When Pharaoh attempted to extort his users, many panicked vendors likely reached out to trusted contacts or even law enforcement for help. The public warnings from the Dread forum admin (Hugbunter) about Incognito’s exit scam not only alerted users, but also would have confirmed to investigators that the site’s operator was in a desperate endgame. Every move Lin made in those final weeks – freezing withdrawals, bribing forum mods, threatening exposure – further implicated him and provided investigators with evidence of consciousness of guilt. It’s conceivable that undercover agents or cooperating informants were among those communications, gathering intel on Pharaoh’s state of mind and next steps. LIN was arrested at John F. Kennedy Airport on May 18, 2024, and will be presented in Manhattan federal court before U.S. The 23-year-old Taiwanese administrator is charged with 4 counts, including engaging in a continuing criminal enterprise, narcotics conspiracy, money laundering, and conspiracy to distribute adulterated and misbranded drugs, which carry a minimum of 5 years and a maximum of 20 years in prison.
Federal IT Contractor Pays $1475 Million Fine To Settle Cyber Fraud Charges

The former Incognito Market administrator claims to have graduated from National Taiwan University in June 2023. On May 18, the latest post on LinkedIn was related to the celebration of obtaining the Chainalysis Reactor Certification (CRC). A sketch of a dark-web market’s infrastructure that Lin emailed to himself eight months before allegedly creating Incognito Market, according to the DOJ. United States Attorney for the Southern District of New York, Jay Clayton, announced that ANDRIS PUKKE, a/k/a “Marc Romeo,” a/k/a “Andy Storm,” was sentenced yesterday to eight years in prison…
Investigations
- While anonymity grants liberation, it also harbors risks, from scams to potential involvement in illegal activities.
- Vendors post listings for products ranging from digital goods, fake documents, drugs, weapons, hacking services, and more.
- Though the platform’s administrator later claimed the extortion threat was a “joke,” the damage had been done.
- This tactic – arresting a target during international transit – is often used when a suspect is based in a country with no easy extradition.
- He posted a message on the dark web forum Dread (a Reddit-like hub for darknet discussions), claiming the withdrawal problems were due to technical upgrades and urging patience.
- In this case, ‘FatherBear’ will keep a low profile for a while with all the money and then probably resurface with a different identity.
He could also receive a maximum penalty of life in prison for narcotics conspiracy, a maximum penalty of 20 years in prison for money laundering, and a maximum penalty of five years in prison for conspiracy to sell adulterated and misbranded medication. According to the investigation, Incognito Market was an online narcotics bazaar that existed on the dark web. Since that time, and through its closing in March 2024, Incognito Market sold more than $100 million in narcotics — including hundreds of kilograms of cocaine and methamphetamines. Incognito Market was available globally to anyone with internet access and could be accessed using the Tor web browser on the dark web.
Who Verifies The Safety Of Tor Users? #
Successful marketplaces prefer strict anonymity to protect administrators from prosecutions. It promotes business continuity and reduces threats posed by law enforcement crackdowns. Darknet markets like Incognito operate on a decentralized, peer-to-peer basis, allowing vendors to sell illicit or otherwise restricted goods and services. These markets typically rely on cryptocurrency, especially Bitcoin and Monero, to ensure transactions are secure and anonymous. Hidden marketplaces on the dark web have long been a staple for those seeking to engage in illicit transactions.
In 2021, Pharaoh introduced a service called “Antinalysis,” which was essentially a counter-intelligence tool for crypto users. Antinalysis allowed anyone (for a fee) to input their cryptocurrency address and see how likely it was to be flagged as “dirty” or linked to illicit activity – effectively letting criminals check if their funds could be traced. Pharaoh openly advertised Antinalysis on Dread, framing it as a way to help darknet users and “those who needed complete privacy on the blockchain” evade law enforcement scrutiny.
Any Intent To Pay A Ransom? UK Government Wants To Know
Each high-profile bust – from Silk Road to AlphaBay to Incognito – serves as a learning experience for agencies. The takedown of Incognito Market in particular demonstrated that investigators have become adept at following the money in cryptocurrency and coordinating globally to apprehend suspects. We can expect more proactive targeting of darknet markets by multi-country coalitions (similar to how Europe’s Europol and the FBI have partnered in the past). There’s also a legislative trend of sanctioning known darknet markets; for example, Hydra’s crypto wallets were sanctioned by the U.S. If Incognito had still been active, it might have faced similar sanctions designations to choke its financial lifelines. If convicted, Lin faces a mandatory minimum penalty of life in prison for engaging in a continuing criminal enterprise.
Most Popular Sites On The Darknet
OCDETF identifies, disrupts, and dismantles the highest-level criminal organizations that threaten the United States using a prosecutor-led, intelligence-drive, multi-agency approach. Before sharing sensitive information, make sure you’re on a federal government site. In a world where digital footprints are often unavoidable, the Incognito Darknet Market stands as a beacon for those who seek to elude the constraints of visibility. It’s a realm where secrets are exchanged, and desires are fulfilled in the uncharted territories of the internet’s underbelly.
Bitcoin Queen Convicted In UK’s Largest-Ever Crypto Seizure Tied To China Fraud
The Incognito Market URL verification involves cross-referencing using several independent trusted sources. Additionally, the Incognito Market exit scam scheme took a new turn as buyers were offered a chance to remove their records through a whitelist portal, hinting at a semblance of redemption amidst the chaos. However, the looming deadline of April 1st, when prices were set to double, added urgency to the situation. “As alleged, Rui-Siang Lin was the architect of Incognito, a $100 million dark web scheme to traffic deadly drugs to the United States and around the world,” Attorney General Merrick Garland said in a statement. For four years Darknetlive was a rare unbiased source of news for users of Tor hidden services (the “darknet”). Incognito has quickly grown to become one of the most trusted and reliable trading platforms on the Darknet, providing users with the confidence to make secure and profitable trades.
To become an Incognito Market vendor, people were required to register with the site and pay an admission fee. In exchange for listing and selling narcotics as a vendor on Incognito Market, each vendor paid 5% of the purchase price of every narcotic sold. That revenue funded Incognito Market’s operations, including paying “employee” salaries and for computer servers. To facilitate these financial transactions, Incognito Market had its own “bank,” which allowed its users to deposit cryptocurrency on the site into their own accounts. After a narcotics transaction was completed, cryptocurrency from the buyer’s account was transferred to the seller’s account, less the 5% fee that Incognito collected.
As soon as Lin transited through a U.S. jurisdiction (JFK Airport in New York), authorities pounced. On May 18, 2024, Rui-Siang Lin was arrested by FBI and HSI agents at JFK, effectively ambushing him during a layover before he could continue elsewhere. This tactic – arresting a target during international transit – is often used when a suspect is based in a country with no easy extradition. Taiwan does not have a formal extradition treaty with the U.S., so luring or waiting for Lin to enter U.S. soil was the surest way to get custody of him. The arrest operation at the airport was coordinated and swift, giving Lin little time to react or attempt any digital sabotage (like wiping devices).

Full Anonymity Of The Incognito Onion User
- Dubbed “Antinalysis” and “AMLBot,” the services purport to offer a glimpse into how one’s payment activity might be flagged by law enforcement agencies and private companies that try to link suspicious cryptocurrency transactions to real people.
- This tutorial provides educational purposes for the study of cybersecurity and research on digital anonymity.
- In the end, the strategies Lin used to operate Incognito Market were a blend of tech entrepreneurship, underworld cunning, and audacious deception.
- Those processes help guard against sophisticated phishing attacks targeted towards darknet marketplace users.
- In early 2024, vendors began reporting issues with BTC withdrawals—an ominous sign of what would become a classic darknet “exit scam.” In March, a message appeared on Incognito threatening to leak vendor identities and private messages to law enforcement unless paid in cryptocurrency.
He later pleaded guilty to narcotics conspiracy, money laundering, and conspiracy to sell adulterated and misbranded medications in the Southern District of New York. Investigation of crypto transactions that led to the arrest of Riu-Siang Lin shows that threat actors and criminals in the underground forums cannot operate alone and without leaving any traces when switching to real life. “Pharao” created the Incognito marketplace when he was just a student, probably trying to make more money. Incognito Market had its own “bank,” which allowed its users to deposit cryptocurrency on the site into their accounts. This tutorial provides educational purposes for the study of cybersecurity and research on digital anonymity. We do not endorse illegal activities or publish actual marketplace links for unlawful access.

In addition, in November 2023, an undercover law enforcement officer received several tablets purporting to be oxycodone purchased on the Incognito Market. Tests on these tablets revealed that they were not authentic oxycodone at all but were, in fact, fentanyl pills. The first charge – sometimes called the “kingpin statute” – carries a mandatory minimum sentence of life in prison.
This historic takedown, led by Europol, resulted in the highest number of seizures in JCODE’s history. He “was scheduled to go to Singapore via New York when he was arrested by the police in New York,” he said, adding that Taiwan was closely monitoring the case. He had applied to work as part of the embassy’s technical corps in lieu of military service — mandatory for Taiwanese men — and had “behaved normally.” Incognito has suffered cryptocurrency withdrawal and deposit instability for weeks now.