With 8,000+ users and 600+ vendors, it commands a 10% share of darknet drug trades—a rising star since 2023. While law enforcement typically continues to target the largest darknet marketplaces like Archetyp, it has moved away from multi-DNM takedowns such as 2014’s Operation Onymous. Without vendors, darknet marketplaces cannot operate or generate profits, making them a more strategic enforcement target. In 2025, the landscape of darknet marketplaces is as dynamic as ever, with a few key players dominating the scene.
Torrez Vs Tor2door
Today’s action against Hydra and Garantex builds upon recent sanctions against virtual currency exchanges SUEX and CHATEX, both of which, like Garantex, operated out of Federation Tower in Moscow, Russia. Wanton disregard for regulations and compliance by persons that run virtual currency exchanges will be rigorously investigated, and where appropriate, perpetrators will be held accountable. Additionally, the United States urges the international community to effectively implement international standards on AML/CFT in the virtual currency area, particularly regarding virtual currency exchanges. What current policing strategies neglect is that dark web markets are not isolated to the storefronts that are the popular target of crackdowns. These are communities stretched across dark and surface web forums which develop shared tutorials and help one another adapt to any new changes. These closures bind users together and foster a shared resilience and collective experience in navigating these environments.

An Increase In Number Of Active Markets
Starting in August 2019, it’s toughed out the darknet’s ups and downs with 22,000+ listings and $3 million in monthly BTC trades, holding a 6% share. With 11,000+ users and 850+ sellers, it offers a dependable mix—drugs (70%), digital goods like hacked accounts (20%), and fraud tools like carding kits (10%)—pulling in traders who value staying power over flashy updates. Alphabay Market leads with 60,000+ listings and $20 million in monthly trades via BTC and XMR, dominating 20% of darknet marketplaces.
How Darknet Markets And Fraud Shops Fought For Users In The Wake Of Hydra’s Collapse
It processes $5M monthly via BTC and XMR, serving 15,000+ active users and 1,200+ vendors. Abacus Market shines with 35,000+ listings and a monthly volume of $5M, commanding an 8% share of the darknet drug trade. Launched in 2022, it has quickly risen thanks to its encryption standards and user-friendly interface, serving 15,000+ users and 1,200+ vendors. Fraud shops typically sell stolen data like credit card information or other personal information from hacks and leaks. Several of the most prominent fraud shops – including Bypass Shop and Brian Dumps – appeared to face issues or shut down in 2022, according to Chainalysis, but it is still unclear why.
Surge In New Scams As Pig Butchering Dominates
This resilience, seen in 90%+ uptime, ensures continuity despite 10% of trades impacted annually. XMR’s 40% adoption across top 10 (e.g., Incognito at 45%) reflects a 15% rise from 2024, driven by BTC tracking exposing 10% of trades. Privacy tools like 2FA and PGP are standard, with 70% of users prioritizing anonymity in 2025. 85% of top 10 markets use escrow (up from 60% in 2023), with Alphabay at 99% success.
At Least 500,000 Users Regularly Visit Dark Web Marketplaces

In the first arc of the anime series Lupin the 3rd Part V, Lupin III steals digital currency from the “Marco Polo” darknet market. The months and years after Silk Road’s closure were marked by a greatly increased number of shorter-lived markets as well as semi-regular law enforcement takedowns, hacks, scams and voluntary closures. In late June 2025, users began reporting withdrawal issues with Abacus Market, which typically indicates an impending exit scam.

Fentanyl Sales In Darknet Markets
The debate between privacy and security is central to the discussion of darknet marketplaces. On one hand, these platforms provide a space for individuals to exercise their right to privacy, away from the prying eyes of governments and corporations. On the other hand, this privacy can be exploited for illegal purposes, raising questions about the ethical implications of such freedom.
- While it offers anonymity for legitimate purposes, it is also a haven for cybercriminals.
- Its Tor routing keeps a 93% uptime, with rare dips linked to security updates, not outside threats like DDoS.
- This section offers an extensive set of pro-level trading tips for our top 10 darknet rankings, designed to help both novices and veterans maximize safety, efficiency, and success as of February 27, 2025.
- Add a VPN like NordVPN or ProtonVPN before launching Tor to mask your IP—crucial with 15% of ISPs logging darknet traffic in 2025.
- In addition to the critically important efforts of the German Federal Criminal Police, significant assistance was provided by the Justice Department’s Office of International Affairs and the U.S.
We may also see collaborations between state-sponsored gangs, pooling resources for more devastating attacks. However, rivalries over dark web marketplaces could also lead to turf wars, disrupting their operations and creating new risks for businesses. While the dark web is not inherently illegal, it does host a range of illegal content, hidden services, and illicit activities. For a local machine configuration, he recommends a computer purchased for cash running Linux, using a local Tor transparent proxy. For operations security he suggests avoiding storing conversation logs, varying writing styles, avoiding mobile phone-based tracking and leaking false personal details to further obfuscate one’s identity.
However, in the wake of Hydra’s takedown many Russian vendors set up independent vendor shops and automated Telegram shops employing Telegram shop bots, although this did not imply a wholesale move away from DNMs. According to the indictment, vendors on Hydra could create accounts on the site to advertise their illegal products, and buyers could create accounts to view and purchase the vendors’ products. Hydra vendors offered a variety of illicit drugs for sale, including cocaine, heroin, methamphetamine, LSD, and other opioids.
Darknet Market Revenues Rose Slightly, But Have Yet To Regain Hydra Marketplace Highs
- Despite its name, Russian Market serves a global audience and primarily uses English for communication.
- The marketplace has over 8,400 listings and 500 vendors who communicate in English and accept Bitcoin for transactions.
- As a hidden part of the Internet, the dark web is an ideal base for many cybercrime networks, hosting illegal marketplaces, anonymous forums, unethical software, and more.
- Russian nationals Roman Vitalyevich Ostapenko, Alexander Evgenievich Oleynik and Anton Vyachlavovich Tarasov have been indicted for allegedly operating cryptocurrency mixing service Blender.io and its successor Sinbad.io.
- Those early examples, though, were through closed networks, and the actual exchanges of money and goods generally had to take place in person.
As for cybercriminal administration, the category includes inflows from ransomware affiliate wallets. This includes purchases such as malicious software and supporting services which cybercriminals sometimes make using escrow services on crime forums. The darknet market ecosystem is diverse—some platforms prioritize scale (Alphabay), others quality (Archetyp), speed (Tor2door), or privacy (Incognito).
Despite Hydra’s historically large volumes – the marketplace received more than $400 million between January 2022 and its demise in April (detailed here) – the new generation of DNMs has caught up quickly. Following Hydra’s seizure, the twelve new Russian-language marketplaces amassed approximately 24% more volume in a period of five months than Hydra did in the first five months of the year when it was still live. Niche markets like Drughub (10% pharma share) meet specific demands—15% of 2025 trades are niche vs. 5% in 2022. They offer depth (e.g., rare drugs) over variety, with 95% shipping reliability, appealing to 20% of traders seeking specialized goods.
A Persistent Trade
The Tor project gained notoriety for enabling illegal marketplaces like the Silk Road, a black market taken down by the FBI in 2013—and countless cybercriminal service providers ever since. Still, the Tor dark web browser also remains a vital tool for privacy-conscious users. Silk Road, which emerged in 2011, combined TOR and bitcoin to become the first known darknet market.