As the value of some cryptocurrencies approach new heights, more criminals are looking to get their hands on them, experts say. That includes a kidnapping case that happened last month in Toronto, where the CEO of a crypto company was snatched downtown during rush hour and held for $1 million ransom. Dean Skurka, the president and CEO of the Toronto-based financial firm WonderFi, was released after a ransom of $1 million was paid electronically, a source close to the investigation previously told CBC Toronto.
- Classic darknet markets sell diverse illegal goods; data stores focus on leaked or stolen data like credentials, databases, and ID records.
- Others are looking for stolen data, hacking services, or even banned books and political content.
- It is one of the most active and up to date markets and always provides new and updated malware and data.
- Watch our cyber team share their key insights from their investigations into the biggest dark web trends in 2022.
It offers counterfeit documents, financial fraud tools, hacking and malware services. It has an active forum and community along with an extensive user vetting process. Here at CoinMarketCap, we work very hard to ensure that all the relevant and up-to-date information about cryptocurrencies, coins and tokens can be located in one easily discoverable place.
Shuttered Dark Web Marketplaces
They use pseudonymous wallets, privacy coins (like Monero), mixers, chain-hopping, and non-KYC platforms to obscure transaction trails. Apart from the dark web markets that are operating online today, some raided platforms influenced many markets. It has a bidding feature, with new batches of stolen data being frequently added. Some markets are invite-only or have strict registration rules to keep out scammers and law enforcement. TRM experts examined hundreds of advertisements from the Chinese precursor manufacturers evaluated in our study, and found that the top five markets targeted were Canada, the Netherlands, Australia, Germany, and the US.
Cypher Marketplace
Our team searched the dark web and put together a list of the most active dark web marketplaces in order to assist you in monitoring illegal trade of products, cybercrime activity, and dark web trends in the dark web space. Launched in September 2022, Torzon Market operates on the Tor network and features over 11,600 illegal products, including drugs and hacking tools. It enhances buyer transparency by importing vendor feedback with PGP proof. Torzon offers a premium account option for additional benefits and is valued at approximately $15 million, accepting payments in Bitcoin (BTC) and Monero (XMR). WeTheNorth is a Canadian market established in 2021 that also serves international users.
US Treasury And DOJ Take Action Against Chinese Fentanyl Trafficking Network
Beginning in September 2021, Abacus Market has established itself as one of the leading dark web marketplaces. After AlphaBay closed, Abacus Market took its place as the world’s largest underground darknet marketplaces. Abacus Market quickly rose to prominence by attracting former AlphaBay users and providing a comprehensive platform for a wide range of illicit activities. Though drug precursor sales are still predominantly transacted through traditional, fiat payment methods, cryptocurrency’s share has continued to grow over the years.
How To Protect Your Identity While Browsing The Dark Web
Often with crypto fraud schemes, individuals come across online ads to buy crypto for as little as $250, Armit says. Once they invest, the suspect will direct them to a web page to show them how much their money has grown and encourage them to invest more. The Abacus Market links to the new dark web marketplace sections and took over much of the vacuum left by the AlphaBay takedown. One of the most common is the exit scam, where a marketplace suddenly disappears and takes everyone’s money with it.
Industries That Benefit The Most From Dark Web Monitoring 2025
Classic darknet markets sell diverse illegal goods; data stores focus on leaked or stolen data like credentials, databases, and ID records. Launched in 2023, STYX focuses on financial crime, providing stolen credit card data, hacked bank accounts and access to various cryptocurrency laundering tools. It has built a reputation for being a reliable source of stolen credit card data and PII. Renowned for its extensive inventory of financial data and sophisticated operating methods, Brian’s Club is a key player in the underground economy of financial cybercrime.
Why Security Leaders Prefer To Buy CTI Solution For SaaS Platforms In 2025
Though OFAC and the US Department of Justice (DOJ) have taken action to stem the flow of precursors, six of the manufacturers in TRM’s study continued to advertise precursors even after being sanctioned or indicted. We calculate our valuations based on the total circulating supply of an asset multiplied by the currency reference price. Watch our cyber team share their key insights from their investigations into the biggest dark web trends in 2022.
Top 7 Dark Web Marketplaces
We receive updated cryptocurrency prices directly from many exchanges based on their pairs. Since 2020, 2easy has sold massive stealer logs with sensitive data like passwords, bank cards, and initial access credentials. It supports operations in multiple languages and operates on both clearnet and Tor. Armit says though the OPP has seen extortion frauds in the past, November’s incident was unusual and suspects similar extortion incidents could occur sooner than later. “We’re just finding that organized crime is being more brazen nowadays,” he said. Since Project Atlas’s launch, Armit says investigators have identified victims in 12 countries and 2,000 cryptocurrency wallet addresses belonging to victims all around the world.
How Do We Calculate Our Cryptocurrency Prices?
It is a priority for CBC to create products that are accessible to all in Canada including people with visual, hearing, motor and cognitive challenges. According to the OSC’s website, each of those companies is subject to terms and conditions outlined by regulatory bodies, including at the national level. One of the commitments it asks of platforms is to ensure they don’t spend clients’ crypto investments or use it as collateral.
Its emphasis on user anonymity and document forgery makes it a core tool for identity fraud. In the global fight against narcotics, the ability to analyze manufacturer wallets and flow of funds is key to ultimately dismantling the financial networks underpinning the global supply chain for synthetic drugs. A smart contract enables multiple scripts to engage with each other using clearly defined rules, to execute on tasks which can become a coded form of a contract. They have revolutionized the digital asset space because they have enabled decentralized exchanges, decentralized finance, ICOs, IDOs and much more.
A huge proportion of the value created and stored in cryptocurrency is enabled by smart contracts. A Canadian market established in 2021, WTN offers over 9,000 products, including narcotics, fake goods, and digital services. It operates in both French and English and has built a reputation for ease-of-use. Russian Market has consistently remained one of the most popular and valuable data stores on the dark web. The platform’s activity has increased significantly over the past year, indicating its growing influence and market share in the underground economy.
The fact that some synthetic drug precursors also have legal, conventional applications (e.g. cosmetics and cleaning products) can give manufacturers plausible deniability about their use in the illicit drug trade. However, TRM Labs has identified at least 20 Chinese precursor manufacturers with direct links to online vendors of banned and controlled substances and darknet markets (DNMs) in Russia and the west. It is likely that payments to these manufacturers represent drug vendors sourcing precursors to produce illegal drugs like fentanyl and nitazenes. Dark web markets have exploded in scale and reach in 2025, becoming the most dangerous hubs for trading drugs, stolen data, and hacking tools. These anonymous marketplaces—operating mainly on the Tor network—are now a primary threat vector for businesses and cybersecurity professionals. Of the 120 Chinese precursor manufacturers we examined—spanning 26 cities and 16 provinces—97% offered payment in cryptocurrencies.
