“Pharao” created the Incognito marketplace when he was just a student, probably trying to make more money. The marketplace has been active since July 1, 2023, and has been among the top five infamous marketplaces providing shopping for illicit goods in the darkweb, offering more than 16 categories of narcotics and over 1000 products. Compared to other marketplaces, it offered innovative and a much more user-friendly interface.
Use Saved Searches To Filter Your Results More Quickly
Another prong of the investigation was old-fashioned OSINT (Open-Source Intelligence) and surveillance. His LinkedIn and social media posts – bragging about Chainalysis certifications and showing diagrams of darknet money flows – may not have been direct evidence of running Incognito, but they painted a picture of someone deeply involved in the subject matter. It likely raised eyebrows that a young diplomat was so invested in dark web analytics. Moreover, the Namecheap domain registrations under Lin’s name provided a concrete link between his real-life identity and the dark web (through that market-tracking site).
Incognito Darknet Market
OCDETF identifies, disrupts, and dismantles the highest-level criminal organizations that threaten the United States using a prosecutor-led, intelligence-drive, multi-agency approach. Additional information about the OCDETF Program can be found at /OCDETF. Lin, a self-described crypto developer and fan of privacy coin Monero, said on X that he facilitated a four-day workshop on cyber crime and cryptocurrency for 30 police officers at the Saint Lucia Police Academy in early April. CoinTelegraph notes that Incognito Market administrators initially lied about the situation, and blamed users’ difficulties in withdrawing funds on recent changes to Incognito’s withdrawal systems.
Download Tor Browser
- That revenue funded Incognito Market’s operations, including paying “employee” salaries and for computer servers.
- The former Incognito Market administrator claims to have graduated from National Taiwan University in June 2023.
- At the same time, financial enforcers like OFAC sanctioned individuals running darknet markets—including Iranian national Behrouz Parsarad of Nemesis—demonstrating how financial tools are being brought into alignment with traditional law enforcement.
- Before sharing sensitive information, make sure you’re on a federal government site.
- As a new market, it has not yet established itself in the community, although it remains a reliable alternative when larger markets decline.
Buyers and sellers used wallets controlled either directly or through third-party mixers and exchanges. While Monero obscures transaction details, Bitcoin’s traceable blockchain provided law enforcement with critical leads, particularly at the point of off-ramp—when vendors converted crypto into fiat or moved assets through centralized exchanges. Vendors on Incognito paid a registration fee and a 5% commission on every sale. That revenue went to fund the site’s operations, including servers and what the DOJ described as “employee” salaries.
The market has a strict set of rules to ensure user safety and maintain the integrity of the platform. These include prohibitions on selling firearms, explosives, and other dangerous items, as well as a ban on child pornography and human trafficking. The marketplace also employs a strict escrow system to protect both buyers and sellers during transactions, and offers a dispute resolution process to address any issues that may arise.
- Pharaoh openly advertised Antinalysis on Dread, framing it as a way to help darknet users and “those who needed complete privacy on the blockchain” evade law enforcement scrutiny.
- Darknetlive once kept a close eye on Tor hidden services and quickly shared warnings when sites were scamming or otherwise acting suspiciously.
- This effort is part of an Organized Crime Drug Enforcement Task Forces (OCDETF) operation.
- District Judge Colleen McMahon and is scheduled to be sentenced on March 27, 2025.
- To become an Incognito Market vendor, people were required to register with the site and pay an admission fee.
- Designed to resemble a legitimate e-commerce platform, Incognito offered a slick user experience with branding, advertising, and customer support.
Operation RapTor: The Largest Darknet Takedown In History
His brief, strange journey from alleged kingpin to crypto crime expert ultimately provides plenty of lessons to criminals and law enforcement alike—though probably not the ones he intended. During those same busy years, Pharoah also launched a web service called Antinalysis, designed to defeat crypto money laundering countermeasures—only for Lin, who prosecutors say controlled that Pharoah persona, to later refashion himself as a crypto-focused law enforcement trainer. Finally, despite his supposed expertise in cryptocurrency tracing and digital privacy, it was Lin’s own relatively sloppy money trails that, the DOJ claims, helped the FBI to trace his real identity.
Disguised Gunman Who Killed Lawmaker Is Linked To Russia, Ukraine Says
It also showcased his technical acumen – straddling the line between criminal utility and software entrepreneurship. Lin was arrested at John F. Kennedy International Airport on May 18 and was presented in Manhattan federal court before U.S. In May 2024, a 23-year-old Taiwanese IT specialist named Rui-Siang Lin stepped off a plane at New York’s JFK airport and was promptly arrested by federal agents. Until that moment, Lin led a double life that astonished both law enforcement and the darknet community. By day, he worked as a diplomatic tech expert training police in cybercrime; by night, he was “Pharaoh,” the secretive mastermind of Incognito Market – one of the world’s largest dark web drug marketplaces. Incognito Market’s rise and dramatic collapse, along with Lin’s arrest, sent shockwaves through the darknet economy.
Among these features one could find Direct Pay, implying buyers could use their wallets instead of those provided by the marketplace. Incognito Market had its own “bank,” which allowed its users to deposit cryptocurrency on the site into their accounts. The mass-extortion of Incognito Market users comes just days after a large number of users reported they were no longer able to withdraw funds from their buyer or seller accounts.
US Treasury Sanctions Iranian National For Operating Darknet Market Nemesis
Buyers are able to browse the listings, engage in communication with the seller, and purchase items through an encrypted payment system. Transactions are designed to protect the identities of both parties involved. They often sell across multiple markets or operate standalone storefronts via encrypted apps like Telegram and Signal. Operational security has increased, with mandatory PGP encryption, two-factor authentication, and more frequent use of VPNs and anonymization tools. Described by Attorney General Pam Bondi as a historic blow to the digital drug trade, the operation targeted individuals in the United States, Austria, Brazil, France, Germany, the Netherlands, South Korea, Spain, Switzerland, and the United Kingdom.
All vendor applications are manually reviewed and vendors are required to provide documentation of past history and/or product availability. Vendors paid five percent of the purchase price of every sale to “Incognito Market,” providing Lin with millions of dollars of profits, the Justice Department said. Incognito Market included “many features of legitimate e-commerce sites such as branding, advertising, and customer service,” the Justice Department said. The indictment includes several images from the site, including its splash page. This effort is part of an Organized Crime Drug Enforcement Task Forces (OCDETF) operation.
It also depends on what action the remaining administrator ‘MommaBear’ will take. Lin was arrested at New York’s John F. Kennedy Airport on Saturday and will be presented in front of a Southern District of New York (SDNY) magistrate judge today. He faces one count of engaging in a continuing criminal enterprise, one count of narcotics conspiracy, one count of money laundering, and one count of conspiracy to sell adulterated and misbranded medication. “Stay posted and fuck LE,” Pharoah wrote, using the abbreviation LE to mean “law enforcement.” Antinalysis eventually returned, however, and pivoted last year to acting instead as a service for swapping bitcoin for monero and vice versa. A 2022 Twitter thread about Incognito posted by Eileen Ormsby, an author of several dark-web-focused books including The Darkest Web, shows how the market by that time had added features that may have helped it to catch the attention of security- and safety-conscious users.
The cryptocurrency-focused publication Cointelegraph.com reported Mar. 6 that Incognito was exit-scamming its users out of their bitcoins and Monero deposits. Yet the digital nature of these crimes ensures new threats will emerge. Just as Incognito built on the playbook of its predecessors, future markets will learn from RapTor. But with blockchain intelligence advancing and global partnerships strengthening, law enforcement is better positioned than ever to detect, disrupt, and dismantle these operations. Designed to resemble a legitimate e-commerce platform, Incognito offered a slick user experience with branding, advertising, and customer support. Upon visiting the site via the Tor browser, users were greeted by a graphic interface and prompted to log in with a unique username and password.
