugs — due to its security and public perception of non-cooperation with law enforcement, as well as strict access controls for groups and channels. However, Durov’s arrest has heightened fears that Telegram will now provide data on its users to law enforcement. Consequently, many vendors are migrating to alternative platforms, including Signal, Session, and WhatsApp. This exodus is expected to continue as Telegram enforces stricter measures to curtail criminal activities on its network and provide new opportunities for interdiction.
- Renowned for its extensive inventory of financial data and sophisticated operating methods, Brian’s Club is a key player in the underground economy of financial cybercrime.
- We then identified 311 opioid keywords and jargons to recognize 28,106 listings and 13,508 forum traces related to underground opioid trading activities.
- Korean law enforcement have shown that they have the motivation, resources, and skills to catch entire networks of these vendors.
- They sit on an encrypted part of internet called “Tor Hidden Services” where URLs are a string of meaningless numbers and letters that end in .onion, and are accessed using a special browser called “Tor”.
- Instead, they must gain access to multiple, hyper-secure markets and then regularly monitor this wide array of smaller, highly localized platforms.
- Both of these claims correspond with previous research showing that the dark web is perceived to be a safer place to buy and sell drugs.
The Rise And Fall Of Incognito Market
CACI’s DarkBlue Intelligence Suite is designed to address these exact challenges, offering comprehensive monitoring and analysis of the dark web’s most secure and decentralized spaces. With AI-enhanced threat detection, real-time dark web access through DarkPursuit, and detailed insights into evolving criminal networks, DarkBlue provides the intelligence needed to stay one step ahead in this rapidly changing environment. Department of Justice announced the results of Operation RapTor—an unprecedented international crackdown on darknet narcotics trafficking. While postal-based darknet drug markets pose significant problems for law enforcement and society, the harm from dead drop systems is potentially much greater still. Russian-style drug distribution models involve larger volumes of drugs, higher numbers of people participating in criminal activity, and greater danger of physical risk — both from violence and consumption of discovered drug stashes. And due to their greater efficiency and lack of reliance on a single distribution channel (the postal service) that can be surveilled and policed, dead drop systems are faster growing and more difficult to contain.

The seized drugs included 141 pounds of fentanyl or fentanyl-laced narcotics, more than 569 pounds of amphetamines, 95 pounds of cocaine, 95 pounds of MDMA and 22 pounds of LSD and ecstasy pills, authorities said. The whole idea just seems so sketchy to me and it seems pretty easy to get caught I know police are after the sellers not the buyers but still I’d be too paranoid to buy drugs off the internet. Despite the fact Archetyp had clearly raised the bar on security on the dark web, Operation Deep Sentinel – a collaborative effort between law enforcement agencies in six countries supported by Europol and Eurojust – took down the market.
The biggest takedowns in terms of volume – Silk Road, AlphaBay and Wall Street – have been police-led, but in 2018, the EMCDDA published a study which found that, of the more than 100 markets, just 10 percent closed as a consequence of overt police action. Mercifully, the escrow system now largely keeps dealers from pulling these sorts of tricks (they don’t get paid until the product arrives, after all). Buying directly from an online dealer—as opposed to through one of the marketplaces—is generally inadvisable. There’s no escrow system when you do that and, therefore, no guarantee they’ll actually send you something. One obvious point is the challenge, for people without technical know-how, of accessing dark-web marketplaces through the necessary software. I would be able to do it with the help of my friends’ advice; without it, I’d be stuck relying on online guides that I might not feel comfortable trusting.

Archetyp Was One Of The Dark Web’s Biggest Drug Markets A Global Sting Has Shut It Down
For the first time, FBI agents from all of the bureau’s field offices visited buyers to tell them about the overdose danger of pills sold online, which are often disguised to look like prescription drugs. Compared to its predecessors, Archetyp enforced enhanced security expectations from its users. These included an advanced encryption program known as “Pretty Good Privacy” and a cryptocurrency called Monero.
Detroit Man Sentenced To Over Ten Years For Drug Trafficking And Crypto-Related Money Laundering
Ransomware actors and fraudsters are leveraging technological advancements, including cross-chain bridges and artificial intelligence, to bypass detection and scale their operations. A key theme throughout the year has been the resilience and adaptability of illicit networks. Sanctioned entities, terrorist organizations, and ransomware groups have shifted tactics in response to global crackdowns, embracing new technologies and methods to obscure their activities. This adaptability underscores the need for constant evolution in enforcement strategies and international cooperation. Incoming crypto volumes to Chinese drug precursor manufacturers have seen a significant decline, from USD 27.6 million in 2023 to USD 17.0 million in 2024.
The Invisible Majority: People Whose Drug Use Is Not Problematic
First, an opioid trader, who intends to list the selling information and find potential customers, will first access the anonymous online marketplaces and forums, using an anonymous browsing tool such as a Tor client or a web-to-Tor proxy (step 1 in Figure 1) 5,6. Anonymous online marketplaces and forums usually operate as hidden Tor services, which can only be resolved through Tor (an anonymity network). Figures 2 and 3 illustrate examples of opioid listings in The Versus Project and Alphabay. The opioid trader will also use an anonymous online forum (eg, The Hub Forum) to post promotional information to attract potential customers (step 3). Anonymous online marketplaces are usually platforms for sellers and buyers to conduct transactions in a virtual environment.

This early detection allows organizations to identify and respond to threats quickly, reducing the chances of unauthorized access, financial loss, or damage to brand reputation. Since its inception, the market has catered to criminals looking for high-quality counterfeit items, such as fake IDs, passports, and branded luxury goods. Bohemia accepts Monero and Bitcoin as payment methods and places a strong emphasis on protecting user anonymity through PGP encryption.
Ready To Explore Web Data At Scale?
Initial studies into drug sales on social media began to be published in 2012. Over the next decade, piecemeal studies began to reveal a notable portion of drug sales were being mediated by social platforms. In 2021, it was estimated some 20 percent of drug purchases in Ireland were being arranged through social media. In the US in 2018 and Spain in 2019, a tenth of young people who used drugs appear to have connected with dealers through the internet, with the large majority doing so through social media, according to one small study. Nevertheless, the Western DNM ecosystem experienced some innovation in spite of recent enforcement actions. Amongst the most notable was the first merger and acquisition between two marketplaces on the darknet — whereby the struggling SuperMarket was absorbed by the now-Superlisted DrugHub in an operation that lasted around one month.
Articles categorized as “left” provide more commentary on societal impacts, such as links between the marketplace and organized crime in Sweden, or focus on harm caused by synthetic opioids. In contrast, “right” sources tend to emphasize law enforcement success and U.S.-European cooperation, highlighting the logistics of the operation rather than the social aftermath. HugBunter, the anonymous user who founded the forum in 2018, asked “market admins, vendors, and other service operators” to provide “proof-of-life” by signing posts with what’s known as a PGP encrypted signature, a form of cryptographic proof. From June 11 to 13, the agency said, a series of coordinated law enforcement actions targeting the platform’s administrator, moderators, key vendors and technical infrastructure took place across Germany, the Netherlands, Romania, Spain and Sweden.

External Threat Assessment Report
These sites cater to cybercriminals seeking valuable data, such as credit card numbers, login credentials, and personal information. As of 2020, nearly 57% of the dark web was estimated to contain illegal content, including violence and extremist platforms. Today’s cybercriminals spread their activities across multiple platforms, making them harder to track and shut down. The FBI is considered the primary agency responsible for policing the dark web.
Since the demise of Wall Street and Dream, two new markets, Empire and Nightmare – which both opened over a year ago – have grown rapidly as users have migrated over from closed sites. In the summer of 2017, Dream market, the second-biggest at that time, had just 48,000 deals. Whether because of fentanyl adulteration or the present pandemic, buying drugs from the “dark web”—a term for sites in the unsearchable “deep web” part of the internet that require specific software to access—has never looked so appealing. Even if you still have a regular in-person dealer that you trust, they may not know what they’re selling, or, for that matter, be able to find a supplier whose gear isn’t compromised. Tor’s clever traffic encryption system makes it very difficult for the police to know where these sites — and the people who use them — are located. It’s a natural place for an uncensored drugs marketplace, as it is for whistleblower websites and political dissidents, which also use the same techniques to keep their visitors hidden.
This operation was aided by non-operational supporting participation from the Financial Crimes Enforcement Network (FinCEN) and U.S. Local, state, and other federal agencies also contributed to Operation SpecTor investigations through task force participation and regional partnerships. Incognito, like other modern darknet platforms, operated entirely on cryptocurrency—primarily Bitcoin and Monero.