WayAway also features a searchable collection of former Hydra store operators. It’s not surprising how drugs promoted in the forum are like RuTor’s most in-demand substances, highlighted by these Mephedrone postings and the top-featured products below. Here is a posting from the 6th ranked vendor on RuTor, ‘Crystal-Mafia’ that shows what the drug looks like. According to a popular DNM news aggregator, the trouble started when RuTor and OMG!

Top Markets
One of the key features of these markets is their use of Tor networks, which anonymize user activity by routing traffic through multiple nodes. This ensures that transactions remain untraceable, providing a layer of security unmatched by traditional online platforms. Additionally, many markets now integrate PGP encryption for communication, further safeguarding sensitive information. The expansion of cryptomarkets has also contributed to the growth of darknet drug trade.

Verify Onion Links
These features have significantly reduced instances of fraud, making darknet markets a reliable option for drug trade. Among the various illicit digital markets, the drug trade is one of the most prominent. In 2024, darknet marketplaces generated over US$1.7 billion in cryptocurrency-enabled drug transactions, marking year-on-year growth of over 20%. This trend corresponds with a systematic increase in the criminal market scores relating to illicit drugs in the latest Global Organized Crime Index. These scores measure the pervasiveness and impact of various illicit economies and activities, and in 2023 all drug market indicators worsened compared to the previous iteration of the Index.
Is It Illegal To Access The Dark Web?
One of the most significant features of digital markets is that they facilitate the introduction of drugs to new areas, which in turn affects consumption patterns. By connecting with vendors worldwide, consumers can access drugs that were previously unavailable locally. For example, recent investigations have found that the synthetic psychedelic drug 2C-B has become more prevalent in rural areas of Scotland due to its availability on the dark web. Similarly, methamphetamine use has surged in rural American areas, with rates now surpassing those in urban areas, likely due in part to easier access through online platforms.

Incognito, like other modern darknet platforms, operated entirely on cryptocurrency—primarily Bitcoin and Monero. Buyers and sellers used wallets controlled either directly or through third-party mixers and exchanges. While Monero obscures transaction details, Bitcoin’s traceable blockchain provided law enforcement with critical leads, particularly at the point of off-ramp—when vendors converted crypto into fiat or moved assets through centralized exchanges. The darknet also offers a diverse range of products, catering to various preferences and needs.
- These closures bind users together and foster a shared resilience and collective experience in navigating these environments.
- Like all these other DNMs, the forum features crypto payment rails, with a seemingly exclusive bias towards Bitcoin.
- Threat actors have begun developing proprietary mobile apps allowing buyers and sellers of illegal goods to communicate in close to real-time mode, as well as transmitting information about “packages” with delivered drugs via alternative digital channels.
- As a result, drug precursor manufacturers have begun to shift to new analogs and substances, while adopting alternative methods to cryptocurrency to obscure their financial footprints.
- Although some of these markets prohibit certain extreme content such as violence or exploitation, most operate with very few rules beyond ensuring the security and anonymity of their users.
- As DOJ noted, the conspiracy involved laundering darknet proceeds through exchanges and peer-to-peer brokers.
US Treasury Sanctions Iranian National For Operating Darknet Market Nemesis
It seized 50.8 million euros ($53.4 million) in cash and virtual currencies, 850 kilograms of drugs, and 117 firearms were seized in a series of raids in several countries. The largest number of arrests — 153 — were made in the United States, followed by the United Kingdom with 55 and Germany with 52, according to the European Union law enforcement agency Europol, which coordinated the worldwide operation. One defendant in California led an organization that bought fentanyl in bulk, pressed it into pills with methamphetamine and sold millions of pills to thousands of people on the dark web, he said.
Secure And Reliable Drug Trade On Darknet Platforms
Around November 2022 the Administrator of WayWay started a new thread about the planned launch for a new marketplace called Kraken. Notably, the Administrator of WayWay has exactly the same alias (aka “Kraken”) who described the news of decentralized infrastructure having multiple data centers and nodes for the new project. Like BlackSprut, WayAway vendors appear to be more focused on operating within Russia and Belarus as noted by the locations marketed by the ‘El Chapo’ mephedrone shop.
RuTor hackers flaunted pilfered logs of WayAway’s user chats and mocked the ineptitude of the DNM’s admins. Typically, the drug shops providing such mobile apps don’t reveal a lot of information, and their customers have substantial prior knowledge about them and their inventory from references or their past experience. Immigration and Customs Enforcement, in collaboration with Europol, the Joint Criminal Opioid and Darknet Enforcement Team, and various national and international partners, announced the results of Operation RapTOR May 22. This historic takedown, led by Europol, resulted in the highest number of seizures in JCODE’s history. Other risks, such as frauds perpetrated by customers and exit scams, were considered inevitable on the dark web, but also manageable. Both of these claims correspond with previous research showing that the dark web is perceived to be a safer place to buy and sell drugs.
- (Some people also seek fentanyl and there are vendors who openly sell it.) Still, my sources agree, unwanted fentanyl is found in lower levels in drugs bought online compared with street drugs.
- The distribution of the supply of opiates by regions of Russia is more concentrated in the European and southern parts of the country.
- The actors behind the possible attack on Blacksput threatened the administrators with the leakage of their identities, as well as to reveal sensitive operations between buyers and sellers.
- On Dread, the reactions to the recent law enforcement activity were a mix of dismay and defiance.
The Bright Future Of Darknet Drug Trade

The market is especially well-known for providing access to freshly compromised data, often obtained from recent breaches and stealer logs. Since its inception, the market has catered to criminals looking for high-quality counterfeit items, such as fake IDs, passports, and branded luxury goods. FreshTools, founded in 2019, specializes in selling stolen account credentials and data, particularly webmail, RDPs (Remote Desktop Protocols), and cPanels.

Compared to other regions, Krasnodar’s rate of 22.50 g of opiates per 100,000 people is exceptionally high. The variables used in the correlation matrix in the study were related to drug use-related problems in 2019 (all variables are relative). Although all the vendors use pseudonyms, for fairly obvious reasons, they keep the same fake name to build up a reputation.
Links To NCBI Databases

As a criminal market, it is deeply intertwined with a wide range of criminal activities, including cyber-dependent and financial crimes. As these illicit economies continue to flourish, tackling and dismantling the criminal networks involved will require more than technological advancements. The issue calls for international cooperation, policy adjustments and a deeper understanding of the constantly evolving cyber landscape. This consistent upward trend across regions highlights the expansion and entrenchment of illicit drug markets globally, and is likely to be due in part to developments in online distribution. Notably, the 2023 Index also reveals a ‘strong and statistically significant’ correlation between the synthetic drugs trade and cyber-dependent crimes. According to the Index, the online purchasing of synthetic drugs may suggest the existence of an established cyber environment, which implies a heightened risk of cyber-dependent criminality.
Only four Russian-language DNMs left the approximately 20-strong ecosystem in 2024. The departure of market leaders such as Solaris Market — which ceased operations in autumn 2024 — is a rare occurrence. This paper recognizes that the data it uses originates from the darknet, a virtual illicit market.
This analysis is part of the GI-TOC’s series of articles delving into the results of the Global Organized Crime Index. The series explores the Index’s findings and their effects on policymaking, anti-organized crime measures and analyses from a thematic or regional perspective. The FBI Cleveland Field Office is investigating the case with assistance from the DEA and IRS-CI in Chicago. The Justice Department’s Office of International Affairs and Cybercrime Liaison Prosecutor to Eurojust provided significant assistance. The first major darknet market pioneered BTC trading, processing $1.2 billion before its 2013 shutdown. For some security experts, this could be considered surprising, insofar as Parsarad would likely have needed help to operate a marketplace the size of Nemesis.
Established in 2019, Russian Market is a well-known and highly regarded data store on the dark web, specializing in the sale of PII and various forms of stolen data. Despite its name, the marketplace operates primarily in English and serves a global audience. It has gained a reputation for being a reliable source of high-quality data for cybercriminals. It has built a reputation for being a reliable source of stolen credit card data and PII. Renowned for its extensive inventory of financial data and sophisticated operating methods, Brian’s Club is a key player in the underground economy of financial cybercrime.