A federal district court judge will determine any sentence after considering the U.S. As alleged in the complaint and the indictment, Incognito Market was an online narcotics bazaar that existed on the dark web. Since that time, and through its closing in March, Incognito Market sold more than $100 million of narcotics — including hundreds of kilograms of cocaine and methamphetamines. The message included a list of the “top” vendors who had paid the ransom to protect their customers and themselves.
- Each high-profile bust – from Silk Road to AlphaBay to Incognito – serves as a learning experience for agencies.
- Federal prosecutors said they have put a stop to one of the largest illegal narcotics marketplaces on the internet after arresting its operator.
- By the time he graduated, Lin had a plan—a plan to create the most secure and successful darknet market the world had ever seen.
- The mission of the EDTF is to disrupt, dismantle, or render ineffective, organizations involved in the laundering of proceeds of narcotics trafficking and other financial crimes.
- The escrow service was set in such a way that a buyer’s money would be released to a seller only after specified actions, for example, the shipment of narcotics is made.
Eight Months After Hydra Shutdown, New Russian-language Darknet Markets Are Filling The Void
The ‘bank’ also facilitated the exchange of different cryptocurrencies, giving users more flexibility in how they conducted their transactions. It began by freezing their cryptocurrency funds, so they couldn’t withdraw their money. Then, the scammers threatened to share the private chat details that were supposed to be secret. This banking service obscured the locations and identities of vendors and customers from each other and from law enforcement. It kept the financial information of vendors and buyers separate, making it more difficult for any one actor on the marketplace to learn any other actor’s true identity, a complaint filed against Lin said. Incognito Market had its own “bank,” which allowed its users to deposit cryptocurrency on the site into their accounts.
Designed to manage seamless narcotics transactions across the web, Incognito Market ran in much the same way as a legitimate business, incorporating advertising, customer service and branding. In a LinkedIn post in April 2024, Lin shared some pictures from a “cybercrime and cryptocurrency training” at the Saint Lucia Police Academy. In another post, he promoted his new healthcare project called ‘Face2ID’, which uses contactless biometric scanning to create unique and secure patient identifiers, improving the accuracy and security of patient data management.
That extortion threat, combined with increased tracing and investigative pressure, led many users to flee the platform, dramatically reducing deposits and facilitating law enforcement’s final takedown. To facilitate the millions of dollars in transactions, Incognito Market had its own “bank,” allowing users to deposit cryptocurrency into “bank accounts” that would transfer the agreed-upon amount to a seller’s “bank account” minus Lin’s 5% fee. Prosecutors said the online marketplace allowed users to anonymously buy and sell illegal drugs from anywhere on the globe with an internet connection and a Tor web browser, a tool that makes it difficult to track users. However, depending on how much Riu-Sian Lin knows about other accounts that could expose the criminal’s identity, we will see in the next period of time in the other law enforcement takedown and arrest operations. In the case of SuperMarket, users will likely migrate to other illegal communities due to a lack of trust in the platform. Throughout the investigation, law enforcement also leveraged the darknet community’s own reactions to Incognito’s collapse.
- Incognito Link is committed to keeping our platform secure by using the latest security measures to protect the identity and information of Incognito users.
- It began by freezing their cryptocurrency funds, so they couldn’t withdraw their money.
- He learned how these markets operated, studying their vulnerabilities and thinking about how he could improve upon them.
- By 2022, the FBI and Homeland Security had begun to take a serious interest in Incognito Market.
- Incognito Market was designed to foster seamless narcotics transactions across the internet and across the world and incorporated many features of legitimate e-commerce sites, such as branding, advertising and customer service.
Cyble Strato Cloud Security
Lin announced that Incognito Market would be shutting down, but not before attempting to extort the market’s users. He threatened to leak private messages, transaction details, and other sensitive information unless users paid a fee ranging from $100 to $20,000. This act of desperation was a clear indication that Lin’s time was running out, and it set off alarm bells within the darknet community. The FBI was able to identify several such errors during their investigation, which gave them critical insights into how the market operated and who was involved. These slip-ups, combined with the forensic analysis of cryptocurrency transactions, allowed law enforcement to build a case against Rui-Siang Lin.
This betrayal turned many of Incognito’s most loyal users against him, and it wasn’t long before word of the scam reached law enforcement. The FBI and Homeland Security knew they couldn’t just take down Incognito Market with brute force. Their investigation, which began in 2022, was a combination of traditional detective work and advanced cyber tactics. Undercover agents posed as both buyers and sellers, engaging in hundreds of transactions on the platform, gathering as much information as possible about the market’s operations. The market also used multiple wallets to manage its funds—hot wallets for active transactions and cold storage for the bulk of its assets. This strategy ensured that even if law enforcement compromised one wallet, the majority of the market’s funds remained secure.
Cyble Titan Endpoint Security
Initially, users from the USA were prohibited from using the Incognito, but now they welcome buyers and sellers from all over the world. The team behind Incognito Market also created libre forum, a darknet discussion board. While Lin is in custody, the case could take a number of twists and turns with Incognito vendors nervous about Lin’s possible cooperation with the government. This case, an Organized Crime Drug Enforcement Task Forces (OCDETF) operation, is a great example of full of US law enforcement cooperation and collaboration. The case is being investigated by FBI, Homeland Security Investigations, DEA, FDA, and the New York Police Department.
Supply Chain Resilience And Physical Security: Lessons For 2025

He majored in computer science, focusing on cybersecurity and blockchain technology. His professors described him as a prodigy, someone who could solve complex problems with ease and elegance. Lin quickly became involved in various research projects, often working late into the night on coding challenges and cryptography puzzles.

Lin Oversaw All Aspects Of The Site, Including Managing Employees, Vendors And Customers

This revelation helped the Feds identify the exact transaction and his wallet details. Illegal drug trafficking and sales have always been a major focus among the FBI, Department of Homeland Security and other agencies. So it’s no surprise the illicit activities worth over $100 million conducted within the Incognito Market ecosystem were already garnering attention. CoinTelegraph notes that Incognito Market administrators initially lied about the situation, and blamed users’ difficulties in withdrawing funds on recent changes to Incognito’s withdrawal systems. This effort is part of an Organized Crime Drug Enforcement Task Forces (OCDETF) operation.
Stay with me as we delve into the rise and fall of Incognito Market, from its inception to its inevitable collapse, and the intricate web of technology and greed that fueled it. Most notably, there was a tool to mitigate DDoS attacks, software that allows online merchants to accept XMR for payment, and “Koa-typescript-framework” – a program used as a foundation for web applications. In furtherance of Operation RapTOR and in their first action as a JCODE member agency, the Office of Foreign Assets Control (OFAC) additionally sanctioned Behrouz Parsarad, an Iranian national, for his role as the founder and operator of Nemesis Market following seizure of the market. Immigration and Customs Enforcement, in collaboration with Europol, the Joint Criminal Opioid and Darknet Enforcement Team, and various national and international partners, announced the results of Operation RapTOR May 22. This historic takedown, led by Europol, resulted in the highest number of seizures in JCODE’s history. The Cyber Express is a handbook for all stakeholders of the internet that provides information security professionals with the latest news, updates and knowledge they need to combat cyber threats.
Incognito Links
Department of Justice announced the results of Operation RapTor—an unprecedented international crackdown on darknet narcotics trafficking. According to the indictment, between 2022 and 2023, law enforcement agents executed search warrants to gain access to three servers used to operate the marketplace and containing marketplace data. One of the servers searched by the agents was the so-called “bank”, a database containing all cryptocurrency transactions. This allowed US law enforcement to trace cryptocurrency transfers to a digital wallet linked to Lin, leading to his identification and arrest. The indictment alleges the illegal sale of more than $100 million in illicit narcotics and misbranded prescription drugs, including heroin, cocaine, LSD, MDMA, oxycodone, methamphetamines, ketamine, and alprazolam. In addition, in November 2023, an undercover law enforcement officer received several tablets purporting to be oxycodone purchased on the Incognito Market.
ICE USWDS Footer Links
Rui-Siang Lin is a 23-year-old developer who describes himself on LinkedIn as a “crypto enthusiast and developer” from Taiwan. He claims to be an employee of Taiwan’s Ministry of Foreign Affairs, working as a “diplomatic specialist” in the technical section of the Taiwanese embassy in St Lucia. Previous jobs include a three-year internship at Cathay Financial Holding as a “Backend and Blockchain R&D” since November 2019. The former Incognito Market administrator claims to have graduated from National Taiwan University in June 2023.
Owner Of Incognito Dark Web Drugs Market Arrested In New York
The site offered illegal narcotics and misbranded prescription drugs, including heroin, cocaine, LSD, MDMA, oxycodone, methamphetamines, ketamine, and alprazolam. Just as Incognito built on the playbook of its predecessors, future markets will learn from RapTor. But with blockchain intelligence advancing and global partnerships strengthening, law enforcement is better positioned than ever to detect, disrupt, and dismantle these operations. While Lin profited in the millions off Incognito Market, authorities estimate that the darknet site sold more than $100 million in illegal narcotics, including hundreds of kilograms of cocaine and methamphetamine, in less than four years. Accusations intensified after Incognito Market released an official statement on the site confirming earlier suspicions. The announcement stated that operators had collated incriminating information about vendor identities, purchase details and private messages.
This hypothesis may sound explainable considering the exit scheme happening in March 2024 with Incognito Marketplace. Therefore, after a month, he began to post images with training provided to some law enforcement agents in order to appear clean on a basic OSINT check or if any traces from Darkweb could lead to him. However, the gambler’s fallacy to conduct an exit scam and extort the loyal members of Incognito may have caused his downfall. The marketplace has been active since July 1, 2023, and has been among the top five infamous marketplaces providing shopping for illicit goods in the darkweb, offering more than 16 categories of narcotics and over 1000 products. Compared to other marketplaces, it offered innovative and a much more user-friendly interface.

Lin also used funds from Incognito Market’s admin wallet to purchase at least four internet domains on Namecheap. One of the transactions cost approximately $20,000, paid for using the platform’s finances. The name registered to the Namecheap account was Rui-Siang Lin, again directly connecting him to the dark web marketplace.