This discovery gave law enforcement agencies the leverage they needed to intensify their efforts against Incognito. It’s May 18, 2024, and federal agents are watching every move of a 23-year-old man named Rui-Siang Lin as he walks through John F. Kennedy International Airport. Lin is unaware that his every step is being monitored, unaware that the online empire he built, the infamous Incognito Market, is about to crumble.

Torrez Darknet Market
That revenue went to fund the site’s operations, including servers and what the DOJ described as “employee” salaries. All transactions were conducted in cryptocurrency—primarily Bitcoin and Monero—allowing customers and vendors to move funds without using traditional financial rails. Monero’s privacy features in particular obscured sender, receiver, and transaction amounts, posing challenges to investigators tracing flows. Incognito Market, once one of the most secure and reliable platforms on the dark web, was no more. Other darknet markets quickly took notice, with many administrators shutting down their operations in fear of being the next target. Users, too, began to migrate to smaller, more obscure markets, hoping to avoid the attention of law enforcement.
Incognito Admin Arrest And SuperMarket Wallet Drain: Darknet Marketplaces Plunge Into Uncertainty
“Under the promise of anonymity, Lin’s alleged operation offered the purchase of lethal drugs and fraudulent prescription medication on a global scale,” said James Smith, an assistant director in the FBI’s New York office. The legal case against Rui-Siang Lin is being prosecuted in the Southern District of New York, a jurisdiction known for tackling high-profile cybercrime and narcotics cases. Once Lin was in custody, the indictment against him was unsealed, revealing an array of serious charges. Lin was accused of being the principal operator of a Continuing Criminal Enterprise (CCE) – often referred to as the “kingpin” or “drug lord” statute – due to the large-scale, ongoing narcotics trafficking conspiracy he oversaw.
Recent Shutdowns And Exit Scams
Thank you for choosing Incognito Link as your marketplace for purchasing Darknet goods. Your needs and Incognito Market look forward to serving you for many years to come. The statutory minimum and maximum sentences are prescribed by Congress and are provided here for informational purposes only, as any sentencing of the defendant will be determined by a judge. New Incognito Market users are treated to an ad for $450 worth of heroin. In the past 24 hours, the homepage for the Incognito Market was updated to include a blackmail message from its owners, saying they will soon release purchase records of vendors who refuse to pay to keep the records confidential.

Man Charged With Murder After Deadly “ding Dong Ditch” Shooting

Few journalists care to cover the darknet today – much less to report on its safety issues. Dozens of markets have come and gone, and to Tor users, mainstream media doesn’t seem to care when anything happens in their neighborhood. For four years Darknetlive was a rare unbiased source of news for users of Tor hidden services (the “darknet”).
Upon further testing, the substance turned out to be fentanyl, a highly lethal synthetic opioid. Drug Enforcement Administration, a mere two milligrams of the substance can be fatal. In May 2024, the US Department of Justice (DOJ) announced the arrest of alleged Incognito Market mastermind Rui-Siang Lin.

Charges, Court Proceedings, And Ripple Effects
Lin quickly became involved in various research projects, often working late into the night on coding challenges and cryptography puzzles. It was during this time that Lin first encountered the world of cryptocurrencies, a discovery that would change the course of his life forever. In the DOJ’s criminal complaint against Lin, it points to a handwritten document the FBI pulled from his email, which appears to sketch out a flow chart for a dark-web market’s mechanics. The complaint’s FBI affidavit says Lin emailed himself the sketch in March 2020 when he was at most 19 years old. It describes functionality such as how “vendors” and “buyers” would register, make purchases, and encrypt shipping addresses. In a LinkedIn post in April 2024, Lin shared some pictures from a “cybercrime and cryptocurrency training” at the Saint Lucia Police Academy.
How To Report A Scam Or Illegal Activity On The Darknet
Conversely, some privacy advocates look at cases like Lin’s and argue that people like him misuse anonymity tools, making it harder for those tools to be available for legitimate purposes. It’s a nuanced debate, but the legal outcome here – with Lin held accountable in a high-profile conviction – will undoubtedly be cited as a victory in the fight against cybercrime and illicit online trade. In 2025, top darknet marketplaces continue to operate, though their environment has become more volatile. With frequent law enforcement takedowns, exit scams, and rising user caution, many platforms have disappeared, while others have adapted by adopting stricter security measures, multisig escrow, and enhanced vendor screening. Top darknet marketplaces (also called dark web markets or hidden services) are anonymous marketplaces reachable only via specialized networks like Tor. They often sell illegal drugs, hacking tools, fake IDs, stolen data and other contraband.
- Fascinated by the anonymity that cryptocurrencies like Bitcoin and Monero offered, Lin started experimenting with small-scale darknet markets.
- Operating under the pseudonym ‘Pharaoh,’ Lin controlled every aspect of the market, from its technology infrastructure to its financial operations.
- The mission of the EDTF is to disrupt, dismantle, or render ineffective, organizations involved in the laundering of proceeds of narcotics trafficking and other financial crimes.
- That extortion threat, combined with increased tracing and investigative pressure, led many users to flee the platform, dramatically reducing deposits and facilitating law enforcement’s final takedown.
- Those wishing to trade on Incognito Markets can register by paying a vendor fee of €650 (payable in XMR).
These sites operate as self-contained platforms with .onion addresses that are not indexed by Google. Users need the Tor Browser to resolve these URLs (Tor routes traffic through multiple encrypted relays to hide your IP). The message included a list of the “top” vendors who had paid the ransom to protect their customers and themselves. The payments ranged from $100 to $20,000, depending on how many transactions each person had handled. They didn’t want their business to be exposed to the police, but paying the blackmailers could lead to even higher demands. Instead, he warned users that he had records of over 500,000 orders and more than 860,000 cryptocurrency transaction IDs.
Their investigation, which began in 2022, was a combination of traditional detective work and advanced cyber tactics. Undercover agents posed as both buyers and sellers, engaging in hundreds of transactions on the platform, gathering as much information as possible about the market’s operations. The marketplace was raking in millions of dollars in cryptocurrency, with Lin taking a 5% cut from every transaction. His technical expertise, combined with his shrewd business acumen, allowed him to build a fortune in the shadows of the dark web. But as Incognito’s user base expanded, so too did the scrutiny from law enforcement agencies around the world. To further enhance anonymity, Incognito Market operated a sophisticated system for managing transactions.
Incognito Market Vendors
Before sharing sensitive information, make sure you’re on a federal government site. On the X platform, formerly known as Twitter, where he has been active since March 2022, most of Lin’s posts are about cryptocurrencies. He also posted about the training he did for the Saint Lucia Police, but this time, he covered his face with an emoji. In an interesting post, he appeared to be proud of the newly elected president in Taiwan, suggesting that he likes the current regime, which is opposing China’s pressure.
The Aftermath Of Lin’s Arrest
Operating under the pseudonym ‘Pharaoh,’ Lin controlled every aspect of the market, from its technology infrastructure to its financial operations. On May 21, after online media wrote about Rui-Siang’s arrest and rumors spread throughout the darknet community, ‘MommaBear’, one of the administrators of the SuperMarket darknet marketplace, posted on Dread that the Cold Storage Escrow and Joint Pocket wallets had been emptied. LIN was arrested at John F. Kennedy Airport on May 18, 2024, and will be presented in Manhattan federal court before U.S. The rise and fall of Incognito Market is a chapter in the ongoing evolution of darknet marketplaces – a world that has proven remarkably adaptive in the face of law enforcement crackdowns. To put Incognito’s trajectory in context, it helps to compare it with its predecessors and contemporaries, and to consider what its downfall implies for the future of illicit online markets.