Some health professionals such as “DoctorX” provide information, advice and drug-testing services on the darknet.140 The quality of products is attributed to the competition and transparency of darknet markets139 which involve user feedback and reputation features. Activities on dark-web marketplaces are closely monitored by international law enforcement agencies. Purchasing or selling illegal goods—such as controlled substances, counterfeit documents, or stolen data—can result in significant legal penalties, including fines, criminal charges, and imprisonment. Even users who access these platforms without intent to buy illegal items risk suspicion or investigation. The scam ecosystem has been booming around the world, with criminals honing a handful of strategies to trick victims into voluntarily sending their money into the abyss. And as the cash—or, typically, cryptocurrency—flows in, a set of digital services and infrastructure offerings have increasingly emerged.
Table Of Contents
On average, marketplaces had 26,342 sales and generated $5,847,417 in revenue. We found several thousand vendors selling tens of thousands of stolen data products on 30 darknet markets. These vendors had more than $140 million in revenue over an eight-month period. AlphaBay had first appeared in late 2014, just one in the broad scrum of markets vying for a share of the growing dark-web criminal trade.
Illicit And Risky Use-Cases

They immediately found that the development server also connected to a Tor-protected server at the same location that ran Hansa’s live site, as well as a pair of servers in another data center in Germany. They then made a copy of each server’s entire drive, including records of every transaction performed in Hansa’s history, and every conversation that took place through its anonymized messaging system. With so much money floating around these sites — dealers can make good money without leaving home — some vendors try to game the review system.
All of this has made it one of the most reliable markets still active in 2025. Over the last month, a darknet marketplace calling itself TheRealDeal Market has emerged; it focuses on brokering hackers’ zero-day attack methods. Like the Silk Road and its online black market successors, TheRealDeal uses the anonymity software Tor and the digital currency bitcoin to hide the identities of its buyers, sellers, and administrators. But while some other sites have sold only basic, low-level hacking tools and stolen financial details, TheRealDeal’s creators say they’re looking to broker premium hacker data like highly sought-after zero-days, source code, and hacking services. In some cases, these are offered on an exclusive, one-time sale basis. But don’t expect even this law enforcement victory to permanently damage the dark web’s black market business.
Coinbase To Launch Mag7 + Crypto Equity Index Futures On Sept 22, Featuring Apple, Tesla, And Bitcoin Exposure

RAMP, which like those sites runs on the anonymity software Tor, has outlived its western counterparts to amass more than 14,000 members. But the exact amount of uppers, downers, and psychedelics of every description it sells can’t be easily measured—and not just because the site is exclusively in Russian. RAMP functions less like an eBay-style e-commerce site than a loose-knit, Craigslist-like web forum where buyers and sellers can find one another. According to the FBI, the market took nearly a year to catch on, with virtually no sales during that time.
Feds Dismantled The Dark-Web Drug Trade—but It’s Already Rebuilding

Then he looked across the table, where at that very moment Green was half-asleep. When Green’s diligent forum-moderating turned into a job offer from DPR, he was thrilled. DPR sent a job description, which included customer service and resetting passwords. Green (taking on a new admin handle, Flush) worked 80 hours a week, mediating drug sale disputes from his lounger, Fox News running in the background.
Miller then found fingerprints on a package of heroin sent from one of his accounts, which matched those of another New York man. Finally, Miller worked with postal inspectors to get photos taken by a post office self-service kiosk. The photos showed the second New Yorker putting a dope shipment in the mail. Miller and a team of agents flew across the country, searched the two men’s homes, and arrested them both. For Grant Rabenn, the Fresno-based prosecutor, it was clear that Alpha02 was now the most wanted man on the dark web; Rabenn compared his notoriety among digital crime investigators to that of Osama bin Laden.
- That’s about 200 more listings than Silk Road 2.0, a reincarnation of the original Silk Road launched earlier this year by several of the same administrators.
- If you ever have to connect to public Wi-Fi, make sure to use a VPN to keep your browsing safe and private.
- AlphaBay’s dark web site is now accessible not only via Tor, like the original AlphaBay, but also I2P, a less popular anonymity system that DeSnake encourages users to switch to.
- Darknets are not limited to criminal activities; nation-state actors use these hidden platforms for espionage, disseminating propaganda, and recruiting agents.
- Nation-state actors, too, leverage darknets for espionage and cyber warfare, capitalizing on the obscurity and untraceability they provide.
Common Illegal Items
Silk Road, which emerged in 2011, combined TOR and bitcoin to become the first known darknet market. The market was eventually seized in 2013, and the founder, Ross Ulbricht, was sentenced to two life sentences plus 40 years without the possibility of parole. Ulbricht’s hefty prison sentence did not appear to have the intended deterrent effect. Multiple markets emerged to fill the void and, in doing so, created a thriving ecosystem profiting from stolen personal data. A US grand jury has charged Iranian national Behrouz Parsarad for operating the Nemesis darknet marketplace, which between 2021 and 2024 facilitated the sale of illicit cyberservices and drugs. That was how Force found him when the SWAT team finished ransacking his house.
Its zero-day sales are only the featured items in an anything-goes smorgasbord that includes everything from stolen identities to LSD and amphetamines. Unlike other players in the zero-day industry, however, TheRealDeal doesn’t face the added hurdle of trying to keep its sales legal or ethical. Companies like the French hacking firm Vupen, by contrast, argue that it sells zero-day vulnerabilities only to NATO governments or allies. Zero-day sales have become a lucrative underground trade in recent years, with government intelligence and law enforcement agencies often the highest bidders. Those buyers might be turned off by TheRealDeal’s approach of using Tor and bitcoin to obscure sellers’ identities. But that anonymity instead enables a “no-questions-asked” system that could draw a customer base of cybercriminals or authoritarian regime hackers.
Telegram Wipes Out $27 Billion Darknet Crypto Market In Major Takedown

The Agora admins say they plan to implement a software update to protect the site, but need to take a hiatus to make those changes. The admins don’t say when the market could be coming back online. “At this point, while we don’t have a solution ready it would be unsafe to keep our users using the service, since they would be in jeopardy,” reads the message. “Thus, and to our great sadness we have to take the market offline for a while, until we can develop a better solution. This is the best course of action for everyone involved.”

Espionage And National Security Threats
On the dark-web drug market Empire this week, business proceeds as usual. “Satisfied customer, will be back,” writes one user on the product page of a meth dealer with the handle shardyshardface. “Excellent,” reads a plaudit posted by a buyer of the opiate oxycodone. “Bravo,” says another for a $5 sample of fentanyl, one of 18 reviews posted on the product’s profile page in the last week. In all, Empire lists over 18,000 narcotic offerings, including hundreds for oxycodone alone. On May 13, Elliptic linked Xinbi Guarantee, a Telegram-based marketplace operated in Chinese, to over $8 billion in crypto transactions.
The Most Dangerous People On The Internet Right Now
Green claimed he hadn’t stolen any bitcoins and protested that the task force had had his computer when the money went missing. Moments later, DPR messaged Nob that he had a “problem” in Utah that required violence. According to the backstory Force had created for Nob, his criminal repertoire included enforcement and collection talents, so he acted the part. Sitting in the Marriott, Force received a PDF of the target, opened it, and discovered a scan of Green’s driver’s license photo.
The biggest factor explaining the shift, perhaps, has been the misfortune of Agora’s competitors. In February, Silk Road 2.0 claimed to have been hacked and lost about $2.7 million worth of users’ bitcoins. The market since says it’s repaid 83 percent of the victims of that hack, which affected 40 percent of the site’s active users.
From toilet paper to tomato sauce, Covid-19 has turned normal consumers into high-volume doomsday binge shoppers. So perhaps it’s no surprise that as they filled their pantries and supply closets in the early days of the pandemic, online buyers also stocked up on dark web weed. Authorities seized $31.6 in cash and cryptocurrency as part of the operation.