Since their emergence on platforms like Tor and I2P in 2011, these marketplaces have offered a one-stop shop for buyers and sellers, facilitated by the anonymity of cryptocurrency payments. Just as Incognito built on the playbook of its predecessors, future markets will learn from RapTor. But with blockchain intelligence advancing and global partnerships strengthening, law enforcement is better positioned than ever to detect, disrupt, and dismantle these operations. The legal case against Rui-Siang Lin is being prosecuted in the Southern District of New York, a jurisdiction known for tackling high-profile cybercrime and narcotics cases. Once Lin was in custody, the indictment against him was unsealed, revealing an array of serious charges.
How The Incognito Darknet Market Works
On May 21, after online media wrote about Rui-Siang’s arrest and rumors spread throughout the darknet community, ‘MommaBear’, one of the administrators of the SuperMarket darknet marketplace, posted on Dread that the Cold Storage Escrow and Joint Pocket wallets had been emptied. A 2022 Twitter thread about Incognito posted by Eileen Ormsby, an author of several dark-web-focused books including The Darkest Web, shows how the market by that time had added features that may have helped it to catch the attention of security- and safety-conscious users. Lin has been charged with not only narcotics conspiracy and money laundering but also running a “continuing criminal enterprise,” the so-called “kingpin statute” reserved for organized crime leaders who allegedly oversaw at least five employees. Lin was arrested at New York’s John F. Kennedy Airport on Saturday and will be presented in front of a Southern District of New York (SDNY) magistrate judge today. He faces one count of engaging in a continuing criminal enterprise, one count of narcotics conspiracy, one count of money laundering, and one count of conspiracy to sell adulterated and misbranded medication.
- We can expect future market operators to study Lin’s mistakes and double-down on using privacy coins, better tumbling/mixing services, and compartmentalizing their online identities to avoid leaving a link to the clear web.
- After logging in with a unique username and password, users were able to search thousands of listings for narcotics of their choice.
- Thank you for choosing Incognito Link as your marketplace for purchasing Darknet goods.
- The St. Lucia government would later issue a press release lauding the success of Lin’s training course, which had been organized by the Taiwanese embassy, where Lin worked as a diplomatic specialist in IT.
- The website invites visitors who prioritize privacy and security while making payments on the internet.
Thoughts On “Incognito Darknet Market Mass-Extorts Buyers, Sellers”
Although the issue was resolved at that time, it was an indicator of a large-scale fully-planned extortion scam. Operation RapTOR includes law enforcement actions taken by JCODE member agencies, to include ICE HSI; the DEA; FBI; FDA-OCI; IRS-CI; and USPIS; in addition to foreign partners listed below. Credible reporting from the referenced agencies, in addition to contributions from ATF; Army CID; CBP; Department of Treasury’s FinCEN and Office of Foreign Assets Control; and NCIS enabled domestic law enforcement actions in support of Operation RapTOR. Local, state, and other federal agencies also contributed to investigations through task force participation and regional partnerships. “This arrest underscores the dedicated, ongoing efforts of law enforcement to identify and dismantle illicit drug networks operating from every shadowy recess of the marketplace,” NYPD Commissioner Edward A. Caban said in a statement.
Replit AI Agent Deletes Codebase And Lies About It — CEO Issues Apology
In addition, in November 2023, an undercover law enforcement officer received several tablets purporting to be oxycodone purchased on the Incognito Market. Tests on these tablets revealed that they were not authentic oxycodone at all but were, in fact, fentanyl pills. The first charge – sometimes called the “kingpin statute” – carries a mandatory minimum sentence of life in prison. Ross Ulbricht, the creator and operator of the now-shuttered Silk Road darknet drug marketplace, was found guilty of the same crime and sentenced to life in prison. The narcotics conspiracy charge carries a mandatory minimum sentence of 10 years and a maximum potential sentence of life in prison.
While Monero obscures transaction details, Bitcoin’s traceable blockchain provided law enforcement with critical leads, particularly at the point of off-ramp—when vendors converted crypto into fiat or moved assets through centralized exchanges. That revenue went to fund the site’s operations, including servers and what the DOJ described as “employee” salaries. All transactions were conducted in cryptocurrency—primarily Bitcoin and Monero—allowing customers and vendors to move funds without using traditional financial rails. Monero’s privacy features in particular obscured sender, receiver, and transaction amounts, posing challenges to investigators tracing flows. One of the most high-profile targets of Operation RapTor—the largest coordinated global crackdown on darknet drug trafficking to date—was Incognito Market, a dark web narcotics marketplace that operated with remarkable scale, anonymity, and apparent impunity. According to TRM Labs, Incognito launched in October 2020 and remained active until March 2024.
Top Markets
They often sell across multiple markets or operate standalone storefronts via encrypted apps like Telegram and Signal. Operational security has increased, with mandatory PGP encryption, two-factor authentication, and more frequent use of VPNs and anonymization tools. Few journalists care to cover the darknet today – much less to report on its safety issues. Dozens of markets have come and gone, and to Tor users, mainstream media doesn’t seem to care when anything happens in their neighborhood. Based on a public analysis made by researchers on January 9, 2024, the marketplace had 2,144 users, 237 sellers, 1,102 products, and 1,565 total orders.
Roblox Turns To AI-Based Age Estimation For All Communication-Ready Users
He claims to be an employee of Taiwan’s Ministry of Foreign Affairs, working as a “diplomatic specialist” in the technical section of the Taiwanese embassy in St Lucia. Previous jobs include a three-year internship at Cathay Financial Holding as a “Backend and Blockchain R&D” since November 2019. The former Incognito Market administrator claims to have graduated from National Taiwan University in June 2023. On May 18, the latest post on LinkedIn was related to the celebration of obtaining the Chainalysis Reactor Certification (CRC). A sketch of a dark-web market’s infrastructure that Lin emailed to himself eight months before allegedly creating Incognito Market, according to the DOJ. United States Attorney for the Southern District of New York, Jay Clayton, announced that ANDRIS PUKKE, a/k/a “Marc Romeo,” a/k/a “Andy Storm,” was sentenced yesterday to eight years in prison…
Role Of “Pharaoh”: The Dual Life Of Rui-Siang Lin
When Pharaoh attempted to extort his users, many panicked vendors likely reached out to trusted contacts or even law enforcement for help. The public warnings from the Dread forum admin (Hugbunter) about Incognito’s exit scam not only alerted users, but also would have confirmed to investigators that the site’s operator was in a desperate endgame. Every move Lin made in those final weeks – freezing withdrawals, bribing forum mods, threatening exposure – further implicated him and provided investigators with evidence of consciousness of guilt. It’s conceivable that undercover agents or cooperating informants were among those communications, gathering intel on Pharaoh’s state of mind and next steps. LIN was arrested at John F. Kennedy Airport on May 18, 2024, and will be presented in Manhattan federal court before U.S.
Antinalysis allowed anyone (for a fee) to input their cryptocurrency address and see how likely it was to be flagged as “dirty” or linked to illicit activity – effectively letting criminals check if their funds could be traced. Pharaoh openly advertised Antinalysis on Dread, framing it as a way to help darknet users and “those who needed complete privacy on the blockchain” evade law enforcement scrutiny. In a statement dripping with irony, he wrote that “Our goals do not lie in aiding the surveillance autocracy of state-sponsored agencies… This service is dedicated to individuals that have the need to possess complete privacy on the blockchain”. This move positioned Pharaoh as something of a champion of privacy in the eyes of darknet denizens.
Trump Makes Travis Hill Pick Official As Choice To Run FDIC
For someone so young, Lin handled high-stakes operations with remarkable skill – Incognito’s growth attests to that. On one hand, he profited from a trade causing real harm (overdose deaths from fentanyl-laced pills sold on Incognito were very possible, and indeed the site dealt in those). On the other hand, he engaged with law enforcement and industry in fighting crypto-crime, perhaps rationalizing his actions or hedging his bets. In the end, the strategies Lin used to operate Incognito Market were a blend of tech entrepreneurship, underworld cunning, and audacious deception. He leveraged his programming and crypto knowledge to build criminal infrastructure, used his position in a government role to appear above suspicion, and exploited the trust of thousands of users until greed – and perhaps fear – drove him to perform an exit scam on his own community.
In the hidden corners of the digital realm, where anonymity reigns supreme, the Incognito Darknet Market emerges as a symbol of the clandestine internet. This enigmatic platform, operating beyond the gaze of conventional search engines, offers users a glimpse into a world where transactions and interactions remain shrouded in secrecy. Security-conscious users develop systematic verification protocols for marketplace authenticity assurance. Those processes help guard against sophisticated phishing attacks targeted towards darknet marketplace users. The identity of the Incognito Market proprietor is not well known due to the anonymous nature of darknet operations.
Unraveling The Seedy Underbelly Of The Darknet Marketplaces
Building on the successes of prior years’ operations, Operation RapTOR furthered global efforts to dismantle darknet marketplaces, resulting in the seizure of darknet infrastructure from Nemesis, Tor2Door, Bohemia, and Kingdom Markets. These actions provided investigators across the globe with invaluable leads and evidence, strengthening the ongoing fight against cybercrime and illicit activities on the darknet. One trend that Incognito particularly exemplified was the increasing adoption of privacy-enhancing cryptocurrencies and features. By incorporating Monero and even providing an on-site exchange between BTC and XMR, Incognito was following a trend towards safeguarding user anonymity on the financial side.
Two new dark web services are marketing to cybercriminals who are curious to see how their various cryptocurrency holdings and transactions may be linked to known criminal activity. Dubbed “Antinalysis” and “AMLBot,” the services purport to offer a glimpse into how one’s payment activity might be flagged by law enforcement agencies and private companies that try to link suspicious cryptocurrency transactions to real people. U.S. agencies like the FBI, DEA, IRS-CI, and HSI worked alongside Europol, the U.K.’s NCA, and law enforcement from over a dozen countries. At the same time, financial enforcers like OFAC sanctioned individuals running darknet markets—including Iranian national Behrouz Parsarad of Nemesis—demonstrating how financial tools are being brought into alignment with traditional law enforcement. The court proceedings in Lin’s case showcase several legal implications for darknet market operators.
