Darknet Market Revenue Rises in 2023

For instance, markets like AlphaBay and Hansa have set benchmarks in terms of design and functionality, offering features such as escrow services, vendor ratings, and dispute resolution mechanisms. Our results also support recent recommendations of paying attention to individual sellers rather than entire DWMs40. Law enforcement agencies, however, have only recently started targeting individual sellers. The first operation took place in 2018 and successfully led to the arrest of 35 sellers41, while the largest operation to date occurred in 2020 and led to 179 arrests in six different countries42. Our study indicates that a much higher number of highly active DWM users, on the order of tens of thousands, is involved in transactions with other DWM users.

Types of Illicit Goods and Services

The evolution of the multibuyer network follows a similar pattern to the multiseller network until 2015, despite a stronger polarization around Hydra instead of AlphaBay during 2017. However, after the operation Bayonet, although the network shows a decrease in connectivity, it still remains highly connected and with a large number of active multibuyers. Moreover, the network had already fully recovered by 2019 showing a strong resilience against external shocks. While not an onion site, Tor Metrics can provide a fascinating peek “under the hood” of the dark web.

Darknet market crypto crimes on the rise in 2023, $1.7B revenue — Chainalysis

• It offers impressive features, including PGP-signed addresses, payment via Monera, sticky and featured listings, and auto shops.
• On average, marketplaces had 109 unique vendor aliases and 3,222 product listings related to stolen data products.
• The goods on sale range from stolen credit card data and forged documents to illegal drugs, weapons, malware as a service, and hacking tools.
• If you’ve ever experienced an uptick in phishing attacks and spam after a data leak or breach, it may be because your personal information has been posted to the dark web.
• Threat actors may also manipulate old or publicly available data to generate hype and damage reputations.
• During 2016 and 2017, AphaBay becomes the dominant market (see Fig. 3), polarizing sellers around its own ecosystem, such that the fraction of multisellers decreases to 10% of all sellers until its closure.

Recently, two interview-based studies have suggested that DWMs may also promote the emergence of direct user-to-user (U2U) trading relationships. Here, we carefully investigate and quantify the scale of U2U trading around DWMs by analysing 31 million Bitcoin transactions among users of 40 DWMs between June 2011 and Jan 2021. We find that half of the DWM users trade through U2U pairs generating a total trading volume greater than DWMs themselves. We then show that hundreds of thousands of DWM users form stable trading pairs that are persistent over time.

biggest dark web marketplaces

• In total, darknet markets and fraud shops received $1.7 billion last year, a rebound from 2022 — the year that saw the sizable Hydra Marketplace close.
• Tools like Tor are used to bypass government-imposed firewalls and surveillance, ensuring open communication.
• As far as financial recourse for victims, some banks and insurance companies have provided payouts and will include those funds as damages in lawsuits against Genesis Market cybercriminals.
• Black traffic schemes—malicious landing pages promoted via deceptive ads—remained a constant threat.
• Among the 40 large DWMs under consideration, 17 participate in at least one transaction in either 2020 or 2021, while the remaining 23 closed before 2020.
• The report reveals that 2023 also saw a rise in the prominence of approval phishing scams.

In summary, the progression of darknet markets marks a pivotal advancement in the realm of secure and anonymous online trade. As these platforms continue to innovate, they will remain indispensable for individuals valuing privacy and discretion in their digital interactions. One of the most significant advancements in this domain is the proliferation of pharmaceutical products on darknet platforms. These marketplaces cater to a growing demand for medications that face regulatory hurdles, exorbitant pricing, or limited distribution in traditional healthcare systems. From prescription drugs to innovative therapies, users can access a broad spectrum of products, all within an environment that emphasizes security and user autonomy.

Darknet market revenues rose slightly, but have yet to regain Hydra Marketplace highs

• U.S. Treasury and FinCEN advisories describe how illicit cryptocurrency services help criminals move ransomware and fraud proceeds.
• Markets like Torzon and BriansClub accept multiple cryptocurrencies, including Bitcoin, Monero, Litecoin, and Dash, catering to the diverse preferences of their users.
• Once the buyer confirms satisfaction, the funds are released to the seller.
• Listings aren’t public, but it’s steady—think drugs (weed, pills, some synthetics), a few digital extras like cracked accounts.
• In the below graph, the currencies included are Bitcoin, Bitcoin Cash, Litecoin, and Tether.

The website allows a personalized searching experience, where you can search according to your geographical location, country-specific, and keyword or price-specific search results. The White House market offers impressive features like a mandatory PGP requirement that enables 2FA for the user’s profile and adds a protective layer. Below are the best marketplaces darkweb marketplaces on the dark net that we hand-picked after going through multiple shops and doing extensive research. Dark web marketplaces discussed in 2026 are best understood as temporary systems shaped by pressure, not permanence. Their repeated rise and collapse reflect enforcement advances, trust failures, and structural weaknesses rather than innovation or stability.

• Dark web marketplaces are mostly hubs for illicit goods and activities, posing serious risks to users and the wider community.
• In all panels, the dashed vertical line marks the time of operation Bayonet.
• The resulting dataset consists in transactions between entities, that group together clusters of Bitcoin addresses.
• In 2019, the FBI started its investigation into Genesis Market and enlisted other government agencies and law enforcement organizations across the world, working towards the market’s closure on April 4, 2023.
• These listings often include detailed descriptions, user reviews, and even shipping guarantees.

Is accessing the dark web illegal?

Even long-running marketplaces can shut down suddenly due to scams or law-enforcement action. Participation in dark web marketplaces can lead to serious criminal charges, even if involvement seems limited. Law enforcement investigations often span years and rely on digital traces collected over time.

What is the cost of stolen data on the darknet market?

• Empire is one of the two biggest darknet markets globally, the other being Russia’s Hydra market.
• In a DDoS attack, the server is bombarded with artificial traffic, which makes it difficult for the server to process web requests, and it ultimately goes down.
• In particular, these studies are based on user reviews which carry many inaccuracies, for instance, with respect to the time and value of the transaction19, that further compound error in other measures.
• In summary, the progression of darknet markets marks a pivotal advancement in the realm of secure and anonymous online trade.
• As the darknet continues to evolve, its potential for innovation remains vast.

Overall, stable U2U pairs have shown resilience to the systemic stress caused by COVID-19, suggesting, once again, that these trading relationships are fundamentally independent from the underlying DWMs. Alphabay Market leads with 60,000+ listings and $20 million in monthly trades via BTC and XMR, dominating 20% of darknet marketplaces. With 25,000+ users and 3,000+ vendors, it’s the gold standard for escrow security and scale. Vendors on Hydra also offered services such as “Hacking for Hire,” “Ransomware as a Service” (“RaaS”), and a myriad of money laundering features. Though the drug transactions were limited to Russia and its geographic neighbors, the cyber and money laundering tools were available to anyone in the world willing to pay.

Law Enforcement Action Had Little Effect on Supply and Prices

The synergy between cryptocurrencies and darknet markets highlights the transformative power of decentralized technologies in redefining the global digital economy. Yes, the darknet still exists and continues to operate through networks like Tor, I2P, and Freenet. While law enforcement regularly shuts down illegal marketplaces, the underlying infrastructure remains functional. New darknet sites and markets continuously emerge to replace those that get shut down. The technology behind the darknet is actively maintained and continues to evolve. In response, cybersecurity professionals, law enforcement agencies, and policymakers around the world are working to combat this growing menace.

Daily Debrief Newsletter

• Similarly, the takedown of Kingdom Market in late 2023 led to the arrest of its administrator and involved over 42,000 product listings.
• To protect their identities, users often employ PGP encryption for secure communication, adding an extra layer of security to their interactions on these platforms.
• Some things, like medical records, driver’s licenses, and passport information.
• No dark web marketplace is safe to use because they involve illegal activity, financial risk, and potential legal consequences.
• ProPublica is one of the safer Tor sites to visit, because it doesn’t link to illegal content or activities.
• In adherence to the Trust Project guidelines, BeInCrypto is committed to unbiased, transparent reporting.
• One, casual drug buyers are shifting away from the darknet to make their purchases, while larger buyers are simply buying more per purchase.
• Use Tor Browser from torproject.org for safe onion routing—update regularly.

However, the markets are dominated by things like illegal drugs, explicit content, pirated files, hacking services, and stolen personal information, among others. It’s one of the largest darknet markets that launched in 2022 and trades sensitive financial credential transactions. It’s the place where you can buy or sell stolen credit card numbers, SSH login credentials, and personally identifiable information (PII). DWMs are also communication platforms, where users can meet and chat with other users either directly—using Whatsapp, phone, or email—or through specialised forums. We estimate that the trading volume of U2U pairs meeting on DWMs is increasing, reaching a peak in 2020 (during the COVID-19 pandemic).

Explicit content

Operating more like a legit e-commerce platform (surprisingly), the market operates a 14-day escrow system, but it lets you opt for Finalize Early (FE) if you trust a vendor. During our tests for the research, we were able to register with a bogus email and a random username. All that one can expect from a deep web marketplace when it comes to anonymity and security.

Darknet Markets Explained

Many people also prefer to buy goods and services online, which allows for more opportunities to steal people’s personal data and financial information. In 2019, the FBI started its investigation into Genesis Market and enlisted other government agencies and law enforcement organizations across the world, working towards the market’s closure on April 4, 2023. As part of the investigation, the Dutch National Police took the lead on cybercrime prevention, and Van Well shared his insight on the sophistication of the fraud shop’s operation. Another darknet market known for facilitating fentanyl sales to the United States was Canada-based AlphaBay.

As a consequence of this, likely fewer crypto trading accounts and wallets were available for hackers to target. Cryptocurrency accounts were the only category that we saw to have experienced an increase. This is likely due to the fact that cryptocurrency prices have been largely stagnating in H and H1 2023, which resulted in less interest shown by the mainstream population. Our price index grew with the addition of nine payment processing services.

Human Error: Casio ClassPad Data Breach Impacting 148 Countries

Vendors may also choose to exit with their escrowed funds to avoid competition at a higher volume and price level. Just like traditional e-commerce sites, darknet markets provide a platform for vendors to connect with potential buyers to facilitate transactions. Another key distinction is that access to darknet markets requires the use of special software such as the Onion Router, or TOR, which provides security and anonymity. A defining feature of darknet markets is their reliance on cryptocurrencies as the primary transactional medium.

Contents

We find that trading properties of buyers and sellers reflect the dominance of DWMs in the ecosystem. In particular, we analyse networks of ‘multihomers’, defined as users that are simultaneously trading in multiple markets. We show that these users play a crucial role in the connectivity of the ecosystem because they act as connectors between markets. Analogously, we identify and characterise ‘multisellers’ (i.e., multihomers that are sellers) and ‘multibuyers’ (i.e., multihomers that are buyers). Furthermore, we analyse the seller-to-seller (S2S) network, i.e., the network composed only of transactions among sellers, which can be regarded as a supply chain network of illicit goods and services. We highlight that these networks exhibit different resilience regimes in the presence of external shocks, the ecosystem’s resilience being mostly guaranteed by the network of buyers rather than sellers.

We find that 137,667 (i.e., 1.7% out of 7.85 million total) pairs are stable, generating a total trading volume of $1.5 billion (i.e., 5% out of $30 billion total volume). We reveal that stable U2U pairs play a crucial role for marketplaces by spending significantly more time and generating far greater transaction volume with DWMs than other users. By analysing the temporal evolution of stable pairs, we unveil that DWMs acted as meeting points for 37,192 users (out of around 16 million), whose trading volume is estimated to be $417 million.

Dark Markets Darknet Market Links in 2026

The results of that investigation were published in a report called Technical analysis of the Genesis Market. Though Genesis Market domains and servers were seized and antivirus programs have been updated, cybercriminals have already rebuilt illicit services like these. Western drug flows in particular come from US-domiciled exchanges and trace flows from those to darknet markets. The entity “DNM Aggregator” that appears within each category refers to a service we’ve identified as being in control of multiple, disparate darknet markets. You can use a dark web scan tool to tell if your data has landed on the dark web.

The Dynamic Ecosystem of Darknet Marketplaces

It is a wallet-based shop, meaning you must first deposit bitcoins into your wallet before purchasing any goods and services. The marketplace is much more organized, which makes it easy to use and navigate. With a growing user base and expanding inventory, Vortex is positioning itself as an “all-in-one” darknet marketplace. It blends illegal trade with features like gambling, all while maintaining a clear and accessible structure. Its intuitive interface and advanced search features make it easy to find local and global products.

In this article, we’ll explore what dark web markets are, how they work, and why they’re so risky. We’ll also discuss examples of major marketplaces, myths about the dark web, and tips on staying safe in case your personal data ever ends up there. 2022 and early 2023 saw the seizure of many major darknet markets by law enforcement. Some of the biggest markets have disappeared within just a few weeks in the latter half of 2022.

The chart above shows that ASAP and Mega Darknet markets led the large retail and wholesale segments respectively. Looking closer at ASAP Market inflows, it won some share of revenue across all drug purchase types, receiving 37.1% of social supply, 35.7% of large retail, 16.5% of small retail, and 13.5% of wholesale purchases. The chart above shows that, while values haven’t risen back to 2021 levels, darknet market revenue has slightly rebounded since Hydra’s closure in 2022. Also, set up two-factor authentication (2FA) to add an extra layer of protection in case someone manages to figure out your password.

That said, the social network’s data collection and tracking practices may seem at odds with many of the principles motivating dark web users. Concerns about how Meta treats user data have led many people to delete their Facebook profiles or at least limit their social media presence. Onion sites, or dark web websites, are sites on the dark web that can typically only be accessed using special software like the Tor browser.

Darknet drug markets and cryptomarkets continue to dominate, offering diverse products with detailed vendor ratings and reviews. The integration of tor markets and darknet marketplaces ensures seamless access, while darknet magazines provide insights into emerging trends. The dark web market urls and darkmarket links remain essential for navigating this decentralized network, fostering a thriving digital economy. The evolution of darknet markets has significantly transformed the landscape of online trade, particularly in the realm of digital commerce.

Some of these sites have turned to influencers to boost their publicity campaigns. Earlier this month a Kraken employee told Russian news website Lenta.ru that the market had a dedicated PR department. With Abacus’s departure, remaining platforms such as DrugHub, TorZon Market, and MGM Grand face increased pressure to absorb displaced users while navigating the same risks that led to their predecessor’s downfall. The collapse of Abacus Market highlights the ongoing volatility in the Western darknet ecosystem, where sustained law enforcement pressure has created an environment of constant uncertainty. The platform’s success was reflected in its growing market dominance, rising from 10% market share in 2022 to over 70% in 2024.

Additionally, the adoption of escrow systems and multi-signature wallets has further bolstered trust and efficiency in darknet transactions. These tools ensure that funds are released only when both parties fulfill their obligations, minimizing disputes and fostering a more reliable trading environment. Dark markets, as well as various other services within darknets, are hosted as ‘hidden services’. This means that the servers providing these services are only accessible via Tor and do not have a public IP address or domain name. Hidden services can operate while keeping the physical location of the server hidden, which makes tracking and shutting them down considerably more challenging.