Darknet market in an AML report
Marketplaces for illegal goods reachable only through anonymity networks.
What it means
Darknet markets are online shops, usually reachable only through Tor, that sell drugs, stolen data, weapons and other illegal goods for crypto. Analytics firms label their deposit and payout addresses.
Why it is a risk for you as the recipient
Money that comes from darknet markets is proceeds of crime in most jurisdictions. Exchanges treat it as high risk and may freeze deposits that trace back to such markets.
- OFAC sanctioned the darknet market Hydra together with the exchange Garantex on 5 April 2022.[1]
Example situation
Illustrative scenario, not a real case. Your counterparty’s Bitcoin address received several payouts from an address labelled as a darknet market’s vendor wallet. Even if your trade is legitimate, the coins carry that history.
What to do if it shows up in a report
- Decline the transfer or ask for funds from a different source.
- If you received them, do not split or mix them; contact your exchange.
FAQ
Is it only Bitcoin?
No. Markets increasingly accept stablecoins and other assets, so darknet exposure appears on several networks.
Sources
- U.S. Department of the Treasury — Treasury Sanctions Russia-Based Hydra, World's Largest Darknet Market, and Ransomware-Enabling Virtual Currency Exchange Garantex (jy0701) (5 Apr 2022). Checked 4 Nov 2026.