There are more hypotheses to follow, but the most reasonable one is that there could be some relationship in terms of crypto accounts shared between ‘FatherBear’ and ‘Pharao’, which could lead to other traces. In this case, ‘FatherBear’ will keep a low profile for a while with all the money and then probably resurface with a different identity. The extortion message includes a “Payment Status” page that lists the darknet market’s top vendors by their handles, saying at the top that “you can see which vendors care about their customers below.” The names in green supposedly correspond to users who have already opted to pay. The website invites visitors who prioritize privacy and security while making payments on the internet.

Secret Service Dismantles Telecom Threat That Could Have Crippled UN General Assembly
This last charge invokes statutes under the Food, Drug, and Cosmetic Act, illustrating prosecutors’ creativity in addressing the harm caused by the marketplace (essentially treating Lin not just as a drug trafficker, but as someone endangering public health by distributing mislabeled medicine). To become an Incognito Market vendor, people were required to register with the site and pay an admission fee. In exchange for listing and selling narcotics as a vendor on Incognito Market, each vendor paid 5% of the purchase price of every narcotic sold. That revenue funded Incognito Market’s operations, including paying “employee” salaries and for computer servers. To facilitate these financial transactions, Incognito Market had its own “bank,” which allowed its users to deposit cryptocurrency on the site into their own accounts. After a narcotics transaction was completed, cryptocurrency from the buyer’s account was transferred to the seller’s account, less the 5% fee that Incognito collected.
A Darknet Empire
In October 2021, the defendant also gave a YouTube interview explaining how his anti-DDoS tool “PoW Shield” worked for Pentester Academy TV, demonstrating his technical skills. Rui-Siang Lin is a 23-year-old developer who describes himself on LinkedIn as a “crypto enthusiast and developer” from Taiwan. He claims to be an employee of Taiwan’s Ministry of Foreign Affairs, working as a “diplomatic specialist” in the technical section of the Taiwanese embassy in St Lucia. Previous jobs include a three-year internship at Cathay Financial Holding as a “Backend and Blockchain R&D” since November 2019. The former Incognito Market administrator claims to have graduated from National Taiwan University in June 2023. On May 18, the latest post on LinkedIn was related to the celebration of obtaining the Chainalysis Reactor Certification (CRC).
From Silk Road To RapTor: The Evolution Of Darknet Markets
It promotes business continuity and reduces threats posed by law enforcement crackdowns. Darknet markets like Incognito operate on a decentralized, peer-to-peer basis, allowing vendors to sell illicit or otherwise restricted goods and services. These markets typically rely on cryptocurrency, especially Bitcoin and Monero, to ensure transactions are secure and anonymous. Hidden marketplaces on the dark web have long been a staple for those seeking to engage in illicit transactions. Since their emergence on platforms like Tor and I2P in 2011, these marketplaces have offered a one-stop shop for buyers and sellers, facilitated by the anonymity of cryptocurrency payments.
Buyers are able to browse the listings, engage in communication with the seller, and purchase items through an encrypted payment system. One of the key features that sets Incognito Market apart is that it uses Monero, a privacy-focused cryptocurrency, as its primary payment method. Monero allows our Incognito customers to make purchases with complete anonymity, providing additional protection from external participants in the Incognito darknet link market.
Incognito Market Vendors

On May 18, 2024, Homeland Security Investigations (HSI) New York, in coordination with law enforcement partners, arrested Rui-Siang Lin at John F. Kennedy International Airport in connection with his operation and ownership of Incognito Market. The arrest of Riu-Siang Lin, the former administrator of the closed Incognito marketplace, by the US authorities on 18th May is causing a domino effect in the underground illegal communities, leading to an alleged exit plan on the SuperMarket. On Dreads, the co-administrator of the Supermarket announced to the community on May 21, 2024, that the wallets had been emptied and that the only person who would have had access to them was “FatherBear”, the other administrator of the marketplace. That exchange account, too, was registered in Lin’s real name, according to the DOJ.
DarkDotFail’s investigation exposes the extent of the threat, from accumulated private messages to transaction details and order information. The specter of law enforcement involvement only adds to the sense of dread, as the deadline for the release of sensitive data draws near. The threat of law enforcement involvement loomed large as Incognito’s administrators announced their plans to publish a dump of over 557k orders and 862k crypto transaction IDs by the end of May. Users of Incognito Market were able to search thousands of listings for illegal narcotics, including heroin, cocaine, LSD, MDMA, oxycodone, methamphetamines, ketamine, and alprazolam.
‘Tokenization Is Going To Eat The Entire Financial System’ Says Robinhood CEO
Administrators of the site then reportedly began extorting vendors, ordering them to pay a fee ranging from $100 to $20,000, depending on their size, or else risk having their customers’ data leaked. U.S. authorities have arrested and charged a Taiwanese national with operating darknet drug bazaar Incognito Market, which he allegedly used to facilitate over $100 million in crypto-denominated sales of illegal narcotics including fentanyl. Incognito Market was designed to foster seamless narcotics transactions across the internet and across the world and incorporated many features of legitimate e-commerce sites, such as branding, advertising and customer service. Upon visiting the site, users were met by a splash page and graphic interface, which is pictured below.

This enigmatic platform, operating beyond the gaze of conventional search engines, offers users a glimpse into a world where transactions and interactions remain shrouded in secrecy. Security-conscious users develop systematic verification protocols for marketplace authenticity assurance. Those processes help guard against sophisticated phishing attacks targeted towards darknet marketplace users. The identity of the Incognito Market proprietor is not well known due to the anonymous nature of darknet operations. Administrators of such marketplaces use pseudonyms and secure operations to cover their identities.

The success in tying cryptocurrency to a real identity reinforces law enforcement’s confidence in tackling crypto-enabled crimes. We may see even greater use of blockchain analytics warrants and collaboration with crypto exchanges. Additionally, the case highlights the value of interagency task forces (like the El Dorado Darkweb-Cryptocurrency Task Force cited in Lin’s arrest). This model of combining drug enforcement agents, cybercrime experts, and even financial regulators is likely to be replicated for future darknet investigations. Lin managed to keep his darknet identity separate from his day job for years, even as he moved from Taiwan to the Caribbean for work.
Once you have downloaded the browser, install it on your device, after installation you will be able to open any sites, including onion. Thank you for choosing Incognito Link as your marketplace for purchasing Darknet goods.
How AI Transforms Criminals Into Data Hunters
“Stay posted and fuck LE,” Pharoah wrote, using the abbreviation LE to mean “law enforcement.” Antinalysis eventually returned, however, and pivoted last year to acting instead as a service for swapping bitcoin for monero and vice versa. Lin was arrested at John F. Kennedy Airport on May 18, and will be presented in Manhattan federal court before U.S. After logging in with a unique username and password, users were able to search thousands of listings for narcotics of their choice.

This approach mirrored the playbook of earlier darknet markets and contributed to Incognito’s rapid growth. In addition to the CCE charge (under U.S. drug laws), Lin faced counts of conspiracy to distribute narcotics, conspiracy to commit money laundering, and conspiracy to sell adulterated and misbranded drugs. The narcotics conspiracy charge (for the multitude of drug deals enabled by Incognito) carries a 10-year mandatory minimum and up to life in prison. The money laundering charge – reflecting the financial transactions to wash and move the crypto profits – is punishable by up to 20 years in prison. The adulterated drugs conspiracy, which is a more unusual charge in this context, relates to the sale of fake pharmaceutical pills (like the fentanyl passed off as oxycodone) and carries up to 5 years in prison.
Incognito Darknet Market
Darknetlive once kept a close eye on Tor hidden services and quickly shared warnings when sites were scamming or otherwise acting suspiciously. Matthew Podolsky, the Acting United States Attorney for the Southern District of New York, announced today that GREI MENDEZ was sentenced to 45 years in prison for trafficking fentanyl out… On the X platform, formerly known as Twitter, where he has been active since March 2022, most of Lin’s posts are about cryptocurrencies. He also posted about the training he did for the Saint Lucia Police, but this time, he covered his face with an emoji. In an interesting post, he appeared to be proud of the newly elected president in Taiwan, suggesting that he likes the current regime, which is opposing China’s pressure.
At that time, the project administration threatened to publish a complete dump of 557,000 orders and 862,000 hashes of cryptocurrency transactions by the end of May. They understood that the administrators had already committed an exit scam, as they could not withdraw their money. On May 21, after online media wrote about Rui-Siang’s arrest and rumors spread throughout the darknet community, ‘MommaBear’, one of the administrators of the SuperMarket darknet marketplace, posted on Dread that the Cold Storage Escrow and Joint Pocket wallets had been emptied.
- As with any other darknet market, accessing the Incognito Market link poses significant legal and safety dangers.
- Its suppliers tend to be smaller and less reputable, but that doesn’t necessarily mean they’re inferior; just less experienced.
- Finally, despite his supposed expertise in cryptocurrency tracing and digital privacy, it was Lin’s own relatively sloppy money trails that, the DOJ claims, helped the FBI to trace his real identity.
- Operational security has increased, with mandatory PGP encryption, two-factor authentication, and more frequent use of VPNs and anonymization tools.
- Incognito Market, which was shut down in March, was an online dark web marketplace that allowed users to buy and sell illegal drugs anonymously, according to the Justice Department.
The marketplace has been active since July 1, 2023, and has been among the top five infamous marketplaces providing shopping for illicit goods in the darkweb, offering more than 16 categories of narcotics and over 1000 products. Compared to other marketplaces, it offered innovative and a much more user-friendly interface. Among these features one could find Direct Pay, implying buyers could use their wallets instead of those provided by the marketplace. Incognito Market has priced its extortion for vendors based on their status or “level” within the marketplace. Incognito Market deals primarily in narcotics, so it’s likely many users are now worried about being outed as drug dealers. Creating a new account on Incognito Market presents one with an ad for 5 grams of heroin selling for $450.