Many of these big markets are now engaged in cyber warfare, with vendors and operators attacking each other to assert dominance, often leading to disruptions and shutdowns. Law enforcement warns that no site is safe previous markets even the biggest ones have all eventually fallen. Its fall disrupted a huge part of the global drug trade, showing that even sprawling, language specific markets can be dismantled. Immediately after a big takedown, users flood to remaining markets or spawn new ones a whack a mole cycle. They seized Archetyp’s servers in the Netherlands, arrested the alleged 30 year old German admin in Barcelona, and targeted high volume vendors. On the same day, the FBI and Europol revealed they’d arrested 61 suspects and seized 50 darknet accounts worldwide.
Marc Hegemeister, a 30-year-old German national, was arrested in Barcelona on June 11th. The operation was a collaborative effort by the European Union and six countries. Because of this, they decided to set up Archetyp, and to support the European drug scene and advocate for drug liberalization. After trying LSD at age 20, they reflected on their life of alcohol abuse and drug-related anti-social behavior and realized that it did not fit with the prosocial desires they had as a child.
The longest-standing dark web drug market was taken down by European authorities last week with the aid of the United States. The market's administrator, a 30-year old German man, was arrested in Barcelona, Spain. Five defendants were arrested today on a 10-count federal superseding indictment alleging their participation in a multimillion-dollar drug trafficking organization (DTO) that used luxury private shipping companies to ship via… In addition to Wednesday’s arrests, agents served multiple federal search warrants and found evidence to include large amounts of cash, distribution amounts of suspected drugs.
Dark Web’s Longest-standing Drug Market Seized In Multinational Effort
The number of arrests and money seized was the highest for any international Justice Department-led drug trafficking operation, he said. The operation, coordinated by Europol and targeting the “Monopoly Market,” is the latest major takedown of sales platforms for drugs and other illicit goods on the dark web. “The FBI could not do this work without our partners both at home and abroad, and the staggering success of this year’s record-breaking amount of fentanyl, guns, and drugs seized prove that our efforts are working. Building on the successes of prior years’ operations, Operation RapTOR furthered global efforts to dismantle darknet marketplaces, resulting in the seizure of darknet infrastructure from Nemesis, Tor2Door, Bohemia, and Kingdom Markets. In addition, the United States and international law enforcement partners made 270 arrests of dark web vendors, buyers, and administrators in Austria, Brazil, France, Germany, Netherlands, South Korea, Spain, Switzerland, United Kingdom, and the United States. The seizures, to which ICE Homeland Security Investigations significantly contributed, include more than $200 million in currency and digital assets, over two metric tons of drugs, comprised of 144 kilograms of fentanyl or fentanyl-laced narcotics, and over 180 firearms.
In May 2014 the "Deepify" service attempted to automate the process of setting up markets with a SAAS solution; however, this closed a short time later. The discontinued Helix Bitcoin tumbler offered direct anonymized marketplace payment integrations. Due to the decentralized nature of these markets, phishing and scam sites are often maliciously or accidentally referenced.
Major Darknet Takedowns Case Studies
This led to the rise of Dread, the dedicated darknet discussion forum and the news site Darknetlive (since closed). On March 21, 2018, Reddit administrators shut down the popular subreddit /r/DarkNetMarkets citing new changes to their content policy that forbids the sale of "Drugs, including alcohol and tobacco, or any controlled substances". In June 2025 Europol took down the Archetyp Market with an estimated 3200 registered vendors and 600,000 customers worldwide. Later that month, the long-lived Outlaw market closed down citing a major bitcoin cryptocurrency wallet theft; however, speculation remained that it was an exit scam. Further market diversification occurred in 2015, as did further developments around escrow and decentralization.
Since the year 2000, some of the emerging cyber-arms industry operates online, including the Eastern European "Cyber-arms Bazaar", trafficking in the most powerful crimeware and hacking tools. One of the better-known web-based drug forums, The Hive, launched in 1997, serving as an information sharing forum for practical drug synthesis and legal discussion. With the development and popularization of the World Wide Web and e-commerce in the 1990s, the tools to discuss or conduct illicit transactions became more widely available. Though e-commerce on the dark web started around 2006, illicit goods were among the first items to be transacted using the internet, when in the early 1970s students at Stanford University and Massachusetts Institute of Technology used the ARPANET to coordinate the purchase of cannabis. According to the indictment, financial transactions on Empire Market used cryptocurrency to conceal the nature of the transactions and the identities of Empire Market administrators, moderators, vendors, and buyers. The controlled substances sold by vendors on Empire Market included heroin, methamphetamine, cocaine, LSD, opioids, and others.
Beyond Bug Bounties: How Private Researchers Are Taking Down Ransomware Operations
- Testing on those tablets revealed that they were not authentic oxycodone at all and were, in fact, fentanyl pills.
- That revenue funded Incognito Market’s operations, including paying “employee” salaries and for computer servers.
- Dark web market users routinely face voluntary closures (the gradual retirement of a market), exit scams (sudden closures of markets where any money in escrow is taken), or even scheduled maintenance of these markets.
- “This arrest underscores the dedicated, ongoing efforts of law enforcement to identify and dismantle illicit drug networks operating from every shadowy recess of the marketplace,” said New York Police Department Commissioner Edward A. Caban.
- In October 2013, Project Black Flag closed and stole their users' bitcoins in the panic shortly after Silk Road's shut down.
Srinivasan also used the encrypted messaging application Wickr to communicate with and sell drugs to customers. For example, in November 2023, while operating in an undercover capacity on Incognito Market, a law enforcement agent purchased and received several tablets purported to be oxycodone. Incognito Market sold illegal narcotics including heroin, cocaine, LSD, MDMA, oxycodone, methamphetamine, ketamine, and alprazolam, as well as misbranded prescription medication.
More In Security
“Thanks to the unwavering efforts by ICE’s Homeland Security Investigations (HSI), Europol and our international partners, we’re cracking the code of the so-called ‘safe spaces’ for cybercriminals—they are in our sights and we’re not backing down.” “Through close cooperation and intelligence sharing, officers across three continents identified and arrested suspects, sending a clear message to those who think they can hide in the shadows. “Operation RapTor shows that the dark web is not beyond the reach of law enforcement,” said Head of Europol’s European Cybercrime Centre, Edvardas Šileris.
In furtherance of Operation RapTOR and in their first action as a JCODE member agency, the Office of Foreign Assets Control (OFAC) additionally sanctioned Behrouz Parsarad, an Iranian national, for his role as the founder and operator of Nemesis Market following seizure of the market. “This record-breaking operation sends a clear message to every trafficker hiding behind a screen — your anonymity ends where our global reach begins,” said ICE acting Director Todd Lyons. U.S. Immigration and Customs Enforcement, in collaboration with Europol, the Joint Criminal Opioid and Darknet Enforcement Team, and various national and international partners, announced the results of Operation RapTOR May 22. WhiteBIT expands into Kazakhstan to support digital asset market growth As a result, the operation also strengthens momentum behind global digital asset regulation, especially in the context of disrupting organized crime financing.
Colorado Man Pursued Romance With Stolen COVID Relief Money
In effect, Operation Bayonet simultaneously shut down both markets, netting thousands of criminals and shattering community trust. By 2017 it boasted 200,000+ registered users and 40,000+ vendors, with roughly 250,000 drug listings and 100,000 non drug listings. Silk Road’s demise proved that even Tor hidden sites could be penetrated by good detective work, prompting many users to flee to successor markets. These hidden markets promise anonymity, but in practice, users often slip up. The EDTF is the premier money laundering task force in the nation and is comprised of more than 200 law enforcement personnel representing approximately thirty-five (35) federal, state, and local law enforcement and regulatory agencies. “The FDA is committed to continuing its work to disrupt and dismantle the illegal sales of drugs on the dark web, where such sales far too often have tragic consequences,” said the FDA’s Office of Criminal Investigations Kansas City Special Agent in Charge Charles Grinstead.
- While these outfits are not traditional DNMs, their success highlights how drug vendors are scaling their operations throughout Russian-speaking countries.
- For example, the FBI has noted that criminals on Tor routinely reuse usernames or expose device details, allowing investigators to trace them.
- One China-based pill press manufacturer which advertises on clearnet business-to-business (B2B) websites has on-chain ties to drug vendors on Abacus Market.
- Whilst a great many products are sold, drugs dominate the numbers of listings, with the drugs including cannabis, MDMA, modafinil, LSD, cocaine, and designer drugs.
Treasury International Capital (TIC) System
DarkDotFail, a pseudonymous journalist who covers darknet markets, said that the DOJ had overplayed the importance of the bust. Some of the darknet markets listed by the DOJ have since shut down. They seized $6.5 million in crypto and cash, 500kg in drugs—274kg of which was seized in the US, and the 63 guns.
This is 1000x more than authorities seized in the bust. “Market revenue is an insignificant rounding error in the global drug economy. Learn to hunt criminals, then hunt activists. Why do governments invest so much energy in hunting Tor users? Market revenue is an insignificant rounding error in the global drug economy.
By offering heightened anonymity and stronger defenses against law enforcement, these markets attract criminals who feel they provide a safe environment. However, a combination of law enforcement crackdowns, increasing instability from new users flooding the dark web from Telegram, and infighting among the larger markets has triggered a shift. As large platforms face disruption from law enforcement action, dark web infighting, and an influx of users from Telegram, there’s a growing shift toward smaller, more specialized marketplaces. As Pharoah — the leader of Incognito market — Lin supervised all of its operations, including its employees, vendors and customers, and had ultimate decision-making authority over every aspect of the multimillion-dollar operation. Coverage has included darknet market drug busts, pedophile crowdfunding, the details of hacking of darknet markets, as well as the diversification of markets such as TheRealDeal selling software exploits.
Retail vendors appear to be holding a greater portion of their proceeds on-chain than wholesale vendors, while wholesale vendors (those who distribute drugs in large quantities) are making greater use of DeFi. As international authorities have disrupted DNMs large and small in the last few years, cybercriminals and drug dealers have learned firsthand the consequences of running BTC-accepting DNMs given the currency’s inherent transparency. While these outfits are not traditional DNMs, their success highlights how drug vendors are scaling their operations throughout Russian-speaking countries. A series of law enforcement takedowns in the last few years have shaped the 2024 drug and fraud ecosystems. On Oct. 11, 2023, law enforcement executed arrest warrants at the couple’s Las Vegas home and arrested them both.
