It’s notable that around the same time, Lin in his real-life persona was burnishing his credentials in cryptocurrency tracing. When cybersecurity journalist Brian Krebs discovered and wrote about the service in August 2021, he dubbed it an “anti-anti-money laundering service for crooks,” and he traced its data source to a legitimate blockchain tracing API (which promptly cut off access). According to prosecutors, Lin “had ultimate decision-making authority over every aspect of the multimillion-dollar operation”. Little did those officials know, the instructor sharing tips on how to catch cybercriminals was allegedly one of the dark web’s biggest drug lords.
“That is a potentially risky situation, where someone who’s in the process of laundering proceeds of crime can check in commercially available tools whether they have laundered them such that they can get away with it.” Running certain checks in those tools might even allow someone to determine if they're being actively investigated by law enforcement, Robinson says. “This service is dedicated to individuals that have the need to possess complete privacy on the blockchain, offering a perspective from the opponent's point of view in order for the user to comprehend the possibility of his/her funds getting flagged down under autocratic illegal charges.” In total, Incognito Market promised to leak more than half a million drug transaction records if buyers and sellers didn't pay to remove them from the data dump. “Maybe the whole thing was set up to create a false sense of security,” Ormsby says. According to the FBI, the market took nearly a year to catch on, with virtually no sales during that time.
Darknet Market Services Show Fragmentation In 2023
It’s a warning to anyone who believes their anonymity on such sites is foolproof, especially when the site operator can be the biggest threat. He threatened to reveal all the transaction details on Incognito, including the names of buyers and sellers, which could identify people involved in illegal orders. The payments ranged from $100 to $20,000, depending on how many transactions each person had handled. The message included a list of the "top" vendors who had paid the ransom to protect their customers and themselves. They warned that this would cause law enforcement to get involved.
Overview Of The Incognito Market
The money laundering charge – reflecting the financial transactions to wash and move the crypto profits – is punishable by up to 20 years in prison. It’s the same heavy statute used against infamous figures like the founder of Silk Road, Ross Ulbricht, signifying that prosecutors viewed Incognito Market as the equivalent of a major drug cartel, just in digital form. The legal case against Rui-Siang Lin is being prosecuted in the Southern District of New York, a jurisdiction known for tackling high-profile cybercrime and narcotics cases. For cybersecurity professionals and law enforcement agents, the take-down of Incognito Market is rife with lessons.
Almaviva Leak Exposes FS Group Data
In 2021, Pharaoh introduced a service called “Antinalysis,” which was essentially a counter-intelligence tool for crypto users. Lin’s “strategy” as a marketplace operator combined technical savvy with an eye for community dynamics. For example, the site became known for listings of high-purity narcotics (like Afghan heroin and premium cocaine) and had vendors shipping globally – indicating that major drug suppliers saw Incognito as a profitable channel. In retrospect, several critical vulnerabilities and operational security (OpSec) mistakes led to the market’s downfall. In fact, Lin had meticulously planned the marketplace’s design – even emailing himself a hand-drawn diagram of the site’s workflow in March 2020, months before launch.
Dark Web Market Owner Arrested In New York After FBI Traces Crypto
A VPN, in combination with Tor, further enhances the user’s security and anonymity. A VPN allows a user to encrypt all internet traffic traveling to and from his or her device and route it through a server in a location of that user’s choosing. That information is hidden simply because most users won’t find it relevant.
TRM Labs assesses the event was likely an exit scam, though a covert law enforcement seizure cannot be ruled out. As a result, law enforcement has adopted an intelligence-led enforcement strategy incorporating DNM takedowns into longer-term investigations rather than treating them as end goals. Even as major darknet platforms fall, TRM Labs data shows that the ecosystem remains highly adaptive.
Agentic AI-Powered, Intelligence-Driven Unified Cybersecurity Platform
It also uses global law enforcement networks, like Europol, to combat cybercrime threats. HSI is a worldwide law enforcement leader in Darknet and other cyber-related criminal investigations. Credible reporting from the referenced agencies, in addition to contributions from ATF; Army CID; CBP; Department of Treasury’s FinCEN and Office of Foreign Assets Control; and NCIS enabled domestic law enforcement actions in support of Operation RapTOR.
Traceable Transactions
Accessing a darknet market like Nexus is streamlined through the use of official links and mirrors. Finally, the anonymized Bitcoin is transferred to a private wallet controlled by the user before being deposited into their darknet market account to complete a purchase. The process typically involves several steps to break the link between a user's identity and their market activity. The integration of PGP/GPG encryption is mandatory for reputable users, adding an essential layer of identity verification and secure messaging. The darknet marketplace ecosystem in 2025 is defined by advanced platforms like Nexus Darknet, which provides a secure and efficient environment for trade.
Incognito strives to grow by introducing our company to our customers and using the Incognito marketplace as large format specialty stores for products and services to further deepen their familiarity with them. Monero allows our Incognito customers to make purchases with complete anonymity, providing additional protection from external participants in the Incognito darknet link market. Many vendors around the world partner with Incognito Darknet because the Incognito Darknet Store has some of the lowest fees on the market and a good reputation among vendors. Despite initial explanations from Incognito’s administrators, including “Pharoah” on the darknet-based site Dread, about changes in withdrawal systems, suspicions continued to rise.
As for how the authorities uncovered his connection to the infamous dark web drug bazaar, a blend of old-fashioned investigative work and some luck was involved. Illegal drug trafficking and sales have always been a major focus among the FBI, Department of Homeland Security and other agencies. The 23-year-old darknet kingpin, popularly known as Pharoah or Faro, had long been on the FBI’s radar and eventually met his comeuppance at JFK airport.
Student And Exchange Visitor Program
To achieve a higher degree of anonymity, vendors and buyers utilize privacy-focused techniques. While a Bitcoin address does not directly contain personal information, all transactions are permanently recorded on the public blockchain. Platforms like Nexus provide official onion links, which are the primary addresses hosted on the Tor network. Further security is enforced through end-to-end encryption for all communications between buyers and sellers. For established and trusted vendors, a Finalize Early (FE) option is sometimes available, which speeds up the process by releasing funds immediately, based on earned reputation. This is achieved through a combination of technological safeguards and community-driven practices that prioritize user safety and transaction smoothness.
Srinivasan received virtual currency as payment for the drugs and then routed that virtual currency through cryptocurrency exchanges. Attorney’s Office for the Central District of California secured a 17-year sentence for Adan Ruiz, of Orange County, and a 15-year sentence for Omar Navia, of Los Angeles, for supplying fentanyl-laced pills to a drug trafficking ring that sold these drugs to more than 1,000 customers nationwide via the darknet. While concealing their identities with a unique username or “moniker,” users were able to search thousands of listings for narcotics of their choice. Incognito Market was available globally to anyone with internet access using the Tor web browser on the “dark web” or “darknet.” Incognito Market was designed to facilitate seamless narcotics transactions, incorporating many features of legitimate e-commerce sites such as branding, advertising, and customer service. Attorney’s Office for the Southern District of New York of narcotics conspiracy, money laundering, and conspiracy to sell adulterated and misbranded medication for owning and operating Incognito Market, one of the largest narcotics marketplaces on the internet.
- Lin is unaware that his every step is being monitored, unaware that the online empire he built, the infamous Incognito Market, is about to crumble.
- Since that time, and through its closing in March, Incognito Market sold more than $100 million of narcotics — including hundreds of kilograms of cocaine and methamphetamines.
- Srinivasan also used the encrypted messaging application Wickr to communicate with and sell drugs to customers.
- Otherwise, there’s a good chance of falling victim to a phishing scam like this fake Bitcoin mixer.
- In 2023, Chainalysis discovered that some popular fraud shops rely on payment processors as a way to reduce their own costs, add efficiency to their operations, and perhaps add a layer of security to transactions.
The authorities said that for almost four years, Rui-Siang Lin operated and owned the Incognito Market, an online marketplace on the dark web that users worldwide visited to buy and sell illegal narcotics. That allowed investigators to identify a bitcoin wallet stored there, which the FBI says Lin had also carelessly used to pay web registrar Namecheap for four web domains—including one that tracked which dark-web markets were online or down—and register them under his own name. In retrospect, Ormsby says that the site's apparent user-friendliness and its security features were perhaps a multiyear con laying the groundwork for its endgame, a kind of user extortion never seen before in dark-web drug markets. Department of Justice and public records, Incognito Market allowed users to “browse and purchase over 1,000 types of illicit drugs – including various controlled substances – while using cryptocurrency to conceal their identities through pseudonymous wallet addresses.” In an international operation codenamed Operation RapTor, U.S. and Taiwanese law enforcement reportedly dismantled Incognito Market – a notorious darknet marketplace “that facilitated over $100 million in illegal drug sales.”
McDonald purchased bulk quantities of fentanyl and cocaine and then directed others to complete hundreds of drug sales involving large quantities of both fentanyl and cocaine. McDonald directed and helped these accomplices package and ship the narcotics. The FBI, FDA, and USPIS investigated this matter with significant contributions from DEA, HSI, the Ocean County Sheriff’s Office, the Howell Township Police Department, the Lakewood Township Police Department, the Orlando Police Department, the Orange County Sheriff’s Office, the Arlington County Police Department, and the New York Police Department.
“This record-breaking operation sends a clear message to every trafficker hiding behind a screen—your anonymity ends where our global reach begins,” said Acting Director Todd Lyons of U.S. “Working through the JCODE initiative, IRS Criminal Investigation and our international partners led the largest and most impactful takedown to date—seizing over $200 million in assets, removing deadly drugs and weapons from circulation, and holding more than 270 individuals accountable. “These predators who peddled poison on the dark web might have thought they are untouchable — hiding behind screens, pushing fentanyl, fueling overdoses, and cashing in on misery.
