Litecoin, Zcash, and Dash also see usage, though Monero and Bitcoin dominate the dark web. Some marketplaces have even mandated Monero-only transactions, underscoring a strong preference for privacy-focused coins over traceable ones. Cryptocurrencies have replaced fiat currencies as the default medium of exchange on the dark web. Bitcoin continues to lead as the most widely accepted digital currency due to its high liquidity and global acceptance. However, its transparent blockchain has prompted users to shift toward more private alternatives.
The less populated regions of Siberia are less affected by opiates in Russia. Figure 4 illustrates the distribution of opiates by region, setting the stage for the subsequent discussion on regional public health impacts. Regional distribution of all drugs for sale presented on Hydra, in grams per 100,000 population in Russia. The map in Figure 3 illustrates the daily supply volumes of total amounts of drugs, measured throughout the year and brought to average.

What Do The ‘Cyber 90s’ Mean For The Eurasian DNM Drug Trade?
Initial studies into drug sales on social media began to be published in 2012. Over the next decade, piecemeal studies began to reveal a notable portion of drug sales were being mediated by social platforms. In 2021, it was estimated some 20 percent of drug purchases in Ireland were being arranged through social media. In the US in 2018 and Spain in 2019, a tenth of young people who used drugs appear to have connected with dealers through the internet, with the large majority doing so through social media, according to one small study. Digital drug marketplaces demonstrate remarkable resilience in the face of legal action.
History Of Dark Web Marketplaces
- The less populated regions of Siberia are less affected by opiates in Russia.
- Archetyp Market facilitated a reported minimum of 250 million euros (about $290 million) in drug transactions over five years, with over 600,000 users, 3,200 vendors, and 17,000 listings.
- Many such marketplaces also host services that target everyday internet users, including malware-for-hire, stolen credentials, spyware kits, and identity data dumps.
- Persistent trade and resilient user communities limit the long-term impact of these interventions.
- Looking at this picture, we can say that opiate supply is most common in the Northern Caucasus and Southern Siberia regions and Central Russia and less common in the “rich” regions.
This consistent upward trend across regions highlights the expansion and entrenchment of illicit drug markets globally, and is likely to be due in part to developments in online distribution. Notably, the 2023 Index also reveals a ‘strong and statistically significant’ correlation between the synthetic drugs trade and cyber-dependent crimes. According to the Index, the online purchasing of synthetic drugs may suggest the existence of an established cyber environment, which implies a heightened risk of cyber-dependent criminality. Archetyp Market operated as a drug marketplace for over five years, amassing more than 600,000 users worldwide with a total transaction volume of at least €250 million. With over 17,000 listings, it is one of the few darknet markets that allowed the sale of fentanyl and other highly potent synthetic opioids, contributing to the growing threat posed by these substances in Europe and beyond.
Callous Crims Break Into Preschool Network, Publish Toddlers’ Data
Compared to other regions, Krasnodar’s rate of 22.50 g of opiates per 100,000 people is exceptionally high. The following graphs show the average amount of grams of psychoactive substances in a region adjusted per 100,000 population. The averages were obtained by averaging the data across all samples to get a more accurate result and eliminate the possible influence of seasonality, weekends, holidays, etc. We have built the interactive maps and conducted the preliminary visualizations to construct the hypothesis.
How To Effectively Communicate Cyber Risk To The Board: Lessons From APRA Compliance
- Unlike many other dark web markets, Cypher does not require buyers to deposit cryptocurrency upfront, which reduces the risk of exit scams.
- After a narcotics transaction was completed, cryptocurrency from the buyer’s account was transferred to the seller’s account, less the 5% fee that Incognito collected.
- Unfortunately, the Dark Web remains a cesspool of illegal activity, often intertwined with cybercrime.
- Without a single point of failure, decentralized markets prove far more difficult to shut down.
Malicious vendors often infect buyers with spyware, ransomware, or infostealer malware hidden in downloadable files. Some listings are nothing more than scams designed to trick people into sending cryptocurrency without delivering anything in return. Even if you’ve never visited these markets, your personal and financial data might already be there, having been leaked through a data breach. Criminals use this information for money laundering, opening bank accounts, applying for loans, and draining your finances.
Related Analysis
A new, Reddit-style forum site called Dread, hosted on a Tor hidden service, has already replaced the seized DeepDotWeb as a community hub, where users discuss which site to use when one is taken down by police or turns out to be run by scammers. Social media companies are under growing pressure to eradicate drug dealing on their platforms, says Ashly Fuller, a PhD candidate at University College London researching the sale and advertisement of illegal drugs to young people on social media. Data released by social media companies shows that millions of pieces of drug-related content are already taken down every year. (Facebook and Instagram took action against 9.3 million pieces of drug-related content last year, while Snapchat says it did so in 241,227 cases in the second half of 2023.) But these companies’ actions are sometimes indiscriminate.

Tor Stuff

The country was at one point home to among the highest number of dealers globally in one dark web market, called AlphaBay, which was ultimately shuttered by police. Despite this, noncannabis drugs remain prevalent across all regions, hinting at a diverse drug market in the country. Opiates, while representing a smaller portion of overall drug use, have a significant presence, particularly in the Krasnodar region, which warrants further investigation.
As major players tear each other apart, new, niche markets are carving out their own territories, often with a sharp focus on specific categories of illicit goods. Archetyp Market facilitated a reported minimum of 250 million euros (about $290 million) in drug transactions over five years, with over 600,000 users, 3,200 vendors, and 17,000 listings. Authorities seized assets valued at 7.8 million euros, including cryptocurrency and luxury goods, and deployed around 300 officers across multiple countries during the operation. The operation targeted Archetyp Market, a platform with over 600,000 users and transactions totaling at least 250 million euros, underscoring the scale and ongoing challenge of illicit drug sales facilitated by anonymizing technologies. Launched in 2020, Cypher Marketplace sells fraudulent documents, stolen credit cards, fake IDs, and malware. Its emphasis on user anonymity and document forgery makes it a core tool for identity fraud.

The mandatory barring of leaving houses for people during the COVID-19 disaster limited the supply of drugs in Russia. We do not have monthly data on drug poisoning, but we found significant correlations with this variable in yearly data. The role of the darknet in the drug trade has substantially grown over the last decade. With the advent of the Silk Road, the first darknet marketplace, customers and vendors have collaborated to disseminate and acquire goods and services that were previously unavailable digitally 5,6. Numerous studies have explored the growth of these anonymous marketplaces and their role in the cybercrime ecosystem 9-15.
The Rise Of Decentralized Marketplaces

Such models ensure that the market remains community-controlled and resilient to outside interference. The video offered suggestions that multiple arrests were made at all levels of the Archetyp hierarchy, and although Europol’s official announcement only confirmed one was made – the 30-year-old German – the BKA said seven people were arrested in Sweden. Silk Road offered drugs, porn and fake IDs and driver’s licenses for sale. It was shut down by the FBI in 2013, but the concept had already caught on. “To me, that’s very different than buying books or other things from people on a used market, where the risk is you don’t get that product, versus this product could potentially kill you.” Acting Staff Sgt. Jeremy Wittman, who leads the Calgary Police Service’s cyber-forensic unit, says drugs for sale on the dark web are potentially lethal.
Explore How Dark Web Marketplaces Are Reshaping Cybercrime With Advanced Tech And Untraceable Coins
A positive relation between higher population density in the regions and the level of HIV among injection drug users was found. The average amount of drugs per 100,000 people in Russia varies widely between regions. Law enforcement strategies, drug trafficking routes, local drug manufacturing, socioeconomic conditions, and drug usage culture may all play a role in this diversity. Unlike more rural or sparsely populated areas, drug use tends to be more prevalent in densely populated cities like Saint Petersburg and Moscow, like the Chechen Republic. Increased accessibility, larger populations, or different socioeconomic conditions could all be to blame. Considering the COVID-19 restrictions, the illicit nature of the studied substances, and their effects on people’s health and well-being, we discovered all the proposed questions in this research.

And by focusing so heavily on these hidden platforms, authorities are neglecting the growing digital harms in the spaces we all use. Given the explosive growth of these markets, organizations must prioritize proactive threat monitoring. Axis Intelligence provides dark web surveillance solutions that help businesses identify leaked credentials, fraud attempts, and malware risks before they escalate.
The key 10 marketplaces outlined in this report will continue to keep fighting for market monopolization. As outlined in the report, geopolitics and drug trafficking have become inextricably linked, that’s why the volume of shadow economy in the Dark Web will remain to grow and accelerated by ongoing tensions. The law enforcement community needs to develop new ways to monitor illegal drug trades in the Dark Web and adjust their tactics to the dynamically changing threat landscape. Among the various illicit digital markets, the drug trade is one of the most prominent. In 2024, darknet marketplaces generated over US$1.7 billion in cryptocurrency-enabled drug transactions, marking year-on-year growth of over 20%.
These features help establish trust between buyers and sellers, providing users with a sense of security that many other markets lack. It is a hub for financial cybercrime and offers a wide range of illicit services and stolen data that cater to sophisticated cybercriminals. Based on our observations from analysis on dark web data using Lunar, we’ve identified the top 7 marketplaces on the dark web in 2025. We developed Lunar to monitor the deep and dark web, including dark web marketplace sites. Others, particularly those based in Russia, focus solely on info stealer hacking tools and brokering stolen data.
The Abacus Market links to the new dark web marketplace sections and took over much of the vacuum left by the AlphaBay takedown. One of the most common is the exit scam, where a marketplace suddenly disappears and takes everyone’s money with it. It’s been a constant back-and-forth between cybercriminals and law enforcement, with each new site trying to be smarter and more secure than the last. As of 2020, nearly 57% of the dark web was estimated to contain illegal content, including violence and extremist platforms. Today’s cybercriminals spread their activities across multiple platforms, making them harder to track and shut down. The FBI announced an operation to remove malware known as PlugX from as many as 4,200 PCs.