Increasingly, the FBI is working to disrupt major criminal online operations such as Monopoly Marketplace or Hive instead of waiting to make arrests simultaneously, according to officials who spoke last week at the RSA Conference. Europol, which is based in The Hague, built its intelligence on evidence from Germany, which seized the marketplace’s “criminal infrastructure” in December 2021, the agency said. Other sites will try to boost their security and anonymity, and it’s likely more marketplaces will sprout up, potentially using even more innovative techniques to make it harder for law enforcement to find them. Police are getting better at targeting operations on the dark web – a part of the internet that is accessible only through specialised tools.
Hydra Market’s Servers, $25M In Bitcoin Seized By German Police In Dark Web Sting
“Wall Street market emerged from these ashes and was the most significant one in existence at the time. It would appear that law enforcement has followed the same pattern and that is why we are seeing arrests today.” Led by the US Federal Bureau of Investigation (FBI) and Dutch police the operation called “Cookie Monster” saw 119 suspects arrested and involved 17 countries across the world. “Our coalition of law enforcement authorities across three continents proves that we all do better when we work together,” Europol’s director Catherine De Bolle said.
What’s Next For Crypto

The cycle Christin describes—law enforcement takedowns followed by a slow but robust recovery—has played out on the dark web again and again, repeating roughly every year or two. After the late 2013 takedown of the Silk Road, the first real dark-web drug market, more than a dozen replacements rose up to fill the demand for anonymous online narcotics sales. A massive crackdown called Operation Onymous followed in late 2014, seizing a broad swath of the dark web and arresting 17 people by exploiting a vulnerability in the anonymity software Tor, which serves as the dark web’s fundamental cloaking tool. A 10-month investigation following the closure of the dark web’s largest illegal marketplace, DarkMarket, has resulted in the arrest of 150 suspected drug vendors and buyers. The Wall Street Market seizure is not the first or even most devastating law enforcement takeover of a dark web storefront. In 2017, Dutch police took control of Hansa, a booming darknet market, and the FBI shut down AlphaBay, an even larger competitor.

Police Crack Down On Europe’s ‘cocaine Pipeline’
Police also recovered 50.8 million euros ($53.4 million) in cash and virtual currency and seized 850 kilos of drugs, mainly amphetamines and opioids, Europol and the DOJ added. Darknet markets are, after all, very tiny in the grand scheme of things, the research said. “Satisfied customer, will be back,” writes one user on the product page of a meth dealer with the handle shardyshardface.
HSI is a worldwide law enforcement leader in Darknet and other cyber-related criminal investigations. The DHS Cyber Crimes Center (C3) combats cybercrime, online child sexual exploitation, and criminal exploitation of the internet with state-of-the-art forensic technology. The Center investigates large-scale cybercrime threats and provides expertise on cybercrime investigations to the field. Experience the power of The DarkBlue Intelligence Suite and get proactive in your fight against cybercrime.
Silk Road (marketplace)
The recent law enforcement operation was coordinated by Europol and the FBI, and involved police in the UK, France, Poland, Germany, Austria, Brazil, Switzerland, and the United Kingdom. Listings included offerings of prescription medication that was advertised as being authentic but was not. For example, in November 2023, an undercover law enforcement agent received several tablets that purported to be oxycodone, which were purchased on Incognito Market. Testing on those tablets revealed that they were not authentic oxycodone at all and were, in fact, fentanyl pills. After logging in with a unique username and password, users were able to search thousands of listings for narcotics of their choice.
Police Operation ‘SpecTor’ Arrests 288 Dark Web Drug Vendors And Buyers
The seized drugs include 64 kilograms (141 pounds) of fentanyl or fentanyl-laced narcotics; over 258 kilograms (569 pounds) of amphetamines; 43 kilograms (95 pounds) of cocaine; 43 kilogram (95 pounds) of MDMA; and over 10 kilograms (22 pounds) of LSD and ecstasy pills, authorities said. The operation targeting the “Monopoly Market” is the latest major takedown of sales platforms for drugs and other illicit goods on the so-called dark web, a part of the internet hosted within an encrypted network and accessible only through specialized anonymity-providing tools. What these cases, along with the dozens of arrests across Europe, have in common is that the investigations largely stem from last year’s Wall Street Market takedown. At the time, German authorities arrested the site’s alleged operators and two of its most prolific vendors.
Cypher Marketplace
Department of Justice has disclosed the names and sentences of some of the arrested individuals. The chart below shows fraud shops that performed well after the UAPS takedown, indicating that the customer migration was swift, and favored longstanding, trusted fraud shops like Vclub and Bankomat. Agents from the Federal Bureau of Investigation, the Drug Enforcement Administration, the U.S. Postal Inspection Service, the Bureau of Alcohol, Tobacco, Firearms and Explosives, and the Internal Revenue Service’s criminal investigative team were involved.
Tragically, investigators linked at least one confirmed overdose death directly to his operation. This massive undertaking stretched across four continents, with investigators working together in countries like the United States, the United Kingdom, Germany, Brazil, and South Korea. Officials announced they recovered over two metric tons of drugs, a haul that included a hefty 144 kilograms of fentanyl or fentanyl-laced substances, alongside some 180 firearms. In order to gain control of victims’ computers, the malware Genesis Market employed used a legacy Bitcoin address to determine the command-and-control (C2) server, from which cybercriminals initiated remote access to infected devices.
- Due to the novelty of these substances (and the fact that many are analogs) the true number of overdoses in Europe could be higher, as forensic drug testing may lag behind the pace of the crisis.
- Basically it’s information or documents where we say, look, we know this person in your country has done this, you may want to open an investigation.” Georges says also that there are more arrests to come.
- After the UAPS infrastructure takedown, we observed a swift decline in on-chain activity from UAPS counterparties, indicating that many fraud shops relied on this infrastructure to process customer payments.
- Dubbed Operation RapTor, authorities say the coordinated strike dismantled darknet drug networks fueling the fentanyl epidemic, marking the largest seizure to date under an initiative known as J-CODE.
- A 23-year-old man from Taiwan has been arrested on charges of selling at least $100 million worth of illegal drugs online through a site on the dark web known as the “Incognito Market.”
Unmasking The Dark Web Economy: Key Hubs And Cybersecurity Implications
The site boasted some 500,000 users and facilitated around 320,000 transactions, reports the EU’s law enforcement agency, Europol, with clientele buying and selling everything from malware and stolen credit card information, to weapons and drugs. When German authorities arrested the site’s alleged operator in January this year, they also seized valuable evidence of transactions which led to this week’s arrest of key players. The Nemesis Market was launched in 2021 as a new marketplace to purchase illegal drugs and narcotics, stolen data and credit cards, and various cybercrime services related to ransomware, phishing, and distributed denial of service (DDoS) attacks. Operation ‘SpecTor’ used the collected evidence to target high-volume vendors and buyers of darknet marketplaces who sold drugs and firearms to other users in exchange for cryptocurrency. To become an Incognito Market vendor, people were required to register with the site and pay an admission fee.

Combating Transnational Crime

Keep an eye on advancements in blockchain forensics, the evolving use of AI in detecting illicit transactions, and metrics related to darknet market activity, as these will indicate the ongoing effectiveness of global efforts to combat crypto-enabled crime. Crypto influencers and thought leaders have been quick to emphasize the distinction between legitimate cryptocurrency use and its exploitation by criminals. Many have used this opportunity to laud the increasing sophistication of blockchain analytics, which played a key role in tracking RAKS’ illicit funds. This narrative aims to counter the long-standing stereotype that cryptocurrencies are primarily tools for criminals, instead highlighting how the transparency of public ledgers can aid law enforcement. Calls for robust Anti-Money Laundering (AML) and Know Your Customer (KYC) practices are also being amplified, with leaders advocating for responsible innovation that prioritizes compliance and security. In 2023, Chainalysis discovered that some popular fraud shops rely on payment processors as a way to reduce their own costs, add efficiency to their operations, and perhaps add a layer of security to transactions.
HSI Arizona Investigation Sends 3 Darknet Fentanyl Vendors To Prison For More Than 20 Years
Many of these big markets are now engaged in cyber warfare, with vendors and operators attacking each other to assert dominance, often leading to disruptions and shutdowns. This “market cannibalization” has further destabilized the landscape, pushing vendors and buyers to seek refuge in smaller, more secure spaces. As large platforms face disruption from law enforcement action, dark web infighting, and an influx of users from Telegram, there’s a growing shift toward smaller, more specialized marketplaces. These new niche sites are focused on specific illicit goods, offering enhanced security and a more targeted environment for buyers and sellers. According to the indictment, vendors on Hydra could create accounts on the site to advertise their illegal products, and buyers could create accounts to view and purchase the vendors’ products. Hydra vendors offered a variety of illicit drugs for sale, including cocaine, methamphetamine, LSD, heroin and other opioids.
The operation was coordinated alongside Europol and resulted in the seizure of a dark-web marketplace called Monopoly Market, according to a press release from the European agency. Incognito Market, which was shut down in March, was an online dark web marketplace that allowed users to buy and sell illegal drugs anonymously, according to the Justice Department. The number of arrests and amount of money seized were the most for any international Justice Department-led drug trafficking operation, he said.
According to analysis by TRM Labs’ blockchain intelligence team focused on darknet market ecosystems, Empire Market was one of the largest Western darknet markets in operation during the relevant period. During this period deposits to darknet markets dropped significantly and no new leader emerged as vendors and buyers tended to avoid darknet markers while the dust settled. The results of that investigation were published in a report called Technical analysis of the Genesis Market. Van Well explained that his organization doesn’t typically share so much detailed technical information around investigations, but it felt imperative to provide these details to law enforcement and tech companies around the world to help them fight future cybercrimes.