In 2017, Dutch police took control of Hansa, a booming darknet market, and the FBI shut down AlphaBay, an even larger competitor. While displaced AlphaBay users flocked to Hansa for their fix, Dutch authorities spent weeks logging their activity, including many of their home addresses. What these cases, along with the dozens of arrests across Europe, have in common is that the investigations largely stem from last year’s Wall Street Market takedown.
Eight Months After Hydra Shutdown, New Russian-language Darknet Markets Are Filling The Void
Those charged are Juan Jose Farias Alvarez (“El Abuelo); Alfonso Fernandez Magallon (“Poncho”); Luis Enrique… The mission points to the growing concern over how crypto is being leveraged to traffic opioids and launder profits. If convicted of all charges, each defendant would face a statutory maximum sentence of life in federal prison. The defendants were arraigned Wednesday in United States District Court in downtown Los Angeles.
By offering heightened anonymity and stronger defenses against law enforcement, these markets attract criminals who feel they provide a safe environment. So far, law enforcement have arrested 179 people and seized $6.5 million in crypto and cash, 500 kilograms of drugs and 63 firearms. Silk Road, AlphaBay, WallStreet and Monopoly Market are all familiar names in the digital graveyard of the dark web. Before these dark web marketplaces were shutdown, they sold a range of illegal products, from drugs to firearms. A series of law enforcement takedowns in the last few years have shaped the 2024 drug and fraud ecosystems.
Police Seize Dark Web Drug Site Archetyp, Arrest Its Administrator
In stepped Empire Market which appeared in February 2018 (about 6-7 months after the demise of AlphaBay/Hansa) and soon became the leader of the Western darknet market ecosystem. The fact that its graphical user interface was built to resemble that of AlphaBay was purposely done to instill a sense of familiarity for users who had become accustomed to AlphaBay. The Dutch national police’s Cyber Enabled Crime Team was involved in the operation, code-named SpecTor. Investigators received leads from local police departments investigating overdose deaths, including that of a 19-year-old man in Colorado who loved learning languages and building his own computers, according to FBI Deputy Director Paul Abbate. OFAC’s designation of Parsarad was the result of strong partnership and coordination with the FBI, the Drug Enforcement Administration, Internal Revenue Service-Criminal Investigation, FinCEN, and a range of European law enforcement partners.
Combating Transnational Crime
The United States saw 153 arrests as part of the international operation, followed by the United Kingdom, with 55, and Germany, with 52, according to the European Union law enforcement agency Europol, which coordinated it. Opponents of strict dark web policing sometimes argue that such operations drive criminal activity to even more hidden or encrypted platforms, making detection harder. They may also raise privacy and surveillance concerns, warning that aggressive cyber policies risk collateral impacts on online freedom and legitimate users of anonymity technologies. Over its five years of activity, the marketplace amassed over 612,000 users with a total transaction volume of over €250 million (approximately $289 million) in Monero cryptocurrency transactions.
Our Websites
- The website operators are suspected of drug trafficking and running a criminal trading platform.
- As major players tear each other apart, new, niche markets are carving out their own territories, often with a sharp focus on specific categories of illicit goods.
- From at least April 2021 until May 2023, McDonald and others conspired to sell fentanyl and cocaine via multiple darknet marketplaces.
- They may also raise privacy and surveillance concerns, warning that aggressive cyber policies risk collateral impacts on online freedom and legitimate users of anonymity technologies.
- In total, police seized 47 smartphones, 45 computers, as well as narcotics and other assets, which will be analyzed for further investigative leads.
- Gevorgyan is charged with one count of possession with intent to distribute MDMA and one count of possession with intent to distribute ketamine.
From June 11 to 13, the agency said, a series of coordinated law enforcement actions targeting the platform’s administrator, moderators, key vendors and technical infrastructure took place across Germany, the Netherlands, Romania, Spain and Sweden. The operation, codenamed SpecTor, was done in collaboration with nine countries, including the US, UK, Austria, France, Germany, the Netherlands, Poland, Brazil, and Switzerland. While 155 of the arrests took place in the US, authorities seized $53.4 million in cash and digital currencies, 850kg (or 1,873 lbs) of drugs, and 117 firearms worldwide. Law enforcement agencies from around the globe arrested 288 people suspected of buying or selling drugs on the dark web. In a pair of press releases posted on Tuesday, the US Department of Justice and Europol said the joint effort also resulted in the shutdown of the dark web marketplace, Monopoly Market.
- In Colombia, for instance, many of the vendor listings are for cocaine or Infrastructure-as-a-Service, as seen in the screenshot below.
- Monopoly Market has been on the dark web since 2019 and has since served as a hub where criminals can buy and sell drugs, according to CyberScoop.
- Investigators said the seizure of Archetyp Market followed years of forensic work to trace financial flows, analyze digital evidence and map the platform’s architecture.
- Incognito Market was available globally to anyone with internet access and could be accessed using the Tor web browser on the dark web.
FBI Cyber Cop: Salt Typhoon Pwned ‘nearly Every American’
This year’s law enforcement operation was accompanied by a public awareness campaign called Operation ProtecTor aimed to promote public safety and spread awareness of resources for those struggling with substance abuse and who go through extreme lengths to obtain opioids. JCODE has worked with every FBI field office in the country to facilitate outreach to households that have purchased individual amounts of opioids from the darknet. The interagency efforts are aimed to both identify those who use anonymizing technologies to purchase illicit narcotics and direct them to available resources. Operation RapTor involves law enforcement actions taken by JCODE member agencies, including the DEA, FBI, FDA OCI, HSI, IRS-CI, and USPIS. State, local, and other federal agencies also contributed to Operation RapTor investigations through task force participation and regional partnerships, as well as the multi-agency Special Operations Division. Attorney’s Office for the Southern District of New York of narcotics conspiracy, money laundering, and conspiracy to sell adulterated and misbranded medication for owning and operating Incognito Market, one of the largest narcotics marketplaces on the internet.
News Releases And Statements
Since the takedown of Nemesis, Parsarad has discussed setting up a new darknet marketplace to take the place of Nemesis with vendors that were once active on the marketplace. The investigators identified the suspects (many behind thousands of sales on illicit online marketplaces) using intelligence collected following takedowns of multiple dark web markets, including Nemesis, Bohemia, Tor2Door, and Kingdom Market. Historically, the darknet drug trade has been dominated by large, multi-purpose platforms like AlphaBay and DrugHub. However, a combination of law enforcement crackdowns, increasing instability from new users flooding the dark web from Telegram, and infighting among the larger markets has triggered a shift. Many of these big markets are now engaged in cyber warfare, with vendors and operators attacking each other to assert dominance, often leading to disruptions and shutdowns.
But experts warned that hacker gangs are often slippery, and similar markets often soon re-emerge. Ghost guns, assembled with prefabricated parts and without required serial numbers, are nearly always designed to be semi-automatic firearms, and are almost impossible to trace. Everytown, an organization that works to prevent gun violence in America, calls ghost guns a “weapon of choice for violent criminals” and extremists. The Register asked the authorities involved for more details on these measures, and they clarified this meant arrests only.
Archetyp Market was one of the few marketplaces allowing the sale of highly potent synthetic opioids such as fentanyl, contributing to broader health threats and overdose risks in Europe and beyond. Authorities from multiple countries, including Germany, the Netherlands, Spain, Sweden and the United States, worked together to investigate and take down a major online criminal marketplace, demonstrating the need for cross-border efforts to combat cyber-enabled crime. During the investigation, federal law enforcement seized cryptocurrency valued at $75 million at the time of the seizures, as well as cash and precious metals.
Instead, they must gain access to multiple, hyper-secure markets and then regularly monitor this wide array of smaller, highly localized platforms. Further confounding efforts, these multiple markets are often scattered across different regions and jurisdictions, requiring significant international cooperation to drive operations. In 2025, agencies will need to deploy a combination of advanced cyber tools, including AI-driven pattern recognition, blockchain analysis, and network infiltration strategies, to track illicit activity across multiple channels. Archetyp launched in May 2020 and quickly grew to become one of the most popular dark web markets with an estimated total transaction volume of €250 million (A$446 million). It had more than 600,000 users worldwide and 17,000 listings consisting mainly of illicit drugs including MDMA, cocaine and methamphetamine.
The darknet market was a classic escrow marketplace (i.e. users deposited funds into Empire and, only then, were able to make purchases). Empire quickly attracted new vendors and buyers and its reliability and features, coupled with low vendor bonds – that is, the cost of signing up as a vendor – a responsive moderator team, and the familiarity of the interface, turned it into a leader. The takedown of Archetyp Market is a clear signal that law enforcement agencies, supported by advanced blockchain intelligence, can disrupt even the most entrenched illicit platforms. But the resilience and evolution of these networks underscore the need for continued cross-border collaboration, technical innovation, and real-time monitoring to stay ahead of the next generation of darknet threats.
Dark Web Drug Busts Lead To 150 Arrests
The result of this fallout is a significant fragmentation of darknet marketplaces, with smaller, specialized sites emerging to fill the void left by the collapsing giants. As major players tear each other apart, new, niche markets are carving out their own territories, often with a sharp focus on specific categories of illicit goods. A smart play in the operation involved using intelligence gathered from previous darknet marketplace shutdowns. Data from dismantled sites like Nemesis, Tor2Door, Bohemia, and Kingdom Markets gave authorities crucial leads, helping them identify and track down darknet vendors and their customers across the globe.
