One of the central76 discussion forums was Reddit’s /r/DarkNetMarkets/,777879 which has been the subject of legal investigation, as well as the Tor-based discussion forum, The Hub. In 2023, the NCB had busted the then biggest darknet based LSD cartel named ‘Zambada’, seized 29,013 blots of LSD, 472 gm MDMA, and ₹51.38 lakh in cash, and arrested 14 persons. The alleged kingpins of that network are currently in judicial custody.
- A screenshot of the marketplace shared by the DOJ in the statement showed cocaine available for bulk purchase from JoyInc on Drughub, a dark web site.
- Europol confirmed to WIRED today that it was also able to recover the Wall Street Market backend server, providing investigators with an invaluable trove of evidence.
- But the feds struck again—German cops and the US teamed up in 2022, seized servers, and shut it down, nabbing $25 million in BTC.
- For example, in India, one of the most frequent listings is for generic medication, which mostly comes from the first vendor shown below.
- The controlled substances sold by vendors on Empire Market included heroin, methamphetamine, cocaine, LSD, opioids, and others.
- Request a free trial today and strengthen your ability to track and disrupt illicit activities on the dark web.
How Boutique Darknet Markets Are Making Drug Busts Harder
Once received by the buyer, the compound could be pressed into counterfeit pills, like M30s, and further distributed to end consumers. China-based precursor manufacturers mark the beginning of the synthetic drug supply chain. In years past, these organizations were more overt in their display of such products, openly advertising on mainstream B2B websites.
Partnerships

Neither we accept liability for any errors or omissions in the information provided or for any financial losses incurred as a result of relying on this information. Coin Edition is an independent digital media company that focuses on news from the blockchain and crypto space. Visitors to the Archetyp Market website are now greeted by a banner detailing the takedown.
Police Seize Dark Web Drug Site Archetyp, Arrest Its Administrator
These actions provided investigators across the globe with invaluable leads and evidence, strengthening the ongoing fight against cybercrime and illicit activities on the darknet. Department of Justice announced the results of Operation RapTor—an unprecedented international crackdown on darknet narcotics trafficking. Operation RapTor resulted in the highest number of seizures of any JCODE operation, including more than $200 million in currency and digital assets, over two metric tons of drugs, 144 kilograms of fentanyl or fentanyl-laced narcotics, and over 180 firearms.
Ghost guns, assembled with prefabricated parts and without required serial numbers, are nearly always designed to be semi-automatic firearms, and are almost impossible to trace. Everytown, an organization that works to prevent gun violence in America, calls ghost guns a “weapon of choice for violent criminals” and extremists. Interestingly, this vendor has also been a trusted supplier for OFAC-designated fentanyl traffickers Alex Adrianus Martinus Peijnenburg and Matthew Simon Grimm, having received close to $1.5 million in purchases from them. Investigators also found evidence of custodial wallets on global platforms like Binance, which are now under scrutiny. It is odourless, colourless, and tasteless, and can be painted onto small paper pieces that users lick or swallow.
They engage in financial crime and sell other people’s stolen personal information, since they’re under the veil of anonymity. Still, even with these crackdowns and better defenses, dark web markets just keep coming back. As long as people want to buy and sell illegal stuff online, be it stolen data, narcotics, drugs, or malware, these markets will keep resurfacing, no matter how many times authorities take them down. Despite Telegram’s anonymity, the dark web is still a hot spot for illegal trading of malware, illicit goods, and stolen data (such as stolen credit card information).

The Chainalysis 2025 Crypto Crime Report
What remains to be seen is whether dark web drug buyers will simply find new suppliers, especially since Operation Disruptor targets individual vendors rather than entire marketplaces. At the very least, though, Tuesday’s announcement may give aspiring dark web vendors pause, as it only adds to law enforcement’s track record of cutting through supposedly anonymous corners of the internet. The Wall Street Market seizure is not the first or even most devastating law enforcement takeover of a dark web storefront. In 2017, Dutch police took control of Hansa, a booming darknet market, and the FBI shut down AlphaBay, an even larger competitor. While displaced AlphaBay users flocked to Hansa for their fix, Dutch authorities spent weeks logging their activity, including many of their home addresses.
How Much Is Stolen Data Sold For On Darknet Markets?
The other emerging issue is that current policing efforts treat dark web markets as the core threat, which might miss the wider landscape of digital harms. Illicit drug sales, for example, are promoted on social media, where platform features such as recommendation systems are affording new means of illicit drug supply. The wares it offered included drugs, fraudulently obtained data and goods, and cybercrime services including ransomware, phishing and distributed denial-of-service, or DDoS, attacks. During the investigation, federal law enforcement seized cryptocurrency valued at $75 million at the time of the seizures, as well as cash and precious metals. In addition, today’s designation is OFAC’s first as a member of the Federal Bureau of Investigation-led interagency Joint Criminal Opioid and Darknet Enforcement Team. Since last year’s Nemesis takedown, Parsarad has discussed setting up a new DNM to take Nemesis’ place, with vendors who were previously active on the marketplace, according to OFAC.

Money Laundering

Vice City listens to the problems faced by its customers and vendors and solves them so that they can keep using the platform with ease. To access the marketplace, dark web users must register first and pass the CAPTCHA test to prove they are human. While this market started in Canada in 2021, WeTheNorth now sells to both Canadian and international users. It’s a market for fake documents, hacking software, and financial fraud services. WeTheNorth has a strong community vibe, with an active forum where users interact and share updates.
As reported last year, some drug shops have been outsourcing services like website hosting and payment processing. IKlad.biz and Klad.cc, shown in the chart above, are examples of those infrastructure providers. While these outfits are not traditional DNMs, their success highlights how drug vendors are scaling their operations throughout Russian-speaking countries. In spite of Hydra Market’s disruption in 2022, former Hydra affiliates still found operating in today’s DNMs rely heavily on these infrastructure providers. Last December, a Russian court imposed a life sentence on Stanislav Moiseyev, Hydra Market’s suspected founder and operator, although the Moscow prosecutor’s office did not publicly tie the guilty verdict to Hydra. The court also sentenced fifteen accomplices to anywhere from eight to 23 years in maximum-security penal colonies.
- BidenCash is another latest marketplace that started in 2022, and is now home to sensitive financial data transactions.
- For a local machine configuration, he recommends a computer purchased for cash running Linux, using a local Tor transparent proxy.
- They’re tightening security and carefully screening anyone who wants to join.
- The marketplace has a simple interface, lets users filter logs easily, and accepts Bitcoin, Monero, and Litecoin for payments.
- What remains to be seen is whether dark web drug buyers will simply find new suppliers, especially since Operation Disruptor targets individual vendors rather than entire marketplaces.
Previously, we also reported the takedown of Telegram-based illicit market Haowang Guarantee. Blockchain analytics firm Elliptic called it the “largest illicit online marketplace to have ever operated.” The platform allegedly enabled cybercriminal activities across Asia, with estimated transaction volumes exceeding $27 billion. Its services included laundering stablecoins, particularly USDT, forged documents and tools for large-scale online fraud. Archetyp Market facilitated a reported minimum of 250 million euros (about $290 million) in drug transactions over five years, with over 600,000 users, 3,200 vendors, and 17,000 listings. Authorities seized assets valued at 7.8 million euros, including cryptocurrency and luxury goods, and deployed around 300 officers across multiple countries during the operation. On one hand, it offers privacy for whistleblowers, journalists, and citizens in oppressive countries.
It was founded in 2021 and had more than 150,000 user accounts and over 1,100 seller accounts worldwide, nearly 20% of the latter in Germany, according to German authorities. The German police’s largest bust came in April 2022, when its investigators disrupted the world’s largest darknet market, Hydra, which had 17,000,000 members and 19,000 registered sellers. Over its five years of activity, the marketplace amassed over 612,000 users with a total transaction volume of over €250 million (approximately $289 million) in Monero cryptocurrency transactions. They used darknet markets, including Monopoly, Versus, ASAP, AlphaBay, Wall Street, Archetyp, Bohemia, Empire, Dream and White House.
Data from dismantled sites like Nemesis, Tor2Door, Bohemia, and Kingdom Markets gave authorities crucial leads, helping them identify and track down darknet vendors and their customers across the globe. What these cases, along with the dozens of arrests across Europe, have in common is that the investigations largely stem from last year’s Wall Street Market takedown. At the time, German authorities arrested the site’s alleged operators and two of its most prolific vendors. Europol confirmed to WIRED today that it was also able to recover the Wall Street Market backend server, providing investigators with an invaluable trove of evidence. In the US, Operation Disruptor plays out across dozens of court documents and around 120 arrests.
Discover everything about what a darknet market is, top marketplaces, security threats on them, and learn how to protect your data online. Others, particularly those based in Russia, focus solely on info stealer hacking tools and brokering stolen data. McDonald recruited and hired accomplices to help package and ship the narcotics they sold on the darknet.
For example, an insider or factory employee might quietly slip away with an unmarked gun and sell it online. Once it lands on a darknet marketplace, it becomes part of the illegal weapons trade. The site allows users to find and buy a vast variety of products and services. It’s known for its strong security features (like a trusted escrow system, PGP two-factor authentication) and anonymity. Although these marketplaces are continuously shut down by law enforcement agencies, they still work today.