Only four Russian-language DNMs left the approximately 20-strong ecosystem in 2024. The departure of market leaders such as Solaris Market — which ceased operations in autumn 2024 — is a rare occurrence. Incognito, like other modern darknet platforms, operated entirely on cryptocurrency—primarily Bitcoin and Monero. Buyers and sellers used wallets controlled either directly or through third-party mixers and exchanges.
We have given each crypto dark web a ranking based on our comprehensive review of the features above. Recently, TRM Labs reported that around $2.1 billion in crypto has been stolen in the first half of 2025. When Archetyp Market was taken down in mid-June, many of its buyers and sellers moved to Abacus Market.
International
Transactions within dark markets predominantly involve cryptocurrencies like Bitcoin, Monero, or Ethereum. These digital currencies provide a degree of anonymity, as transactions are recorded on a public ledger but do not directly link users to their real-world identities. To purchase illicit goods or services, users deposit cryptocurrency into an escrow system or directly to the seller, and the cryptocurrency is held until the buyer confirms the satisfaction of the transaction. Incognito Market runs 20,000+ listings and $2.8 million monthly trades with BTC and XMR, holding a 5% market stake.
Darknet Markets Onion Address
In fact, it now features more than 11,600 illegal items, which include hacking tools, hard drugs, and all types of cybercrime services. The market started in 2021 in Canada and features both international and Canadian users. The market offers things like malware, fake documents, and financial fraud services. This market is not open to the general public and is subject to a thorough vetting process to ensure its security. In fact, WeTheNorth is more of a private club than an open market – something its operators want.
Experience The World’s Most Advanced Cybersecurity Platform
After AlphaBay closed, Abacus Market took its place as the world’s largest underground darknet marketplaces. Abacus Market quickly rose to prominence by attracting former AlphaBay users and providing a comprehensive platform for a wide range of illicit activities. Launched in 2023, STYX focuses on financial crime, providing stolen credit card data, hacked bank accounts and access to various cryptocurrency laundering tools. Sanctioned nations use cryptocurrencies to evade economic restrictions, conducting cross-border transactions and mining digital assets to generate revenue. The decentralized nature of crypto complicates enforcement, prompting governments to develop advanced tracking strategies.
Why Choose XMR Over BTC?
The FBI described the takedown as a significant step in disrupting financial cybercrime operations. The data above also confirms that the increase in revenue is driven by more purchases rather than larger ones. The median purchase size has remained relatively constant in USD value, but we see that the number of transfers once again jumped significantly, from 9 million to 12 million. This suggests that either more customers bought from darknet markets in 2019, or that old customers are making more purchases. The expanding use of cryptocurrencies by terrorist organizations and state-sponsored actors illustrates the dual-edged nature of technological innovations — providing both opportunity and risk.
Market Operations
We should note though that some of the highest-earning markets shown above only serve specific countries or regions. For instance, Hydra Marketplace, by far the most popular market on the graph, caters only to customers in Russia. Below, we have another version of this chart showing only markets with a global customer base. Some of the markets shown in the second graph are more popular in some countries than others, but overall, the data shown below will be more relevant to investigators based in the U.S. and Western Europe. This marketplace focuses on selling stolen financial data, such as BINs (Bank Identification Numbers), RDP/VDS access, and verified crypto accounts for money laundering. The market is also known for its listings related to financial fraud, such as phishing tools and stolen credit card information.
Every investigation is led by a Cryptocurrency Tracing Certified Examiner (CTCE) and Certified Fraud Examiner (CFE). If you would like to discuss a potential investigation, please complete the form below. He recommends verifying market employees carefully, and to weed out law enforcement infiltration through barium meal tests. One of the central76 discussion forums was Reddit’s /r/DarkNetMarkets/,777879 which has been the subject of legal investigation, as well as the Tor-based discussion forum, The Hub.
The Silk Road Marketplace
In total, darknet markets and fraud shops received $1.7 billion last year, a rebound from 2022 — the year that saw the sizable Hydra Marketplace close. The ensuing war for darknet market dominance that began in 2022 continued into 2023, but no other market has since matched Hydra’s financial success. And the fragmentation of illicit markets, particularly in drug sales, signals a shift toward decentralization — with criminal enterprises moving away from traditional darknet marketplaces toward more agile and resilient platforms. U.S. agencies like the FBI, DEA, IRS-CI, and HSI worked alongside Europol, the U.K.’s NCA, and law enforcement from over a dozen countries. Department of Justice announced the results of Operation RapTor—an unprecedented international crackdown on darknet narcotics trafficking. In response, cybersecurity professionals, law enforcement agencies, and policymakers around the world are working to combat this growing menace.
This section explores Ponzi and pyramid schemes, ICO scams, rug pulls, and phishing attacks, as well as cryptojacking, fake wallets, and fraudulent exchanges. Addressing these risks requires clear regulations, effective monitoring, and collaboration between regulators and blockchain developers. Implementing compliance measures and leveraging technology can help balance privacy with security. A well-structured approach ensures transparency while preserving the benefits of decentralized finance without hindering innovation.
Serving 8,000+ users and 600+ vendors, it holds a 10% share of drug commerce—an emerging force since 2023. Emerging trends shaping darknet marketplaces in 2025—insights into cryptocurrency trading and security. Drughub Market specializes in pharmaceuticals, offering 15,000+ listings and $2 million monthly via BTC. With 8,000+ users and 600+ vendors, it commands a 10% share of darknet drug trades—a rising star since 2023. Archetyp Market delivers 28,000+ listings and $3.5 million in monthly trades using BTC and XMR, securing a 6% market share. With 12,000+ users and 900+ vendors, it boasts a 95% vendor rating—ideal for quality-focused dark pool trading.
It allows vendors to sell without registration, which provides an added layer of anonymity, making it one of the more flexible and user-friendly markets on the dark web. Fentanyl and fentanyl-laced drugs also arrive in the United States through Latin America based cartels. U.S. customers predominantly purchase drugs from these groups that are known to have used crypto to source fentanyl precursor chemicals from labs based in China. The cartels then use those chemicals to manufacture fentanyl that is later sold in the U.S.
Market takedowns create temporary disruptions, but they rarely dismantle entire networks. Sophisticated players shift operations, adopt new aliases, and resume business within weeks. Litecoin, Zcash, and Dash also see usage, though Monero and Bitcoin dominate the dark web. Some marketplaces have even mandated Monero-only transactions, underscoring a strong preference for privacy-focused coins over traceable ones. Active for a decade since 2014, it is a widely used credit card shop used to source stolen credit card information such as dumps, CVVs, Wholesale Accounts.
- A proactive approach can help balance security with the continued growth of the crypto ecosystem.
- Cryptocurrencies allow extremist organizations to bypass conventional financial limitations, leveraging pseudonymity to mobilize foreign funds.
- In 2024, fraud shop inflows declined by 50% YoY, a sharp downturn from the last three years.
- In spite of Hydra Market’s disruption in 2022, former Hydra affiliates still found operating in today’s DNMs rely heavily on these infrastructure providers.
- Fentanyl and fentanyl-laced drugs also arrive in the United States through Latin America based cartels.
- It has gained a reputation for being a reliable source of high-quality data for cybercriminals.
Latest updates from the darknet trading world as of February 2025—key shifts and developments. Chainalysis also noted that some markets are openly advertising their wares in Russia, with giant 3D billboards (Kraken Market) and QR codes on subway trains (Mega Darknet Market). Cybersecurity experts should pay close attention to these trends, as they often indicate emerging threats and profit-generating tactics among the cybercriminal forums. Telegram channels supplement traditional onion sites, blurring lines between the dark web sites and more mainstream communication tools. “In order to be an effective kind of medium of exchange, you need a certain amount of liquidity and a certain amount of accessibility,” Jardine said.
