We’ll discuss theories as to why, and other darknet market trends here. Behrouz Parsarad (Parsarad), residing in Iran, was the sole administrator of Nemesis. In this capacity, Parsarad established Nemesis and held full control over the marketplace and its virtual currency wallets. Parsarad enriched himself from fees he charged users of Nemesis with every transaction, pocketing what OFAC estimates to be millions of dollars over the course of the marketplace’s existence. In addition to providing criminals with a platform to conduct transactions, Parsarad laundered virtual currencies for narcotics traffickers and cybercriminals active on Nemesis. Launched in 2020, Cypher Marketplace sells fraudulent documents, stolen credit cards, fake IDs, and malware.

Tampa, Florida – United States Attorney Gregory W. Kehoe announces that Terrance Bradford (46, Tampa) has pleaded guilty to eight counts of wire fraud. In some authoritarian states, accessing Tor nodes can flag you for surveillance. Even platforms like Netflix, which require paid access, are technically part of the Deep Web. Additionally, the DOJ recently seized over $24 million in cryptocurrency from a Russian national accused of developing and operating the Qakbot malware. After Europol shuttered Archetyp Market on June 16, many users migrated to Abacus, driving the platform’s sales to a June high of $6.3 million.
Hydra Market
After AlphaBay closed, Abacus Market took its place as the world’s largest underground darknet marketplaces. Abacus Market quickly rose to prominence by attracting former AlphaBay users and providing a comprehensive platform for a wide range of illicit activities. In response, cybersecurity professionals, law enforcement agencies, and policymakers around the world are working to combat this growing menace.

Keep Your Identity Hidden
When factoring in Monero, the untraceable cryptocurrency used for most of the platform’s trades, total sales are believed to have exceeded $300 million. You face significant risks when using dark markets, including scams where vendors take payment without delivering goods. There’s high exposure to malware and cybersecurity threats that can steal your personal information. Law enforcement agencies actively monitor these markets and can track users despite anonymity measures. You risk legal consequences if caught participating in illegal transactions. Financial fraud is common, and you have no recourse if transactions go wrong since these markets operate outside legal frameworks.
- Similarly, single vendor shop revenue fell concurrently with the recovery of traditional darknet markets from around June through end of year.
- The technology behind the darknet is actively maintained and continues to evolve.
- With it, they can spy on people, steal their sensitive data, or secretly control their devices.
- Abacus launched in September 2021 as ‘Alphabet Market,’ and gradually increased its popularity, especially as the number of other markets on the dark web dwindled, mostly as a result of law enforcement actions.
Best Dark Web Websites: Video

Today, darknets are populated by a vast array of users, ranging from privacy-conscious individuals to cybercriminals, hacktivists, and nation-state actors. These hidden networks provide a platform for illegal activities that include the sale of stolen data, hacking tools, weapons, counterfeit currency, and narcotics. Dark markets, often accessed through specialized marketplaces within darknets, are breeding grounds for underground economies, where users can engage in transactions while evading law enforcement and ethical oversight. Much like with drug sales, a similar pattern of task differentiation emerged among darknet markets providing cybercriminal services. In the chart below, we see that the DNM Aggregator emerged as the clear leader among fraud shops enabling cybercrime, and Exploit.in and Kraken Market almost equally sold tools used to facilitate ransomware attacks. As for cybercriminal administration, the category includes inflows from ransomware affiliate wallets.

Market Features
The operation built upon the successes of previous years’ efforts, which saw the takedown of darknet infrastructure from Nemesis, Tor2Door, Bohemia, and Kingdom Markets. These prior actions provided invaluable investigative leads and evidence for law enforcement agencies worldwide. “Exit scams occur when operators of marketplaces vanish with funds held in escrow,” TRM Labs explained, adding that Abacus’ sudden disappearance and lack of communication fits this pattern.

Combating Transnational Crime
Secret Service’s Frankfurt Resident Office; and Philip Russell, Acting Special Agent in Charge of the FBI Albuquerque Field Office, made the announcement. Officers also recovered an assortment of electronic devices and an AR-15 firearm. The laptop was set up to use an operating system designed to access the darknet and protect against surveillance. A Chinese national was sentenced today to four years in prison and three years of supervised release for writing and deploying malicious code on his then-employer’s network.
Security And Anonymity Features
Kraken Market also captured the largest share of transfers potentially sent for the purpose of obfuscating funds, as well as buying illegal products. In addition to that activity, markets like these host vendors that advertise their own cashout or swapping services, resulting in tens of millions of dollars in laundered funds. Cybercrime enablement represents flows from ransomware, stolen funds, malware, or fraud shops to darknet markets. Launched after the takedown of AlphaBay in 2021, Abacus Market has rapidly risen to prominence.
Besides this, it supports wallet-less transactions and accepts payments through Bitcoins, Litecoin, Monero, and Zcash. However, you must wait some time to reassess this marketplace because it’s been shut down. It issued a press release revealing that, from December 2021, the website won’t be functional anymore. The website allows visitors to view all the goods and services on display before they buy something.

To prevent the users from DDoS attacks, it provides personal marketplace domains to high-volume buyers and sellers. Moreover, this shop provides detailed statistics about each user profile on the platform, giving users a better idea about the vendors for the buyers and vice versa. This marketplace accepts payments via Monero but also supports the Escrow system. On March 20, 2024, U.S., German, and Lithuanian law enforcement agencies seized Nemesis’ servers in a joint operation. Since the takedown of Nemesis, Parsarad has discussed setting up a new darknet marketplace to take the place of Nemesis with vendors that were once active on the marketplace. Today’s action, taken pursuant to Executive Order (E.O.) 14059, which targets proliferators of narcotics and their means of production, underscores the United States’ commitment to combatting all means of supplying narcotics to the United States.
While darknet markets have largely recovered after Hydra’s closure and fraud shops have not, single vendor shops showed a different pattern. Single vendor shops are standalone shops set up by individual drug vendors who have typically gathered a large customer base on a larger, traditional darknet market. Setting up a single vendor shop allows those vendors to save on fees that would ordinarily go to the administrators of a traditional darknet market. Tor2door’s been a standout since 2020—over 20,000 listings and a custom-built site that’s not some cookie-cutter junk. They take BTC and Monero, with multi-signature escrow and global shipping—vendors swear by it, and I’ve snagged rare stuff (think DMT or niche scripts) without a hitch.
Cybercrime Services
In Grand Theft Auto Online, players who purchase warehouses and garages for illicit cargo and stolen cars can buy/steal and sell them through trade on the “SecuroServ” syndicate website. After the Biker DLC, players can now purchase buildings for illegal drugs and counterfeit products manufacture, and distribute them through a darknet website called “The Open Road” where law enforcement cannot be notified of the player’s trade. In 2025, darknet marketplaces primarily accept Monero (XMR) and Bitcoin (BTC). Privacy-focused operators are shifting to Monero due to its default anonymity, compared to Bitcoin’s transparent ledger Darknet markets see BTC inflow drop to $2B. You can use dark web monitoring tools, such as NordVPN’s Dark Web Monitor, to check if your data has been leaked. These tools scan dark web forums and marketplaces for any signs of your compromised credentials.