Lin managed to keep his darknet identity separate from his day job for years, even as he moved from Taiwan to the Caribbean for work. He obtained a Chainalysis Reactor Certification, a professional accreditation for using a leading blockchain analysis software. It also showcased his technical acumen – straddling the line between criminal utility and software entrepreneurship.
Darknet Markets Explained
Rui-Siang Lin, known online as “Pharoah,” was arrested at New York’s John F. Kennedy Airport on May 18 and appeared in federal court on Monday, May 20, the Manhattan United States Attorney’s Office wrote in a statement. The FBI claimed it found Incognito Market’s alleged owner, Rui-Siang Lin, by tracking crypto from the dark web drug market to a crypto exchange account allegedly in his name. Its operational model has become the industry standard, directly influencing user expectations and competitor development. This environment has enabled the rise of specialized darknet drug stores that operate with a focus on efficiency and product quality.
"Incognito Market" Founder Arrested At JFK Airport, Accused Of Selling $100 Million Of Illegal Drugs On The Dark Web
According to the indictment, between 2022 and 2023, law enforcement agents executed search warrants to gain access to three servers used to operate the marketplace and containing marketplace data. The indictment alleges the illegal sale of more than $100 million in illicit narcotics and misbranded prescription drugs, including heroin, cocaine, LSD, MDMA, oxycodone, methamphetamines, ketamine, and alprazolam. On Dreads, the co-administrator of the Supermarket announced to the community on May 21, 2024, that the wallets had been emptied and that the only person who would have had access to them was “FatherBear”, the other administrator of the marketplace. “This arrest underscores the dedicated, ongoing efforts of law enforcement to identify and dismantle illicit drug networks operating from every shadowy recess of the marketplace,” said Commissioner Edward A. Caban of the New York Police Department (NYPD). It also marked a significant victory in the battle against online drug trafficking.
Bitcoin For Safe And Private Darknet Purchases
In the 41 months that Incognito Market was open, it facilitated the sale of more than $100 million of narcotics. The site allowed buyers to search through thousands of listings for narcotics of their choice. The dark web’s Incognito Market allowed people to buy and sell narcotics worldwide. The Incognito admin is one of the fastest builders that the darknet has ever seen. Darknetlive, Libre, Sector, Antinalysis, and Incognito Market.
Operation RapTor: The Largest Darknet Takedown In History
This act of desperation was a clear indication that Lin’s time was running out, and it set off alarm bells within the darknet community. The FBI was able to identify several such errors during their investigation, which gave them critical insights into how the market operated and who was involved. PGP (Pretty Good Privacy) is one of the most secure forms of encryption available, and it is widely used in both legitimate and illicit operations to protect sensitive information. Another significant obstacle for law enforcement was Incognito’s use of PGP encryption for all communications. This trail, though difficult to trace, can be exploited by skilled investigators. The role of cryptocurrencies in the dark web economy cannot be overstated.
Some were taken down by law enforcement, others just vanished overnight with users’ money. The story of dark web marketplaces kicks off with Silk Road, launched in 2011. By supplying stolen data, these dark web links fuel many online scams and identity theft operations, playing a critical role in the darker aspects of the internet.
The Paradox Of PHP’s Ubiquity And Its Architectural Security Debt
It can only be used to access hidden services specific to the I2P network. Unlike Tor, however, it cannot be used to access the public internet. Tor over VPN requires you to place some trust in your VPN provider but not your ISP, and is best if you want to access .onion websites. A logless VPN, which doesn’t store any traffic logs nor session logs is highly preferable. Much of it is tucked away in databases that Google is either uninterested in or barred from crawling.
Incognito Market
- From 2003, the "Research Chemical Mailing List" (RCML) would discuss sourcing "Research Chemicals" from legal and grey sources as an alternative to forums such as alt.drugs.psychedelics.
- We spoke with Ruben van Well, Chief Inspector of Team Cybercrime Rotterdam from the Dutch National Police, to learn about their involvement in the Genesis Market case, and how the Genesis operation worked.
- The peer-to-peer routing structure is more advanced, and it does not rely on a trusted directory to get route information.
- The majority of the marketplaces are in English, but some have opened in Chinese, Russian, and Ukrainian.
Marketplaces that reach the top of the ecosystem, in terms of volume, user base, listings, and reputation, often become priority targets for law enforcement. Dread’s administrator, Hugbunter — who was in close contact with the Abacus team — believes Abacus’s disappearance was not the result of a law enforcement action. This signals a growing preference among darknet operators for obfuscation and anti-surveillance tools. TRM Labs analysis shows that nearly half of the marketplaces launched in 2024 accepted only Monero — a sharp increase from just over one-third in 2023. Although it served a global audience, it particularly focused on the Australian market, incorporating Australian cultural references into its marketing and recruiting an Australia-dedicated moderator. In late June 2025, users began reporting withdrawal issues with Abacus Market, which typically indicates an impending exit scam.
However, over the years some markets have evolved beyond this capacity to develop a robust catalog of illicit services like money laundering, fiat offramping, and products that enable cybercriminal activities like ransomware and malware attacks. The recovery pattern is fairly consistent until the Hydra Marketplace closure, after which no dominant darknet market emerged. While tactics like these may have helped boost revenue for both markets, again, they have yet to match Hydra’s sizable financial success. And, perhaps the most aggressive marketing stunt the darknet market ecosystem has seen yet, in December of that year, Kraken Market wrapped a bus in an advertisement that included a QR code for the market’s website.
In the DOJ's criminal complaint against Lin, it points to a handwritten document the FBI pulled from his email, which appears to sketch out a flow chart for a dark-web market's mechanics. Lin has been charged with not only narcotics conspiracy and money laundering but also running a “continuing criminal enterprise,” the so-called “kingpin statute” reserved for organized crime leaders who allegedly oversaw at least five employees. Only earlier this week did it become clear exactly what Lin's “professional background and qualifications in the field” allegedly entailed, seemingly unbeknownst to either his Taiwanese employers or his St. Lucian law enforcement trainees.
The entity “DNM Aggregator” that appears within each category refers to a service we’ve identified as being in control of multiple, disparate darknet markets. Western drug flows in particular come from US-domiciled exchanges and trace flows from those to darknet markets. Throughout the history of the darknet market ecosystem, at different turns one marketplace has typically played the dominant role. The marketplace demanded buyers and vendors use its own crypto services so it could skim 5% of every purchase and offer an escrow service, the Department of Justice (DOJ) alleged. A 23-year-old man has been arrested in New York and charged with owning, running and profiting from a $100-million dark web narcotics marketplace after authorities claimed to have tracked crypto transfers that uncovered his real identity. Furthermore, the practice of maintaining multiple official links and mirrors ensures stable and reliable access for users, mitigating the impact of any single point of failure.
They know this is their moment—the moment to bring down the kingpin of one of the dark web’s most notorious drug markets. Instead, he warned users that he had records of over 500,000 orders and more than 860,000 cryptocurrency transaction IDs. Additionally, the market staff imposed a full ban on all opiates and opioids (hydrocodone, oxycodone, heroin, etc), along with all other narcotics that fall under the deliriant class, not just fentenyl like many other darknet markets. Srinivasan received virtual currency as payment for the drugs and then routed that virtual currency through cryptocurrency exchanges.
Access Our Coverage Of TRON, Solana And 23 Other Blockchains
Furthermore, it has been discovered that the administrator of Incognito Market has threatened users who have conducted drug transactions on the platform, “If they do not pay a ransom, their transaction history will be made public.'' In June 2015 the European Monitoring Centre for Drugs and Drug Addiction (EMCDDA) produced a report citing difficulties controlling virtual market places via darknet markets, social media and mobile apps. By 2015, some of the most popular vendors had their own dedicated online shops separate from the large marketplaces. This suggests that law enforcement responses to cryptomarkets result in continued security innovations, thereby making markets more resilient to undercover law enforcement efforts.
Security researchers have been monitoring forums within the cybercriminal underworld to investigate the leading markets operating in 2026. Some markets are invite-only or have strict registration rules to keep out scammers and law enforcement. Some fake sellers take your crypto and never ship what you ordered, or phishing sites that look like real marketplaces but steal your login info.
Reliable Drug Supply From The Darknet
Websites and data on the dark web do typically require a special tool to access. Our rigorous research and testing have revealed revealing truths and busted myths. It’s designed as an environment to elude detection, where site owners and visitors hide their identities.
