Russian Language Marketplaces Remain Drivers of Crypto Drug Sales: TRM Labs Report

When looking at darknet drug markets serving Russia-based customers, Kraken Market captured 30.9% of market share, with Blacksprut and Mega Darknet markets closely following. As for drug markets serving Western customers, ASAP Market held a 25.0% share, followed by Mega and Incognito. Western drug flows in particular come from US-domiciled exchanges and trace flows from those to darknet markets. The entity “DNM Aggregator” that appears within each category refers to a service we’ve identified as being in control of multiple, disparate darknet markets.

🛡️ How Axis Intelligence Strengthens Cybersecurity

One fraud shop that provided services like these, Genesis Market, saw its end last April after a coordinated, international law enforcement effort called Operation Cookie Monster closed it down, and OFAC sanctioned it. In recent years, some darknet markets and fraud shops have been integrating crypto payment processors on their websites via APIs, possibly as a way to improve operational efficiency and increase security. Essentially, these payment processors provide a white label service for darknet markets and fraud shops, and a seamless checkout experience for those services’ customers. UAPS, shown in the chart above, is one such example of a payment processor that many fraud shops, including the OFAC-designated Genesis Market, used in 2023. The value received by UAPS in this chart includes payments sent to multiple fraud shops using the service as a payment processor.

Content

Only the 33 DWMs that closed during our time period are considered in the analysis. The first major darknet market pioneered BTC trading, processing $1.2 billion before its 2013 shutdown. Specifically, interruptions to supply chains and shipping routes have caused darknet market delays, prompting complaints from frustrated customers. Cointelegraph is committed to providing independent, high-quality journalism across the crypto, blockchain, AI, and fintech industries. To support open access to our website and sustain editorial operations, certain commercial or partner references may appear on our site. These arrangements help maintain an accessible platform and do not result in additional costs to readers.

Prioritize Escrow

After that quarter, their number remains small, which is represented by the dashed line. In all panels, the dashed vertical line marks the time of operation Bayonet. As of October 2022, the largest volume of drugs purchased at two large marketplaces – BlackSprut and Mega – were for cathinones such as mephedrone and alpha-PVP. These white, synthetic stimulant powders that mimic cocaine and MDMA are highly prevalent in Russia, eastern Europe and the Balkans because they’re cheap and easy to manufacture locally.

• Our analysis focuses on Bitcoin – the most popular cryptocurrency both on DWMs27,28 and in the regulated economy29,30.
• Looking closer at ASAP Market inflows, it won some share of revenue across all drug purchase types, receiving 37.1% of social supply, 35.7% of large retail, 16.5% of small retail, and 13.5% of wholesale purchases.
• Yet, like the Hydra of Greek legend, whose heads multiply when they are severed, a new generation of darknet markets popped up to challenge for control of a market worth at least $1.37 billion, according to unofficial estimates.
• Features such as advanced search filters, customer reviews, and escrow systems have become standard, ensuring transparency and trust between buyers and sellers.
• One might therefore hypothesise that U2U trading is also a prevalent feature on regulated online marketplaces.
• Here are some methods to thwart unauthorized access to your data repositories.

Frictions and Structural Risks

Financial fraud is common, and you have no recourse if transactions go wrong since these markets operate outside legal frameworks. The evolution of darknet markets has been marked by significant advancements in technology, user experience, and economic efficiency. Over the past decade, these platforms have transformed into sophisticated ecosystems that cater to a wide range of consumer needs, offering unparalleled convenience and security. The integration of cryptocurrencies has played a pivotal role in this transformation, enabling seamless and anonymous transactions that are resistant to traditional financial oversight. One of the key developments in recent years has been the emergence of user-friendly interfaces and Tor-based marketplaces.

• Each offers unique strengths in cryptocurrency trading and escrow security—essential for navigating the onion network.
• This suggests that the multiseller activity is sensitive to external shocks but also that it yields higher profits.
• On average, marketplaces had 26,342 sales and generated $5,847,417 in revenue.
• In this article, we’ll explore what dark web markets are, how they work, and why they’re so risky.
• We analyse 40 DWMs for the time period spanning from June 18, 2011 to January 31, 2021.
• When your data is found on the dark web, it means that you’ve been compromised.

Escrow Dominance

It runs on a rewritten version of the old Versus codebase, so the UI feels familiar but adds per-order “vendor bond staking” meant to reduce exit temptations. Discover how SentinelOne AI SIEM can transform your SOC into an autonomous powerhouse. Contact us today for a personalized demo and see the future of security in action. Predictive threat intelligence can help you stay ahead of emerging threats by forecasting what’s yet to come. See how the SentinelOne threat-hunting service WatchTower can surface greater insights and help you outpace attacks.

• These roundups stress that listing volumes and category prominence fluctuate over time.
• We have shown that the U2U network is resilient to abrupt external shocks, such as marketplace closures, and does not need the centralised structure of DWMs to survive.
• A dark web market is a hidden online platform where users can anonymously buy, sell, and trade illegal or sensitive items.
• You can find drugs, weapons, stolen data, and counterfeit documents on these marketplaces.
• However, the website has some security risks, and users experience glitches.
• Furthermore, we analyse the seller-to-seller (S2S) network, i.e., the network composed only of transactions among sellers, which can be regarded as a supply chain network of illicit goods and services.
• To expand their reach, some marketplaces established parallel channels on Telegram.

AI Supercharges Attacks in Cybercrime’s New ‘Fifth Wave’

You can legally browse darknet sites for legitimate purposes like research or privacy protection. However, engaging in illegal activities on the darknet is against the law and can result in serious criminal charges. If you access illegal content or participate in criminal transactions, you face legal consequences.

Subscribe to our blog for more news and updates!

The integration of cryptocurrencies such as Bitcoin and Monero has further enhanced transactional security, making these platforms a reliable choice for users seeking discreet online trade. By 2025, these platforms are expected to further refine their operations, offering enhanced privacy and efficiency for users engaged in secure online trade. The integration of blockchain technology and decentralized marketplaces has already begun to reshape the landscape, ensuring that transactions remain anonymous and resistant to external interference. These platforms have created a thriving digital economy, with vendors and buyers engaging in transactions that are both efficient and secure.

Niche Trends and Ecosystem Shifts

Moreover, we do not have information about which users trade with other users on the same DWM. Finally, our coverage of DWMs, albeit extensive, may lack information on other trading forums where users could have met. These distributions are explored for each of the 40 DWMs under consideration in Figure S5 and S6, respectively. 2c which shows that since 2011 U2U transactions have consistently involved greater monthly volume than the volume sent to all DWMs.

Another Record Year For Ransomware Beckons as Crypto Profits Hit $460m

Also, it should be common knowledge not to share personal information online. Latest updates from the darknet trading world as of February 2025—key shifts and developments. One, casual drug buyers are shifting away from the darknet to make their purchases, while larger buyers are simply buying more per purchase.

Businesses should be aware of the potential for data leaks and invest in data loss prevention measures. As of September 2025, public trackers mark it closed, underscoring the sector’s churn amid phishing/DDoS and sustained law‑enforcement pressure. And beware—while many explore out of curiosity or for research purposes, it’s important to remember that engaging with these platforms, even as an observer, can lead to serious legal and ethical consequences. Having JavaScript enabled on the dark web can cause havoc because it can reveal your IP address to your website.

It issued a press release revealing that, from December 2021, the website will no longer be functional. DarkOde Reborn is a great darknet market where you can find anything you want. The website has a great design and a clean and organized interface that is easy to use. The homepage includes options like browsing products, searching, mixer, and coin exchange. However, the website has some security risks, and users experience glitches.

Darknet Markets Made More Money Than Ever in 2020

According to Dark.fail, recently, the darknet marketplace’s head moderator “Se7en” sharply criticized the phishers, LE cooperators, and doxxers of the community, and this event could be a consequence of that. Abacus Market operated as a central deposit wallet, multisignature darknet marketplace supporting both Bitcoin and Monero cryptocurrencies. Abacus Market, the largest Bitcoin-enabled Western darknet marketplace, has likely executed an exit scam after going offline in early July 2025, according to blockchain intelligence firm TRM Labs. Even though DuckDuckGo is the Tor browser’s default search engine, it doesn’t index dark web websites, which means you won’t be able to find .onion sites with it. Riseup is a volunteer-run collective that offers secure chat and email services primarily used by progressive activists and social justice communities. It’s maintained by an independent organization committed to digital privacy and security.

What you can buy on the darknet markets

I’ve poked around; it’s not overwhelming, just a tight selection that works—think curated over chaotic. If you’re into a darknet market with a community pulse and solid uptime, Bohemia Dark Market’s climbing the ranks—give it a spin if you like a vibe that’s less corporate, more crew. Despite consistent results, this study has limitations that may be addressed in future work. First, while the dataset is preprocessed with state-of-the-art methods, there is no ground truth for validation, and this uncertainty propagates to our findings. For instance, we cannot verify if an entity classified as seller is in fact a seller. Similarly, there is no unique choice for the classification parameters or ground truth for fitting them.

It helps us stay more vigilant, better protect ourselves, and make informed decisions online. KEY TAKEAWAYS The Deep and the Dark web are the hidden part of the internet. If the operating system detects any non-anonymous connection, it blocks it, thus ensuring maximum online protection. Further market diversification occurred in 2015, as did further developments around escrow and decentralization.

Therefore, you must know how to access dark web marketplaces safely (covered later in this article). Dark web marketplaces are online markets that exist on hidden networks and cannot be accessed through regular browsers. They are used to trade illegal goods and services while keeping user identities concealed.

Background research tasks included learning from past drug lords, researching legal matters, studying law enforcement agency tactics and obtaining legal representation. Patterns recommended to avoid include hiring hitmen like Dread Pirate Roberts, and sharing darknet markets handles for software questions on sites like Stack Exchange. One of the central[75] discussion forums was Reddit’s /r/DarkNetMarkets/,[76][77][78] which has been the subject of legal investigation, as well as the Tor-based discussion forum, The Hub.

Each offers unique strengths in cryptocurrency trading and escrow security—essential for navigating the onion network. Beginning in September 2021, Abacus Market has established itself as one of the leading dark web marketplaces. After AlphaBay closed, Abacus Market took its place as the world’s largest underground darknet marketplaces. Abacus Market quickly rose to prominence by attracting former AlphaBay users and providing a comprehensive platform for a wide range of illicit activities.

Transaction analysis and operational mistakes can still link activity to real individuals. Past behavior is used to assess credibility, including uptime history, prior shutdowns, and administrator actions. User messages, order histories, and account data are frequently stored without protection. Funds can be lost instantly through exit scams, frozen escrow wallets, or sudden marketplace shutdowns.

Teams of ‘droppers’ employed by the online shops are paid to secrete drug packages, rather than hand them over in person. This method was seen as less risky for buyers and sellers fearful of the heavy prison sentences handed out in Russia for drug crimes. The Hidden Wiki is a longstanding directory of dark web sites that offers a way to browse onion services.

One such sophisticated darknet market, Hydra, offered all that and more,” Chainalysis explained. Administrators and sellers on dark web marketplaces had a better 2023 than the previous year, pulling in an estimated $1.7bn in cryptocurrency-based revenues, according to new Chainalysis data. Vice City Market runs 18,000+ listings and $2.5 million monthly trades on BTC and XMR, with a 5% share. Its 9,000+ users and 700+ vendors focus on drug trades with strong escrow security.

The impact of the COVID-19 pandemic has, however, had different phases, punctuated by the number and level of measures introduced around the world. After that, trading volume sharply increased over the whole of 2020, see Figure S8. The number of stable U2U pairs created each day was, however, steady over time during 2020, even though more U2U pairs were created compared to the same period in 2019, see Figure S9. Overall, stable U2U pairs have shown resilience to the systemic stress caused by COVID-19, suggesting, once again, that these trading relationships are fundamentally independent from the underlying DWMs. Surprisingly, although DWMs have gained significant attention from the scientific community and law enforcement agencies, little is known about the key players sustaining their unusual adaptability and responsive dynamics. However, owing to the difficulty of identifying relevant transactions, most studies rely on user surveys17,18 and data scraped from DWM websites19,20,21,22,23,24.

Its builders created it from the ground up to offer a “cleaner” and more organized shopping experience than most. Operating more like a legit e-commerce platform (surprisingly), the market operates a 14-day escrow system, but it lets you opt for Finalize Early (FE) if you trust a vendor. Moreover, the layers of encryption and the bounce of your data from node to node effectively mask your IP address, enabling online anonymity. It allows access to the .onion sites on the dark web that you won’t find using a regular browser. For a local machine configuration, he recommends a computer purchased for cash running Linux, using a local Tor transparent proxy. For operations security he suggests avoiding storing conversation logs, varying writing styles, avoiding mobile phone-based tracking and leaking false personal details to further obfuscate one’s identity.