The first category includes classic marketplaces, which serve as one-stop shops for a wide range of illegal goods. These platforms sell everything from drugs and fake IDs to weapons and hacking tools, resembling a digital black-market bazaar. Established in 2019, Russian Market is a well-known and highly regarded data store on the dark web, specializing in the sale of PII and various forms of stolen data. Despite its name, the marketplace operates primarily in English and serves a global audience. It has gained a reputation for being a reliable source of high-quality data for cybercriminals.
German Prosecutors Charge Hacker In Rosneft Deutschland Cyberattack
The law enforcement authorities of the United States, Switzerland, the Republic of Moldova and Ukraine cooperated closely with the German agency in the course of the investigation. A certain IP address (referred to as “IP ADDRESS 1”) that was utilized to gain access to a Kingdom Reddit account was also used to access BILL’s email address, cryptocurrency accounts, and ESTA application. Recently, over 42,000 products were offered on the marketplace, of which about 3,600 products from Germany,” said the BKA. According to a press release issued by the BKA, the marketplace was widely used, with over 40,000 products listed. Welcome to Kingdom onion darknet market, your central onion darknet market for all darknet endeavors.

The platform’s popularity continues to grow, attracting both new and returning customers. The seized drugs included 141 pounds of fentanyl or fentanyl-laced narcotics, more than 569 pounds of amphetamines, 95 pounds of cocaine, 95 pounds of MDMA and 22 pounds of LSD and ecstasy pills, authorities said. Operation RapTor involves law enforcement actions taken by JCODE member agencies, including the DEA, FBI, FDA OCI, HSI, IRS-CI, and USPIS. State, local, and other federal agencies also contributed to Operation RapTor investigations through task force participation and regional partnerships, as well as the multi-agency Special Operations Division. “Operation RapTor shows that the dark web is not beyond the reach of law enforcement,” said Head of Europol’s European Cybercrime Centre, Edvardas Šileris.
It maintains a very strict level of user verification and integration with an official Telegram account to provide real-time updates to users. Various cryptocurrencies such as Bitcoin and Monero can be used to make purchases. The Abacus Market links to the new dark web marketplace sections and took over much of the vacuum left by the AlphaBay takedown. One of the most common is the exit scam, where a marketplace suddenly disappears and takes everyone’s money with it.
Kingdom Market Shutdown: Operation Details And Server Seizure
Their investigators have succeeded in shutting down the illegal marketplace “Kingdom Market” on the Darknet. However, the operators have probably not yet been caught – but for customers of this marketplace, the “trembling” may begin when swuat team show up at the door. Kingdom Market is a stable darknet market that is successfully doing business since the march of 2021.
Russian Market
In 2019, there were approximately 8,400 active sites on the dark web, selling thousands of products and services daily. For instance, cybercriminals can buy credit card details with a $5,000 balance for just $110. As of 2020, nearly 57% of the dark web was estimated to contain illegal content, including violence and extremist platforms. In 2023, the dark web attracted an average of 2.7 million daily users, with Germany now leading as the country with the highest number of Tor users, surpassing the United States for the first time in years. The scheme implies that your funds do not go directly to the vendor, but wait in the platform’s escrow account until you finalize the order.
- This further complicates monitoring efforts because now you need to search for the related Telegram channels and track activity there and on the marketplace itself.
- If you’re lucky, it will gracefully retire, but in the worst scenario, it will exit scam.
- Kingdom Market’s users took to Dread, the Dark Web’s version of Reddit, to voice dissatisfaction about their monetary losses after the downfall of the marketplace.
- It was suspected as an exit scam; however, a few days after it had gone offline, it was revealed that AlphaBay had been seized and alpha02, aka Alexander Cazes, was caught.
- Europol will continue working with our partners to make the internet safer for everyone.”
The New Mindset: Platforms Over Products
At the same time, the administrators or promoters of some unknown dark web markets such as “Elysium Market”, “Dark Matter Market”, “SuperMarket”, etc. started to post on the Dread forums that their markets welcome refugees (customers and vendors) from “Kingdom Market”. According to the US court documents, a cluster of cryptocurrency addresses that the Kingdom employed allowed for the tracking of specific cryptocurrency transactions to wallets registered in BILL’s name. Transactions on the Kingdom Market were facilitated through cryptocurrency payments in the form of Bitcoin, Litecoin, Monero, and Zcash, with the website operators receiving a 3% commission for processing the sales of the illicit goods. Several Dread users have claimed to be “refugees” of the Kingdom Market takedown and have claimed to have lost money it had on the former marketplace.

AlphaBay Market
By supplying stolen data, these dark web links fuel many online scams and identity theft operations, playing a critical role in the darker aspects of the internet. Based on our observations from analysis on dark web data using Lunar, we’ve identified the top 7 marketplaces on the dark web in 2025. We developed Lunar to monitor the deep and dark web, including dark web marketplace sites. The number of arrests and amount of money seized were the most for any international Justice Department-led drug trafficking operation, he said.
Kingdom Darknet Market And Onion Shop Your Sanctuary For Darknet Retai
Launched in September 2022, Torzon Market operates on the Tor network and features over 11,600 illegal products, including drugs and hacking tools. Torzon offers a premium account option for additional benefits and is valued at approximately $15 million, accepting payments in Bitcoin (BTC) and Monero (XMR). Launched in 2023, STYX focuses on financial crime, providing stolen credit card data, hacked bank accounts and access to various cryptocurrency laundering tools. Freshtools is a unique marketplace in that it does not only provide the stolen data, but it allows criminals to purchase MaaS which can cause further damage to the victims.
Investigators used the market to purchase methamphetamine, pills containing fentanyl, the personally identifiable information belonging to numerous people and a United States passport, the charging documents say. With Kingdom Market offline and the chances of its return being slim, other market operators have already taken to Dread to invite sellers to join their platforms. A message sent by the German authorities using the market’s official PGP key to registered members initially raised suspicion in the community, with many calling out the operators for exit scamming. Moreover, Dread staff mentions unofficial information about the arrest of multiple individuals who had access to the market’s server infrastructure. On Dread, a Reddit-like darknet forum, users claiming to be members of the now-seized platform mourn the money lost, which they had deposited on Kingdom Market’s escrow for future purchases.

Sorry the Kingdom disappointed you, sorry you lost money while the market was took down. The timing and value of these transactions lead your affiant to conclude that these payments were made to a Kingdom administrator. Most importantly, Kolochenko emphasized the need towards global convention and the formation of organized cybercrime divisions. He likened the scenario to defeating a hydra-which requires severing its head only to grow back in its place. The expert continued that the underground trades and sales continue as if nothing happened. As a result, Kolochenko cautioned the authorities to be vigilant and resume their investigation with other authorities.
The joint operation on Kingdom Market shutdown, led by the Frankfurt am Main Public Prosecutor’s Office – Central Office for Combating Internet Crime (ZIT) – and the Federal Criminal Police Office (BKA), began on December 16, 2023. Vlad’s love for technology and writing created rich soil for his interest in cybersecurity to sprout into a full-on passion.Before becoming a Security Analyst, he covered tech and security topics. Unfortunately I am not able to tell you any details regarding how was our market set up as I was not in developing the whole market, the old one or new one. I can say wallets were located in a different place at least it should be due to the security reasons.

Further, BILL made significant, unexplained Euro deposits totaling over €189,000 into his Slovakian bank accounts between November 2021 and April 2023.
Addressing Security & Privacy Concerns
Of course, under no circumstances should you put anything related to your real persona into the username, password, or login phrase. Moreover, you must store all the sensitive information, including your mnemonic phrase and PGP keys, in a safe place away from prying eyes. First, you ought to disable JavaScript in your Tor browser (click on the shield icon on the address bar → press the ‘Change’ button → switch your security level to ‘Safest’). Now, it’s time to solve the captcha, and it’s not like anything you’ve seen before. Your task is to click on the content of the 9 squares in their logical (from first to last) and numerical order (1-9).