There’s also a privacy angle—some users live in countries with censorship or surveillance, and the dark web gives them a space to communicate or access information more freely. In 2023, the dark web attracted an average of 2.7 million daily users, with Germany now leading as the country with the highest number of Tor users, surpassing the United States for the first time in years. It’s reported that from when it was constructed in May 2019 until it was shuttered in early 2021, users exchanged about €140 million worth of cryptocurrency.
Hydra: How German Police Dismantled Russian Darknet Site
The affidavit in support of the criminal complaint filed in Los Angeles outlines how the defendants operated a sophisticated online marketplace that offered encrypted communications between buyers and sellers, as well as an online forum to discuss vendors and the quality of their wares. Archetyp Market had operated for over five years, amassing more than 600,000 registered users and processing at least EUR 250 million in transactions. With more than 17,000 product listings, the platform served as a hub for narcotics trafficking, including the sale of cocaine, MDMA, amphetamines, and particularly dangerous synthetic opioids such as fentanyl — making it one of the few major markets to openly permit such listings.
Dark Web’s Longest-standing Drug Market Seized In Multinational Effort
Accessing them may require .onion links and the Tor browser, but caution is advised due to legality and cybersecurity risks. They use pseudonymous wallets, privacy coins (like Monero), mixers, chain-hopping, and non-KYC platforms to obscure transaction trails. Cybersecurity experts should pay close attention to these trends, as they often indicate emerging threats and profit-generating tactics among the cybercriminal forums. Active for a decade since 2014, it is a widely used credit card shop used to source stolen credit card information such as dumps, CVVs, Wholesale Accounts.
- The announcement is the first confirmation that Monopoly Market’s disappearance was the result of law enforcement action.
- Dark0de Reborn Market also has a reputation system, where buyers can leave feedback for vendors, ensuring a higher level of trust and accountability.
- Europol said the operation seized more than €50.8 million ($53.4 million) in cash and virtual currencies, as well as 850kg of drugs — including over 258 kg of amphetamines, 43kg of cocaine, 43kg of MDMA and over 10 kg of LSD and ecstasy pills — alongside 117 firearms.
- Hydra mainly served people in Russian-language countries hoping to buy or deal in contraband, including drugs, hacking services and stolen data.
- Before taking down CrimeMarket, German authorities worked alongside international agencies to bust the prolific LockBit ransomware gang.
Typical Use-Cases Of Dark-Web Marketplaces In 2025

“Platinum45” also manufactured Adderall tablets and advertised the sale of up to 1 kilogram quantities of methamphetamine on WSM. Launched after the takedown of AlphaBay in 2021, Abacus Market has rapidly risen to prominence. It features over 40,000 listings including narcotics, counterfeit items, hacking tools, and stolen data. The marketplace is well-known for its bug bounty programs and robust security mechanisms, including mandatory 2FA.
Immigration Enforcement
According to the indictment, vendors on Hydra could create accounts on the site to advertise their illegal products, and buyers could create accounts to view and purchase the vendors’ products. Hydra vendors offered a variety of illicit drugs for sale, including cocaine, methamphetamine, LSD, heroin and other opioids. The vendors openly advertised their drugs on Hydra, typically including photographs and a description of the controlled substance. Buyers rated the sellers and their products on a five-star rating system, and the vendors’ ratings and reviews were prominently displayed on the Hydra site. In a news conference Tuesday, U.S. officials framed the operation within the Biden administration’s broader effort to crack down on illegal fentanyl distribution. The pills sold on darknet marketplaces are often counterfeit and laced with the powerful opioid, Attorney General Merrick Garland said.
Why Brand Monitoring And Threat Intelligence Are Stronger Together: 15 Key Benefits

Additionally, artificial intelligence tools are increasingly being used to manage transactions, vet vendors, and enhance user security—automating dispute resolution, escrow processes, and reputation systems to build trust and streamline operations. German authorities have seized the server infrastructure of the darknet marketplace Nemesis Market, which facilitated the sale of narcotics, fraudulently obtained data, and offered a selection of other cybercrime services, including ransomware. For nearly three years, WSM allegedly was operated on the dark web by the three men who now face charges in both the United States and Germany. An “exit scam” was allegedly conducted last month when the WSM administrators took all of the virtual currency held in marketplace escrow and user accounts – believed by investigators to be approximately $11 million – and then diverted the money to their own accounts. Exit scams are common among large darknet marketplaces, which typically hold money in escrow while a vendor delivers illicit goods.

FBI, Dutch Cops Seize Fake ID Marketplace That Sold Identity Docs For $9
DarkMarket was somewhat different to other markets on the dark web as it prohibited the sale of certain items. This included the likes of weapons, fentanyl and images of child abuse – unfortunately, the kind of things often found on the marketplaces. Investigators seized the Nemesis Market platform’s server infrastructure in Germany and Lithuania on Wednesday, as well as cryptocurrency worth 94,000 euros ($102,000), Germany’s Federal Criminal Police Office said in a joint statement with Frankfurt prosecutors. Nemesis was founded in 2021 and has been growing rapidly since then, according to the BKA.
Court Ruling In Epic-Google Fight Could Have ‘catastrophic’ Cyber Consequences, Former Gov’t Officials Say
- Open-source intelligence gathered in the aftermath shows how the dark web infrastructure responded and what this reveals about its resilience.
- Mr Zwiebel says his investigators then took their evidence to a German judge to get permission to approach the server company and issue a takedown notice.
- A judge ordered the Australian man to be held in custody pending possible charges, but at the time of writing he had not given any information to investigators.
- Dread is as integral to the dark web infrastructure as Deepdotweb was, again proving that the police haven’t exactly won the war.
- They also exclusively use pseudonyms (nicknames) when communicating with each other on the individual platforms.
Notably, Abacus explicitly forbids highly dangerous goods, including weapons, explosives, and exploitative material, which has helped maintain a relatively favorable reputation among its user base. In addition to the critically important efforts of the German Federal Criminal Police, significant assistance was provided by the Justice Department’s Office of International Affairs and the U.S. Assistance was also provided by the Justice Department’s National Cryptocurrency Enforcement Team.
Darknet markets, which are also known as cryptomarkets, offer a platform for the trading of a wide variety of illegal goods and services in a setting that is largely anonymous. It is estimated that approximately two-thirds of the products and services offered on darknet markets are related to the sale of illicit drugs. German law enforcement has shut down an internet market where users bought and sold narcotics, stolen data and hacking tools, authorities said Tuesday. Crimenetwork enabled buyers and sellers to trade stolen data, drugs, forged documents and other illegal goods and services, the BKA said. It had been operating since 2012 and built up a following of over 100,000 users and more than 100 sellers, mainly from German-speaking countries.
India Has Seen 92 Drug Trafficking Cases In Four Years Involving Dark Net And Crypto
The German agency said it teamed up with law enforcement from the U.S. and Lithuania to investigate the Nemesis operation. During the year-and-a-half-long investigation, they discovered marketplace infrastructure in Germany and Lithuania, the BKA said. German police raided the CyberBunker’s headquarters in September 2019 in Traben-Trarbach, a small town close to the Luxembourg border. Eight defendants — four Dutchmen, three Germans and one Bulgarian — stood trial beginning in October for allegedly aiding and abetting 249,000 transactions involving drugs, money laundering, stolen information and pornographic images of children. The CyberBunker hosting service was based in former North Atlantic Treaty Organization bunkers in Holland and then Germany, helping controversial sites avoid police legal enforcement from military-style basements.


It’s an ever-evolving ecosystem—constantly shifting, reinventing itself, and adapting. But it is hackers demanding ransom money, not police, that’s the main worry for those operating DNMs, says Patrick Shortis. “The biggest source of disruption to markets is currently coming from the ongoing distributed denial of service DDOS attacks that have knocked markets and forums offline intermittently over the last few months,” he says. In January the administrators of UniCC, a darknet site selling stolen credit card details, retired, citing health reasons. Hydra specialised in same-day ‘dead drop’ services, where drug dealers (vendors) hide packages in public places before informing customers of the pick-up location.
They also obtained €94,000 ($102,000) worth of cryptocurrency assets, allegedly earned through illegal activity. The website operators are suspected of drug trafficking and running a criminal trading platform. The investigation targeted the operators and administrators of Hydra, according to German authorities. Among other things, authorities said the market was being used for criminal transactions, money laundering and abundant sales of illegal narcotics. Hydra Market was a Russian-language marketplace that had operated via the Tor network since at least 2015 and was known for extensive drug trafficking, according to German authorities. The market’s 17 million known customers were also known to buy and sell forged documents and stolen credit cards, they said.