While degree captures this regardless of edge direction, in- and out-degree count only the neighbors connected through incoming and outgoing edges, respectively. Furthermore, the weighted degree variants sum the weights of the connections with the neighbors. Law enforcement and security researchers recommend treating all darknet interactions as compromised by default.
Papers Of Particular Interest, Published Recently, Have Been Highlighted As: • Of Importance

These missing links may impact the extent to which key players can be identified through user-to-user communication networks. Finally, we note that our analysis is hardly exhaustive in terms of considered network measures. Although we did experiment with a wider selection of measures, none of which outperformed betweenness centrality, it is possible that another (specialized) network measure would provide better performance. Despite this, we note that the network measures reported on in this paper cover a wide range of network interpretations relevant to the cryptomarket forum setting. Therefore, we believe that the results reported in this paper are a good account of what can be achieved with network measures. The identification of key players in cryptomarkets such as successful vendors and administrators, is a vital step in law enforcement interventions.
- Initially set up in response to spiralling medication costs in the USA, the early 2000s saw a proliferation of these vendors, both legitimate and illegitimate, often based or purporting to be based in Canada.
- Although it shows fluctuations, including those caused by external shocks, the ecosystem exhibits a positive growth trend in terms of trading volume.
- Ease of access also alters localised drug cultures, with for example 2-CB becoming more common in some rural areas of Scotland due to darknet access.
- Furthermore, we study the Evolution cryptomarket at different points in time, i.e., we look at at various snapshots of the communication network.
- Our methodology aims to uncover whether the task of key player identification should center around plainly measuring user and forum activity, or that it requires leveraging specific patterns of user communication.
- Notably, the number of multisellers suffers the largest drop of \(-99\%\) by the end of the first quarter of 2018.
The cryptomarkets are part of an ecosystem of messaging apps, webpages, discussion servers and social media platforms that service drug markets, mainly based in Europe, North America and Australasia 25•. They serve the end point of the global trafficking network, supplementing and sometimes replacing the trafficker to supplier/buyer stage 26 in consumer countries 27 and excluding the global south 28. Though sometimes depersonalised, they are evolving and provide the basis of dealer-to-buyer direct dealing 29•. The cryptomarkets may be best seen as one part of a larger flexible social and technological structure that facilitates rapid arrangement of deals between parties and expands the range of drugs sold. Drug sellers and buyers navigate within cryptomarkets depending on the changing landscape and their specific requirements. This system generates an informal feedback loop allowing dealers to make more rapid decisions about what segments of the market to service.
Some events such as COVID-19 pandemic-related lockdowns seem to have drawn large numbers of new PWUD into the darknet 41. Many new entrants may just as quickly leave when they find the cryptomarkets do not suit their needs. Successful users of cryptomarkets often need to learn and socialise themselves into the system to make it work to good effect. The technical challenges and cultural barriers to entry may make them self-limiting to an extent 42.
Fraud And Hacking Services
In the context of cryptomarkets, this makes it a good measure of how well a (potential) vendor reaches different communities of potential buyers. As such, a vendor with a high betweenness is more likely to have a larger pool of buyers as they may be able to draw from more relatively distinct communities of buyers. Additionally, betweenness centrality has been shown to perform well in identifying key players in criminal networks14,20. The results highlight that the same measures are almost as effective at recognizing those that will do well in the future.
Benzodiazepines: Increasing Visibility/dominance Of Alprazolam Over Time
(c) Total monthly trading volume sent to all DWMs and exchanged in all unique U2U pairs. We do not include the trading volume received from DWMs because it is essentially equivalent to the volume sent to DWMs. After Silk Road was shut down by law enforcement, many other markets proliferated, sparking rounds of innovation and disruption between market administrators and law enforcement 18. Disruption tended to demonstrate the resilience of the illicit drug market ecosystem 19.
Latest Data
Importantly, these newly formed stable pairs persist over time and transact for several months even after the closure of the DWM that spurred their formation. Finally, we observe that COVID-19 only had a temporary impact on the evolution of stable U2U pairs, which continued to increase their trading volume throughout 2020. Drug trafficking on darknet based marketplaces has become a highly concerning topic in law enforcement activities, recently.

Data Availability
The U2U network is formed by the entire set of interacting users (black and gray arrows with their respective users). Using the evolving activity-driven model31, U2U pairs are divided in either stable (black arrows and respective users) or non-stable (gray arrows and respective users). Cryptomarkets tend to address established PWUD who mainly already have access to existing distribution systems. Their greatest impact may be on what is available and the quantities available, and not the overall ease of access. Modern lists also include vendor scorecards, linking directly to market profiles. This eliminates guesswork, as buyers can verify a vendor’s history before entering the market.
Beyond The ‘Silk Road’: Assessing Illicit Drug Marketplaces On The Public Web
Meanwhile, from July onwards, betweenness centrality consistently outperforms both the post activity and topics started activity indicators and performs (nearly) on par with topic engagement. Overall, the topic engagement indicator most consistently achieves high performance in terms of vendor recall. First, network centrality measures require the communication network to have developed and stabilised sufficiently before achieving reliable vendor recall.

For those who are averse to confrontation, and who are sufficiently tech-savvy, the dark web offers an alternative to the risk and violence of dealing drugs offline. Naaaah surely not.” Plus if I’m honest, my inner reprobate buzzes from it. The rush of chucking a grand’s worth of drugs into post boxes… unreal, man. I try to provide the best products and service I can, when someone has a problem or claims their order was short on pills (as long as they have ordered from me before) I usually take them at their word. Both of these claims correspond with previous research showing that the dark web is perceived to be a safer place to buy and sell drugs.
1, indicate the potential of all network measures and activity indicators to distinguish vendors from non-vendors. To predict vendor success, we must determine if it is possible to distinguish between vendors and non-vendors, as well as between various levels of success. We look at the average network centralities and activity indicators for groups of users, in an attempt to distinguish groups with greater success. We refer to the most and second most successful percentiles as the top and sub-top percentile, respectively. The non-vendors, consisting of regular forum users and those vendors with no recorded sales at all, form a separate sixth group.

Potential Influences Of The Darknet On Illicit Drug Diffusion

It formed a combination of a carding forum, where card information (e.g., credit/debit/ID/etc.) is traded, and an underground drug market25. Darknet markets — also known as cryptomarkets — provide a largely anonymous platform for trading in a range of illicit goods and services. Accessing the dark web can only be done using specific browsers, such as TOR Browser. We classify all entities either as sellers or buyers as a function of time.
However, they have so far mainly focused on DWM users, without distinguishing between buyers and sellers, and neglecting the different weight that more active users may have in the system. The reason is that the operational structure of DWMs inherently hides the seller–buyer link, as all transactions are made through the marketplace. Buyers send money to the marketplace, which in turn sends the money to the seller. Thus, further analyses in this direction have been hindered by the lack of heuristics able to identify these two key classes of actors in transaction networks and their roles in the structure and dynamics of the ecosystem. Betweenness centrality30,31 measures the extent to which a node is on shortest paths connecting pairs of nodes in the network. In other words, it measures how important a node is with respect to connecting various communities in the network.
Because we also detected the largest share of vendors not found by any of the activity indicators with the unweighted bidirectional variant of harmonic closeness centrality, we report on this variant in the Results section. Our results also support recent recommendations of paying attention to individual sellers rather than entire DWMs40. Law enforcement agencies, however, have only recently started targeting individual sellers. The first operation took place in 2018 and successfully led to the arrest of 35 sellers41, while the largest operation to date occurred in 2020 and led to 179 arrests in six different countries42. Our study indicates that a much higher number of highly active DWM users, on the order of tens of thousands, is involved in transactions with other DWM users. Moreover, our analysis paves the way to a deeper understanding of U2U transactions in online marketplaces.
The dataset is used alternatively as a longitudinal dataset to uncover trends in the data and as a whole to represent total market activity. In this latter case, feedbacks that are present in the data that occurred before the previous data collection of any one specific listing are excluded from the total feedback so that these are not double counted and artificially inflate the sales of any product. The linear regression results therefore represent the estimated percentage of sales within any one country attributable to any one drug classification (the constant) followed by an estimation of the yearly percentage point change over the study period. All regressions were run with robust standard errors using the Huber-White sandwich method to account for a lack of normality in the dependents, heteroscedasticity, and data points with high leverage owing to the nature of the data collection process.