The operational strategies of Incognito Market borrowed heavily from normal online marketplaces. It incorporated features like branding, advertising banners, and even customer support to foster a “seamless” user experience. Each product listing was posted by an independent vendor, complete with the vendor’s username, shipping origin, accepted destinations, and customer reviews.
Incognito: The Darknet Market That Stole Everyone’s Money, Then Started Blackmailing Dealers
District Judge Colleen McMahon and is scheduled to be sentenced on March 27, 2025. Lin was arrested at John F. Kennedy International Airport on May 18 and was presented in Manhattan federal court before U.S. A federal district court judge will determine any sentence after considering the U.S. One poignant trend is the increasing involvement of international law enforcement and harsher legal consequences, as evidenced by Incognito’s case.
On 28th February, a few Incognito Market vendors reported missing withdraws. 6 days later, on 6th March, vendors were locked out of crucial market features and missing all withdraws. On 9th March, Incognito Market started to extort vendors and buyers, asking for payments in a range between $100 – $20.000 in accordance to the level of vendor market’s.
Incognito Market Darknet
This shows how vulnerable dark web users really are, even if they think they are safe. It’s a warning to anyone who believes their anonymity on such sites is foolproof, especially when the site operator can be the biggest threat. Department of Justice announced the results of Operation RapTor—an unprecedented international crackdown on darknet narcotics trafficking.
The administration personnel employ end-to-end encrypted communication and are subject to professional standards in their communications. Incognito Market says it plans to publish the entire dump of 557,000 orders and 862,000 cryptocurrency transaction IDs at the end of May. Attorney for the Southern District of New York, the FBI’s New York and Cincinnati field offices, the Drug Enforcement Administration, the U.S.
Reddit Darknet Market Noobs
For weeks, there had been rumours of selective scamming on Incognito with many users reportedly unable to withdraw funds. The marketplace largely disabled Bitcoin withdrawals on February 19th and then prevented XMR withdrawals on March 4th, with the captcha tool ceasing to function. It makes financial sense to target vendors first, as – of course – drug trafficking can be very lucrative.
Buyers and sellers used wallets controlled either directly or through third-party mixers and exchanges. While Monero obscures transaction details, Bitcoin’s traceable blockchain provided law enforcement with critical leads, particularly at the point of off-ramp—when vendors converted crypto into fiat or moved assets through centralized exchanges. At that time, the project administration threatened to publish a complete dump of 557,000 orders and 862,000 hashes of cryptocurrency transactions by the end of May. They understood that the administrators had already committed an exit scam, as they could not withdraw their money. The anonymity of the Incognito Market owner is a common occurence amongst the darknet marketplace community. Successful marketplaces prefer strict anonymity to protect administrators from prosecutions.
He Trained Cops To Fight Crypto Crime—and Allegedly Ran A $100M Dark-Web Drug Market
Credible reporting from the referenced agencies, in addition to contributions from ATF; Army CID; CBP; Department of Treasury’s FinCEN and Office of Foreign Assets Control; and NCIS enabled domestic law enforcement actions in support of Operation RapTOR. Local, state, and other federal agencies also contributed to investigations through task force participation and regional partnerships. Vendors post listings for products ranging from digital goods, fake documents, drugs, weapons, hacking services, and more.
“This arrest underscores the dedicated, ongoing efforts of law enforcement to identify and dismantle illicit drug networks operating from every shadowy recess of the marketplace,” NYPD Commissioner Edward A. Caban said in a statement. A 23-year-old man from Taiwan has been arrested on charges of selling at least $100 million worth of illegal drugs online through a site on the dark web known as the “Incognito Market.” By exploiting a vulnerability in the market’s cryptocurrency ‘bank’ system, they were able to trace several key transactions back to a wallet linked directly to Rui-Siang Lin.
Data Sheets
As described by IRS Criminal Investigation Chief Guy Ficco, investigators “cracked the code of so-called ‘safe spaces’” by targeting these friction points. On other platforms, such as OpenSea, Lin sells NFTs with basketball players, and his collections appear to be up to 37 NFTs. In October 2021, the defendant also gave a YouTube interview explaining how his anti-DDoS tool “PoW Shield” worked for Pentester Academy TV, demonstrating his technical skills. Rui-Siang Lin is a 23-year-old developer who describes himself on LinkedIn as a “crypto enthusiast and developer” from Taiwan. He claims to be an employee of Taiwan’s Ministry of Foreign Affairs, working as a “diplomatic specialist” in the technical section of the Taiwanese embassy in St Lucia.
Decoding Incognito Exit Scam
Buyers are able to browse the listings, engage in communication with the seller, and purchase items through an encrypted payment system. Transactions are designed to protect the identities of both parties involved. The operator of Incognito revealed the scale of information at risk, including a comprehensive dump of 557,000 orders and 862,000 cryptocurrency transaction IDs. The extortion note implies that the users’ information included in this dump depends entirely on their actions. Lin understood that true security required multiple layers of protection. He employed a combination of Virtual Private Networks (VPNs), end-to-end encryption, and advanced cryptographic protocols to secure every aspect of Incognito.
Even if one of his posts suggests an affinity with the current regime, HUMINT recruitment operations are only sometimes straightforward. Based on a public analysis made by researchers on January 9, 2024, the marketplace had 2,144 users, 237 sellers, 1,102 products, and 1,565 total orders. Lin’s GitHub account describes him as a “backend and blockchain engineer, Monero enthusiast.” This GitHub account has approximately 44 publicly available software coding projects. His preferred programming language is JavaScript, followed by HTML and TypeScript. He has contributed 1,741 times on the platform, and his main projects are related to blockchains, cryptocurrency, and network security.
Monero’s privacy features in particular obscured sender, receiver, and transaction amounts, posing challenges to investigators tracing flows. One of the most high-profile targets of Operation RapTor—the largest coordinated global crackdown on darknet drug trafficking to date—was Incognito Market, a dark web narcotics marketplace that operated with remarkable scale, anonymity, and apparent impunity. According to TRM Labs, Incognito launched in October 2020 and remained active until March 2024.
- Based on a public analysis made by researchers on January 9, 2024, the marketplace had 2,144 users, 237 sellers, 1,102 products, and 1,565 total orders.
- Compared to other marketplaces, it offered innovative and a much more user-friendly interface.
- The .gov means it’s official.Federal government websites often end in .gov or .mil.
- According to the investigation, Incognito Market was an online narcotics bazaar that existed on the dark web.
Thoughts On “Incognito Darknet Market Mass-Extorts Buyers, Sellers”
His colleagues and government employers presumably had no idea of his clandestine activities. For someone so young, Lin handled high-stakes operations with remarkable skill – Incognito’s growth attests to that. Yet, the strange contradictions in his behavior suggest an internal conflict. On one hand, he profited from a trade causing real harm (overdose deaths from fentanyl-laced pills sold on Incognito were very possible, and indeed the site dealt in those). On the other hand, he engaged with law enforcement and industry in fighting crypto-crime, perhaps rationalizing his actions or hedging his bets.
This is the story of how Rui-Siang Lin, aledgely also known as ‘Pharaoh,’ built the Incognito Market into a $100 million empire—and how it all fell apart. Stay with me as we delve into the rise and fall of Incognito Market, from its inception to its inevitable collapse, and the intricate web of technology and greed that fueled it. Incognito has suffered cryptocurrency withdrawal and deposit instability for weeks now. Centralization is dangerous in any community but on Tor it carries a heavier weight. When the admin of a site illegal in many jurisdictions runs any other sites, they all become vulnerable to government takedown.
After witnessing the extortion made by Incognito, Ninja & Trojan decided to DDOS mirrors with over 2,000 cores per mirror. This resulted in all the mirrors to appear offline so that others wouldn’t fall for the extortion. At that moment, Pharoah tried to disconnect all their mirrors as their front servers couldn’t handle it. The DDOS has been heavily effective due to Pharoah prioritizing low-end specifications rather than 1 massive server per mirror, or high end bandwidth with internal port speed. Vendors paid five percent of the purchase price of every sale to “Incognito Market,” providing Lin with millions of dollars of profits, the Justice Department said. Hundreds of pounds of cocaine, methamphetamines and other drugs were sold on Incognito Market since its launch in October 2020, it said.
