Whereas it can be easy to identify administrators due to titles given to these users, it may be harder to identify successful vendors. It is especially difficult to identify those vendors whose success is yet to come. These tasks might be further complicated when encryption is used for message contents. The results presented in this work showed that network measures computed on the user-to-user communication network and three forum activity indicators, not reliant on knowledge of message content, are useful in predicting (future) successful vendors. Specifically, the topic engagement indicator and betweenness centrality showed the best performance. In this paper, we investigate to what level employing network measures computed on user-to-user communication networks are useful in identifying both current and future successful vendors on cryptomarkets.
This is true even if they only represent a small part of the cryptomarket trade in comparison to other products (see Soska & Christin, 2015). Products such as antidepressants, antiepileptics, antipsychotics and dementia drugs are rarely listed and even more rarely bought from these markets. This is of interest to the psychiatric profession since it suggests that many of the drug classes used in psychiatric practice are not being sourced from cryptomarkets in any meaningful amounts for the purposes of self-medication. It should however be noted that this does not imply that these products are not self-medicated or abused at all, merely that they are seemingly not used/abused via purchase on cryptomarkets. This work therefore collapses down to a study of hypnotics and anxiolytics (broadly equivalent to ‘sedatives’), stimulants and opioid dependency products.
In contrast to the other types of sellers, the median income of U2U-only sellers increases after operation Bayonet. Moreover, we observe a trend of increase in their median income relative to the value before operation Bayonet—an increase of almost six times by the end of the period of observation (see Supplementary Information S4). Further supporting this interpretation, we observe that the trading volume of the U2U network increases after Bayonet, while the trading volume of markets decreases (see Supplementary Information Section S4). In panels (b, c), we show the number of all sellers and buyers per quarter, respectively. In panels (d, e), we show the median net income in USD of all sellers and buyers per quarter, respectively.

Better Drug Trade With New Cryptomarkets
In the previous section, we established the predictive potential of the network measures and activity indicators for predicting (successful) vendors. Now, with the specific law enforcement perspective of aiming to find as many (hard to identify) vendors as possible, we want to explore how this predictive potential translates to the task of reducing the set of users to investigate. Note that we focus on the top percentile, instead of the absolute top vendors, as this aligns with the law enforcement intervention method of dissuading continued participation in the cryptomarket. Since this intervention method is known to be ineffective for the absolute top vendors and comes at a relatively low cost to law enforcement, it is more suited to targeting larger groups of vendors. Furthermore, although a vendor’s sales volume is merely a proxy for their trade volume, we may reasonably expect those with the largest trade volume to be among the top vendor percentile in terms of sales.
Data Availability
Moreover, it was observed that the online price fixed by Australian sellers for the considered illicit drugs is higher than for any other shipping countries, which is in line with previous studies. First, this study focused on a single, somewhat older, dark web cryptomarket. As such, the extent to which our findings can be generalized to other cryptomarkets or Dark Web marketplaces, is an open question, as other markets may show unique characteristics not represented in this study. Regardless, it is worth noting that most fora and marketplaces appear to be operated in a similar fashion, i.e., with the fora being used to advertise and discuss vendors and their listings. Moreover, betweenness centrality has been shown to perform well in similar criminal network related settings before. Therefore, we expect our findings may very well hold up for other cryptomarkets and Dark Web marketplaces.
- Some health professionals such as “DoctorX” provide information, advice and drug-testing services on the darknet.140 The quality of products is attributed to the competition and transparency of darknet markets139 which involve user feedback and reputation features.
- 2d shows mostly positive difference scores when comparing with the sub-top percentile, but with lower scores.
- In their efforts to disrupt cryptomarkets, law enforcement has access to limited personnel and resources.
- Their user-friendly interfaces simplify navigation, while escrow systems protect both parties from fraud.
- The period of dominance by Silk Road is unique, because the ecosystem structure is effectively composed of and dominated by a single market, expressed by a market share equal to one, as shown in Fig.
Thus, there may still be a significant number of successful vendors that are not detected by the activity indicators that may be included by network measures. To investigate this, we analyse the overlap of detected vendors between the network measures and activity indicators. Table 1 shows the average monthly overlap of each network measure with each individual activity indicator and the union of detected vendors by all activity indicators. We see that PageRank and betweenness centrality detect the greatest share of vendors also found by the activity indicators, detecting on average approximately 80% of all current vendors and 75% of all future vendors found. However, respectively nearly 99% and 97% of all vendors detected by PageRank are also found by the activity indicators. On the contrary, the activity indicators find respectively only 94% and 90% of the vendors included by betweenness centrality.
Effect On Purchases And Drug Diffusion

Our classification shows that the number of sellers is significantly smaller than the number of buyers, as shown in Figs. The number of actors in the ecosystem is affected by several factors, especially market closures. Notably, the number of buyers and sellers significantly drops after the operation Bayonet in the last quarter of 2017, which shut down AlphaBay and Hansa markets, causing a major shock in the ecosystem34. However, the number of buyers rapidly recovers, which does not happen to sellers. More than six years after the demise of Silk Road, the world’s first major drug cryptomarket, the dark web is still home to a thriving trade in illicit drugs. This joint report prepared by the EMCDDA and Europol considers the latest findings from international research, fresh empirical data, and operational information and intelligence in order to illuminate how darknet markets function and how they relate to criminal behaviour.
Beyond The ‘Silk Road’: Assessing Illicit Drug Marketplaces On The Public Web
Buyers should avoid direct searches and rely on lists with PGP-signed updates. Forums and encrypted chats often share backup links, ensuring uninterrupted access even if primary URLs are seized. After it was shut down in July 2017 following law enforcement action in the United States, Canada, and Thailand as part of Operation Bayonet, it was relaunched in August 2021 by the self-described co-founder and security administrator DeSnake.
Large Number Of U2U Transactions
On the other hand, the consequences of credit card fraud can be devastating for the victim. They might lose their savings, face legal issues, and have their credit score damaged. However, the success of law enforcement is just one possible explanation for this decline. “Administrators often pull exit scams, in which the market ceases operations but publicly appears to still be active so that administrators can continue collecting money from purchases that will never be fulfilled,” Chainalysis said. Darknet markets have always commanded great interest in the crypto community, first sparked by the infamous Silk Road, which plagued Bitcoin’s reputation during its formative years. When considering the sedative market in other countries, caution needs to be exercised.
Darknet Markets – Dark Web Links
In Supplementary Material Section S3 we show that this finding also holds for other months and network measures. 4a, c it appears that the vendors found by topic engagement, and not betweenness centrality, are generally slightly more active and less successful compared to those found by betweenness centrality and not topic engagement. 4b, d confirm that, for vendors with between 10 and 100 posts, those found exclusively by betweenness are generally more successful.

Data And Methods

Abacus excels in privacy-focused features, integrating Monero for transactions and requiring minimal personal data. Both platforms use Tor-encrypted links, accessible via updated darknet market lists, ensuring reliable access. With regard to stimulants the results clearly point to the highest usage rates being found in the USA, with other markets representing only a fraction of that share.
Contribution To The Harm Assessment Of Darknet Markets: Topic Modelling Drug Reviews On Dark0de Reborn
The second major change to the cryptomarket came in early November 2014, as a by-product of the closure of six cryptomarkets following the joint international law enforcement operation dubbed “Onymous”5. After this disruption, Evolution showed a significant increase in overall activity until its closure. Surprisingly, although DWMs have gained significant attention from the scientific community and law enforcement agencies, little is known about the key players sustaining their unusual adaptability and responsive dynamics. However, owing to the difficulty of identifying relevant transactions, most studies rely on user surveys17,18 and data scraped from DWM websites19,20,21,22,23,24. In particular, these studies are based on user reviews which carry many inaccuracies, for instance, with respect to the time and value of the transaction19, that further compound error in other measures. Moreover, data scraped from the DWMs cannot assess the U2U transactions which account for the largest fraction of the total trading volume of the ecosystem13.
The earliest modern online anonymous markets, often referred to as darknet markets or cryptomarkets, appeared in early 2010, and evolved from an encrypted email service and migrated on to a Tor (The Onion Router) anonymity network to guarantee better anonymity to users. The first darknet market of notoriety was Silk Road, which opened at the end of January 2011 and was seized by the US Federal Bureau of Investigation (FBI) in October 2013 (DEA, 2013). Silk Road 2.0 was launched soon after the original Silk Road was seized and since that time there has been a proliferation of darknet markets.. This chapter offers an extensive overview of law enforcement interventions against cryptomarkets and their measurable impact on the dark web ecosystem thereafter.
The pre-processing relies on established state-of-the-art heuristics to cluster addresses into entities, such as cospending, intelligence-base, and behavioral clustering39,40,41,42. The resulting data set includes for each transaction the source and destination entities, the time, and the value of the transaction. The number of multisellers steeply decreases after operation Bayonet but they still sustain high incomes. Nevertheless, by analysing the income of each multiseller, we observe that the median income still reflects their high income, as shown in Fig. Individually, they are able to yield significant high incomes compared to other types of sellers. With the advent of several markets at the beginning of 2014, the number of multisellers rapidly grows, representing more than 20% of all sellers until the beginning of 2016 (see Supplementary Information Section S3).