Opinions expressed herein are those of the authors and not necessarily those of Analytics Insight, or any of its affiliates, officers or directors. Authorities also said that any obstacles the coronavirus pandemic might have initially posed to drug trafficking had been quickly overcome, saying dealers and users had turned to the darknet when street dealing was affected by social distancing measures and lockdowns. The operation, codenamed DisrupTor, netted some $6.5 million (€5.5 million) in cash and virtual currency, as well as weapons and 500 kilos of drugs — such as cocaine, fentanyl, heroin, oxycodone and methamphetamine. Approximately €100,000 in cash was also confiscated, along with illegal online sales platforms and servers located in the United Kingdom and Finland. While the Justice Department has carried out similar investigations in the past, investigators were particularly concerned when they started seeing a surge in opioid sales on the darknet during the pandemic.
A Chainalysis report out last week claimed that such marketplaces saw profits rebound slightly last year from 2022, after generating roughly $1.7bn in cryptocurrency-based revenues. The police said late last week that Crimemarket had over 180,000 registered users and could be accessed via both the dark web and freely via the publicly accessible surface web (“clearnet”). BKA has not mentioned if the server administrators or any of the platform’s core operators were identified or arrested during the action. BKA’s announcement says investigations into Nemesis Market started in October 2022, involving German, Lithuanian, and American agencies, including the FBI, Drug Enforcement Administration (DEA), and the Internal Revenue Service Criminal Investigation (IRS-CI). A complaint filed in the District of New Jersey was unsealed today charging Thalha Jubair, a United Kingdom national, with conspiracies to commit computer fraud, wire fraud, and money laundering… Such signatures are intended to confirm that vendors still have access to their accounts and have not been arrested or compromised.
This operation was aided by non-operational supporting participation from the Financial Crimes Enforcement Network (FinCEN) and U.S. Local, state, and other federal agencies also contributed to Operation Dark HunTor investigations through task force participation and regional partnerships. Darknet vendor accounts were also identified and attributed to real individuals selling illicit goods on active marketplaces, as well as inactive Darknet marketplaces such as Dream, WallStreet, White House, DeepSea, and Dark Market. An international operation by US and European police agencies has led to the arrests of more than 170 suspected online criminals. Just seven weeks after a widely publicised, all-out assault by international investigators on darknet markets – and their supporting infrastructure of review sites and bulletin boards – the entire drug-dealing cryptomarket ecosystem is today operating just as it was before.
Immigration Enforcement Frequently Asked Questions
- The operation targeted Archetyp Market, a platform with over 600,000 users and transactions totaling at least 250 million euros, underscoring the scale and ongoing challenge of illicit drug sales facilitated by anonymizing technologies.
- “The hidden internet is no longer hidden and your anonymous activity is not anonymous, the golden age of the dark web marketplace is over,” said Europol’s Edvardas Sileris.
- The change in tactics netted a record number of arrests for the operation, beating the 150 arrested following the takedown of DarkMarket, and 179 following the takedown of Wall Street Market.
- According to the European Medicines Agency (EMCDDA), Cannozon was responsible for transactions totaling more than $5.9 million between January and March of 2020 alone.
- The Justice Department said its investigation was ongoing and investigators were still working to identify other individuals behind darknet accounts.
The site’s infrastructure, hosted in the Netherlands, was taken offline during the operation. Authorities arrested the alleged administrator, a 30-year-old German national, in Barcelona, while enforcement actions in Germany and Sweden targeted one of the site’s moderators and six of its highest-volume vendors. Today (June 16, 2025), Europol announced the successful dismantling of Archetyp Market, the longest-running darknet drug marketplace, following a sweeping international operation coordinated across six countries.
Darknet Drug Dealers Busted In Southwest Germany Raids
That sting, led by Germany’s federal criminal police (BKA) with the assistance of Dutch national police, the European agencies Eurojust and Europol, and various US agencies, took down the darknet marketplace known as Wall Street Market. Europol says evidence seized in that “akedown “provided investigators with quantitative data and materials to identify suspects behind dark web accounts used for illegal activity.” WASHINGTON (AP) — Law enforcement officials in the U.S. and Europe have arrested 150 people and seized more than $31 million in an international drug trafficking investigation stemming from sales on the darknet, the Justice Department said Tuesday. TRM’s research further documents how darknet operators attempt to stay ahead of law enforcement through pseudonymous domain registration, rapid rebranding after takedowns, and the laundering of proceeds through high-risk exchanges. In the case of Nemesis Market — another platform covered in TRM’s reporting — US authorities sanctioned an Iranian national linked to more than USD two million in cryptocurrency transactions involving narcotics, stolen data, and illicit services. That case, like Archetyp, demonstrates how darknet infrastructure is often transnational, technically sophisticated, and deeply intertwined with the global financial system.
Government Shared Services
But it is hackers demanding ransom money, not police, that’s the main worry for those operating DNMs, says Patrick Shortis. “The biggest source of disruption to markets is currently coming from the ongoing distributed denial of service DDOS attacks that have knocked markets and forums offline intermittently over the last few months,” he says. DF claims they are safe from investigation as the site’s business model differs from that of DeepDotWeb, which took affiliate sales fees in return for keeping lists of URLs updated. Dutch authorities had been secretly running the site for more than a month after they seized its servers in the Netherlands, Germany and Lithuania.
While the method has its limitations, HugBunter argued that failure to provide a cryptographic signature alongside continued account activity could be telling. HugBunter, the anonymous user who founded the forum in 2018, asked “market admins, vendors, and other service operators” to provide “proof-of-life” by signing posts with what’s known as a PGP encrypted signature, a form of cryptographic proof. The dark web is a collection of sites that are not indexed by search engines and can only be viewed with specialized web browsers designed to provide privacy and anonymity. Many sites specialize in selling illegal goods that are not readily available on the public internet.
German Police Take Down Kingdom Market Dark Web Marketplace
In addition, the United States and international law enforcement partners made 270 arrests of dark web vendors, buyers, and administrators in Austria, Brazil, France, Germany, Netherlands, South Korea, Spain, Switzerland, United Kingdom, and the United States. Nemesis was established in 2021 and operated as a criminal marketplace on the darknet, an encrypted network within the Internet that can only be accessed with special anonymity-enhancing browsers. Drug traffickers active on Nemesis sold fentanyl around the world, both on its own and surreptitiously laced into other drugs.
Shuttered Dark Web Marketplaces
It also uses global law enforcement networks, like Europol, to combat cybercrime threats. In May, German police shut down Wall Street Market, a thriving marketplace that had more than 63,000 deals and 5,400 sellers, with over 1 million users worldwide. It was a resource-heavy operation, involving hundreds of separate investigations by five EU and US agencies. A few weeks before, Dream – the longest running and largest market – was closed under mysterious circumstances. Maximillian S, who cannot be identified after being tried as minor, was found guilty and sentenced to seven years in juvenile detention for obtaining $A6.7 million in bitcoin after selling 914kg worth of illegal drugs over a darknet marketplace known as Shiny Flakes.
The purpose of these marketplaces on the Tor network is to provide users and providers of darknet services with anonymity and security, respectively. Transactions are carried out with the help of a cryptocurrency such as Bitcoin and dark wallets, which protect both the buyer and the seller. Darknet markets, which are also known as cryptomarkets, offer a platform for the trading of a wide variety of illegal goods and services in a setting that is largely anonymous. It is estimated that approximately two-thirds of the products and services offered on darknet markets are related to the sale of illicit drugs. When cops shut that site, they knew users would migrate to any service they could – and many fed to Hansa market, which the cops had seized and allowed to continue operating so they could capture user data. THE HAGUE, Netherlands (AP) — Authorities in the U.S. and Europe arrested nearly 300 people, confiscated over $53 million, and seized a dark web marketplace as part of an international crackdown on drug trafficking that officials say was the largest operation of its kind.
Police Thought They Beat The Darknet Drug Markets – They Didn’t
The BKA also said 20 additional properties were searched, mainly targeting Archtetyp moderators and vendors. In total, police seized 47 smartphones, 45 computers, as well as narcotics and other assets, which will be analyzed for further investigative leads. The video offered suggestions that multiple arrests were made at all levels of the Archetyp hierarchy, and although Europol’s official announcement only confirmed one was made – the 30-year-old German – the BKA said seven people were arrested in Sweden. The suspected admin of the operations owns property in Hanover and Bucharest too, all of which were searched by domestic law enforcement. Apart from the dark web markets that are operating online today, some raided platforms influenced many markets.
Which Markets Operate In Germany?
Following the DarkMarket takedown in January 2021, U.S. and international law enforcement agencies identified Darknet drug vendors and buyers, resulting in a series of complementary, but separate, law enforcement investigations. Prior to, but in support of Operation Dark HunTor, Italian authorities also shut down the DeepSea and Berlusconi dark web marketplaces which boasted over 40,000 advertisements of illegal products. Four alleged administrators were arrested, and €3.6 million in cryptocurrencies were seized in coordinated U.S.-Italian operations. Department of the Treasury’s Office of Foreign Assets Control (OFAC) sanctioned Iran-based Behrouz Parsarad (Parsarad), the sole administrator of Nemesis, an online darknet marketplace, which was subject of an international law enforcement operation and was taken down in 2024. Prior to its takedown by law enforcement, narcotics traffickers and cybercriminals openly traded in illegal drugs and services on Nemesis, which was designed with built-in money laundering features. Nemesis had over 30,000 active users and 1,000 vendors and facilitated the sale of nearly $30 million worth of drugs around the world between 2021 and 2024, including to the United States.
Companies like CrowdStrike, IBM X-Force, DarkOwl, and Recorded Future have indexed hundreds of millions of pages to help businesses detect potential threats. The deep web is a part of the internet that isn’t indexed by search engines, like your email accounts or online banking. On the other hand, the dark web is a small subnet of the deep web that requires special software like Tor to access (it’s where most of the anonymous communication and illicit platforms exist). Europol said the operation seized more than €50.8 million ($53.4 million) in cash and virtual currencies, as well as 850kg of drugs — including over 258 kg of amphetamines, 43kg of cocaine, 43kg of MDMA and over 10 kg of LSD and ecstasy pills — alongside 117 firearms. Europol’s Deputy Executive Director of Operations, Jean-Philippe Lecouffe, called the takedown a decisive strike against a platform that had become a critical node in the global supply chain for some of the world’s most dangerous substances. It seized 50.8 million euros ($53.4 million) in cash and virtual currencies, 850 kilograms of drugs, and 117 firearms were seized in a series of raids in several countries.
Data Sheets
The takedown of Archetyp Market is a clear signal that law enforcement agencies, supported by advanced blockchain intelligence, can disrupt even the most entrenched illicit platforms. But the resilience and evolution of these networks underscore the need for continued cross-border collaboration, technical innovation, and real-time monitoring to stay ahead of the next generation of darknet threats. “Platinum45” also manufactured Adderall tablets and advertised the sale of up to 1 kilogram quantities of methamphetamine on WSM.
Building on the successes of prior years’ operations, Operation RapTOR furthered global efforts to dismantle darknet marketplaces, resulting in the seizure of darknet infrastructure from Nemesis, Tor2Door, Bohemia, and Kingdom Markets. These actions provided investigators across the globe with invaluable leads and evidence, strengthening the ongoing fight against cybercrime and illicit activities on the darknet. Archetyp Market had operated for over five years, amassing more than 600,000 registered users and processing at least EUR 250 million in transactions. With more than 17,000 product listings, the platform served as a hub for narcotics trafficking, including the sale of cocaine, MDMA, amphetamines, and particularly dangerous synthetic opioids such as fentanyl — making it one of the few major markets to openly permit such listings.
It used to be the case that discussions on stealth and packaging were available to all participants on market forums; however, many modern market forums require a vendor account to gain access to these topics. Both stealth and packaging are essential aspects of delivery, and they frequently have an effect on how customers rate a vendor. The term “stealth” refers to the method by which the product is disguised to look like a genuine delivery item, particularly with regard to x-ray machines used by the postal service. Some dealers will send drugs or contraband concealed within DVD cases, the battery compartments of torches, or even the spines of books in an effort to conceal them.
