This made it extremely difficult for anyone to trace the origin of the traffic, providing a shield of anonymity for users of the market. The platform is in a phase of active development, with its team committed to enhancing the overall user experience. Planned updates include features like auto-withdrawal, dark mode, additional cryptocurrency support, improved review systems, better communication tools, and a sophisticated search engine, all aimed at elevating Incognito’s position in the darknet ecosystem. 6 days later, on 6th March, vendors were locked out of crucial market features and missing all withdraws. On 9th March, Incognito Market started to extort vendors and buyers, asking for payments in a range between $100 – $20.000 in accordance to the level of vendor market’s.

According to a DOJ press release, the alleged operator of a darknet platform sold over $100 million worth of narcotics worldwide. The United States Department of Justice has dealt a blow to dark web drug traffickers by arresting a man alleged to operate the dark web drugs marketplace Incognito Market. They often sell across multiple markets or operate standalone storefronts via encrypted apps like Telegram and Signal. Operational security has increased, with mandatory PGP encryption, two-factor authentication, and more frequent use of VPNs and anonymization tools. Described by Attorney General Pam Bondi as a historic blow to the digital drug trade, the operation targeted individuals in the United States, Austria, Brazil, France, Germany, the Netherlands, South Korea, Spain, Switzerland, and the United Kingdom.
As more users experienced losses, they became wary of engaging with other platforms, leading to a more cautious approach to online transactions. Following the collapse, users became more vigilant in their dealings on darknet marketplaces, leading to a greater emphasis on safety protocols and risk management. Additionally, he could also face a maximum sentence of life in prison for narcotics conspiracy, up to 20 years of imprisonment for money laundering, and up to 5 years for conspiring to sell adulterated and misbranded medication. But Lin’s arrest was more than just a victory for law enforcement—it was a turning point in the fight against cybercrime.
Darknet Markets Explained
Lin believed that his technical skills and sophisticated encryption would make him untouchable, but in the end, it was his own greed and human error that led to his downfall. Monero’s privacy features, such as ring signatures, stealth addresses, and Ring Confidential Transactions (RingCT), made it exceedingly difficult for anyone to trace the flow of funds. In essence, Monero obscured who was sending and receiving money and how much was being transferred. After witnessing the extortion made by Incognito, Ninja & Trojan decided to DDOS mirrors with over 2,000 cores per mirror.
How To Report A Scam Or Illegal Activity On The Darknet
In that time, it facilitated more than USD 100 million in drug sales, including hundreds of kilograms of cocaine and methamphetamine, alongside heroin, LSD, MDMA, oxycodone, ketamine, and misbranded prescription drugs. Department of Justice announced the results of Operation RapTor—an unprecedented international crackdown on darknet narcotics trafficking. According to the indictment, between 2022 and 2023, law enforcement agents executed search warrants to gain access to three servers used to operate the marketplace and containing marketplace data. One of the servers searched by the agents was the so-called “bank”, a database containing all cryptocurrency transactions.

Incognito Market: The Notorious Dark Web Marketplace And The Fall Of ‘Pharaoh’
This strategy ensured that even if law enforcement compromised one wallet, the majority of the market’s funds remained secure. Finally, all communications on the platform were encrypted with PGP, adding yet another layer of security. Users were required to encrypt their messages, ensuring that even if data was intercepted, it would be unreadable without the correct decryption key. To further enhance anonymity, Incognito Market operated a sophisticated system for managing transactions. Initially, the market relied on Bitcoin, but as law enforcement agencies developed more advanced blockchain analysis tools, Bitcoin’s transparency became a liability. Lin recognized this vulnerability and transitioned the market to Monero, a cryptocurrency designed specifically for privacy.
Smooth Operation Of The Incognito Darknet Market
- The infrastructure was quite robust and even included a fully functional banking system capable of storing and exchanging funds, and processing interest earnings.
- “The defendant’s greed and disregard for others was further demonstrated by his alleged extortion attempt during the platform’s final days,” lamented Ivan J Arvelo of Homeland Security Investigations (HSI) New York.
- This shows how vulnerable dark web users really are, even if they think they are safe.
- It’s a warning to anyone who believes their anonymity on such sites is foolproof, especially when the site operator can be the biggest threat.
- He had applied to work as part of the embassy’s techical corps in lieu of military service — mandatory for Taiwanese men — and had “behaved normally”.
In the case of SuperMarket, users will likely migrate to other illegal communities due to a lack of trust in the platform. Throughout the investigation, law enforcement also leveraged the darknet community’s own reactions to Incognito’s collapse. When Pharaoh attempted to extort his users, many panicked vendors likely reached out to trusted contacts or even law enforcement for help. The public warnings from the Dread forum admin (Hugbunter) about Incognito’s exit scam not only alerted users, but also would have confirmed to investigators that the site’s operator was in a desperate endgame. Every move Lin made in those final weeks – freezing withdrawals, bribing forum mods, threatening exposure – further implicated him and provided investigators with evidence of consciousness of guilt.
Additionally, Lin made the critical mistake of using identifiable personal information at some point during his operations, which law enforcement was able to capture. This could have been during the registration of online accounts or through other transactions that required some form of identification. The bank also offered an “escrow” service enabling both buyers and customers to have additional security concerning their narcotics transactions. The escrow service was set in such a way that a buyer’s money would be released to a seller only after specified actions, for example, the shipment of narcotics is made.
Tag Archives: Incognito Market

This mass extortion of users follows reports of numerous individuals being unable to withdraw funds from their buyer or seller accounts just days earlier. According to a cryptocurrency-focused publication CoinTelegraph, on March 6th, Incognito was accused of exit-scamming users out of their Bitcoin and Monero deposits. Initially, Incognito Market administrators allegedly misled users, attributing the withdrawal issues to recent changes in the platform’s withdrawal systems.

Cyble Launches Essential 8 Cybersecurity Support Package For Australian Financial Sector
This gave Incognito a competitive advantage, as users didn’t have to worry about moving their funds in and out of external wallets, which often exposed them to risks such as law enforcement tracking or theft from other hackers. Incognito Market wasn’t just another player in the dark web economy—it was a game-changer. The market’s user-friendly interface, combined with its robust security features, attracted a diverse range of users, from small-time buyers looking for recreational drugs to large-scale vendors dealing in high volumes of illicit goods. The market’s reputation for reliability and security quickly spread, and soon, Incognito was competing with—and in many cases, surpassing—It appears the response got cut off midway.
Agentic AI–Driven Threat Intelligence Tailored For Every Function
Lin’s background in blockchain technology allowed him to innovate beyond what had been done before. He introduced a ‘banking’ system within Incognito, a feature that set it apart from other darknet markets. This ‘bank’ allowed users to deposit cryptocurrencies into their accounts on the site, conduct transactions, and even earn interest on their deposits. By keeping transactions within the market, Lin made it significantly harder for law enforcement to trace payments, adding an additional layer of anonymity for both buyers and sellers. Lin was arrested at John F. Kennedy International Airport on May 18 and was presented in Manhattan federal court before U.S. A federal district court judge will determine any sentence after considering the U.S.
- It began by freezing their cryptocurrency funds, so they couldn’t withdraw their money.
- Once Lin was in custody, the indictment against him was unsealed, revealing an array of serious charges.
- In an interview with BeInCrypto, Guillermo Fernandes, founder of blockchain analysis platform Blockpliance, shed light on the methodologies for tracing bad actors.
- He leveraged his programming and crypto knowledge to build criminal infrastructure, used his position in a government role to appear above suspicion, and exploited the trust of thousands of users until greed – and perhaps fear – drove him to perform an exit scam on his own community.
- One was used to host Incognito’s DDoS prevention system, one hosted the back-end marketplace data, including all completed narcotics transactions, while the third acted as the market’s bank and was used to process all cryptocurrency transactions.
US Treasury Sanctions Iranian National For Operating Darknet Market Nemesis
In addition, the United States and international law enforcement partners made 270 arrests of dark web vendors, buyers, and administrators in Austria, Brazil, France, Germany, Netherlands, South Korea, Spain, Switzerland, United Kingdom, and the United States. One particularly revealing moment came in February 2024, when Incognito users reported that BTC withdrawals were disabled—likely part of a deliberate “exit scam.” Lin, or others acting on his behalf, threatened to leak vendor identities to law enforcement unless paid. That extortion threat, combined with increased tracing and investigative pressure, led many users to flee the platform, dramatically reducing deposits and facilitating law enforcement’s final takedown. To facilitate the millions of dollars in transactions, Incognito Market had its own “bank,” allowing users to deposit cryptocurrency into “bank accounts” that would transfer the agreed-upon amount to a seller’s “bank account” minus Lin’s 5% fee. Prosecutors said the online marketplace allowed users to anonymously buy and sell illegal drugs from anywhere on the globe with an internet connection and a Tor web browser, a tool that makes it difficult to track users. However, depending on how much Riu-Sian Lin knows about other accounts that could expose the criminal’s identity, we will see in the next period of time in the other law enforcement takedown and arrest operations.

Testing on those tablets revealed that they were not authentic oxycodone at all and were, in fact, fentanyl pills. Federal prosecutors said they have put a stop to one of the largest illegal narcotics marketplaces on the internet after arresting its operator. The operational security mistakes the FBI describes suggest that, regardless of which side of the cryptocurrency cat-and-mouse game Lin intended to end up on, he was far from a criminal mastermind. His brief, strange journey from alleged kingpin to crypto crime expert ultimately provides plenty of lessons to criminals and law enforcement alike—though probably not the ones he intended. According to the FBI, the market took nearly a year to catch on, with virtually no sales during that time.