The website operates exclusively using the Tor network infrastructure, which requires specific browsers to access. Clients seek the Incognito Market link through different community forums and verification processes. The popularity of the market results from focusing on user anonymity and operational security. A 23-year-old man from Taiwan has been arrested on charges of selling at least $100 million worth of illegal drugs online through a site on the dark web known as the “Incognito Market.”
That revenue went to fund the site’s operations, including servers and what the DOJ described as “employee” salaries. All transactions were conducted in cryptocurrency—primarily Bitcoin and Monero—allowing customers and vendors to move funds without using traditional financial rails. Monero’s privacy features in particular obscured sender, receiver, and transaction amounts, posing challenges to investigators tracing flows.
Dubbed “Antinalysis” and “AMLBot,” the services purport to offer a glimpse into how one’s payment activity might be flagged by law enforcement agencies and private companies that try to link suspicious cryptocurrency transactions to real people. U.S. agencies like the FBI, DEA, IRS-CI, and HSI worked alongside Europol, the U.K.’s NCA, and law enforcement from over a dozen countries. At the same time, financial enforcers like OFAC sanctioned individuals running darknet markets—including Iranian national Behrouz Parsarad of Nemesis—demonstrating how financial tools are being brought into alignment with traditional law enforcement. The court proceedings in Lin’s case showcase several legal implications for darknet market operators. Even though Lin was a foreign national operating a website on the Tor network, U.S. authorities claimed jurisdiction because the market sold drugs that ended up in the United States (and used infrastructure affecting the U.S.).
Matthew Podolsky, the Acting United States Attorney for the Southern District of New York, announced today that GREI MENDEZ was sentenced to 45 years in prison for trafficking fentanyl out… On the X platform, formerly known as Twitter, where he has been active since March 2022, most of Lin’s posts are about cryptocurrencies. He also posted about the training he did for the Saint Lucia Police, but this time, he covered his face with an emoji. In an interesting post, he appeared to be proud of the newly elected president in Taiwan, suggesting that he likes the current regime, which is opposing China’s pressure.
The Ransomware-Cryptocurrency Nexus: Why Disabling Digital Money Won’t Stop Digital Extortion

This hypothesis may sound explainable considering the exit scheme happening in March 2024 with Incognito Marketplace. Therefore, after a month, he began to post images with training provided to some law enforcement agents in order to appear clean on a basic OSINT check or if any traces from Darkweb could lead to him. However, the gambler’s fallacy to conduct an exit scam and extort the loyal members of Incognito may have caused his downfall.

How The Incognito Darknet Market Works
Users of Incognito Market were able to search thousands of listings for illegal narcotics, including heroin, cocaine, LSD, MDMA, oxycodone, methamphetamines, ketamine, and alprazolam. There is a dark history of scammers, and even of government agents, making false and misleading public statements to people who browse Tor hidden services. On the other hand, based on his illicit background and willingness to make money, Riu-Siang Lin could have been a well-placed insider for Chinese intelligence in the Taiwanese embassy, and why not a first point of access in the Taiwanese MFA network for APT espionage operations. Even if one of his posts suggests an affinity with the current regime, HUMINT recruitment operations are only sometimes straightforward. The marketplace has been active since July 1, 2023, and has been among the top five infamous marketplaces providing shopping for illicit goods in the darkweb, offering more than 16 categories of narcotics and over 1000 products. Compared to other marketplaces, it offered innovative and a much more user-friendly interface.
- Moreover, prior to revealing the scam, Incognito Market announced that it will support ETH and DAI and purchased the news site Darknetlive.
- Darknetlive once kept a close eye on Tor hidden services and quickly shared warnings when sites were scamming or otherwise acting suspiciously.
- Operation RapTOR includes law enforcement actions taken by JCODE member agencies, to include ICE HSI; the DEA; FBI; FDA-OCI; IRS-CI; and USPIS; in addition to foreign partners listed below.
- To become an Incognito Market vendor, people were required to register with the site and pay an admission fee.
- By incorporating Monero and even providing an on-site exchange between BTC and XMR, Incognito was following a trend towards safeguarding user anonymity on the financial side.
- He faces one count of engaging in a continuing criminal enterprise, one count of narcotics conspiracy, one count of money laundering, and one count of conspiracy to sell adulterated and misbranded medication.
What Happens When AI Reads Your Breach Data Before You Do
The indictment alleges the illegal sale of more than $100 million in illicit narcotics and misbranded prescription drugs, including heroin, cocaine, LSD, MDMA, oxycodone, methamphetamines, ketamine, and alprazolam. In addition, in November 2023, an undercover law enforcement officer received several tablets purporting to be oxycodone purchased on the Incognito Market. Tests on these tablets revealed that they were not authentic oxycodone at all but were, in fact, fentanyl pills.
Rui-Siang Lin is a 23-year-old developer who describes himself on LinkedIn as a “crypto enthusiast and developer” from Taiwan. He claims to be an employee of Taiwan’s Ministry of Foreign Affairs, working as a “diplomatic specialist” in the technical section of the Taiwanese embassy in St Lucia. Previous jobs include a three-year internship at Cathay Financial Holding as a “Backend and Blockchain R&D” since November 2019. The former Incognito Market administrator claims to have graduated from National Taiwan University in June 2023.
Full Anonymity Of The Incognito Onion User
The DHS Cyber Crimes Center (C3) combats cybercrime, online child sexual exploitation, and criminal exploitation of the internet with state-of-the-art forensic technology. The Center investigates large-scale cybercrime threats and provides expertise on cybercrime investigations to the field. It also uses global law enforcement networks, like Europol, to combat cybercrime threats.
- Having heard rumors of the Incognito Market across dark web forums, I decided to check out this long-running marketplace for myself by visiting onion link.
- Monero’s privacy features in particular obscured sender, receiver, and transaction amounts, posing challenges to investigators tracing flows.
- As DOJ noted, the conspiracy involved laundering darknet proceeds through exchanges and peer-to-peer brokers.
- A 2022 Twitter thread about Incognito posted by Eileen Ormsby, an author of several dark-web-focused books including The Darkest Web, shows how the market by that time had added features that may have helped it to catch the attention of security- and safety-conscious users.
- These claims cannot be proven and should be viewed as hearsay rather than credible information.
To put Incognito’s trajectory in context, it helps to compare it with its predecessors and contemporaries, and to consider what its downfall implies for the future of illicit online markets. However, depending on how much Riu-Sian Lin knows about other accounts that could expose the criminal’s identity, we will see in the next period of time in the other law enforcement takedown and arrest operations. In the case of SuperMarket, users will likely migrate to other illegal communities due to a lack of trust in the platform. “Stay posted and fuck LE,” Pharoah wrote, using the abbreviation LE to mean “law enforcement.” Antinalysis eventually returned, however, and pivoted last year to acting instead as a service for swapping bitcoin for monero and vice versa. Lin was arrested at John F. Kennedy Airport on May 18, and will be presented in Manhattan federal court before U.S.

Immigration Enforcement Frequently Asked Questions
Original marketplace URLs get regularly updated for security reasons, hence the reason for verification. The Incognito Market URL verification involves cross-referencing using several independent trusted sources. Additionally, the Incognito Market exit scam scheme took a new turn as buyers were offered a chance to remove their records through a whitelist portal, hinting at a semblance of redemption amidst the chaos. However, the looming deadline of April 1st, when prices were set to double, added urgency to the situation.
Incognito Darknet Market Mass-Extorts Buyers, Sellers
Antinalysis allowed anyone (for a fee) to input their cryptocurrency address and see how likely it was to be flagged as “dirty” or linked to illicit activity – effectively letting criminals check if their funds could be traced. Pharaoh openly advertised Antinalysis on Dread, framing it as a way to help darknet users and “those who needed complete privacy on the blockchain” evade law enforcement scrutiny. In a statement dripping with irony, he wrote that “Our goals do not lie in aiding the surveillance autocracy of state-sponsored agencies… This service is dedicated to individuals that have the need to possess complete privacy on the blockchain”. This move positioned Pharaoh as something of a champion of privacy in the eyes of darknet denizens. It also showcased his technical acumen – straddling the line between criminal utility and software entrepreneurship.

“Incognito Market” Owner Pleads Guilty For Operating One Of The Largest Illegal Narcotics Marketplaces On The Internet
OCDETF identifies, disrupts, and dismantles the highest-level criminal organizations that threaten the United States using a prosecutor-led, intelligence-drive, multi-agency approach. Before sharing sensitive information, make sure you’re on a federal government site. In a world where digital footprints are often unavoidable, the Incognito Darknet Market stands as a beacon for those who seek to elude the constraints of visibility. It’s a realm where secrets are exchanged, and desires are fulfilled in the uncharted territories of the internet’s underbelly. The site appeals to specific segments of the darknet community through targeted products and expert services. Having heard rumors of the Incognito Market across dark web forums, I decided to check out this long-running marketplace for myself by visiting onion link.
Immigration Enforcement
By incorporating Monero and even providing an on-site exchange between BTC and XMR, Incognito was following a trend towards safeguarding user anonymity on the financial side. Many modern darknet markets have since gone further, with some operating exclusively in Monero to avoid the kind of blockchain tracing that helped catch Lin. However, Incognito’s case shows that even with Monero in the mix, operational security must be airtight – a single point of weakness (like Lin’s use of a BTC wallet for personal expenses) can compromise the entire scheme. We can expect future market operators to study Lin’s mistakes and double-down on using privacy coins, better tumbling/mixing services, and compartmentalizing their online identities to avoid leaving a link to the clear web. As alleged in the complaint and the indictment, Incognito Market was an online narcotics bazaar that existed on the dark web.
Incognito charged vendors a 5% commission on every sale, a business model that generated millions of dollars in revenue for the platform. New vendors paid an admission fee to join, ensuring a revenue stream and a barrier against law enforcement decoys or low-effort scammers. In return, Incognito provided an infrastructure for secure (albeit illegal) transactions and acted as an escrow intermediary between buyer and seller.
In March, Incognito Market shut down after reportedly pulling an exit scam that left users unable to withdraw their funds. Administrators of the site then reportedly began extorting vendors, ordering them to pay a fee ranging from $100 to $20,000, depending on their size, or else risk having their customers’ data leaked. U.S. authorities have arrested and charged a Taiwanese national with operating darknet drug bazaar Incognito Market, which he allegedly used to facilitate over $100 million in crypto-denominated sales of illegal narcotics including fentanyl. Incognito Market was designed to foster seamless narcotics transactions across the internet and across the world and incorporated many features of legitimate e-commerce sites, such as branding, advertising and customer service. Upon visiting the site, users were met by a splash page and graphic interface, which is pictured below. “Under the promise of anonymity, Lin’s alleged operation offered the purchase of lethal drugs and fraudulent prescription medication on a global scale,” said James Smith, an assistant director in the FBI’s New York office.