Some criminal internet forums such as the defunct Tor Carding Forum and the Russian Anonymous Marketplace function as markets with trusted members providing escrow services, and users engaging in off-forum messaging. Items on a typical centralized darknet market are listed from a range of vendors in an eBay-like marketplace format. Following Operation Onymous, there was a substantial increase in PGP support from vendors, with PGP use on two marketplaces near 90%. From late 2013 through to 2014, new markets started launching with regularity, such as the Silk Road 2.0, run by the former Silk Road site administrators, as well as the Agora marketplace. In December 2014, a study by Gareth Owen from the University of Portsmouth suggested the second most popular sites on Tor were darknet markets.
Partnerships
A study based on a combination of listing scrapes and feedback to estimate sales volume by researchers at Carnegie Mellon University captured some of the best data. Examples include the sale of high-quality products with low risk for contamination (including lacing and cutting), vendor-tested products, sharing of trip reports, and online discussion of harm reduction practices. Professor for addiction research Heino Stöver notes that the shops can be seen as a political statement, advancing drug legalization "from below". According to 2014 studies by Martin Aldridge & Décary-Hétu and a January 2015 report from the Global Drug Policy Observatory, many harm reduction trends have been spotted. Centralized market escrow allows a market to close down and "exit" with the buyer's and vendor's cryptocurrency at any time. To protect against guard node deanonymization he recommends obfuscating traffic by investing in Tor relays which the market site will exclusively use.
Major Illicit Drug Networks Dismantled In Global Darknet Crackdown By ICE, Europol And Law Enforcement Partners

The EDTF is the premier money laundering task force in the nation and comprises more than 200 law enforcement personnel representing approximately 35 federal, state and local law enforcement and regulatory agencies. “HSI New York’s El Dorado Task Force Dark Web and Cryptocurrency investigators are equipped with the skills to identify money laundering, cybercrimes, and other illicit schemes and in turn prevent such offenses from impacting the safety and security of Americans. Tor is the most popular instance of a darknet, and it is often mistakenly thought to be the only online tool that facilitates access to darknets. Central to this effort is the use of advanced blockchain intelligence tools, which provide critical insights for tracing illicit transactions, identifying threat actors, and supporting enforcement actions. Regulatory bodies, law enforcement agencies, and private sector partners must continue to adapt, innovate, and cooperate to outpace increasingly sophisticated threat actors.
More From The Los Angeles Times

To get extremely potent opioids, users turn to the dark web—and sometimes, Google. In short, WTN continues to grow as a highly targeted and resilient marketplace within Canada’s dark web scene. These campaigns helped them gain users and redirect traffic after attacks such as DDoS.With an easy-to-use interface, a vast amount of data, and constant updates, BidenCash has become a favorite among cybercriminals involved in identity theft and financial fraud. If someone wants direct access to a server, a cPanel, or an email, this is the place to go.The market is in English and features a massive catalog with over 800,000 illegal products. FreshTools has been around since 2019 and has earned its place as one of the most well-known underground markets, even though it doesn’t follow the traditional dark web rules.
STYX Market
The first darknet market of notoriety was Silk Road. The key difference is the anonymity afforded by accessing darknet markets. In fact, the shutdown of the marketplace Evolution was discovered to be an exit scam, with the site’s operators shutting down abruptly to steal the approximately US $12 million in bitcoins that it was holding as an escrow .
Market Operations

Although all the vendors use pseudonyms, for fairly obvious reasons, they keep the same fake name to build up a reputation. As I browsed through the marijuana offers, I found 3,000 different options advertised by over 200 different vendors. Although around one third of vendors are based in the US, ten per cent are in the UK, and most promise to ship to every country in the world. Ever since, the net has turned over a steady but small trade in illicit narcotics. In 2026, dark web websites frequently change domains and are often short-lived. They use pseudonymous wallets, privacy coins (like Monero), mixers, chain-hopping, and non-KYC platforms to obscure transaction trails.
Ready To Explore Web Data At Scale?
In 2019, there were approximately 8,400 active sites on the dark web, selling thousands of products and services daily. Telegram channels supplement traditional onion sites, blurring lines between the dark web sites and more mainstream communication tools. Today’s cybercriminals spread their activities across multiple platforms, making them harder to track and shut down. Dark Web Marketplaces continue to thrive as central hubs for these illicit transactions. The onion site and the clearnet site were both replaced with a seizure banner that links to the investigative operation's website. The server infrastructure was hosted in a data center in the Netherlands and was also seized.
“Sometimes not when they're doing the crime, but when they're just online doing their own personal thing, sometimes they mix up accounts,” Henderson explained. So, that can run the spectrum—from credit card fraud to sextortion to child exploitation material,” explained Secret Service Supervisory Criminal Investigator Ken Henderson. The Secret Service is among multiple government agencies that fight illegal activity on the dark web.
- German police BKA led a coordinated raid involving Netherlands, Spain, Sweden, Romania and U.S. authorities.
- Bayonet/GraveSac (the coordinated takedown of the AlphaBay and Hansa Market darknet marketplaces by US and European law enforcement in 2017), which left the Western DNM ecosystem reeling.
- For those that prefer the large range of products and information made available on cryptomarkets, losing some money occasionally might be seen as an acceptable risk.”
- The earliest modern online anonymous markets, often referred to as darknet markets or cryptomarkets, appeared in early 2010.
- Then, in the transfer learning stage, the aforementioned models are transferred using manually labeled 800 positive samples (Dp) and 800 negative samples (Dc; Table 3), with the purpose of adjusting the model to fulfill the promotion posts and opioid review detection.
How Boutique Darknet Markets Are Making Drug Busts Harder
And the fragmentation of illicit markets, particularly in drug sales, signals a shift toward decentralization — with criminal enterprises moving away from traditional darknet marketplaces toward more agile and resilient platforms. From our measurement, we concluded that anonymous online marketplaces and forums provided easy-access platforms for global opioid supply. Our study identified 41,000 opioid trade–related marketplace listings and forum posts by analyzing more than 1 million listings and posts in multiple anonymous marketplaces and forums, which is the largest underground opioid trading data set ever reported. To understand the scale of opioid suppliers on the anonymous online market, we scanned the listings of 10 marketplaces and the promotional posts of 6 forums to extract the account information from 5147 unique opioid suppliers. To understand how it works, we describe an opioid transaction’s operational steps on the anonymous online marketplaces and forums.

These sites cater to cybercriminals seeking valuable data, such as credit card numbers, login credentials, and personal information. The second category consists of data stores, which specialize in stolen information. As of 2020, nearly 57% of the dark web was estimated to contain illegal content, including violence and extremist platforms. At the time of seizure, there was a total of 17,000 listings on the website sold by 3,200 vendors. They were however American vendors and consumers, as well as distributors from China and Mexico. On the page for each listing, users could pick a predefined quantity of the drug chosen by the vendor, typically measured in grams or number of pills, and proceed to checkout.
Federal law enforcement officers executed a search warrant at a hotel in Riverside county where Adams and Hosner were residing and recovered more than 10,000 counterfeit oxycodone pills as well as approximately 60 grams of methamphetamine. Adams and Hosner shipped these fentanyl pills to buyers throughout the United States, using the USPS, UPS, and other means of delivery. • On May 12, 2022, a federal grand jury returned a two-count indictment charging Holly Adams, 31, and Devlin Hosner, 33, of Indio, California, with conspiracy to distribute and possess with intent to distribute fentanyl and methamphetamine, and with conspiracy to launder money.
On Dread, the reactions to the recent law enforcement activity were a mix of dismay and defiance. If you'd like to tip WIRED anonymously, we have a couple ways for you to do that here. The FBI's Blanton told WIRED that no dark-web market has reached AlphaBay's scope since.