One of the central76 discussion forums was Reddit’s /r/DarkNetMarkets/,777879 which has been the subject of legal investigation, as well as the Tor-based discussion forum, The Hub. We compared our method with the state-of-the-art topic modeling method Machine Learning for Language Toolkit (MALLET) 30 and our model without transfer learning stage (baseline). Our experiment evaluated MALLET on our annotated anonymous marketplace and forum data set (Table 3) using 3 classification algorithms in the document classification tool (package cc.mallet.classify class in MALLET’s JavaDoc API Application Programming Interface). In particular, MALLET is retrained and evaluated via 10-fold cross-validation. We also applied the MALLET topic modeling toolkit (package cc.mallet.topics MALLET’s class in JavaDoc API) on the same data set to predict the type of topic. The baseline model was applied directly to the labeled data (Table 3) and evaluated using 10-fold cross-validation.
The Analysis Steps
Ransomware actors and fraudsters are leveraging technological advancements, including cross-chain bridges and artificial intelligence, to bypass detection and scale their operations. Saheed Aremu passionately advocates for digital privacy and cybersecurity in the modern digital age. As one of PrivacySavvy’s resident VPN experts, he guides readers on protecting their online information and anonymity.
Immigration Enforcement

When interpreted by professionals, our initial results demonstrate useful findings and may be used downstream by law enforcement and public policy makers for impactful structural interventions to the opioid crisis. Although a large body of current research is focused on pathways for treatment of opioid use disorder and analyzing deaths per treatment capacity of substance use providers, these research areas are limited to the demand side of the opioid epidemic 40,41. We believe that the findings and pattern analyses presented here, which place concentration on the supply side, might suggest a new direction to focus and will serve as a useful complement to current research conducted within the domain of addiction medicine. In our study, a total of 248,359 listings from 10 anonymous online marketplaces and 1,138,961 traces (ie, threads of posts) from 6 underground forums were collected.
According to TRM Labs, Incognito launched in October 2020 and remained active until March 2024. In that time, it facilitated more than USD 100 million in drug sales, including hundreds of kilograms of cocaine and methamphetamine, alongside heroin, LSD, MDMA, oxycodone, ketamine, and misbranded prescription drugs. In Grand Theft Auto Online, players who purchase warehouses and garages for illicit cargo and stolen cars can buy/steal and sell them through trade on the “SecuroServ” syndicate website. After the Biker DLC, players can now purchase buildings for illegal drugs and counterfeit products manufacture, and distribute them through a darknet website called “The Open Road” where law enforcement cannot be notified of the player’s trade. To collect the listing information of 5 anonymous online marketplaces (ie, Apollon, Avaris, Darkbay, Empire, and The Versus Project), we conducted a whole-site crawl. The crawler was implemented in Python and used the Selenium module to launch browsers and to send crawling requests 24.
Weapons And Arms Trafficking Statistics
Prior to its takedown by law enforcement, narcotics traffickers and cybercriminals openly traded in illegal drugs and services on Nemesis, which was designed with built-in money laundering features. Nemesis had over 30,000 active users and 1,000 vendors and facilitated the sale of nearly $30 million worth of drugs around the world between 2021 and 2024, including to the United States. Today’s sanctions designation is OFAC’s first action as a member of the Federal Bureau of Investigation (FBI)-led interagency Joint Criminal Opioid and Darknet Enforcement (JCODE) Team.
External Threat Assessment Report
As observed in our data set, the top 3 marketplaces with the most opioid listings are Agora, Evolution, and Apollon. Anonymous online marketplaces are usually platforms for sellers and buyers to conduct transactions in a virtual environment. They usually come with anonymous forums for sellers and buyers to share information, promote their products, leave feedback, and share experiences about purchases. To understand how it works, we describe an opioid transaction’s operational steps on the anonymous online marketplaces and forums.
Smarter Onboarding For Payments Leaders: Future-proof Merchant Onboarding As Risk And Competition Evolve

In the last stage, we analyzed comparisons of its distribution across areas to assess the public health burden of drug impact. For this step, the statistical methods include observational statistics, building diagrams, and mapping by the regions of Russia. We implemented Spearman correlations analysis to find and measure levels of associations between darknet marketplace and official health statistics variables. We recognize that there may be a temporal lag between the sale and distribution of drugs under certain conditions.

Association Of Drugs For Sale On The Internet And Official Health Indicators: Darknet Parsing And Correlational Study
This shift stems from the demonstrated efficacy of blockchain analysis in tracing illicit transactions and aiding investigations. Cryptocurrency-enabled online sales of illicit drugs saw a year-on-year growth of over 19% between 2023 and 2024, nearing USD 2.4 billion. China has cracked down on fentanyl and some of its subtypes, or analogues, but the online dealers often tweak the formulas of their drugs slightly to stay ahead of bans. For example, when China announced it would ban one fentanyl product, called U-47700, on July 1, one fentanyl dealer advertised a “hot sale” of the product through June. “All must go till 1 of July,” the “special offer” read, according to the report.
- Increased accessibility, larger populations, or different socioeconomic conditions could all be to blame.
- He’s heard too many stories about buyers getting busted when law enforcement organizations take over sites to feel comfortable.
- It was the first big site where people could anonymously buy drugs using Bitcoin, and it gained a lot of attention, until it was shut down by the FBI in 2013.
- Without dope, I’m too hopelessly depressed to work, study or even eat regularly.
- “Waste your resources on seizing petty websites because they know the use of darknet services is ever growing,” another user wrote.
Consequently, many vendors are migrating to alternative platforms, including Signal, Session, and WhatsApp. This exodus is expected to continue as Telegram enforces stricter measures to curtail criminal activities on its network and provide new opportunities for interdiction. Vendors today are choosing to establish vendor shops and engage in direct deals through a diverse array of encrypted communication applications and email.

Compared to its predecessors, Archetyp enforced enhanced security expectations from its users. These included an advanced encryption program known as “Pretty Good Privacy” and a cryptocurrency called Monero. Unlike Bitcoin, which records every payment on a public ledger, Monero conceals all transaction details by default which makes them nearly impossible to trace.
Crimes range from data theft and selling illegal goods for cryptocurrencies to human trafficking and more severe offenses. One particularly revealing moment came in February 2024, when Incognito users reported that BTC withdrawals were disabled—likely part of a deliberate “exit scam.” Lin, or others acting on his behalf, threatened to leak vendor identities to law enforcement unless paid. That extortion threat, combined with increased tracing and investigative pressure, led many users to flee the platform, dramatically reducing deposits and facilitating law enforcement’s final takedown. According to court records and the TRM Labs investigation, the end of Incognito was foreshadowed by chaos. Though the platform’s administrator later claimed the extortion threat was a “joke,” the damage had been done.
Combating Transnational Crime
They sit on an encrypted part of internet called “Tor Hidden Services” where URLs are a string of meaningless numbers and letters that end in .onion, and are accessed using a special browser called “Tor”. By supplying stolen data, these dark web links fuel many online scams and identity theft operations, playing a critical role in the darker aspects of the internet. Some of us who use drugs are lucky enough to have physical access to a safe supply. After all, you can’t exactly use Paypal or your credit card to pay for illegal drugs.