But he sees it as a way to both make AlphaBay invulnerable to future law enforcement takedowns and to pay back the dark web’s users for the millions they lost when the original AlphaBay server was seized. “When it comes to the money making this is investment in the future of AlphaBay,” DeSnake writes. “When it comes to ideology I think that is pretty clear. The reason is to make good to the AlphaBay name … this is our way to reimburse the darknet scene for what has happened.”
AlphaBay Market: A Deep Dive Into The Dark Web Marketplace
DeSnake has broken this mold with their dramatic return to the public eye that included interviews with the media and identity verification through a potentially compromised PGP key. During this research, DarkOwl discovered a surface web domain that mirrors much of the information DeSnake shared on Dread, but with a Tor link to the market that is not in the mirrors.txt verified links list from AlphaBay. The surface web domain is likely setup specifically to direct users to a phishing site where their credential information can be stolen. One user openly joked they would stick to purchasing their drugs on social media.
Users Flocking To New Markets
DeSnake says his security practices—both the ones he’s applying within AlphaBay and on a personal level—go far beyond those of his predecessor, Cazes, who went by the online handle Alpha02. Cazes was caught, in part, through Bitcoin blockchain analysis that confirmed his role as AlphaBay’s boss, a trick that would be far more difficult, if not impossible, with Monero. DeSnake argues that new safeguards like these will make AlphaBay that much harder to remove from the dark web this time around. “I had given Cazes many ‘holy grails’ of anonimity, but he chose to use only certain things while he branded other methods/ways as ‘overkill,’” DeSnake writes, in his seemingly foreign-inflected and occasionally misspelled English.
The Full List Of Trusted Darknet Markets
Instead, he left much of the site’s communications work to his second-in-command and head of security, a figure who went by the pseudonym DeSnake. Trying to give the impression of an inexperienced driver, Nueng slowly rolled the car toward a model home and real estate office at the end of the cul-de-sac. She signaled to a security guard outside the house that she had taken a wrong turn and needed to pull a 180. She heard him shout at her to back directly out instead, that the street was too narrow for a three-point turn. A slight, 46-year-old agent of the Royal Thai Police with a short, boyish haircut, she wore a white polo shirt and black pants rather than her usual military-style uniform. Both she and the female officer beside her in the passenger seat were working undercover.
See Why DarkOwl Is The Leader In Darknet Data
The site was seized, and its alleged administrator, Alexandre Cazes, was arrested in Thailand. FBI deputy director Andrew McCabe acknowledged shutting down such markets was like playing whack-a-mole. His agency would likely have to take on more massive dark web marketplaces in the future, he said. A recent study by the University of Manchester and think tank Rand Europe found 811 arms-related listings on just 12 dark web marketplaces. The researchers found nearly 60% of the weapons came from the US and most of the sales were headed to Europe. Worryingly, one gun bought on a cryptomarket was used in a terrorist attack in Munich in 2016.
Search Code, Repositories, Users, Issues, Pull Requests
Once registered, they could browse through various categories of listings, including drugs, weapons, stolen credit card information, counterfeit goods, and hacking tools. Transactions were conducted using the platform’s internal escrow system, which held funds until both parties confirmed the completion of the transaction. Thai authorities seized the servers hosting AlphaBay, and cut off access to users, but did not publicly announce the closure or takeover of the platform. The rumours this incited among the malicious actors on dark web forums ranged from technical issues, to exit scams in which dark web marketplace administrators shut down the platform and to steal the users’ money. The shutdown of AlphaBay marks a significant moment in the landscape of the deep web, highlighting both the vulnerabilities within illegal marketplace platforms and the efforts of law enforcement to tackle cybercrime.
- A kind of practical paranoia permeated DeSnake’s messages to WIRED, both on a personal level and in his plans for AlphaBay’s revamped technical protections.
- These issues raise questions about the overall stability and reliability of the platform for its users.
- Incognito Market runs 20,000+ listings and $2.8 million monthly trades with BTC and XMR, holding a 5% market stake.
- It makes up for this with enhanced security and user safety features, helping users to ensure they are not getting phished.
Key Takeaways From The AlphaBay Shutdown
This revival garnered significant attention within the darknet community, as AlphaBay’s return marked a comeback of a marketplace that had once been synonymous with illegal online trade. Operation Bayonet, which would ultimately lead to the shutdown of several prominent marketplaces, began with Dutch police seizing another lesser-known market called Hansa Market. After compromising Hansa, authorities secretly operated the market for almost a month. If you’re seeking a safe, reliable marketplace, We The North Market offers an excellent alternative to risky dark web platforms.
Power Your Insights With Data You Can Trust
DeSnake, by contrast, makes the very bold claim that his work PC could not implicate him even if seized. With these security measures in place, you can shop with peace of mind knowing that your transactions are safe, your data is secure, and you’re dealing with verified vendors. Emerging trends shaping darknet marketplaces in 2025—insights into cryptocurrency trading and security. The top performers in darknet marketplaces for 2025, excelling in trade volume, vendor ratings, and market influence. One week after Alphabay first went down, the Wall Street Journal reported that the site’s servers had been seized in a law enforcement raid and that its founder, Canadian Alexandre Cazès, had apparently committed suicide in a Thai prison. The resulting flood of Alphabay refugees became so large that the NHTCU shut down new registrations for ten days.
But all of the defensive wizardry that DeSnake describes—both AlphaGuard and the decentralization project—remain largely unproven talk, says Flashpoint analyst Ian Gray, who closely monitors dark web markets. The decentralization plan, for instance, would require collective buy-in from a large number of developers and network operators for what would likely be seen as an essentially illegal project. Gray points out that DeSnake hasn’t published any code for either that system or AlphaGuard, and questions why he would relaunch AlphaBay four years after its takedown without any real progress toward his decentralization dream. “He hasn’t really demonstrated anything besides launching a marketplace,” Gray says. “I’m distrustful of DeSnake, and I think across the communities there’s a general distrust.”
This feature helped sellers increase their product visibility without the need for continuous reposting or additional advertising, thereby optimizing their reach within the marketplace. Security researchers have been monitoring forums within the cybercriminal underworld to investigate the leading markets operating in 2024. Some fake sellers take your crypto and never ship what you ordered, or phishing sites that look like real marketplaces but steal your login info.
It locks your messages so only the right person can read them—super handy when you’re dealing with sensitive stuff on the dark web. If you’re curious about what’s going on in the dark web next year, you’re in the right place. I’ve been digging into marketplaces like Abacus and AlphaBay for a while now, and this page breaks down what’s hot in 2025. You’ll find reviews, quick tables with the nitty-gritty details, and some practical tips on using Monero (see how) or setting up PGP (check it out). Dutch police discovered the true location in 2016.4 Law enforcement quickly began monitoring all actions on the site.
First to report on the raids was Canadian media 1, 2, who confirmed with Royal Canadian Mounted Police that two raids took place at residences in the city of Trois-Rivières, and another raid at a business address in Montreal. Some users claim that mr_white and his team from WHM are to blame for last week’s DDoS while others speculate that HugBunter himself could be mr_white. Unfortunately, DeSnake’s contributions written in a mixture of English and Russian backfired and senior members of XSS berated them for their lack of operational security and inability to properly understand the dynamics of the Russian language.
