This survey highlights active and recently shuttered markets with actionable metrics and intelligence for threat hunters, CISOs, and red team leaders. Another darknet market known for facilitating fentanyl sales to the United States was Canada-based AlphaBay. A once-sizable illicit enterprise that began in 2014, AlphaBay was closed by authorities in 2017 and then reopened in 2021. The last version of the market operated until February of 2023, and a month after that closure, a former AlphaBay vendor pled guilty to distributing fentanyl that caused fatal overdoses in Oregon. Throughout the history of the darknet market ecosystem, at different turns one marketplace has typically played the dominant role. The last several years’ examples include Silk Road, AlphaBay, Wall Street Market, and Hydra, most recently.
STYX Market
Kingdom Market reportedly had tens of thousands of customer accounts and several hundred registered sellers. The takedown of Kingdom Market was met with mixed reactions within the dark web community. Users on forums like Dread, a darknet equivalent of Reddit, expressed dismay over potential financial losses due to deposited funds in the market’s escrow for future purchases. Following the seizure, competing dark web market operators swiftly seized the opportunity to invite sellers orphaned by the Kingdom Market’s closure to join their platforms.
Real-World Examples: Data Breaches Feeding Dark Web Black Markets
The platform only prohibited the sale of child abuse material, contract killing services, weapons, and Fentanyl-based substances. In this scenario, the vendor gets the money as soon as the order is labeled ‘shipped’. Naturally, not every vendor is eligible for this status (only those with more than 1500 sales). Still, you need to be careful and turn to this option only when you know and trust a seller.
Darknet Market Revenue Based On Drug-purchasing Behaviors
Darknet markets were one of two categories of crypto crime that saw revenues rise in 2023. In total, darknet markets and fraud shops received $1.7 billion last year, a rebound from 2022 — the year that saw the sizable Hydra Marketplace close. The ensuing war for darknet market dominance that began in 2022 continued into 2023, but no other market has since matched Hydra’s financial success.
Is It Illegal To Access The Dark Web?
U.S. customers predominantly purchase drugs from these groups that are known to have used crypto to source fentanyl precursor chemicals from labs based in China. The cartels then use those chemicals to manufacture fentanyl that is later sold in the U.S. The agency, based in The Hague, built intelligence based on evidence from Germany, which it said seized the marketplace’s “criminal infrastructure” in December 2021. This type of darknet is primarily used for illegal activities such as drug trafficking and pornography.
Darknet Security 101
- This is the second major darknet website takedown this week after the FBI seized the website of the AlphV/Blackcat ransomware gang on Tuesday.
- The joint operation on Kingdom Market shutdown, led by the Frankfurt am Main Public Prosecutor’s Office – Central Office for Combating Internet Crime (ZIT) – and the Federal Criminal Police Office (BKA), began on December 16, 2023.
- JCODE and Europol’s European Cybercrime Centre (EC3) continue to compile intelligence packages to identify entities of interest.
- Operation RapTor resulted in the highest number of seizures of any JCODE operation, including more than $200 million in currency and digital assets, over two metric tons of drugs, 144 kilograms of fentanyl or fentanyl-laced narcotics, and over 180 firearms.
A certain IP address (referred to as “IP ADDRESS 1”) that was utilized to gain access to a Kingdom Reddit account was also used to access BILL’s email address, cryptocurrency accounts, and ESTA application. According to the US court documents, a cluster of cryptocurrency addresses that the Kingdom employed allowed for the tracking of specific cryptocurrency transactions to wallets registered in BILL’s name. This takedown follows another significant operation earlier in the week when the FBI seized the website of the AlphV/Blackcat ransomware gang. The group’s affiliates had compromised over 1,000 organizations, extracting nearly US$300 million in ransom payments. Bill, a Slovakian national, adds an international dimension to the legal repercussions stemming from the dark web platform’s activities. BKA’s announcement says investigations into Nemesis Market started in October 2022, involving German, Lithuanian, and American agencies, including the FBI, Drug Enforcement Administration (DEA), and the Internal Revenue Service Criminal Investigation (IRS-CI).
The BKA acknowledged the help of law enforcement partners in the US, Switzerland, Moldova and Ukraine. Further, BILL made significant, unexplained Euro deposits totaling over €189,000 into his Slovakian bank accounts between November 2021 and April 2023. Law enforcement authorities from the United States, Switzerland, the Republic of Moldova, and Ukraine collaborated closely with German agencies during the investigation.
Dark Markets Australia
We analyze how digital marketplaces operate in the United Kingdom, Germany, London, and throughout the EU, covering both technical and legal aspects. Darknet is your best source for the latest hacking tools, hacker news, cyber security best practices, ethical hacking & pen-testing. The research emphasizes the necessity of pursuing a multi-agency approach, supported by an increase in total resources, in order to be able to monitor the development of the darknet drug markets accurately. Researchers have looked into the demographic information of those who buy narcotics through underground markets on the internet. The findings were summarized in the report published by the European Monitoring Centre for Drugs and Drug Addiction, in partnership with Europol. The Abacus Market links to the new dark web marketplace sections and took over much of the vacuum left by the AlphaBay takedown.
The goods and services on offer range from leaked credit card details, exploit kits, and hackers for hire to advertisements for hitmen services. Darknet marketplaces in 2025 illustrate a resilient and evolving underground economy. Law enforcement takedowns, such as Archetyp, demonstrate both impact and adversary adaptation.
In 2023, Chainalysis discovered that some popular fraud shops rely on payment processors as a way to reduce their own costs, add efficiency to their operations, and perhaps add a layer of security to transactions. Genesis Market extensively used a payment processor called UAPS, so much that the processor’s average inflows fell by 25.7% after Genesis closed last April. Regardless, UAPS remains a key provider of payment infrastructure to top fraud shops.
This is done to prevent law enforcement from linking the purchased Bitcoins to the Bitcoin exchange market and, ultimately, to the buyer’s identity. Regardless of whether the transaction is a purchase or a sale, both parties must first make sure their computer systems are appropriately secured before engaging in illegal activity. Understanding how to obscure or erase these footprints entirely is a persistent concern of Dark Net market participants because the average internet user leaves data trails that law enforcement may follow. Additionally, it has been suggested that customers can buy from vendors on the darknet who are based in the nations where the drugs are produced.
Kingdom Market boasted tens of thousands of customer accounts and several hundred registered sellers, featuring a listing that comprised 42,000 items. From at least April 2021 until May 2023, McDonald and others conspired to sell fentanyl and cocaine via multiple darknet marketplaces. The investigators celebrate this as another success in the fight against organized cybercrime and write that this is a result of international coordination of law enforcement authorities and innovative investigation strategies. The evaluation of the seized server infrastructure and the investigations to identify those responsible are ongoing. In addition, malware, criminal services and forged documents were advertised profitably via the platform.
