Silk Road was shut down in 2013 by the FBI and its creator, Ross Ulbricht, got two life sentences. Almost immediately, former administrators of Silk Road built Silk Road 2.0. In 2014, in the second year of operation, that was also shut down by law enforcement. Successor after successor has since popped up, with drug-related darknet marketplaces surviving an average of 232 days before their shutdown and inevitable reincarnation.
Category Deep-dive: Illicit Drug Sales Grew And Expanded Outside Of Darknet Marketplaces In 2024
Notably, a dominating number of actors moved from Hydra to other marketplaces, and started leveraging alternative digital channels – customized mobile apps and Instant Messengers (IM) including Telegram. The drug scene in Russia is a multifaceted issue that requires nuanced, data-driven, and region-specific strategies. A one-size-fits-all approach is unlikely to address each region’s unique realities effectively. By recognizing and accounting for regional differences, policy makers can design and implement more effective strategies to combat drug use and mitigate its harms.
Drugs And The Darknet: Perspectives For Enforcement, Research And Policy
From June 11 to 13, the agency said, a series of coordinated law enforcement actions targeting the platform’s administrator, moderators, key vendors and technical infrastructure took place across Germany, the Netherlands, Romania, Spain and Sweden. Although some of these markets prohibit certain extreme content such as violence or exploitation, most operate with very few rules beyond ensuring the security and anonymity of their users. Background research tasks included learning from past drug lords, researching legal matters, studying law enforcement agency tactics and obtaining legal representation. Patterns recommended to avoid include hiring hitmen like Dread Pirate Roberts, and sharing handles for software questions on sites like Stack Exchange.
Beyond Fentanyl: TRM Report Reveals Cryptocurrency’s Role In The International Drug Precursor Market

Recent projects have scanned a variety of digital markets to gain a better knowledge of these markets’ offers, country disparities, and availability of specific substances. Interviews with merchants and consumers are a crucial part of understanding the mechanisms of the Internet market 5-8. The online illicit drug trade continued to change beyond traditional darknet marketplaces throughout 2024. TRM Labs has reported a change toward encrypted chat applications, social media platforms, and individual vendor shops. This decentralization trend has now spread to the Russian-language ecosystem as well. The shift to digital trade was accelerated by the COVID-19 pandemic, as lockdowns pushed many consumers and vendors towards online platforms.

Market Features
To deal with these issues, Silk Road, as well as many darknet marketplaces later, used reviews, ratings and escrow mechanisms together with the centralized administration of the marketplace that could set and enforce rules on the platform. It and other darknet marketplaces organized internal controls to ensure that market transactions could be quick and efficient even when operating in the outlawed space. Throughout 2022, we observed a negative relationship between funds sent to regular darknet markets and those sent to single vendor shops. For instance, we see single vendor shop revenue spike beginning around March, around the same time traditional darknet market revenue began to fall.

A Synthetic Age: The Evolution Of Methamphetamine Markets In Eastern And Southern Africa
And with them come far-reaching implications for law enforcement and public safety. The generalizability is specific to Hydra and may not apply to other darknet markets or regions. Russia’s unique socioeconomic context, for instance, influences drug trade dynamics differently than in other countries.
The DHS Cyber Crimes Center (C3) combats cybercrime, online child sexual exploitation, and criminal exploitation of the internet with state-of-the-art forensic technology. The Center investigates large-scale cybercrime threats and provides expertise on cybercrime investigations to the field. It also uses global law enforcement networks, like Europol, to combat cybercrime threats. Since the demise of Wall Street and Dream, two new markets, Empire and Nightmare – which both opened over a year ago – have grown rapidly as users have migrated over from closed sites. Today, Empire has over 28,000 drug listings and Nightmare has over 60,000. In the summer of 2017, Dream market, the second-biggest at that time, had just 48,000 deals.
Top 10 Dark Web Markets

Founded in 2014, BriansClub remains one of the oldest and most infamous dark web markets for stolen credit cards, fullz (complete identity kits), and dumps. More than six years after the demise of Silk Road, the world’s first major drug cryptomarket, the dark web is still home to a thriving trade in illicit drugs. Regardless, the DNM criminal economy continues to proliferate unimpeded by the intervention of law enforcement. Here is a posting from the 6th ranked vendor on RuTor, ‘Crystal-Mafia’ that shows what the drug looks like. Attacks on drug marketplaces may be interpreted as a possible fight for certain influence in that niche in Dark Web and likely arranged by competing powers representing different groups involved in drug trafficking internationally.
The Continuing Battle For Darknet Market Dominance
WASHINGTON – Jacob Blair, 27, of Aliquippa, Pa., was sentenced today in U.S. District Court to 180 months in federal prison for his role in a drug conspiracy that distributed a wide variety of narcotics, including large amounts of counterfeit oxycodone pills containing fentanyl and counterfeit Adderall pills containing methamphetamine. Blair sold and distributed the narcotics on the darknet marketplace Tor2Door and other darknet markets. There is direct evidence that two of the three markets in question offer money laundering services. The darknet does have some legitimate uses including private communication and the protecting of confidential resources.
- Notably, the growing tensions between Solaris and WayWay have also been heating up as claims of possible money theft from Solaris appear the same month (December 2022), which later have been disputed by Solaris Administrators and interpreted as “geopolitical” and “fake”.
- It is expected new marketplaces will emerge in 2023 (like the recently launched Kraken) to expand influence.
- On the Reddit-style dark web forum known as “Dread,” users are trying to determine which vendors were compromised by the operation, Straight Arrow News found.
- (He declined to share detailed numbers, which he says are part of a still-unpublished study.) “What happened in 2017 was very unique, that one-two punch,” Christin says.
In the next step, we have meticulously gathered official data on Russian regions from the Ministry of Health of Russia, police reports, court reports, and the prison system 27. Figure 1 presents the comprehensive cycle of collecting, modifying, and analyzing data at every step, ensuring the utmost accuracy and reliability. The pathway of the data collection, cleaning, transforming, classifying by drug type, and disaggregating by the regions is presented in Figure 1. Ultimately, the fight against crypto crime requires a proactive, collaborative approach. Regulatory bodies, law enforcement agencies, and private sector partners must continue to adapt, innovate, and cooperate to outpace increasingly sophisticated threat actors.
Research Reports Download Report
Incredibly disturbing things Spotlight documented included ads for the sale of human organs, murder-for-hire, even tickets to watch torture. Jacob Lott is the long-time owner of Tampa Computer Doctors and has served as a “white-hat hacker,” who legally hacks systems to find vulnerabilities and improve cybersecurity for businesses. Despite efforts by law enforcement to take down bad actors who lurk there, many continue to thrive. Spotlight on America National Investigative Correspondent Angie Moreschi takes a closer look at why it’s so hard to stop them. In recent months the National Crime Agency, the organisation tasked with policing the dark net in the UK, has helped shut down several large dark net marketplaces.
The earliest modern online anonymous markets, often referred to as darknet markets or cryptomarkets, appeared in early 2010, and evolved from an encrypted email service and migrated on to a Tor (The Onion Router) anonymity network to guarantee better anonymity to users. The first darknet market of notoriety was Silk Road, which opened at the end of January 2011 and was seized by the US Federal Bureau of Investigation (FBI) in October 2013 (DEA, 2013). Silk Road 2.0 was launched soon after the original Silk Road was seized and since that time there has been a proliferation of darknet markets.. Dark web markets have exploded in scale and reach in 2025, becoming the most dangerous hubs for trading drugs, stolen data, and hacking tools.

- The dark web isn’t going away, so you need to understand the risks and take necessary precautions to stay safe online.
- “The absence of a monopolist with simple and understandable rules will lead to a deterioration in the quality of the goods.
- At the same time, the study’s findings represent a specific time frame and may not capture evolving trends in drug use and market dynamics.
- By our reckoning, 69% of the Russian population (about 100 million people) lived in cities, towns and parts of the countryside where Hydra-affiliated vendors operated locally.
- The US Drug Enforcement Administration has warned that because dealers are “no longer confined to street corners and the dark web,” social media users’ posts and inboxes can be peppered by dealers seeking to purvey these addictive and, when misused, harmful drugs.
According to Check Point Research, schools and other educational institutions were the most targeted sectors, with attacks rising by 43% compared to 2021. The same report showed that cyberattacks on the healthcare industry grew by 86% in 2022 compared to the previous year. This study would not have been possible without the support of the Higher School of Economics (HSE) Campus in Saint Petersburg (HSE University). And Grace A. Dow College of Health Professions provided academic and financial support, including publication and travel fees.
As is typical on the darknet, many state that any listings of weapons for sale on Tor are scams. There is violence and corruption at every point in the supply chain as drugs move from producers to users. It might shorten the length of the chain, but as demand goes up, supply usually follows. Freshtools was established in 2019 and offers various stolen credentials, accounts, and host protocols like RDP. It is considered a go-to site for malware purchasing, providing keyloggers, trojans, and other Malware as a Service products. Its focus on financial fraud and high-value transactions has attracted a dedicated user base, contributing to its growing reputation and market value.
The flow of weapons from the United States to organized crime groups (as the indictment above indicates) such as CJNG can then be leveraged by criminal groups to trade for drugs in Colombia, which will travel to Mexico and the United States. Thus, weapons from the United States typically end up in Mexico and Colombia and Colombian drugs find their way back to the United States. This is the type of exploitation and human trafficking commonly seen on the darknet.