Lin allegedly made millions from operating Incognito Market, which took a 5% cut of every sale. The darknet market had its own “bank,” prosecutors said, which gave users an additional layer of anonymity by allowing them to deposit cryptocurrency into their own accounts, which the site then automatically transferred from buyers to sellers, minus the fee. Incognito, like other modern darknet platforms, operated entirely on cryptocurrency—primarily Bitcoin and Monero.
He claims to be an employee of Taiwan’s Ministry of Foreign Affairs, working as a “diplomatic specialist” in the technical section of the Taiwanese embassy in St Lucia. Previous jobs include a three-year internship at Cathay Financial Holding as a “Backend and Blockchain R&D” since November 2019. The former Incognito Market administrator claims to have graduated from National Taiwan University in June 2023.
Payment On Incognito Darknet

They didn’t want their business to be exposed to the police, but paying the blackmailers could lead to even higher demands. Instead, he warned users that he had records of over 500,000 orders and more than 860,000 cryptocurrency transaction IDs. He threatened to reveal all the transaction details on Incognito, including the names of buyers and sellers, which could identify people involved in illegal orders. What’s striking is how Lin used this data as a weapon, basically forcing his own users to pay or face legal action.

Incognito Market Darknet Rules
Pharoah is centralizing the darknet to a scale that previous darknet market admins have only dreamed of. The Incognito admin is one of the fastest builders that the darknet has ever seen. Many vendors around the world partner with Incognito Darknet because the Incognito Darknet Store has some of the lowest fees on the market and a good reputation among vendors. “As alleged, Rui-Siang Lin was the architect of Incognito, a $100 million dark web scheme to traffic deadly drugs to the United States and around the world,” Attorney General Merrick Garland said in a statement.
Agora Darknet Market

District Judge Colleen McMahon and is scheduled to be sentenced on March 27, 2025. A federal district court judge will determine any sentence after considering the U.S. One trend that Incognito particularly exemplified was the increasing adoption of privacy-enhancing cryptocurrencies and features. Earlier markets primarily relied on Bitcoin, which, as we’ve seen, is traceable.
Who Verifies The Safety Of Tor Users? #
Investigation of crypto transactions that led to the arrest of Riu-Siang Lin shows that threat actors and criminals in the underground forums cannot operate alone and without leaving any traces when switching to real life. “Pharao” created the Incognito marketplace when he was just a student, probably trying to make more money. The marketplace has been active since July 1, 2023, and has been among the top five infamous marketplaces providing shopping for illicit goods in the darkweb, offering more than 16 categories of narcotics and over 1000 products. Compared to other marketplaces, it offered innovative and a much more user-friendly interface.
- Administrators of the site then reportedly began extorting vendors, ordering them to pay a fee ranging from $100 to $20,000, depending on their size, or else risk having their customers’ data leaked.
- A sketch of a dark-web market’s infrastructure that Lin emailed to himself eight months before allegedly creating Incognito Market, according to the DOJ.
- According to TRM Labs, Incognito launched in October 2020 and remained active until March 2024.
- The market’s staff created the “Incognite foundation”, with the intent “to maximize freedom, welfare, and privacy for all”.
- He had applied to work as part of the embassy’s technical corps in lieu of military service — mandatory for Taiwanese men — and had “behaved normally.”
How The Incognito Darknet Market Works
Regarding the announcement of the SuperMarket co-administrator in relation to the wallets emptied by the other administrator, this has happened in the past in other cases of the “domino effect” that occurs when law enforcement makes arrests in the underground community. There are more hypotheses to follow, but the most reasonable one is that there could be some relationship in terms of crypto accounts shared between ‘FatherBear’ and ‘Pharao’, which could lead to other traces. In this case, ‘FatherBear’ will keep a low profile for a while with all the money and then probably resurface with a different identity.
Rise Of Incognito Market And Its Darknet Empire
Among these features one could find Direct Pay, implying buyers could use their wallets instead of those provided by the marketplace. Incognito Market had its own “bank,” which allowed its users to deposit cryptocurrency on the site into their accounts. The mass-extortion of Incognito Market users comes just days after a large number of users reported they were no longer able to withdraw funds from their buyer or seller accounts. The cryptocurrency-focused publication Cointelegraph.com reported Mar. 6 that Incognito was exit-scamming its users out of their bitcoins and Monero deposits. Yet the digital nature of these crimes ensures new threats will emerge.
Tor Browser
This deep dive examines the marketplace’s history, technical underpinnings, the man behind the alias, and how investigators brought down a darknet kingpin. We also explore the legal fallout and what Incognito’s downfall signals for the future of online black markets. The message included a list of the “top” vendors who had paid the ransom to protect their customers and themselves. The payments ranged from $100 to $20,000, depending on how many transactions each person had handled.

They are the only 100 customized orthodontic braces available on the market. The 23-year-old supermodel tried to go incognito as she and two pals walked through the market, a spy told Page Six. WASHINGTON President Joe Biden urged the Federal Trade Commission to probe possible illegal conduct in incognito market. Incognito Market, which was shut down in March, was an online dark web marketplace that allowed users to buy and sell illegal drugs anonymously, according to the Justice Department. Rui-Siang Lin, also known as “Pharoah,” was arrested at John F. Kennedy Airport in New York on Saturday and was to appear in court on Monday, the Justice Department said, calling it “one of the largest illegal narcotics marketplaces on the internet.”
Incognito Market Built-in Wallet
This approach mirrored the playbook of earlier darknet markets and contributed to Incognito’s rapid growth. To become an Incognito Market vendor, people were required to register with the site and pay an admission fee. In exchange for listing and selling narcotics as a vendor on Incognito Market, each vendor paid 5% of the purchase price of every narcotic sold. That revenue funded Incognito Market’s operations, including paying “employee” salaries and for computer servers. To facilitate these financial transactions, Incognito Market had its own “bank,” which allowed its users to deposit cryptocurrency on the site into their own accounts.
He had applied to work as part of the embassy’s technical corps in lieu of military service — mandatory for Taiwanese men — and had “behaved normally.” On other platforms, such as OpenSea, Lin sells NFTs with basketball players, and his collections appear to be up to 37 NFTs. In October 2021, the defendant also gave a YouTube interview explaining how his anti-DDoS tool “PoW Shield” worked for Pentester Academy TV, demonstrating his technical skills. Rui-Siang Lin is a 23-year-old developer who describes himself on LinkedIn as a “crypto enthusiast and developer” from Taiwan.
It’s conceivable that undercover agents or cooperating informants were among those communications, gathering intel on Pharaoh’s state of mind and next steps. One of the most high-profile targets of Operation RapTor—the largest coordinated global crackdown on darknet drug trafficking to date—was Incognito Market, a dark web narcotics marketplace that operated with remarkable scale, anonymity, and apparent impunity. According to TRM Labs, Incognito launched in October 2020 and remained active until March 2024. In that time, it facilitated more than USD 100 million in drug sales, including hundreds of kilograms of cocaine and methamphetamine, alongside heroin, LSD, MDMA, oxycodone, ketamine, and misbranded prescription drugs.