Its Tor routing holds a 97% uptime, with rare breaks tied to scaling up, not attacks. Currency use shows its wide appeal—BTC runs 65% of trades for speed and ease, while XMR’s privacy jumped to 35% in 2025 from 25% in 2024, boosted by a 20% rise in privacy-focused users since late 2024. Incognito stands out with its security-first mindset—mandatory 2FA, added after a 2023 phishing scare, cut account breaches by 80%, winning over privacy-minded traders. Sellers like “DarkMedic” and “GhostCode” hold 98% ratings, delivering solid drugs and digital goods with 94% shipping reliability. Its 20,000+ listings lag behind Alphabay’s 60,000, but the focus on safety and quality keeps it tight, with scams below 1%.
The chart below shows fraud shops that performed well after the UAPS takedown, indicating that the customer migration was swift, and favored longstanding, trusted fraud shops like Vclub and Bankomat. In addition to various benzodiazepines, stimulants, and psychedelics, one longstanding China-based research chemical manufacturer also sells nitazenes. The vendor’s listing of a protonitazene analog boldly states that the compound has a potency 20x greater than that of fentanyl, as seen below. Once received by the buyer, the compound could be pressed into counterfeit pills, like M30s, and further distributed to end consumers. In addition to fentanyl, the presence of nitazenes in the global supply of dangerous synthetic opioids has increased, and China-based vendors have established themselves as the initial source. The US and Europe have seen an increase in nitazine-related overdose deaths in recent years, perhaps due to the halt in the heroin supply following the Taliban’s crackdown.
🛡️ How Axis Intelligence Strengthens Cybersecurity
Learn how darknet markets function and the challenges they present to cybersecurity, shedding light on the hidden side of the internet. Exit scams occur when the operator of a marketplace decides to vanish with the money they hold in escrow for various transactions between platform users. Abacus Market, the largest Western darknet marketplace supporting Bitcoin payments, has shut down its public infrastructure in a move suspected to be an exit scam. As the namesuggests, it’s primarily a Cannabis marketplace although other drugcategories too are available including Weed, Hash, etc. Although it doesn’t require users to “deposit” fundsbeforehand, instead the trades happen in real-time terminating anychances of an exit-scam by the marketplace. For now, let’s get started with the DarknetMarket list that you came here for all popular categories products..
New Darknet Markets
Abacus is exasperated with the government’s ‘War on drugs’ policy, and they invented the harm reduction project AEGIS to embody their stance on the matter. However, if the access to the information about these substances is restricted or requires extensive research, making the right decision becomes challenging and even impossible. Maintaining persistent access and knowledge of this darknet landscape is critical to provide continuous coverage of data from the dark web. Very few marketplace administrators publicly “retire” and gracefully shutdown their operations like White House Market (WHM) did back in October 2021. The information-stealing malware package that Genesis Market used to exploit victims included a hidden Chromium-based browser plugin, made to look like a Google Drive plugin, which captured credentials stored in victims’ browsers. In order to gain control of victims’ computers, the malware Genesis Market employed used a legacy Bitcoin address to determine the command-and-control (C2) server, from which cybercriminals initiated remote access to infected devices.
Market Features
This isn’t a quick glance—it’s a thorough rundown of why these platforms lead, from Abacus Market’s wide-ranging goods and near-perfect payment safety to Alphabay Market’s massive reach and Torrez Market’s seller-driven variety. For traders, knowing these markets means spotting the strongest sellers, the safest payment setups, and the smartest cryptocurrency picks—be it Bitcoin (BTC) for speed, Monero (XMR) for privacy, or Tether (USDT) for lower costs. Use the filters below to sort by market name, seller rating, or currency support, and jump into each market’s details to see what earned it a spot in our 2025 lineup. It provides a platform for vendors to list various products, and uses cryptocurrencies for transactions. Discover the leading darknet markets of 2025 that dominate the Tor network with innovative features, massive transaction volumes, and unparalleled user trust. Below, we highlight two standout platforms—Alphabay and Abacus—based on their performance, security, and market influence as of February 2025.
Tor2door Darknet Market
Tor Project states that v3 onion service addressing is secure against enumeration attacks as well as other attacks that aren’t related to keys. It’s unclear whether the DDoS activity against the markets that have recently disappeared is related to a law enforcement activity as the Justice Department has yet to post any seizure banners or make any official announcements. DarkOwl will continue to follow this closely and provide more information as it comes available. While some suspect that it was a large-scale Exit Scam operation, others have hinted that it could be the by-product of an international law enforcement operation.
Vice City Market Security
Both Agartha and Cartel earned enough revenue within the 35-week period we tracked them to be characterized as midsize companies, earning $91.6 million and $32.3 million, respectively. Other markets like Aurora, DeepMart, and WhiteHouse were also on track to reach the revenue of a midsize company if given a full year to earn. Though Mega Darknet Market typically serves a Russian customer base, the drug revenue shown in the chart above likely came from customers based in Europe. Mega clearly dominated the realm of wholesale drug purchases, capturing 51.9% of that segment.
Relaunched in 2021, it has solidified its position as the largest darknet marketplace, offering a vast range of products from narcotics to digital exploits. With over 25,000 active users and a robust escrow system, Alphabay remains a benchmark for reliability and scale. Bohemia uses AES-256 without PGP or 2FA, a basic approach for its 11,000+ users, maintaining 91% uptime with basic DDoS protection. Its 92% escrow success rate resolves disputes in 48 hours for 85% of cases, reliable but trailing modern security standards in 2025. In 2025, the darknet trading world shows grit and fresh ideas, adjusting to challenges like law enforcement moves, tech leaps, and changing user tastes.
While some of these markets were shuttered by law enforcement agencies – some took the easy way out with exit scams. Here are some of the now-defunct dark web markets that were notorious for cybercrime. Some fake sellers take your crypto and never ship what you ordered, or phishing sites that look like real marketplaces but steal your login info. And then there’s malware—click the wrong link or download the wrong file, and your device could get infected. Others are looking for stolen data, hacking services, or even banned books and political content.
- Others are looking for stolen data, hacking services, or even banned books and political content.
- Revenues for the fraud shops on the right side of the chart declined, suggesting their dependence on UAPS for payment infrastructure.
- Therefore, the onion service address is essentially a cryptographic representation of the originating domain’s information and a principal justification for network administrators encouraging exclusively using a more secure form of addressing.
- The vendor accepts BTC and XMR, and analyzing its on-chain exposure to regional CEXs and DNMs reveals that it serves customers worldwide, including in the United States, Canada, Sweden, and Russia.
- This deep web encompasses everything not indexed by search engines, including private databases, paywalled content, and, yes, the dark web.
- CaveTor is marketplace which isn’t popular or product-rich and regardlessof it being a multi-vendor marketplace is limited at only 231 individuallistings.
Incognito Market Vendors
Shortly after Germany’s criminal police unit, known as Bundeskriminalamt (BKA) announced they had seized the market, its digital infrastructure, and arrested at least three administrators in Germany. Next, we extracted information about stolen data products from the markets on a weekly basis for eight months, from September 1, 2020, through April 30, 2021. We then used this information to determine the number of vendors selling stolen data products, the number of stolen data products advertised, the number of products sold, and the amount of revenue generated. The stolen data supply chain begins with producers—hackers who exploit vulnerable systems and steal sensitive information such as credit card numbers, bank account information, and Social Security numbers. Next, the stolen data is advertised by wholesalers and distributors who sell the data.
Disputes are rare (0.5%), resolved in 24 hours for 95% of cases, thanks to a 99% escrow success rate. Top vendors like “AlphaChem” and “CyberLord” dominate with 99% ratings, fueling Alphabay’s 20% market share, though high vendor fees (10–15% above average) reflect its premium status. Abacus Market reigns supreme at #1, a versatile titan that processes $5 million monthly across 35,000+ listings, dominating 8% of the darknet drug trade. Its catalog spans pharmaceuticals (60%), digital goods like hacked accounts and software (25%), fraud tools such as credit card dumps (10%), and miscellaneous items (5%), catering to a diverse 15,000+ user base and 1,200+ vendors. Abacus’s escrow system is a marvel, achieving a 98% success rate—resolving 90% of disputes within 36 hours—while its onion routing maintains a 95% uptime, with only minor maintenance-related dips in 2024. Supporting BTC (60%) and XMR (40%), Abacus has seen a 10% shift to Monero in 2025, reflecting privacy demands.
The market emphasizes anonymity and security, conducting transactions exclusively through cryptocurrencies like Bitcoin and Monero. Fresh Tools Market has become a go-to platform for cybercriminals seeking access to malicious software such as keyloggers, Remote Access Trojans (RATs), and ransomware-as-a-service. The Russian Market has been around since 2019 and is one of the more prominent dark web marketplaces. In this post, we’ll walk you through the top 10 dark web marketplaces that you need to watch for potential threats to your organization. STYX Market focuses specifically on financial fraud, making it a go-to destination for cybercriminals engaged in this activity.
The platform’s popularity continues to grow, attracting both new and returning customers. Its focus on financial fraud and high-value transactions has attracted a dedicated user base, contributing to its growing reputation and market value. Background research tasks included learning from past drug lords, researching legal matters, studying law enforcement agency tactics and obtaining legal representation. Patterns recommended to avoid include hiring hitmen like Dread Pirate Roberts, and sharing handles for software questions on sites like Stack Exchange. The 16-character v2 address hashes represent an 80-bit number in base32 that contains the RSA public key of the onion service, where the v3 is 256-bit representation of its Elliptical Curve Cryptography (ECC) public key. Therefore, the onion service address is essentially a cryptographic representation of the originating domain’s information and a principal justification for network administrators encouraging exclusively using a more secure form of addressing.
Overall, the recent flood of refugees from the closed markets combined with the Abacus’s unmatched usability made it one of the largest players in the industry. It has 2-FA with PGP encryption, advanced search filters, an intuitive interface, Escrow with Multisig, full & partial FE, a substantial product range, and the ability to pay with Monero. It is faster because the order is finalized as soon as the vendor marks it as shipped. This means that the odds are you would lose the deposited money if something goes wrong. If you opt for the partial FE (75%, 50%, or 25%), you can count on a partial refund because only a part of the paid amount goes to the seller after the shipment, the rest remains in escrow.
The $2.8M monthly trade volume trails bigger players, but its 5% share shows a loyal base that values security over size. Drughub’s payment system hits a 93% success rate, sorting 80% of disputes within 48 hours—decent for its niche, though a bit slower than top dogs like Abacus. Sticking to Bitcoin only, it keeps a 92% uptime, with occasional breaks tied to server refreshes, not breaches, showing a hands-on upkeep style. BTC’s full hold fits Drughub’s straightforward setup, though some users nudge for XMR to up privacy—a tweak admins hint might come late 2025. Its design is clean and simple, built for pharma with filters by drug type, dosage, and seller rating (averaging 4.6/5 from 25,000+ reviews), making it an easy starting point for niche traders. Abacus leans hard on its payment protection system, hitting a 98% success rate—one of the best we’ve tracked—keeping deals smooth between its 15,000+ users and 1,200+ sellers with few hiccups.
