In 2022, Abacus was used by 10% of the users on Western darknet markets. Abacus Market, the largest Western darknet marketplace supporting Bitcoin payments, has shut down its public infrastructure in a move suspected to be an exit scam. Everything is well-organized and easy to find, which benefits newcomers to this environment.With a growing user base and an expanding inventory, Vortex is positioning itself as an “all-in-one” marketplace on the darknet. Some of the best-known names include Abacus Market, Russian Market, and BriansClub, all with thousands of illegal items available.Despite closures by authorities or the typical “exit scams” (when a marketplace disappears with all the money), these sites continue to pop up.
Operational Trends
“Anyone who tries to profit from the sale of illegal drugs – whether it’s on the streets or online – will face consequences. Certain substances covertly purchased by the government from Nemesis were confirmed by laboratory reports to be mixtures and substances containing fentanyl, a Schedule II controlled substance, and/or acetylfentanyl, heroin, and/or protonitazene, each a Schedule I controlled substance. “Importantly, TRM was able to uncover directly on chain-links between Nemesis and Chinese drug precursor manufacturers with funds being sent directly from Nemesis vendors to Chinese DPMs.” It reportedly had more than 30,000 active users and 1,000 vendors, and sold internationally, including to individuals in the United States. Leading up to the operation announced Tuesday, German and U.S. authorities took down the “ Hydra ” dark web market in April last year.
Search Darknet

This could stop the flow of stolen data through the supply chain and disrupt the underground economy that profits from your personal data. Other markets like Aurora, DeepMart, and WhiteHouse were also on track to reach the revenue of a midsize company if given a full year to earn. After assessing the aggregate characteristics of the ecosystem, we analyzed each of the markets individually. Marketplaces recorded 632,207 sales across these markets, which generated $140,337,999 in total revenue. Finally, the data is purchased by consumers who use it to commit various forms of fraud, including fraudulent credit card transactions, identity theft, and phishing attacks.
- Illicit drug sales, for example, are promoted on social media, where platform features such as recommendation systems are affording new means of illicit drug supply.
- With Archetyp offline announced by Europol on June 23, 2025, Europe lost one of its major fentanyl pipelines just as overdose deaths were surging.
- It marketed itself as a black market bazaar and sold everything from marijuana to heroin, plus hacking tools and counterfeit IDs.
- This is the ultimate indicator that the website is gone.
- You won't find drugs here, but you will find tons of credentials, RDP access, CVVs, and records stolen using malware.The platform works with data collected by well-known malware such as Lumma, RedLine, Raccoon, Vidar, and Aurora.
- It was the first big site where people could anonymously buy drugs using Bitcoin, and it gained a lot of attention, until it was shut down by the FBI in 2013.
When you buy or sell illegal goods online, you are not hidden from law enforcement, Europol’s director emphasized after a Dream Market bust. Vendors now vet markets for trustworthiness, often requiring invites or deposits. Even Hydra’s 2022 fall led to smaller Russian language markets trying to fill the gap, some suspected ones being Abacus or Drughub. But each bust raises the operational cost and risk for illicit sellers. They may hop to smaller markets, switch to privacy coins, or use encrypted messaging. In any case, the takedown shows that even a market deeply embedded in Europe’s drug trade can be toppled.
It supported 5,400 vendors and about 1.15 million customers worldwide. Dozens of Dream Market drug dealers were nabbed e.g. a U.S. heroin syndicate. On the same day, the FBI and Europol revealed they’d arrested 61 suspects and seized 50 darknet accounts worldwide. This announcement coincided with Operation SaboTor, a multinational effort targeting opioid vendors.
Frequently Asked Questions (FAQs) About Dark Web Marketplaces

If only dicey sites refer to any onion service, users might start to ask rightful questions about the credibility of all parties involved. The lack of history is not a tell-tale sign of a scam but it creates a dubious situation. The team behind it copied the CannaHome interface, so this platform might look like a market at the first sight.
German Police Seize 'Nemesis Market' In Major International Darknet Raid

Even though Phan and Prihar were making money together, the former has not been sent to prison yet. One of the officers who arrested the DDW owner said “We caught another Jew who took the money”. Accounts registered by users who relied on DDW referral links were responsible for 47% of all orders completed on Hansa and 23% on AlphaBay. They revealed detailed information about all the transactions that took place in terms of the scheme. When Hansa and Alphabay servers were seized by investigators, these links were scrutinized. The duo split the earnings so that each conspirator received around $8 million.
The collective effect of these components is a robust and efficient environment for digital commerce, where security and anonymity are prioritized to facilitate seamless transactions. Cryptocurrency tumblers and privacy-focused wallets provide the first layer, effectively obfuscating the financial trail of Bitcoin and Monero transactions. Direct deals with trusted vendors offer another pathway, often resulting in lower prices and faster shipping. These addresses are the gateways to platforms where vendors compete on price and quality, leading to a more favorable environment for the consumer. These collective advancements create a more resilient ecosystem for anonymous commerce, reducing risks for both vendors and consumers and facilitating a more stable and reliable trading environment.
How Mid-Market Businesses Can Leverage Microsoft Security For Proactive Defenses
Abacus Market appeared on the scene in 2021 and quickly became one of the heavyweights among English-speaking markets on the dark web. Although each marketplace may have its own specialty, most focus on a few well-known categories. In May, law enforcement arrested another 270 suspects following an international joint action known as 'Operation RapTor' that targeted dark web vendors and their customers from ten countries.

Russian Market has operated since 2019, specialising in stolen credentials, stealer logs, and remote desktop access. This survey highlights active and recently shuttered markets with actionable metrics and intelligence for threat hunters, CISOs, and red team leaders. TRM Labs speculates the Abacus operators could have also “lost motivation to continue” or chose to exit the ecosystem to “preserve their freedom and financial gains.”
Office Of The Chief Data Officer
The attorney accentuated that the representatives of the justice system shouldn’t misinterpret Prihar’s intentions to pass a fair and accurate sentence for him. His original plan was to create a reliable source of information for dark web users. He only shared links to third-party darknet sites that he mentioned in his pieces of news.
- It is entirely focused on financial cybercrime and offers much more than just stolen cards or basic logins.Here you will find malware logs, remote access (RDP), brute force accounts, complete identity packages, and access to financial platforms.
- Before these dark web marketplaces were shutdown, they sold a range of illegal products, from drugs to firearms.
- For sellers, it’s often about making money while staying off the radar.
- These are encrypted marketplaces accessed via the Tor Browser, a privacy-focused browser that hides users’ IP addresses.
Police Operation 'SpecTor' Arrests 288 Dark Web Drug Vendors And Buyers
As you are aware, we do not pay much attention to the machinations of the cryptocurrency world – all of this, in general, is way above our capabilities. It was created primarily to perform harmless transactions, and the fact that it was used illegally is the fault of criminals. And if Torando Cash is used for money laundering, it does not mean that it is the only functionality.
Largest Western Darknet Marketplace Abacus Market Vanishes With Millions In Suspected Exit Scam
Kingdom Market, a prominent dark web marketplace, was recently taken down in an international law enforcement operation. Since the takedown of Nemesis, Parsarad has discussed setting up a new darknet marketplace to take the place of Nemesis with vendors that were once active on the marketplace. Nemesis was established in 2021 and operated as a criminal marketplace on the darknet, an encrypted network within the Internet that can only be accessed with special anonymity-enhancing browsers. Treasury remains focused on the risks posed by darknet marketplaces, as highlighted in previous designations of Genesis Market on April 5, 2023, and of Hydra Market on April 5, 2022. Nemesis had over 30,000 active users and 1,000 vendors and facilitated the sale of nearly $30 million worth of drugs around the world between 2021 and 2024, including to the United States. Prior to its takedown by law enforcement, narcotics traffickers and cybercriminals openly traded in illegal drugs and services on Nemesis, which was designed with built-in money laundering features.
Operation RapTor involves law enforcement actions taken by JCODE member agencies, including the DEA, FBI, FDA OCI, HSI, IRS-CI, and USPIS. McDonald recruited and hired accomplices to help package and ship the narcotics they sold on the darknet. While executing search warrants in New Jersey and New York, federal law enforcement officers seized more than $330,000, close to 80,000 counterfeit Adderall pills, one firearm, and two industrial pill press machines. A fourth co-conspirator, Gregory Castillo-Rosario, who was arrested in October 2024, ran the Mrjohnson account. Attorney’s Office for the Eastern District of Virginia charged Joshua Vasquez, Joseph Vasquez, and Rafael Roman by criminal complaint with conspiracy to distribute 500 grams or more of methamphetamine. Prosecutors wrote in a sentencing memorandum, “The five victims of defendants’ crimes ranged in age from 19 to 51.
Opinions expressed herein are those of the authors and not necessarily those of Analytics Insight, or any of its affiliates, officers or directors. Spanish police arrested the suspected 30-year-old German administrator in Barcelona. It offered a vast range of narcotics, including cocaine, heroin, cannabis, MDMA, amphetamines, and synthetic opioids like fentanyl. These types of scams more than doubled in revenue year-over-year, with data indicating a growth of 85x since 2020. Although scams remain one of the biggest drivers of crypto-based crime, with $4.6 billion in revenue for 2023, the figure was down from the previous year’s $5.9 billion.
The primary method for acquiring a current link is through dedicated link aggregator sites and community forums. These addresses are not indexed by conventional search engines and frequently change to maintain operational security. Product listings are extensive and meticulously categorized, with vendor profiles displaying detailed feedback and transaction history. TRM Labs delivers blockchain intelligence to detect crypto-facilitated crime, ensuring compliance and safety worldwide Daily deposits dropped by over 90% in the final weeks, despite reassurances from its administrator. In late June 2025, Abacus users reported withdrawal issues and decreasing trust in the platform.