One concern is that the admin may be doing this project from a compromised position, following instructions from law enforcement to trap vendors of illegal products. In Thailand, the police arrested Alexander Cazes, a Canadian citizen using the online alias Alpha02/Admin and one of the two AlphaBay administrators. AlphaBay was relaunched on August 7th 2021 and now a year later we are going strong as the top undisputed marketplace. The AlphaBay Staff and everyone working with us want to thank everyone – customers, vendors, fans, haters for giving us their business and faith once more. It is a definitely more challenging environment to work within and reach the #1 spot compared to before but through hard work and professionalism we were able to do it. AlphaBay uses at this time only Monero cryptocurrency and has only two featured listings, both of them for drugs.
Topics And Products Sold
The top left of the Excel spreadsheet displayed an image of the Hansa logo, a stylized Viking ship. The police had designed the Excel file to fetch that image from their own server when the spreadsheet was opened. Other displaced users went to Dream Market, an older, less reliable site than Hansa, but one with a larger drug catalog.
Our Markets – Alphabay Network
- AlphaBay now uses only Monero cryptocurrency and currently has only two featured listings, both for drugs.
- During this research, DarkOwl discovered a surface web domain that mirrors much of the information DeSnake shared on Dread, but with a Tor link to the market that is not in the mirrors.txt verified links list from AlphaBay.
- AlphaBay is a principle-driven, vision oriented and community centered marketplace and Forum for all black market items.
- “They were brought in to AlphaBay because they had technical skills.” Gray said he verified the encryption key that DeSnake provided as proof of his identity.
- AlphaBay was the largest criminal marketplace on the dark web from 2015 to 2017.
Cazes was found dead of an apparent suicide in a Thai jail cell a week after his arrest; like many in the dark web community, DeSnake believes Cazes was murdered in prison. He was driven to rebuild AlphaBay, he says, after reading about an FBI presentation on the circumstances of Cazes’ arrest that he deemed disrespectful. “AlphaBay name was put in bad light after the raids. I am here to make amends to that.” While this topic may seem distant for most people, understanding how these spaces operate is crucial. It helps us stay more vigilant, better protect ourselves, and make informed decisions online. Perhaps the most perplexing of these new markets is the so-called Empire Market.
Valued at approximately $15 million, Abacus Market is one of the most lucrative platforms in the dark web ecosystem. In 2024, the platform grew significantly in popularity, partly because of its strategic acquisition of users from a number of recently shut-down marketplaces, such as AlphaBay and Incognito Market, which had recently closed their doors. While the sites’ closure is a massive boost, the DoJ and Europol both readily acknowledge that new services will simply pop up to replace them. After all, the closure of previous dark web marketplace Silk Road in 2013 was eventually followed with AlphaBay – bigger, more lucrative and, by the looks of it, more dangerous. “The capability of drug traffickers and other serious criminals around the world has taken a serious hit today,” said Europol’s executive director Rob Wainwright. Alexandre Cazes, was discovered in Bangkok from a lead the authorities picked up from his own marketplace’s welcome email.

Who Were The Masterminds Behind These Dark Web Marketplaces?

Freshtools is a unique marketplace in that it does not only provide the stolen data, but it allows criminals to purchase MaaS which can cause further damage to the victims. It is one of the most active and up to date markets and always provides new and updated malware and data. Founded in 2014, BriansClub remains one of the oldest and most infamous dark web markets for stolen credit cards, fullz (complete identity kits), and dumps.
Cypher Marketplace
In truth, however, that ban had come just a few days before the end of their undercover operation. Until then, for more than three weeks, that highly dangerous opioid had continued to be offered on the site, with no guarantee that all of its orders would be intercepted. So, a few weeks into their takeover, the police wiped every image from the site. They claimed that a server had failed due to a technical glitch, and they announced that vendors would have to re-upload all the images for their listings. Those fresh uploads allowed the Dutch cops to scrape the metadata from a vast new batch of images.
AlphaBay Reloaded — How DeSnake Brought The Underground Market Back To Life And Made It Better Than Ever
A government shutdown of dark web marketplaces AlphaBay and Hansa has merchants and consumers looking for a new home. According to another complaint affidavit filed in the Middle District of Florida against Jeremy Achey, an investigation into a fentanyl overdose death in Orange County, Florida, on February 27, revealed that the lethal substance was purchased on AlphaBay from Achey. Investigation into AlphaBay revealed that numerous vendors sold fentanyl and heroin, and there have been multiple overdose deaths across the country attributed to purchases on the site. AlphaBay’s Monero-only policy does not seem to have deterred or hindered buyers and vendors from operating in the marketplace, which most popularly boasts drug offerings. Cannabis, stimulants, and psychedelics hold the current top three spots, and account for the majority of the current 33,000 drug-related listings.

Market Value And Popularity

Then, in the middle of that week, on July 13, one prong of Operation Bayonet suddenly slipped into the light. The Wall Street Journal broke the news that AlphaBay had been taken down by a joint law enforcement operation involving the US, Thai, and Canadian governments and that the site’s administrator, Alexandre Cazes, had been found dead in a Thai jail cell. In the days before the AlphaBay takedown, it was adding nearly a thousand new registered users a day, all falling into the trap the Dutch had patiently set. Earlier today, a New York man was resentenced to three years in prison for his creation and operation of BreachForums, a marketplace for cybercriminals to buy, sell, and trade hacked or…
- The Bangkok Post reported that shortly after his arrest, he was found dead in his cell.
- The administrators of Hansa Market, along with its thousands of vendors and users, also attempted to mask their identities to avoid prosecution through the use of Tor and digital currency.
- The platform’s popularity continues to grow, attracting both new and returning customers.
- Glende pled guilty to access device fraud and aggravated identity theft and was sentenced to four years and two months’ imprisonment on November 30, 2016.
- AlphaBay launched in 2014 and quickly attracted users with its focus on providing a relatively secure and anonymous dark web marketplace.
AlphaBay Darknet Market Rises From The Dead
Despite the takedown, new darknet markets continue to emerge and evolve, demonstrating the resilience of this underground ecosystem and the challenges that law enforcement agencies face in trying to dismantle them. According to publicly available information on AlphaBay prior to its takedown, one AlphaBay staff member claimed that it serviced over 200,000 users and 40,000 vendors. Comparatively, the Silk Road dark web marketplace, which was seized by law enforcement in November 2013, had reportedly approximately 14,000 listings for illicit goods and services at the time of seizure and was the largest dark web marketplace at the time.

There were also at least half a dozen moderators that helped administer the market and its discussion forum, moderated disputes between buyers and vendors, and promoted the market on Reddit (prior to the shutdown of the DNM subreddit). The indictment from 2017 listed them individually by their monikers and many have been arrested. In 2016, an angry user of AlphaBay known as “Kinger” stated that alpha02 had left the market in late 2015, sold his stake to DeSnake, and DeSnake was supposedly acting as admin for its final two years. Kinger’s ominous threat suggested they knew his real life identity and his citizenship was actually Dutch.
“Although many illegal services run on the Tor network, suspects are often negligent and run their bitcoin node on clearnet,” the slide read, using a term for the traditional internet not protected by Tor. DeSnake described countermeasures he’d since developed for practically every tactic that had been used to capture Cazes and take down the original AlphaBay. DeSnake never stepped away from his computer when it was unlocked, he wrote, not even to use the bathroom. He claimed to use an “amnesiac” operating system to avoid storing incriminating data, as well as “kill switches” to destroy any remaining information that law enforcement might find on his machines, should they leave his control. He even wrote that he’d designed a system called AlphaGuard that will automatically set up new servers if it detects that the ones that run the site are being seized. Throughout the operation, the Dutch team would hold what they called “evil plan” meetings, brainstorming ever more devious schemes to track and identify the unwitting users of the market they controlled.
Kingdom Market is a newer darknet market that has been around since April 2021 but was only recently vetted for listing on Dread, the pre-eminent forum for markets on the dark web. It features a unique site design unlike any other market yet is still intuitive and easy to use. Conspicuously absent are some preferred features, such as the lack of pre-order (direct pay) purchases, a multi-sig option for BTC payments, and forced PGP encryption for communications. It makes up for this with enhanced security and user safety features, helping users to ensure they are not getting phished.
Despite growing crackdowns from law enforcement agencies, the dark web remains a hotbed of criminal activity, offering everything from drugs to stolen data. The US Attorney’s Office for the Northern District of California also played a key role in the operation — Attorney General Jeff Sessions made sure the legal and judicial processes were handled swiftly. The takedown was a significant moment in darknet history because it not only shut down AlphaBay’s operations but also sent a strong message to other dark web marketplaces. In October 2016, AlphaBay saw an even greater surge in activity when two major rival darknet markets, Nucleus and Abraxas, abruptly shut down.