CRIM2010 Chap.11 Darknet Markets: Tor, Trust and Evidence
Darknet Markets: Tor, Trust and Evidence
Darknet markets rebuild the institutions of online shopping among anonymous strangers. This chapter explains the surface, deep and dark web, how Tor relays and onion services hide the route between buyer and market, and how pseudonyms, reviews, escrow, PGP and cryptocurrency create trust.
It then reads the DrugHub dataset of 22,621 listings, comparing Australian-origin listings with the market, and sets out what such data can and cannot support. It ends with takedowns, exit scams, the Dread forum and the drift of vendors to encrypted apps.
The chapter ends with enforcement and its side effects.
Takedowns such as Hydra and Archetyp disrupt trade, but users and vendors migrate to new markets, Monero-only platforms or encrypted apps, and exit scams erode trust from within. The in-class exercise asked teams to choose between disruption, investigation, harm reduction, long-term suppression and financial disruption, and to predict how the market would respond.
What this chapter covers
- 01
Surface, deep and dark web
- 02
Tor relays and onion services
- 03
Trust: escrow, reviews and PGP
- 04
Bitcoin and Monero
- 05
DrugHub listings by origin
- 06
What listings cannot show
- 07
Takedowns and migration
Worked example · free
Cocaine among Australian-origin DrugHub listings
- 1Difference. 12.6 − 4.3 = 8.3 percentage points.
- 1Ratio. 12.6 ÷ 4.3 = 2.93, so cocaine is nearly three times as prominent among Australian-origin listings.
- 1Supported. Cocaine is over-represented among Australian-origin DrugHub listings.
- 1Not supported. That Australians buy or use more cocaine online, because listings are advertised availability and origin is self-reported.
Key terms
- Deep web
- Online content that is not indexed or publicly accessible, such as private databases and email.
- Relay
- A Tor computer that accepts traffic and forwards it one step further along the route.
- Mirror site
- An alternative address for the same marketplace, used for resilience.
- Escrow
- A market mechanism that holds payment until delivery is confirmed, reducing transaction risk.
- Exit scam
- A market operator closing suddenly and keeping users’ funds.
- PGP signature
- A cryptographic signature that lets others verify who sent a message and that it was not altered.
- Monero
- A privacy-focused cryptocurrency designed to obscure sender, receiver and amount.
Darknet Markets: Tor, Trust and Evidence FAQ
Is the deep web the same as the dark web?
No. The deep web is any content that search engines do not index, including private databases, email and learning systems, and most of it is legitimate. The dark web is services on darknets such as Tor that need special tools to reach.
Does Tor make users completely anonymous?
Tor protects network-level privacy by routing traffic through several relays so that no single relay knows both the user and the destination. It does not make anyone automatically or perfectly anonymous, and attribution can come from mistakes, financial traces, seized data or deliveries.
Where are darknet drug vendors moving?
Many are shifting from markets to encrypted chat and social media such as Telegram, Signal and WhatsApp, to avoid exit scams and takedowns, reach less technical buyers and avoid fees. Vendor shops received more than USD 600 million in 2024, more than double the year before.
What role does the Dread forum play?
Dread is an onion-based discussion forum, launched in 2018, that sits beside the markets rather than acting as one. Users share market news, vendor reputations, phishing-mirror warnings and reports of failed withdrawals, so it can act as an early warning system, though its claims still need checking.
Why do markets run mirror sites?
Mirrors are alternative addresses for the same market that keep it available when one address goes offline and make takedowns harder. They also create risk, because fake mirrors can imitate a market to steal from users, so buyers rely on signed links and trusted channels.
Assessment move
Draw the Tor path and say what each relay knows, then list the six market layers with the problem each solves and where investigators can intervene. Practise the DrugHub calculations, difference and ratio, for at least three subcategories, and memorise the inference limits word for word. Finish with a short timeline of Hydra, the 2024 market trends and the 2025 Archetyp takedown for questions on enforcement and displacement.
Add a short list of the four differences between Russian-language and Western markets for comparison questions.
Working through Darknet Markets: Tor, Trust and Evidence in CRIM2010? Sia is AskSia’s AI Sociology tutor — ask any CRIM2010 Darknet Markets: Tor, Trust and Evidence question and get a clear, step-by-step explanation grounded in how CRIM2010 is taught and assessed. Read this chapter free, then take your hardest questions to Sia.
