How these markets end — and what it means for the people inside them

AlphaBay, then the largest marketplace of its kind, was taken down on 20 July 2017 by United States and European authorities; it had reached more than 200,000 users and 40,000 vendors. In a coordinated move, Dutch police had already taken covert control of its rival Hansa a month earlier — and when AlphaBay fell, its users fled to Hansa in droves, with new registrations there jumping eightfold while everything they did was monitored. Hansa was shut down a month later. [1]

What it shows: the "safe alternative" can be a trap; and market infrastructure, once seized, becomes a surveillance instrument before it becomes evidence.

The Canada-only marketplace that We The North presented itself as succeeding went offline in 2021. In January 2022, Canada's telecom regulator announced CA$300,000 in penalties against four individuals connected to it, following searches around Montreal with support from the RCMP and the Sûreté du Québec. The regulator described the marketplace as "one of the largest Dark Web marketplaces of its kind in the world" and a significant contributor to harmful cyber activity in Canada. In August 2022, the regulator's public register recorded a voluntary undertaking by the marketplace's administrator, including a CA$40,000 monetary payment and other conditions. [2][3]

What it shows: the ending can arrive through a regulator rather than a raid — and enforcement can reach the marketplace's clear-web side, its administrator, and its vendors.

A coordinated action by authorities in nine countries seized the Monopoly Market and arrested 288 buyers and vendors across Europe, the United States and Brazil — 153 of them in the United States alone — alongside €50.8 million in cash and virtual currencies, 850 kilograms of drugs and 117 firearms. The marketplace's operator was arrested in Austria and extradited to the United States. [4]

What it shows: enforcement does not only chase operators. It collects the users.

One of the biggest and longest-standing marketplaces at the time, Tor2Door closed in September 2023. Its administrators went unresponsive, no takedown was announced — and it is widely believed the operators simply left with the funds users had entrusted to the platform. [5]

What it shows: trust in a brand is worth nothing at withdrawal time.

German authorities announced on 21 March 2024 that they had taken down Nemesis, seizing infrastructure in Germany and Lithuania and cryptocurrency worth approximately US$102,000. At the time of seizure, the marketplace held 150,000 user accounts and over 1,100 seller accounts worldwide. [5]

What it shows: a user database is not a diary. It is a target list.

After a marketplace career that saw more than US$100 million in drug sales, Incognito's administrators attempted an exit scam in March 2024 — and then did something worse: a message appeared on the site threatening to publish users' cryptocurrency transaction and chat records unless they paid fees ranging from US$100 to US$20,000. The administrator ("Pharaoh") was arrested in May 2024 while transiting through a New York airport and later pleaded guilty to narcotics conspiracy, money laundering and the sale of adulterated and misbranded medications. [5][6]

What it shows: the platform's records are the operators' second revenue stream — turned against the very users who generated them.

After a turbulent year in which the market was repeatedly inaccessible and users complained they could not access funds, the alleged administrators of Bohemia and its sister site Cannabia shut the marketplaces down and attempted to escape with the profits. They were arrested in October 2024, following an investigation launched in 2022 during which Dutch police traced the operation's servers in the Netherlands. [5]

What it shows: even established brands steal from their users — and investigations can run quietly for years before they surface.

Announced in May 2025, Operation RapTor — led by the US Joint Criminal Opioid and Darknet Enforcement team with Europol and partners across four continents — resulted in 270 arrests in ten countries, more than US$200 million in cash and cryptocurrency seized, two metric tons of drugs, 144 kilograms of fentanyl and over 180 firearms. The suspects were identified largely through intelligence and evidence from earlier marketplace takedowns: Nemesis, Tor2Door, Bohemia and Kingdom Markets. [6]

What it shows: as agencies put it themselves — the takedown of a marketplace is not the end of the story. It is the beginning of the investigations.

Archetyp — the biggest and longest-running western marketplace of its generation, operating for over five years — was seized in June 2025 in an international operation spanning six countries, with its main infrastructure hit in the Netherlands. Its administrator was arrested and assets worth €7.8 million were seized. [5][7]

What it shows: longevity builds user trust — and gives investigators more to seize.

Users began to experience difficulties accessing Abacus in June 2025. A month later, when the site had not returned and over US$200,000 worth of cryptocurrency had been moved out of the market's hot wallet, it was deemed an exit scam. [5]

What it shows: the money does not wait for an announcement. It leaves first.

Kerberos, a consistently active marketplace since 2022, is believed to have exit-scammed in February 2026, stranding user deposits. [5]

What it shows: the ending does not improve with repetition. Every generation of marketplaces repeats it.