(Some people also seek fentanyl and there are vendors who openly sell it.) Still, my sources agree, unwanted fentanyl is found in lower levels in drugs bought online compared with street drugs. This protects vendors from many risks that are prevalent in other forms of drug supply, including undercover police, predatory standover tactics where suppliers may be robbed, assaulted or even killed by competitors, and customers who may inform on their supplier if caught. Operation RapTor involves law enforcement actions taken by JCODE member agencies, including the DEA, FBI, FDA OCI, HSI, IRS-CI, and USPIS. State, local, and other federal agencies also contributed to Operation RapTor investigations through task force participation and regional partnerships, as well as the multi-agency Special Operations Division. According to court documents and statements made in court, Srinivasan and Ta used the “redlightlabs” darknet account to advertise and sell counterfeit M30 oxycodone pills containing fentanyl and other illicit drugs.
Data Collection
Listings included offerings of prescription medication that was falsely advertised as being authentic. For example, in November 2023, while operating in an undercover capacity on Incognito Market, a law enforcement agent purchased and received several tablets purported to be oxycodone. Testing revealed that these tablets were not oxycodone and were, in fact, fentanyl pills.

Why Security Leaders Prefer To Buy CTI Solution For SaaS Platforms In 2025

Too-good-to-be-true investment offers are another classic scam on the dark web. Early participants may see some profit, but that money usually comes from new victims, not actual earnings. Eventually, the system collapses, and most people lose their entire investment. In many countries, strict laws limit who can legally buy, own, or carry firearms. So when someone like a private buyer or criminal group can’t pass the background checks or get the right permits, they usually turn to the dark web to sidestep the rules and get armed without drawing attention.
VPN Alternatives For Securing Remote Network Access

Investigators received leads from local police departments investigating overdose deaths, including that of a 19-year-old man in Colorado who loved learning languages and building his own computers, according to FBI Deputy Director Paul Abbate. While this week’s takedown recalls the 2013 shutdown of Silk Road, the evolution of darknet commerce is stark. Silk Road popularized the use of Bitcoin, anonymizing technologies like Tor, and vendor reputation systems. But today’s markets are more fragmented, more resilient, and harder to track. Lin’s undoing came in May 2024, when he was arrested while transiting through New York’s JFK Airport.

Key Cyber Threats Facing The Financial Sector In 2025
As observed in our data set, the opioid suppliers in the marketplaces Evolution, Pandora, and Silk Road accepted escrow as a method of payment. In fact, the shutdown of the marketplace Evolution was discovered to be an exit scam, with the site’s operators shutting down abruptly to steal the approximately US $12 million in bitcoins that it was holding as an escrow 39. Inspired by the work 36 investigating the supplier migration phenomenon between underground marketplaces, we also evaluated the migrant suppliers who, for the first time, began to trade in a new market, m’, after the closure of marketplace m. To this end, we first collected the marketplace’s lifespan using the Gwern archive 37, as shown in Table 1, and then compared the supplier lists in each marketplace to investigate supplier migration.
- We also applied the MALLET topic modeling toolkit (package cc.mallet.topics MALLET’s class in JavaDoc API) on the same data set to predict the type of topic.
- According to Cory, only one online dealer in North America sells truly fentanyl-less heroin anymore.
- For example, when China announced it would ban one fentanyl product, called U-47700, on July 1, one fentanyl dealer advertised a “hot sale” of the product through June.
- These sites cater to cybercriminals seeking valuable data, such as credit card numbers, login credentials, and personal information.
- The Dutch national police’s Cyber Enabled Crime Team was involved in the operation, code-named SpecTor.
- The results show that vendors’ trustworthiness is a better predictor of vendor selection than product diversity or affordability.
Latest Data
This adaptability underscores the need for constant evolution in enforcement strategies and international cooperation. The reduction in the quality and user numbers of Western DNMs stands in contrast to the Russian-language ecosystem, where fierce competition and high profits are driving innovation. 2024 saw 42% fewer new darknet marketplaces (DNMs) launched year over year, with the proportion of Monero-only DNMs launched increasing from little more than a third in 2023 to nearly half in 2024.
Awazon Market
- This protects vendors from many risks that are prevalent in other forms of drug supply, including undercover police, predatory standover tactics where suppliers may be robbed, assaulted or even killed by competitors, and customers who may inform on their supplier if caught.
- Another way the researchers measured the resiliency of the Cryptomarket network was by the number of components – a group of buyers and sellers who are connected to each other, but separated from all other groups.
- At the same time, financial enforcers like OFAC sanctioned individuals running darknet markets—including Iranian national Behrouz Parsarad of Nemesis—demonstrating how financial tools are being brought into alignment with traditional law enforcement.
- It was touted as a major policing win and was accompanied by a slick cyberpunk-themed video.
- Note that we determined if 2 listings are identical by matching the same elements (ie, listing’s title and description information and the vendor’s name) in 2 listings.
And the fragmentation of illicit markets, particularly in drug sales, signals a shift toward decentralization — with criminal enterprises moving away from traditional darknet marketplaces toward more agile and resilient platforms. This shift presents both new challenges and opportunities for disruption. As a criminal market, it is deeply intertwined with a wide range of criminal activities, including cyber-dependent and financial crimes.
Encryption technologies allow vendors to communicate with customers and receive payments anonymously. The drugs are delivered in the post, so vendor and customer never have to meet in person. Violations of OFAC regulations may result in civil or criminal penalties. OFAC’s Economic Sanctions Enforcement Guidelines provide more information regarding OFAC’s enforcement of U.S. sanctions, including the factors that OFAC generally considers when determining an appropriate response to an apparent violation.
To this day, he still orders nitrous oxide from cream charger companies. Trade is booming despite disruptions from law enforcement and particularly “exit scams”, in which market admins abruptly close down sites and take all available funds. In addition, financial institutions and other persons that engage in certain transactions or activities with the sanctioned individual may expose themselves to sanctions or be subject to an enforcement action. The prohibitions include the making of any contribution or provision of funds, goods, or services by, to, or for the benefit of any designated person, or the receipt of any contribution or provision of funds, goods, or services from any such person. Despite the fact Archetyp had clearly raised the bar on security on the dark web, Operation Deep Sentinel – a collaborative effort between law enforcement agencies in six countries supported by Europol and Eurojust – took down the market. For the first time, FBI agents from all the bureau’s field offices also visited buyers to tell them about the overdose danger of pills sold online, which are often disguised to look like prescription drugs.
Russian Language Darknet Marketplaces Continue To Drive Overall Volume Of Illicit Drug Sales
“Satisfied customer, will be back,” writes one user on the product page of a meth dealer with the handle shardyshardface. “Excellent,” reads a plaudit posted by a buyer of the opiate oxycodone. “Bravo,” says another for a $5 sample of fentanyl, one of 18 reviews posted on the product’s profile page in the last week. In all, Empire lists over 18,000 narcotic offerings, including hundreds for oxycodone alone.

Note that the escrow mechanism is widely deployed in the anonymous online market because it helps to build trust and resolve disputes between sellers and buyers. When the purchase is made, the opioid trader ships the purchased item to the buyer (step 10). Once the item is received, the buyer finalizes the purchase by notifying the anonymous online marketplace to release the funds held in escrow (step 11) 8,9. After that, an opioid buyer often leaves review comments under the product listing or discusses the purchasing experience in the forum (step 12). The dataset encompassed 3045 individual sellers marketing 6721 unique products via 58,563 distinct postings, each representing specific quantities sold in different Russian regions during 2019. In the second stage, we collected 31 variables from official sources to compare officially collected data with darknet data about amounts and types of selling drugs in every 85 regions of Russia.
The EMCDDA and Europol are very grateful for the valuable contribution of the author. The papers have been cited within the report and are also being made available here for those who would like further information on the topic. However, the views, interpretations and conclusions set out in this publication are those of the author and are not necessarily those of the EMCDDA, Europol or their partners, any EU Member State or any agency or institution of the European Union. The seized drugs included 141 pounds of fentanyl or fentanyl-laced narcotics, more than 569 pounds of amphetamines, 95 pounds of cocaine, 95 pounds of MDMA and 22 pounds of LSD and ecstasy pills, authorities said.
But Christin counters that, by early this year, he had observed that Dream Market had roughly matched AlphaBay’s previous size. (He declined to share detailed numbers, which he says are part of a still-unpublished study.) “What happened in 2017 was very unique, that one-two punch,” Christin says. “History has taught us that this ecosystem is very, very resilient,” Christin says. “It’s part of a cycle, and we’re in the chaotic part of the cycle. We’ll have to see how it recovers. But if I were a betting person I would put more money on it recovering than on it dramatically changing.” Further market diversification occurred in 2015, as did further developments around escrow and decentralization. Although all the vendors use pseudonyms, for fairly obvious reasons, they keep the same fake name to build up a reputation.
The number of arrests and amount of money seized were the most for any international Justice Department-led drug trafficking operation, he said. The arrests were part of an effort by federal authorities to address “the growing number of illicit vendors operating on the darknet providing large quantities of harmful substances to thousands of people across the United States,” according to the Justice Department. Taken together, those operations represent the most far-reaching collection of law enforcement actions against the dark web’s economy in at least two years. “You’re seeing the evolution of a coordinated law enforcement effort,” the director of Europol’s European Cybercrime Centre said. On the dark-web drug market Empire this week, business proceeds as usual.