Therefore, all transactions involving the market have the market either as a source or as a destination node. The horizontal bars represent each market lifetime, i.e., the time when the market becomes active until its closure, and is colored according to the market’s monthly trading volume in USD. In the vertical axis, markets are in the chronological order of their launch date, although for some markets the activity effectively starts after the launch date (e.g., AlphaBay). These critical changes may not be perceived from macroscopic measures of the ecosystem as a whole. For instance, the typical net income of sellers is seemingly unaffected, as shown in Fig. 2a, where the overall ecosystem volume quickly recovers after market closures.
How To Gain Safe Access To The Dark Web Marketplaces
Examples include the sale of high-quality products with low risk for contamination (including lacing and cutting), vendor-tested products, sharing of trip reports, and online discussion of harm reduction practices. The results further support the recent efforts of law enforcement agencies to focus on individual sellers43,44,45, as well as, more recently, also buyers46,47. Since the beginning of DWMs’ activity, there has been a shift in the law enforcement approach from focusing on market admins towards sellers and buyers9,13. For instance, a recent London Metropolitan Police (MET) investigation examined the transactions of a seller profile on a DWM10. The investigation uncovered a local criminal organization linked to a large international drug supply operation.
Community consensus and users close to the Abacus team ruled out an FBI operation as a likely reason, leaning more towards an exit scam explanation for the sudden takedown of the platform. Abacus launched in September 2021 as ‘Alphabet Market,’ and gradually increased its popularity, especially as the number of other markets on the dark web dwindled, mostly as a result of law enforcement actions. Blockchain intelligence firm TRM Labs reports that Abacus shutting down so abruptly has all the indications of either an exit scam or a covert law enforcement operation dismantling the activity. Despite these advancements, criminals continuously adapt, utilizing privacy coins and decentralized networks to evade detection. Challenges like cross-border enforcement and privacy concerns complicate regulation. To outpace criminals, continuous innovation in AI-driven analytics and forensic tools is necessary, ensuring real-time monitoring and intervention.
Frequently Asked Questions (FAQs) About Dark Web Marketplaces
For consistent access, users rely on updated darknet market lists, which filter out scams and highlight trusted vendors. The darknet continues to evolve as a reliable space for secure transactions, with platforms like Nexus and Abacus leading in 2025. These markets prioritize user safety through advanced encryption and multi-signature escrow, ensuring funds are released only after successful delivery. Vendor reputations are transparent, backed by detailed feedback systems, reducing risks for buyers. In June, the US law enforcement seized crypto linked to BidenCash, the infamous dark web marketplace, accused of selling over 15 million stolen credit cards and personal data.
Set Up Tor Browser

In 2022, Abacus was used by 10% of the users on Western darknet markets. It grew to 17% in 2023 and reached a leading status of 70% last year. Emerging threats include AI-driven scams and crypto ATM fraud, which target vulnerable users. Strengthening KYC/AML regulations, enhancing blockchain analytics, and increasing consumer awareness are crucial in combating these cyber threats and protecting investors from financial losses.

Darknet Markets Generate Millions In Revenue Selling Stolen Personal Data

These platforms sell everything from drugs and fake IDs to weapons and hacking tools, resembling a digital black-market bazaar. In exploring the top 10 dark-web marketplaces in 2025, we’ve examined their core operations, diverse use-cases, inherent risks, and evolving trends. While these marketplaces continue to serve legitimate purposes, such as enabling secure communication and privacy protection, they also remain hotspots for illicit activities and cybercrime.
The Most Liked Crypto News Findings

Jardine emphasized that darknet markets operate with varying levels of sensitivity to fentanyl-related sales. Some marketplaces explicitly ban the trade of fentanyl, while others claim to prohibit it but fail to enforce the rule. Others may allow the sale of precursor chemicals rather than the final product, further complicating law enforcement efforts.
Table Of Contents
Although these three types of sellers are significantly affected, they recover and surpass the median income value they had before Bayonet (see Fig. 4c; Supplementary Information Section S4). In 2025, darknet marketplaces primarily accept Monero (XMR) and Bitcoin (BTC). Privacy-focused operators are shifting to Monero due to its default anonymity, compared to Bitcoin’s transparent ledger Darknet markets see BTC inflow drop to $2B.
- For each entity, we keep track of the cumulative values of the six features for each transaction performed by the entity over time.
- Once you unknowingly install the spyware or ransomware, they can steal your identity or even hijack your crypto wallet.
- For these reasons, most of these stores naturally like the dark web due to its protection.
- Moreover, several qualitative, interview-based studies have shown that DWM users form direct trading relationships with other users, starting user-to-user (U2U) pairs that bypass the intermediary role of DWMs21,22.
- Other cryptocurrencies, like monero, started to emerge on darknet markets because they better fit the use case.
Here, we dramatically extend previous work by exploring the collective emergence and structure of U2U pairs. First, we observe that the U2U network, formed by all transactions between pairs of users, has a larger trading volume than DWMs themselves. We then identify stable U2U trading relationships, which represent a subset of persistent pairs in our dataset31,32 forming the backbone of the U2U network. We find that 137,667 (i.e., 1.7% out of 7.85 million total) pairs are stable, generating a total trading volume of $1.5 billion (i.e., 5% out of $30 billion total volume). We reveal that stable U2U pairs play a crucial role for marketplaces by spending significantly more time and generating far greater transaction volume with DWMs than other users.
Every investigation is led by a Cryptocurrency Tracing Certified Examiner (CTCE) and Certified Fraud Examiner (CFE). If you would like to discuss a potential investigation, please complete the form below. To turn it on, just go to the “Settings” and then the “Tools” section of the NordVPN app and activate “Dark Web Monitoring.” In the end, it’s all about staying one step ahead. The more proactive you are, the better you can protect yourself against identity theft and other cyber threats. And, of course, think twice before sharing too much personal details online. Even the smallest details about you can be useful to cybercriminals.

Torzon Market showed up on the dark web in September 2022, and it’s been growing steadily ever since. These days, it lists over 11,600 illegal items, including hard drugs, hacking tools, and all kinds of cybercrime services. Unlike regular e-commerce sites, markets on the dark web often deal with illegal or highly restricted goods and services, such as fake documents, hard drugs, and hacking services. Sure, you might come across listings for legit products like handcrafted jewelry or digital art, but those are few and far between.
Therefore, key actors in the ecosystem of DWMs may play important roles in broader criminal networks. In general, by understanding the operation of key players within the DWM ecosystem, our work highlights how appropriate strategies can be designed to counteract the online trade of illicit goods more effectively. However, trading behaviour in DWM closely resembles what is observed on regulated online platforms despite their significant differences in operational and legal nature14. Nevertheless, due to their unregulated nature, DWMs exhibit behaviours not observed in regulated marketplaces. They offer anonymity to their users by using and developing specialized tools.
Red flags include guaranteed high returns, lack of transparency, and unverifiable revenue sources. With the Tor browser launched or a Tor private window opened in Brave, you’re now connected to the darknet and ready to browse. When you see this message, your Localcryptos wallet should be loaded with BTC.

