A National Risk Assessment (NRA) has been complemented with further sectoral and thematic risk assessments. According to the national assessment, which focused on the period 2019 to 2023, the risk of money laundering in North Macedonia is medium. However, the authorities should enhance their understanding of the risks, particularly through further assessments of the areas that do not benefit from sector-specific risk assessment, such as legal entities. The figure below shows the threat level of money laundering from predicate criminal offences. Dark markets are online platforms on the darknet where illegal goods and services are traded.

A Person Is Arrested For The Robbery Of 20 Thousand Euros In Deçan
These digital currencies provide a degree of anonymity, as transactions are recorded on a public ledger but do not directly link users to their real-world identities. To purchase illicit goods or services, users deposit cryptocurrency into an escrow system or directly to the seller, and the cryptocurrency is held until the buyer confirms the satisfaction of the transaction. Despite a relatively low risk of money laundering, improvements need to be made with the supervision of the non-banking financial sector and in providing the necessary resources to ensure successful implementation of legislation. Money laundering in North Macedonia is often linked to financial crimes such as tax evasion and smuggling and a small portion is connected to narcotics trafficking.
Today, darknets are populated by a vast array of users, ranging from privacy-conscious individuals to cybercriminals, hacktivists, and nation-state actors. These hidden networks provide a platform for illegal activities that include the sale of stolen data, hacking tools, weapons, counterfeit currency, and narcotics. Dark markets, often accessed through specialized marketplaces within darknets, are breeding grounds for underground economies, where users can engage in transactions while evading law enforcement and ethical oversight. These two things – public awareness and international cooperation – are essential for disrupting the illegal artifact trade in North Macedonia.
International Cooperation
The country’s tools for freezing, handling and confiscating criminal assets are not adequate and the anti-money laundering legislation is not aligned with the EU acquis. It has built a reputation for being a reliable source of stolen credit card data and PII. Renowned for its extensive inventory of financial data and sophisticated operating methods, Brian’s Club is a key player in the underground economy of financial cybercrime. Given the explosive growth of these markets, organizations must prioritize proactive threat monitoring.
Organized Crime In North Macedonia
The darknet is used for anonymous communication, accessing censored information, and protecting privacy. You can access it for legitimate purposes like whistleblowing and freedom of expression. However, it’s also used for illegal activities like drug trafficking, weapon sales, and stolen data trading. Law enforcement agencies monitor it for criminal activities, but legitimate users rely on it for privacy protection. Dark web markets have exploded in scale and reach in 2025, becoming the most dangerous hubs for trading drugs, stolen data, and hacking tools. These anonymous marketplaces—operating mainly on the Tor network—are now a primary threat vector for businesses and cybersecurity professionals.
North Macedonia
- Bitcoin was initially used to process payments, offering pseudonymity rather than full anonymity.
- The authorities have a good understanding of IFF risk through tax evasion, which is declining, and the perpetrators of this crime are managers and owners of legal entities.
- Nevertheless, the police continue with attempts to prosecute traffickers and recover artefacts.
- Illicit markets in the country are instead dominated by loose criminal networks, operating both nationally and transnationally, many of which are formed along ethnic or familial lines.
The resolution also requests that states take measures to raise public awareness, mount media campaigns, and build institutional capacity. The serious problem of the illegal artifact and cultural heritage trade in North Macedonia appears to be part of a global trend. According to the Assistant Director-General for Culture at the UN Educational, Scientific and Cultural Organization (UNESCO), the illicit trade reportedly represents five percent of the estimated €45 billion antiquities market. This trend, according to UNESCO, is ongoing, not just in established cultural heritage sites but also in places ‘where we didn’t know antiquities existed. Yes, the darknet still exists and continues to operate through networks like Tor, I2P, and Freenet.
The anonymity and encryption provided in dark markets create a haven for cybercriminals and nation-state actors to buy and sell dangerous assets while evading detection. North Macedonian authorities generally have a good understanding of the country’s money laundering and terrorist financing risk. However, they have limited understanding regarding IFFs more generally, which is also the result of a lack of definition and adoption of a specific strategy to combat IFFs.
Acronis Cyber Protect Cloud: New Version C2505
On a bilateral level, North Macedonia has operations with both Albania and Greece which have resulted in numerous arrests in relation to drug trafficking. Participation in joint investigations and improvements in strategic information sharing need further development. North Macedonia’s legislative framework for tackling organized crime and implementing strategies are broadly in line with EU standards.
The 10 Biggest Dark Web Markets In 2025 – Updated List & Security Insights

Its emphasis on user anonymity and document forgery makes it a core tool for identity fraud. This article reveals the top 10 dark web markets dominating in 2025, their unique characteristics, and the critical implications for enterprise cybersecurity. Investigative journalism, supported by organisations such as these shine the spotlight on financial malpractice, promoting transparency, accountability and public understanding of corruption and IFFs. Collaborative initiatives and an interdisciplinary approach strengthen the media’s role in building trust and bringing about positive social change. This innovative and interdisciplinary approach involves reporters’ cooperation with academics, technology experts, marketing experts, bloggers and civil society activists. The ability to control/manage the economy and regulate transactions (national and international) for trade to thrive within the rule of law.
Dark markets often employ end-to-end encryption for communication between buyers and sellers, enhancing security and privacy. This encryption ensures that messages cannot be intercepted and read by third parties, including law enforcement. The use of digital signatures can also help verify the authenticity of users and transactions.

Russian Market has consistently remained one of the most popular and valuable data stores on the dark web. The platform’s activity has increased significantly over the past year, indicating its growing influence and market share in the underground economy. STYX Market focuses specifically on financial fraud, making it a go-to destination for cybercriminals engaged in this activity. This further complicates monitoring efforts because now you need to search for the related Telegram channels and track activity there and on the marketplace itself.
As cyber threat intelligence professionals monitor these markets, they gain insights into emerging threats and malicious activities that can impact organizations and individuals. Abacus Market appeared on the scene in 2021 and quickly became one of the heavyweights among English-speaking markets on the dark web. The categories are well organized, ranging from drugs and fraud to digital products, guides, and malware.What really sets it apart is its focus on security and usability. It supports PGP encryption, two-factor authentication (2FA), alerts against fake sites (antiphishing), and a verification system for sellers. Its interface is easy to navigate, and it has a reliable escrow system, as well as allowing payments with Bitcoin and Monero.
It is a hub for financial cybercrime and offers a wide range of illicit services and stolen data that cater to sophisticated cybercriminals. Launched after the takedown of AlphaBay in 2021, Abacus Market has rapidly risen to prominence. It features over 40,000 listings including narcotics, counterfeit items, hacking tools, and stolen data.

Established in 2022, WizardShop is one of the biggest data stores on the dark web, focusing mainly on carding and financial data. A Canadian market established in 2021, WTN offers over 9,000 products, including narcotics, fake goods, and digital services. Ethically, they must minimize harm, responsibly handle any stolen or sensitive data (often notifying victims or law enforcement), avoid entrapment, and maintain research integrity. With over 20 years of experience in cybersecurity and marketing, Ben has held leadership roles at companies like Check Point, Cognyte, Cylus, and Ionix. Although some of these markets prohibit certain extreme content such as violence or exploitation, most operate with very few rules beyond ensuring the security and anonymity of their users.

Freshtools is a unique marketplace in that it does not only provide the stolen data, but it allows criminals to purchase MaaS which can cause further damage to the victims. It is one of the most active and up to date markets and always provides new and updated malware and data. Regarding this event, the Customs have stated that the dolls have been kept and, in accordance with the Law, a procedure will be initiated to verify their original quality. The consequences from various counterfeit products, experts think are the result of negative effects, whether social or economic.

Cooperation between competent authorities is governed by national laws and memorandums of understanding. Communication and coordination mechanisms among these authorities, both at the policy and operational levels, are supported by the National Strategy for Enhancing Financial Investigation Capabilities, adopted by the government in September 2021. And yet, when the regime seemed primed to survive yet another crisis, it suddenly fell apart.