Its history—$600M trades pre-2017 bust, relaunched in 2021, and 25% listing growth in 2025—shows resilience. Alphabay’s top-tier status stems from its scale, reliability, and advanced features, though peak-hour lag slightly tempers its rank. ASAP’s payment system scores a 94% success rate, clearing 90% of disputes in 36 hours—solid for its size.
With these stolen credentials, the suspects purchased ghost gun parts and tools from a variety of legitimate websites, which they used to build ghost guns with a 3D printer, and sell for cash. A Manhattan district attorney successfully used this evidence to bring charges against one of the suspects. Conversely, some fraud shops saw an increase in activity and higher revenues on-chain. The chart below shows fraud shops that performed well after the UAPS takedown, indicating that the customer migration was swift, and favored longstanding, trusted fraud shops like Vclub and Bankomat.
What Do People Sell Or Exchange On Darknet Markets?
First, we propose an algorithm that categorizes users either as buyers or sellers, and show that a large fraction of the trading volume is concentrated in a small group of elite market participants. We find that the dominance of markets is reflected in trading properties of buyers and sellers. Then, we investigate both market star-graphs and user-to-user networks, and highlight the importance of a new class of users, namely ‘multihomers’, who operate on multiple marketplaces concurrently. Specifically, we show how the networks of multihomers and seller-to-seller interactions can shed light on the resilience of the dark market ecosystem against external shocks.
Trading Tips
They offer anonymity to their users by using and developing specialized tools. DWMs are accessed through darknet browsers supporting the onion routing protocol (e.g., Tor), which provides anonymous communication connections35. Additionally, transactions are made with cryptocurrencies, mostly Bitcoin, which also provide anonymity to the transaction parties6,36. While the Bitcoin blockchain is publicly available on Bitcoin core37 or other third-party APIs such as Blockchain.com38, a market or a user can generate a new address for each transaction. To track the transactions of markets and users as entities, the data need to be pre-processed in order to map groups of addresses into entities. Previous analyses of U2U trading relationships around DWMs include only two studies21,22 based on unstructured21 or semi-structured22 interviews of 17 users of Silk Road and 13 sellers on various DWMs, respectively.

The Direct Payment Process
Tor2door’s payment system hits a 93% success rate, sorting 87% of disputes in 48 hours—steady for its size, though a bit below top names like Alphabay. Its Tor routing holds a 92% uptime, with rare breaks tied to server updates, not attacks, showing a proactive stance. BTC runs 65% of trades for speed, while XMR’s privacy hits 35%, blending efficiency and cover. The design is tuned for performance, with quick filters (category, price, rating), seller stats at 4.5/5 from 35,000+ reviews, and a trade system that wraps 85% of deals in minutes—one of the fastest around. Alphabay’s payment system sets a high bar with a 99% success rate—the best we’ve seen—sorting 95% of disputes in 24 hours with a 50+ moderation team.
Hacking Services

After all, the immutable ledger in the Bitcoin blockchain had considerably aided law enforcement to track the illegal transactions of Silk Road. Thus, in a way, the arrest helped to disconnect the association between Bitcoin and crime. Cryptocurrencies offer financial innovation and decentralization but also pose risks related to money laundering, fraud, and cybercrime. The pseudonymous nature and evolving tactics of criminals make regulatory oversight challenging. Cryptocurrency provides both financial innovation and potential for criminal use, posing problems to regulators and law enforcement.
Category Deep-dive: Illicit Drug Sales Grew And Expanded Outside Of Darknet Marketplaces In 2024

The main driver of this decrease is likely due to the shutdown of Hydra Market, the world’s largest and most prominent dark web market, in April. German authorities shut down the Russian-based dark web marketplace, and the U.S. has gone further by adding hundreds of bitcoin BTC$108,495.05 wallets to a sanctions list. The rest of Chainalysis’ update is focused on providing an update as to which illicit uses of crypto have seen increases and decreases in 2022. Of note, there has been an increase in hacking and stolen funds and a decrease in scams. First, though, there are several interesting high points worth highlighting in Chainalysis’ report regarding the entirety of illicit activity that cryptocurrencies enabled.
Citrix Patches Three NetScaler Zero Days As One Sees Active Exploitation

As of this publishing, Mega currently appears to be the biggest of the five Russian language DNMs. Mega received nearly $40 million in March 2023, followed by Blacksprut with around $20 million. The unique part is that the platform offers free samples of stolen information, often to attract more customers.
- TRM has observed that these manufacturers have adapted their practices in response to intensified law enforcement efforts.
- Historically, DNMs have usually cashed out their funds at centralized exchanges (CEXs).
- This article dives deep into 2025 dark web statistics, offering a clear, data-driven view of what’s happening below the surface.
- Each product is accompanied by detailed descriptions and reviews, which greatly simplifies the selection and purchase process.
- Moreover, several qualitative, interview-based studies have shown that DWM users form direct trading relationships with other users, starting user-to-user (U2U) pairs that bypass the intermediary role of DWMs21,22.
In light of this, we have chosen the parameters conservatively, obtaining estimates for the number of sellers that are in general smaller than the ones produced by other methods. Second, our approach does not explicitly classify buyers, which are entities that were not classified as sellers. There is a gray zone in which some sellers and buyers may not be easily distinguishable in transaction networks. For instance, there may be sellers that make a small amount of transactions, or spend more than receive, which we would classify as buyers.
Prioritize Escrow
Rated at 4.6/5 across 25,000+ reviews, these vendors maintain a 95% shipping reliability rate, though response times average 18 hours due to their niche focus. Disputes occur in 3% of transactions, with 80% resolved within 48 hours, supported by a 93% escrow success rate. Top vendors like “PharmaKing” and “MediSource” offer exclusive medications, driving Drughub’s 10% drug trade share, though its smaller pool limits variety outside pharma.
The first ever DNM — called Silk Road — was started in 2011 by U.S. citizen Ross Ulbricht. While it included some innocuous listings such as health supplements, the majority of vendors and most of the sales were related to illicit drugs. Silk Road not only aggregated thousands of drug vendors, it created a user-friendly interface that resembled a clear-net shopping website. Ulbricht was eventually arrested by US law enforcement and Silk Road was seized and taken offline. Given the darknet’s infrastructure, which is hidden behind onion routing, the darknet attracts sites whose proprietors want to remain anonymous. Each marketplace is a star-graph where the central node is the marketplace, and the leaf nodes, i.e., the first-neighbors, are the marketplace users.
It scans darknet marketplaces and hacker forums to alert you instantly if anything shows up. This way, you can catch any leaks and stop them before they cause bigger problems. After that, many other marketplaces kept trying to take its place and become the top dark web market. However, legal bodies and law enforcement operations made this impossible and shut down these illegal communities. Genesis Market and BidenCash, two top dark web marketplaces, were also shut down in 2023 and 2025, respectively. If you think the Dark web marketplaces are just online shops, you’re wrong — these sites are the actual weapon stores for criminals.