‘MommaBear’ has announced that all server access keys have been changed to prevent further unauthorized transactions. In addition, all onion links for accessing the site have been removed and orders are being paused to protect remaining assets and prevent further losses. The administrator has promised to keep users updated as more information becomes available and efforts continue to recover the lost funds.
Decoding Incognito Exit Scam
- While the darknet market ecosystem showed signs of recovery in 2023, it has yet to return to the revenues it experienced before the Hydra Marketplace closure in 2022, given the financial success of that operation.
- Founded in early 2023, shortly after major law enforcement operations shut down several competing platforms, Abacus quickly filled the void by prioritizing reliability, advanced security, and user anonymity.
- However, legal bodies and law enforcement operations made this impossible and shut down these illegal communities.
- Like most of the markets, STYX supports Bitcoin (BTC), Monero (XMR), and other crypto tokens to keep everyone’s identity hidden on this marketplace.
- On the dark web, you don’t need to be a technical expert to design ransomware, and that’s dangerous.
We provide you with news, links,markets and reviews from the dark web. We are committed to providingupdated, quality and reliable information. Centralization is dangerous in any community but on Tor it carries a heavier weight. When the admin of a site illegal in many jurisdictions runs any other sites, they all become vulnerable to government takedown. Surely the whitehat teams working to identify the physical locations of servers hosting “darknet” Tor websites do not want journalists poking around and encouraging whistleblowers. On the X platform, formerly known as Twitter, where he has been active since March 2022, most of Lin’s posts are about cryptocurrencies.

After that, many other marketplaces kept trying to take its place and become the top dark web market. However, legal bodies and law enforcement operations made this impossible and shut down these illegal communities. Genesis Market and BidenCash, two top dark web marketplaces, were also shut down in 2023 and 2025, respectively. Ulbricht faced several serious charges, including distributing illegal drugs, running a criminal enterprise, hacking, trafficking fake IDs, and money laundering.
Darknet Market Operators Threaten User Data Leak After Exit Scam
Operation RapTor’s scale reflects a new era of international coordination. U.S. agencies like the FBI, DEA, IRS-CI, and HSI worked alongside Europol, the U.K.’s NCA, and law enforcement from over a dozen countries. Incognito, like other modern darknet platforms, operated entirely on cryptocurrency—primarily Bitcoin and Monero. Buyers and sellers used wallets controlled either directly or through third-party mixers and exchanges. While Monero obscures transaction details, Bitcoin’s traceable blockchain provided law enforcement with critical leads, particularly at the point of off-ramp—when vendors converted crypto into fiat or moved assets through centralized exchanges.
Essential Security Tips For Using Dark-Web Marketplaces
Genesis Market extensively used a payment processor called UAPS, so much that the processor’s average inflows fell by 25.7% after Genesis closed last April. Regardless, UAPS remains a key provider of payment infrastructure to top fraud shops. In one particularly devastating case, a man lost his entire $80,000 pension. Using his credentials, cybercriminals committed a variety of online fraud activity over the course of six months. Given the tooling’s ability to capture new password updates, the perpetrators could easily maintain control over his accounts, and they opened bank accounts in his name and had his physical mail sent to an address where they could receive it. In 2019, the FBI started its investigation into Genesis Market and enlisted other government agencies and law enforcement organizations across the world, working towards the market’s closure on April 4, 2023.

Darknet Market Revenues Rise In 2023 As Markets Develop Role Specialization
The Dark Web is an unregulated market where people can buy just about anything. Crypto markets (Martin, 2014) are online commercial websites or marketplaces that are part of dark web operate via dark net such as Tor or I2P. It was quite popular for selling a wide range of products and services.

Tag Archives: Incognito Market

Now, that is not to say illegal behavior is completely beyond detection. The dark web combines encryption, anonymity, and hidden doorways to provide the perfect sanctuary for such illicit activity compared to the usual internet, which is more vulnerable and trackable. “You’ll be surprised at the number of people that relied on our “auto-encrypt” functionality. And by the way, your messages and transaction IDS were never actually deleted after the expiry,” the Incognito Market admin said. “….SURPRISE SURPRISE!!! Anyway, if anything were to leak to law enforcement, I guess nobody ever slipped up.”
Let’s dive deeper into the technology that powered Incognito Market. At its core, Incognito was built on the Tor network, an anonymizing service that hides users’ identities by routing their internet traffic through a series of encrypted servers around the world. This made it extremely difficult for anyone to trace the origin of the traffic, providing a shield of anonymity for users of the market.

Malware Sales
The sheer volume of transactions conducted on Incognito was staggering. At its peak, the marketplace was facilitating over $100 million worth of transactions annually, with Lin pocketing a significant percentage in fees. For many vendors, Incognito became the go-to platform for conducting business, as it offered a more secure and efficient environment than its competitors. One of Lin’s most innovative contributions to the darknet was the creation of a cryptocurrency ‘bank’ within Incognito.
Range Of Available Products
The public is fed a narrative that Tor is dangerous, a technology for CSAM and terrorism. Many journalists are hesistant to even log in to see what really exists in darknet communities, there’s a perception of too much legal risk. Rui-Siang Lin is a 23-year-old developer who describes himself on LinkedIn as a “crypto enthusiast and developer” from Taiwan. He claims to be an employee of Taiwan’s Ministry of Foreign Affairs, working as a “diplomatic specialist” in the technical section of the Taiwanese embassy in St Lucia. Previous jobs include a three-year internship at Cathay Financial Holding as a “Backend and Blockchain R&D” since November 2019. The former Incognito Market administrator claims to have graduated from National Taiwan University in June 2023.
Users began reporting unexplained delays and failures in withdrawing funds, sparking fears that Incognito’s administrators were perpetrating an “exit scam” – a scenario where the operators disappear with all the money held in escrow. In February 2024, many vendors found they could no longer withdraw their Bitcoin (BTC) earnings from the site, and by early March both BTC and Monero (XMR) withdrawals had ground to a halt. Incognito’s chief administrator, “Pharaoh,” initially tried to calm the community. He posted a message on the dark web forum Dread (a Reddit-like hub for darknet discussions), claiming the withdrawal problems were due to technical upgrades and urging patience. Prominent voices in the darknet community, including Dread’s own administrator “Hugbunter,” grew suspicious. In a startling disclosure, Hugbunter claimed that Pharaoh had even attempted to bribe him to censor discussions about Incognito’s issues, confirming that an exit scam was indeed unfolding.
Undercover Operations
On May 18, 2024, Homeland Security Investigations (HSI) New York, in coordination with law enforcement partners, arrested Rui-Siang Lin at John F. Kennedy International Airport in connection with his operation and ownership of Incognito Market. On 20 May, the defendant was arraigned in Manhattan Federal Court. “There’s a larger issue here about bad actors accessing blockchain analytics tools,” says Robinson. In the DOJ’s criminal complaint against Lin, it points to a handwritten document the FBI pulled from his email, which appears to sketch out a flow chart for a dark-web market’s mechanics. The complaint’s FBI affidavit says Lin emailed himself the sketch in March 2020 when he was at most 19 years old. It describes functionality such as how “vendors” and “buyers” would register, make purchases, and encrypt shipping addresses.