To list on a market, a vendor may have undergone an application process via referral, proof of reputation from another market or given a cash deposit to the market. Transactions typically use Bitcoin for payment, sometimes combined with tumblers for added anonymity and PGP to secure communications between buyers and vendors from being stored on the site itself. A further PIN may be required to perform transactions, better protecting users against login credential compromise.

US Department Of The Treasury

Vendors on Hydra also offered services such as “Hacking for Hire,” “Ransomware as a Service” (“RaaS”), and a myriad of money laundering features. Given the darknet’s infrastructure, which is hidden behind onion routing, the darknet attracts sites whose proprietors want to remain anonymous. There are certain sites on the darknet (and on clearnet) which attempt to manually track and publish sites on the darknet, but common browsers do not link directly to darknet. DNMs are located on the “darknet,” which is unreachable on standard internet browsers like Chrome, Firefox, or Safari because the darknet is unindexed. This can lead to a biased view of the research landscape, as papers not included in the database will not be included in the analysis. These databases may include only some relevant papers, particularly those published in less well-known or less prestigious journals or languages other than English .
Australia Emerges As A Leader In The Global Darknet Drugs Trade

The references to the primary data sources are available in the table “Russian Drug Use Disorders Database” . We carefully considered the data structure and conducted spatial analysis to ensure a robust analysis. While Hydra specified a category for each listing, we decided to further categorize all listings into 5 categories, aligning with the categorization offered by the Global Burden of Disease study. Thus, we could estimate the dynamics of market scene changes during a relatively extended period. The data collection and analysis steps are presented on the flowchart in Figure 1 and explained below. Figure 1 presents the comprehensive cycle of collecting, modifying, and analyzing data at every step, ensuring the utmost accuracy and reliability.
Drug traffickers active on Nemesis sold fentanyl around the world, both on its own and surreptitiously laced into other drugs. The Justice Department established the FBI-led JCODE team to lead and coordinate government efforts to detect, disrupt, and dismantle major criminal enterprises reliant on the darknet for trafficking opioids and other illicit narcotics, along with identifying and dismantling their supply chains. According to court documents and statements made in court, these three prolific darknet vendors were collectively responsible for fulfilling over 13,000 drug orders shipped throughout the United States, ranging in size from user quantities, e.g., 5 pills, to “reseller” quantities, e.g., 10,000 pills. Joshua Vasquez, Joseph Vasquez, and Roman conspired to sell counterfeit Adderall containing methamphetamine on darknet markets such as Bohemia and Tor2Door.
- Credible reporting from the referenced agencies, in addition to contributions from ATF; Army CID; CBP; Department of Treasury’s FinCEN and Office of Foreign Assets Control; and NCIS enabled domestic law enforcement actions in support of Operation RapTOR.
- Considering the COVID-19 restrictions, the illicit nature of the studied substances, and their effects on people's health and well-being, we discovered all the proposed questions in this research.
- The progress made in disrupting illicit networks demonstrates the impact of collective action, but sustained vigilance and adaptability — empowered by cutting-edge blockchain analytics — will be essential to securing the crypto ecosystem in the years ahead.
- Yet another study published in the journal Health Security found that the Darkweb was being used to sell unproven and potentially dangerous treatments for COVID-19, such as hydroxychloroquine .
- Attorney’s Office for the Southern District of New York of narcotics conspiracy, money laundering, and conspiracy to sell adulterated and misbranded medication for owning and operating Incognito Market, one of the largest narcotics marketplaces on the internet.
STYX Market
Most users of the cryptomarkets are not novices and already have established experience in face-to-face markets. The informational context is supplemented by the use of independent drug-checking services by vendors and buyers. Cryptomarkets are designed to expose specific attributes of the drug being sold. The cryptomarkets are part of an ecosystem of messaging apps, webpages, discussion servers and social media platforms that service drug markets, mainly based in Europe, North America and Australasia 25•. Most illicit drugs are available in some form, but the product balance tends towards the ‘psychonaut’ profile, those who use drugs for self-exploration . The Global Drug Survey records steady growth in use among its respondents, from 4.7 in 2014 to 15% in 2020 obtaining at least some of their drugs from darknet sites in the previous 12 months .
Operations
Data mining and classification algorithms can be applied to big data sets to identify suspicious activity and potential threats, making tracking and disrupting illegal drug networks in the Darkweb easier. The paper shows that the sales outlets of these illegal markets can self-regulate and are a significant factor in making cybercrime profitable. Based on the keywords in this cluster, as seen in Table 5, the theme of Cluster 2 is Cybercrime, Data Privacy, and Cryptography and is closely connected to the illicit drug trade on the Darknet. They developed a new dataset called “Darknet Usage Text Addresses” (DUTA) for studying Darknet active domains and the anonymous expression and illegal activity that occurs on the Deep Web.
The Fraud Shop-ghost Gun Connection: A Case Study
“The feds are very on top of the clearnet markets,” he said. To buy his fentanyl, the man uses “darknet” sites, which are unlisted on search engines, rely on a special private browser for access, and don’t tie his username to his identity. For the past three years, he’s been buying fentanyl and its analogues, like carfentanil, online. He died in early 2017 from “acute fentanyl intoxication.” He had received a package from an online seller just 30 days before his death.
Dark Web, Not Dark Alley: Why Drug Sellers See The Internet As A Lucrative Safe Haven
Using a series of search warrants and subpoenas, the NYPD found the suspects’ online raw material purchases, and uncovered a crypto dimension to the case, not publicly shared until now. Everytown, an organization that works to prevent gun violence in America, calls ghost guns a “weapon of choice for violent criminals” and extremists. These actions were part of a coordinated effort among US government agencies and foreign counterparts to combat Russian illicit finance. Interestingly, this vendor has also been a trusted supplier for OFAC-designated fentanyl traffickers Alex Adrianus Martinus Peijnenburg and Matthew Simon Grimm, having received close to $1.5 million in purchases from them.
For example, the ample in-person supply of MDMA in the Netherlands may drive the differences observed between cryptomarket and offline sources. “I would imagine if we conducted this same study in the US or in Australia, it would be quite different.” To put it to the test, a team of researchers analyzed the composition of over 60,000 drug samples—some purchased from the dark web, some bought in-person. “If one supply avenue is closed by enforcement, another is soon found to replace it,” says Steve Rolles, senior policy analyst at the Transform Drug Policy Foundation, a UK-based NGO.
Ready To Explore Web Data At Scale?
TRM has observed that these manufacturers have adapted their practices in response to intensified law enforcement efforts. The departure of market leaders such as Solaris Market — which ceased operations in autumn 2024 — is a rare occurrence. Russian darknet market admins are now experimenting with developments including artificial intelligence-facilitated dispute resolution, closer integration with encrypted communication applications, incentive programs, harm reduction, UX customization, and aggressive marketing campaigns across digital and physical spaces. Those who do not have access to these distribution modes have often pursued shifting and sometimes predatory street markets.

AlphaBay & Hansa 2014 2017 Operation Bayonet
- Some users report the online element having a moderating effect on their consumption due to the increased lead time ordering from the sites compared to street dealing.
- Most users of the cryptomarkets are not novices and already have established experience in face-to-face markets.
- Major drug markets in the Dark Web are now worth around $315 million annually according to the United Nations Office on Drugs and Crime (UNODC).
- They may hop to smaller markets, switch to privacy coins, or use encrypted messaging.
- This section collects any data citations, data availability statements, or supplementary materials included in this article.
At one point, the cryptomarkets were served by a range of sites/forums such as the cross-site aggregator grams, the r/DarkNetMarkets Reddit forum and the DeepDotWeb site. Cryptomarkets emerged in 2011 with the launch of Silk Road on the Tor network. It contrasts with Hydra, the Russian language market, which is more formalised and monopolistic, and which controls a high proportion of the Russian the drug market . The listing typifies the way in which drugs are presented for sale. Cryptomarkets may define PWUD as consumers and contribute to reshaping their identities around principles of self-directed, informed consumption. Cryptomarkets tend to address established PWUD who mainly already have access to existing distribution systems.
Regional distribution of all drugs for sale presented on Hydra, in grams per 100,000 population in Russia. The map in Figure 3 illustrates the daily supply volumes of total amounts of drugs, measured throughout the year and brought to average. The average grams of drugs in the 15 ranged regions presented by the Russian region per 100,000 population. The research team took all protective measures to avoid any active participation in illegal activities, but the data analysis was strictly for academic purposes, which would enrich scientific knowledge in the field of public health.
The rationale behind choosing the Scopus database for sourcing bibliographic data in this study primarily rests on its capacity to meet stringent quality standards for indexation. A separate systematic study , examines the use of cybercriminal or hacker forums on the Darkweb to develop “cyberthreat intelligence” solutions. Four themes and 14 categories were generated and discussed, including information on accessing the deep web, the Darknet online drug trading sites, search engines, and cryptocurrencies. A non-participant ethnographic qualitative study of prodrug websites on the surface web was conducted using search engines such as DuckDuckGo and Google. An intriguing study provides an overview of current knowledge on prodrug activities on the deep web for mental health and addiction professionals.