Due to its extensive inventory and reputation for reliability, Brian’s Club has maintained a significant presence on the dark web. Quality and validity of the data it provides justify its higher cost over other marketplaces. The platform’s popularity continues to grow, attracting both new and returning customers. Valued at approximately $15 million, Abacus Market is one of the most lucrative platforms in the dark web ecosystem. In 2024, the platform grew significantly in popularity, partly because of its strategic acquisition of users from a number of recently shut-down marketplaces, such as AlphaBay and Incognito Market, which had recently closed their doors. Apart from the dark web markets that are operating online today, some raided platforms influenced many markets.
Download The Report

The use of cryptocurrency in vendor shop drug sales saw a significant surge over the past year. TRM Labs is the only blockchain intelligence provider with a specialist category unique to individual drug vendors — and this year, we saw incoming volumes sent to illicit vendor shops more than double. This dramatic increase may reflect the decentralization of the drug trade away from traditional darknet markets, as vendors grow more adept at operating across multiple platforms on both the clearnet and darknet — including e-commerce websites and social media platforms. This section elaborates on the methodology used to identify opioid trading information in the anonymous market and forums. Specifically, we collected approximately 248,359 unique listings and 1,138,961 unique forum traces (ie, threads of posts) from 10 anonymous online marketplaces and 6 forums.
2024 saw 42% fewer new darknet marketplaces (DNMs) launched year over year, with the proportion of Monero-only DNMs launched increasing from little more than a third in 2023 to nearly half in 2024. In addition to its emphasis on stolen credentials, 2easy Market offers a variety of cybercrime tools, such as hacking services, exploit kits, and other resources for conducting cyberattacks. 2easy has quickly gained traction as a go-to platform for hackers looking to buy and sell databases containing breached credentials, Social Security numbers, financial records, and login details for online banking and e-commerce platforms.
Judging by that buzzing trade, there’s little hint that just the week before, global law enforcement announced the takedowns of two of the world’s largest dark-web drug sites, known as Wall Street Market and Valhalla. Or that the most popular market, called Dream, had taken itself offline at the end of last month, perhaps sensing law enforcement closing in. Or that a multiagency US law enforcement task force devoted to stemming opioid sales on the dark web arrested more than 60 people in a major operation the month before. This week, the US Department of Justice announced the unsealing of a federal indictment against Iranian national Behrouz Parsarad, the alleged architect behind the now-defunct Nemesis Market.
California Man And His Alleged Partner Face Life Terms In Dark Web Drug Operation
Law enforcement recovered kilogram quantities of fentanyl, cocaine, methamphetamine, and heroin from business and storage locations in West Palm Beach, Boca Raton, and New York City. Peck possessed a list of more than 6,000 customers living across the United States. Postal Inspection Service (USPIS) and the Palm Beach County Sheriff’s Office investigated the case. The U.S. Attorney’s Office for the Southern District of Florida is prosecuting the case. Historically, the darknet drug trade has been dominated by large, multi-purpose platforms like AlphaBay and DrugHub. However, a combination of law enforcement crackdowns, increasing instability from new users flooding the dark web from Telegram, and infighting among the larger markets has triggered a shift.
- Nemesis operated primarily on Tor, offering a menu of contraband that extended from counterfeit documents and hacking tools to narcotics in their most dangerous forms.
- Even in the face of disruption, new models are emerging, including Telegram-based platforms like Si Market and a first-of-its-kind darknet M&A between SuperMarket and DrugHub.
- Other markets will emerge to fill the gap, possibly adopting more sophisticated security measures to avoid detection.
- The expanding use of cryptocurrencies by terrorist organizations and state-sponsored actors illustrates the dual-edged nature of technological innovations — providing both opportunity and risk.
- Operation RapTOR includes law enforcement actions taken by JCODE member agencies, to include ICE HSI; the DEA; FBI; FDA-OCI; IRS-CI; and USPIS; in addition to foreign partners listed below.
Research Reports Download Report
The €250 million transaction volume and the seizure details align with official reports. The arrests and infrastructure seizures substantiate the effectiveness of Operation Deep Sentinel. However, the darknet’s elusive nature means some data on users and exact sales volumes could be underreported. However, the void left by Archetyp’s takedown may soon be filled by new or existing marketplaces. The darknet ecosystem is highly dynamic, with vendors and buyers quickly migrating to other platforms.
National Debt
These markets host hundreds, or in some cases thousands, of people who sell drugs, commonly referred to as “vendors”. The dark web offers vital anonymity for vendors and buyers, who use cryptocurrencies such as Bitcoin to process transactions. This year’s law enforcement operation was accompanied by a public awareness campaign called Operation ProtecTor aimed to promote public safety and spread awareness of resources for those struggling with substance abuse and who go through extreme lengths to obtain opioids. JCODE has worked with every FBI field office in the country to facilitate outreach to households that have purchased individual amounts of opioids from the darknet. The interagency efforts are aimed to both identify those who use anonymizing technologies to purchase illicit narcotics and direct them to available resources. One particularly revealing moment came in February 2024, when Incognito users reported that BTC withdrawals were disabled—likely part of a deliberate “exit scam.” Lin, or others acting on his behalf, threatened to leak vendor identities to law enforcement unless paid.
- For example, the ample in-person supply of MDMA in the Netherlands may drive the differences observed between cryptomarket and offline sources.
- Since 2020, 2easy has sold massive stealer logs with sensitive data like passwords, bank cards, and initial access credentials.
- Investigators received leads from local police departments investigating overdose deaths, including that of a 19-year-old man in Colorado who loved learning languages and building his own computers, according to FBI Deputy Director Paul Abbate.
- In particular, we observed that 84 opioid supplier IDs synchronized similar product listings in both marketplaces at the same time.
- These included an advanced encryption program known as “Pretty Good Privacy” and a cryptocurrency called Monero.
Topics And Products Sold
Further market diversification occurred in 2015, as did further developments around escrow and decentralization. A Cleveland man has been sentenced to prison for taking part in a drug conspiracy that distributed fentanyl and methamphetamine throughout Northeast Ohio. The U.S. Attorney’s Office for the Northern District of Ohio today announced the unsealing of 17 federal indictments charging more than 30 people allegedly involved in connection with firearms offenses… We’re back with another video in our Webz Insider video series on everything web data.
Industry-Specific Cyber Threat Intelligence Powered By Agentic AI
“My guess would be the lower-tier markets just grow in prominence again,” he says. But despite those wins, a years-long war of attrition seems to be exactly the pattern that the dark web’s booms and busts now follow, argues Carnegie Mellon computer scientist Nicolas Christin, a longtime dark web researcher. In an economy where the demand—drug-addicted users—remains constant or growing, that’s only to be expected. I try to provide the best products and service I can, when someone has a problem or claims their order was short on pills (as long as they have ordered from me before) I usually take them at their word.
Despite growing crackdowns from law enforcement agencies, the dark web remains a hotbed of criminal activity, offering everything from drugs to stolen data. WASHINGTON (SOA) — The dark web is a marketplace of anonymous websites filled with illegal activity, from the sale of identity theft tools to illegal drugs, weapons, and worse. The operation targeted Archetyp Market, a platform with over 600,000 users and transactions totaling at least 250 million euros, underscoring the scale and ongoing challenge of illicit drug sales facilitated by anonymizing technologies. Still, the disruption of Hydra dealt a “huge blow“ to the ecosystem, according to multiple sources on the Dark Web.

The market frequently makes headlines for releasing massive troves of stolen data, often as a way to advertise its services. The market is known for its extensive product listings and reputation system that helps buyers evaluate the reliability of vendors. The Russian Market has been around since 2019 and is one of the more prominent dark web marketplaces. In this post, we’ll walk you through the top 10 dark web marketplaces that you need to watch for potential threats to your organization. The biggest takedowns in terms of volume – Silk Road, AlphaBay and Wall Street – have been police-led, but in 2018, the EMCDDA published a study which found that, of the more than 100 markets, just 10 percent closed as a consequence of overt police action. Mercifully, the escrow system now largely keeps dealers from pulling these sorts of tricks (they don’t get paid until the product arrives, after all).
In that time, it facilitated more than USD 100 million in drug sales, including hundreds of kilograms of cocaine and methamphetamine, alongside heroin, LSD, MDMA, oxycodone, ketamine, and misbranded prescription drugs. By contrast, Western darknet markets faced severe headwinds in 2024—high-profile exit scams, shutdowns, and arrests destabilized the ecosystem. Markets like Bohemia, Incognito, and GoFish vanished under suspicious circumstances. One administrator, later identified as a 23-year-old Taiwanese national, was arrested in May 2024. Even in the face of disruption, new models are emerging, including Telegram-based platforms like Si Market and a first-of-its-kind darknet M&A between SuperMarket and DrugHub.
After the Biker DLC, players can now purchase buildings for illegal drugs and counterfeit products manufacture, and distribute them through a darknet website called “The Open Road” where law enforcement cannot be notified of the player’s trade. This January, the FBI was part of another international operation that took down the cybercrime marketplaces known as “Cracked” and “Nulled”. According to DOJ, Cracked and Nulled provided access to “stolen login credentials”; personal “identification documents”; and “hacking tools”– impacting at least 17 million victims in the U.S. The shutdown of Archetyp, a major dark web drug market, demonstrates that law enforcement takedowns have only short-term effects, as such markets quickly re-emerge and adapt. Persistent trade and resilient user communities limit the long-term impact of these interventions.

Operational security has increased, with mandatory PGP encryption, two-factor authentication, and more frequent use of VPNs and anonymization tools. The drug information organization Pill Report has told of people wiring cash to dealers and getting duped, with nothing sent to them. When one such person interviewed by WIRED sent money for cannabis through a cash transfer app but received nothing in the mail, he reported the account. “It became a threatening match and they sent photos of thugs with guns saying they were going to come for me,” he says. But according to Meta, no more than 1 in 2,000 views on Facebook is of content that violates its restricted goods policy. Between July and September 2024, Meta says that 96 percent of drug sales content that violated its terms was removed before a user reported it.