In order to gain control of victims’ computers, the malware Genesis Market employed used a legacy Bitcoin address to determine the command-and-control (C2) server, from which cybercriminals initiated remote access to infected devices. Though Mega Darknet Market typically serves a Russian customer base, the drug revenue shown in the chart above likely came from customers based in Europe. Mega clearly dominated the realm of wholesale drug purchases, capturing 51.9% of that segment. At its peak, Nemesis counted over 150,000 user accounts and 1,100 seller accounts worldwide, with about 20% of them being based in Germany. The platform only prohibited the sale of child abuse material, contract killing services, weapons, and Fentanyl-based substances. “With all of that said you decide for yourself whether you ride the wave with us to the top and beyond,” he wrote in a message to users on the dark web market forum Dread.
Fraud Shop Revenues Decline In 2024
“I understand if you decide not to but over time you will be proven that we are the original AB and we have never been ‘compromised’ in any way shape or form.” DeSnake counters that if law enforcement had gotten to him and launched the new AlphaBay as a honeypot, they would have simply reused the original AlphaBay’s code. And he points out that the Monero-only restriction for the site would make it far less effective for trapping unsuspecting dark web buyers than a site that simply accepts Bitcoin. “I am still in disbelief to this day that he had put his personal email on there,” DeSnake says. While few of DeSnake’s claims can be confirmed, he has at least enjoyed unusual longevity for a dark web market operator.
Investigations

By demonstrating that authorities can effectively police the digital frontier, such operations build confidence that cryptocurrencies can operate within a legal and ethical framework. This distinction is crucial for mainstream acceptance and for dispelling the notion that crypto is primarily a tool for illicit activities. A cleaner, more regulated environment makes digital assets more appealing for legitimate investment, payments, and innovation, paving the way for broader and more secure integration into the global financial system.

The Royal Canadian Mounted Police (RCMP) says it has successfully dismantled one of the largest known Canadian dark web drug trafficking operations. The far-reaching success of Operation RapTor hinged on extensive cooperation between numerous agencies and international partners. On the international front, Europol and national police forces across ten countries were vital to the effort. The U.S. Department of Justice’s Joint Criminal Opioid and Darknet Enforcement (JCODE) team spearheaded this international initiative, teaming up closely with Europol and numerous law enforcement agencies throughout Europe, Asia, and South America. Officials are calling Operation RapTor the most successful JCODE effort yet, both in terms of the sheer amount of contraband seized and the number of suspects apprehended.

In a press conference Tuesday morning, DEA acting administrator Timothy Shea specifically called out Arden McCann, allegedly known as RCQueen, DRXanax, and other aliases across numerous dark web markets. Arrested earlier this year, McCann allegedly shipped over 10 2kilograms of fentanyl and over 300,000 counterfeit Xanax pills every month. In the US, Operation Disruptor plays out across dozens of court documents and around 120 arrests. In Ohio, members of a group known as PillCosby were charged with mailing out over a million pills laced with fentanyl. Prosecutors in Washington, DC, allege that David Brian Pate concealed thousands of OxyContin, Xanax, and morphine pills inside souvenir maracas.
UAPS: The Takedown Of A Fraud Shop Payment Processor And Its Impact On Ecosystem
Incognito Market, which was shut down in March, was an online dark web marketplace that allowed users to buy and sell illegal drugs anonymously, according to the Justice Department. The number of arrests and amount of money seized were the most for any international Justice Department-led drug trafficking operation, he said. The cycle Christin describes—law enforcement takedowns followed by a slow but robust recovery—has played out on the dark web again and again, repeating roughly every year or two. After the late 2013 takedown of the Silk Road, the first real dark-web drug market, more than a dozen replacements rose up to fill the demand for anonymous online narcotics sales. A massive crackdown called Operation Onymous followed in late 2014, seizing a broad swath of the dark web and arresting 17 people by exploiting a vulnerability in the anonymity software Tor, which serves as the dark web’s fundamental cloaking tool. A 10-month investigation following the closure of the dark web’s largest illegal marketplace, DarkMarket, has resulted in the arrest of 150 suspected drug vendors and buyers.
Fraud shops are services found mainly on the dark web that sell stolen data and personally identifiable information (PII), which cybercriminals use for scams, identity theft, and ransomware attacks. In 2024, fraud shop inflows declined by 50% YoY, a sharp downturn from the last three years. Dozens of firearms and more than 850 kilograms of drugs were also seized in Operation SpecTor, an allusion to the dark-web browsing protocol. The operation was coordinated alongside Europol and resulted in the seizure of a dark-web marketplace called Monopoly Market, according to a press release from the European agency.
“I’m distrustful of DeSnake, and I think across the communities there’s a general distrust.” Of course, everything DeSnake told WIRED may itself be misdirection designed to help him further evade those agencies. Its rules have always banned the sale of data stolen from victims in former USSR countries, a common prohibition among Russian hackers intended to shield them from Russian law enforcement scrutiny.
- The below graph shows an increase in Abacus sales (in BTC) following the closure of ASAP Market in July 2023, and a further increase following some CEXs delisting XMR.
- “Other marketplaces will take advantage of this and they might have an increase in traffic to their marketplace,” he said.
- As Pharoah — the leader of Incognito market — Lin supervised all of its operations, including its employees, vendors and customers, and had ultimate decision-making authority over every aspect of the multimillion-dollar operation.
- So far, law enforcement have arrested 179 people and seized $6.5 million in crypto and cash, 500 kilograms of drugs and 63 firearms.
Dozens Arrested In Germany
The DHS Cyber Crimes Center (C3) combats cybercrime, online child sexual exploitation, and criminal exploitation of the internet with state-of-the-art forensic technology. The Center investigates large-scale cybercrime threats and provides expertise on cybercrime investigations to the field. Experience the power of The DarkBlue Intelligence Suite and get proactive in your fight against cybercrime.
And when Alexandre Cazes wrote under the Alpha02 moniker on the site, he sometimes signed off with a Russian phrase for “stay safe.” But when Cazes was later tracked down in Thailand, many assumed AlphaBay’s Russian fingerprints had been designed to mislead investigators. In stepped Empire Market which appeared in February 2018 (about 6-7 months after the demise of AlphaBay/Hansa) and soon became the leader of the Western darknet market ecosystem. The fact that its graphical user interface was built to resemble that of AlphaBay was purposely done to instill a sense of familiarity for users who had become accustomed to AlphaBay. The arrests make ‘SpecTor’ more successful than previous operations like ‘DisrupTor’ in 2020, which had 179 arrests, and ‘Dark HunTor’ in 2021, which resulted in busting 150 darknet vendors. The recent law enforcement operation was coordinated by Europol and the FBI, and involved police in the UK, France, Poland, Germany, Austria, Brazil, Switzerland, and the United Kingdom. Listings included offerings of prescription medication that was advertised as being authentic but was not.
Haitians Give Cautious Welcome To New International Force Approved By UN To Tackle Gangs
Data from dismantled sites like Nemesis, Tor2Door, Bohemia, and Kingdom Markets gave authorities crucial leads, helping them identify and track down darknet vendors and their customers across the globe. The collapse of the RAKS darknet exchange has elicited a multifaceted response from the broader crypto community, largely underscoring a collective desire to distance legitimate blockchain innovation from illicit activities. On platforms like Crypto Twitter and Reddit, initial sentiment leans towards a “good riddance” mentality, with many users expressing approval for law enforcement’s decisive action. This perspective views the dismantling of such a large-scale money laundering operation as a crucial step towards cleaning up the ecosystem and enhancing crypto’s overall reputation. In 2019, the FBI started its investigation into Genesis Market and enlisted other government agencies and law enforcement organizations across the world, working towards the market’s closure on April 4, 2023. As part of the investigation, the Dutch National Police took the lead on cybercrime prevention, and Van Well shared his insight on the sophistication of the fraud shop’s operation.
Andy Greenberg On How ‘Tracers In The Dark’ Found The Dark Web’s Worst Criminals
Buyers rated the sellers and their products on a five-star rating system, and the vendors’ ratings and reviews were prominently displayed on the Hydra site. Law enforcement agencies seized over $31.6 million in cash and virtual currencies and approximately 234 kilograms of drugs worldwide, including amphetamines, cocaine, opioids and MDMA during the 10-month-long operation. The Justice Department said investigators also collected more than 200,000 pills of ecstasy, fentanyl, oxycodone, hydrocodone, and methamphetamine.

Darknet Market And Online Pharmacy Inflows According To Drug-purchasing Behaviors
Investigations and prosecutions remain ongoing in more than 30 federal districts, the agency said in its statement. The arrests stem from the December 2021 seizure of the infrastructure supporting the Monopoly Market, a darknet drug marketplace dating back to 2019. After German authorities seized the infrastructure, authorities compiled intelligence that served as the basis “for hundreds of national investigations,” according to a statement issued by Europol Tuesday.
As for cybercriminal administration, the category includes inflows from ransomware affiliate wallets. This includes purchases such as malicious software and supporting services which cybercriminals sometimes make using escrow services on crime forums. On May 12, 2022, a federal grand jury returned a two-count indictment charging Holly Adams, 31, and Devlin Hosner, of Indio, California, with conspiracy to distribute and possess with intent to distribute fentanyl and methamphetamine, and with conspiracy to launder money. Adams and Hosner shipped these fentanyl pills to buyers throughout the United States, using the USPS, UPS, and other means of delivery. In the course of their conspiracy, Adams and Hosner finalized over 1,100 transactions of narcotics and other contraband and received more than $800,000 in cryptocurrency.
Agents later located a storage unit linked to the drug conspiracy and seized over 80 pounds of pressed fentanyl pills, eight guns, and precursor materials to press additional pills. The U.S. Attorney’s Office for the Central District of California is prosecuting the case. The darknet, also called the dark web, is a portion of the internet that hosts darknet markets, or hidden commercial websites. A darknet market operates as a black market, selling or brokering transactions involving legal products, as well as illegal items such as drugs, weapons, counterfeit currency, stolen credit card details, forged documents, unlicensed pharmaceuticals, steroids and other illicit goods.
It’s unclear how big a dent Operation Disruptor will make in the long run; the dark web drug market tends to bounce back, even after the high-profile collapses of marketplaces like the Silk Road and AlphaBay. But even if law enforcement is playing an eternal game of Whac-A-Mole, it’s at least gotten extremely proficient at whacking. The RAKS bust also reignites the perpetual debate within the crypto community regarding decentralization versus regulation. While the ethos of decentralization champions freedom from central authority, the persistent misuse of crypto by entities like RAKS underscores the challenges this poses for oversight.
The FBI tied Taiwanese national Rui-Siang Lin, Incognito’s operator, to the DNM’s website by tracing crypto transfers to an exchange account in Lin’s name. Lin was charged with a host of crimes, and by May, federal authorities in New York had arrested him. The Justice Department said more than 100 federal operations and prosecutions had been made in the U.S.