Dark Web 2020 Links: A Retrospective

Sections

1. The Dark Web Landscape in 2020: Context and Evolution
2. Major Marketplaces Operating in 2020
3. Forums and Communication Platforms
4. Financial Services and Cryptocurrency Mixers
5. Law Enforcement Actions and Takedowns
6. COVID-19's Impact on Dark Web Activity
7. Security and Anonymity Tools from 2020
8. Comparison: 2020 vs. Current Dark Web Ecosystem
9. Dark Web 2020 Timeline and Marketplace Comparison
10. Common Mistakes and Misconceptions
11. Key Takeaways
12. Still wondering?
13. Sources and further reading

The Dark Web Landscape in 2020: Context and Evolution

The dark web in 2020 experienced significant transformations driven by a combination of law enforcement actions, marketplace closures, and the global impact of COVID-19. These factors not only altered user behaviour but also reshaped the overall ecosystem.

Operation DisrupTor, launched in September 2020, marked a pivotal moment in the dark web landscape. This international law enforcement operation led to the arrest of 179 individuals across six countries, including 121 in the United States and 42 in Germany⁵. The operation culminated in the seizure of over $6.5 million in cash and cryptocurrency, alongside 500 kilograms of drugs and 63 firearms⁵. Such aggressive enforcement actions contributed to a notable decline in active darknet markets.

Statistics indicate a dramatic contraction in the market scene. By November 2020, only 37 darknet markets were operational, the lowest number since November 2017¹. This decline was exacerbated by the closure of prominent platforms like Empire Market, which, prior to its exit scam in August, boasted over 1 million registered users²³. The aftermath of this closure saw a surge in activity on White House Market, which grew rapidly from 6,000 listings in January to 14,000 by June 2020³. Following Empire's exit, White House Market's user base increased by nearly 10% within days, indicating a significant shift in user allegiance⁴.

The onset of the COVID-19 pandemic also influenced dark web dynamics. Early in the crisis, sales fluctuated but stabilised by March 2020, with masks and test kits becoming the most commonly offered COVID-19-related items⁶. A survey of 20 darknet markets in April 2020 revealed a range of pandemic-related products, including vaccines and personal protective equipment⁷.

Comparing 2019 to 2020, the dark web ecosystem shifted from a period of growth to one of consolidation and heightened scrutiny. The number of active markets decreased, and the landscape became increasingly dominated by a few key players, reflecting a trend of market consolidation driven by both user behaviour and law enforcement pressure¹.

Major Marketplaces Operating in 2020

In 2020, several notable darknet marketplaces remained operational, each offering a variety of products and services amidst a climate of increased law enforcement scrutiny. Key players included White House Market, DarkMarket, and Monopoly Market, among others.

White House Market

Launched in August 2019, White House Market gained significant traction in 2020. By mid-year, it had over 60,000 users and expanded its listings from 6,000 in January to 14,000 by June³. This marketplace featured an escrow system for transactions, enhancing security for both buyers and vendors. Payment methods predominantly included cryptocurrencies such as Bitcoin and Monero, with PGP encryption employed for communications.

DarkMarket

DarkMarket was another prominent platform during this period, although it faced operational challenges. It was shut down in early 2021, but prior to that, it had a substantial number of vendors and facilitated a diverse range of transactions. The marketplace offered a variety of security features, including user anonymity and encrypted communication channels.

Monopoly Market

Monopoly Market also emerged as a key player in 2020. It provided a user-friendly interface and a robust selection of products. Transaction volumes and vendor counts were not extensively documented, but it was known for a significant presence in the drug trade, similar to its counterparts. Security measures included an escrow system and a focus on maintaining user privacy.

Transaction Volumes and Vendor Counts

By November 2020, the total number of active darknet markets had dwindled to just 37, the lowest since 2017¹. This reduction was partly due to law enforcement operations, such as Operation DisrupTor, which targeted multiple marketplaces, leading to a decrease in vendor counts across the board⁵. Following the exit scam of Empire Market in August 2020, many vendors migrated to White House Market, causing its user count to increase by nearly 10% within days⁴.

The competitive landscape of 2020 highlighted a trend towards consolidation, with fewer marketplaces dominating the ecosystem. As users sought reliable alternatives, established platforms like White House Market adapted by increasing their listings and enhancing security features to attract former users of shuttered markets. This dynamic environment underscored the ongoing challenges faced by both users and law enforcement in navigating the dark web landscape.

Forums and Communication Platforms

In 2020, several key forums and communication platforms played a vital role in coordinating the dark web community. Dread and Envoy Forum emerged as prominent spaces where users exchanged information, discussed trends, and shared insights about various darknet markets.

Dread Forum

Dread, often compared to Reddit, provided a platform for users to discuss market performance, vendor reliability, and security concerns. The forum's structure allowed for upvoting and downvoting posts, which helped surface the most relevant discussions. During 2020, Dread became a crucial hub for information on market closures and law enforcement actions, including the implications of Operation DisrupTor, which resulted in 179 arrests globally⁵.

Envoy Forum

Envoy Forum also gained traction, particularly among users seeking alternatives to mainstream markets. This platform facilitated discussions on products, vendor trustworthiness, and the evolving landscape of darknet transactions. Users frequently shared experiences regarding exit scams and operational issues faced by various markets, including Empire Market, which collapsed in August 2020².

Trends and Notable Discussions

Significant trends were observed on these platforms throughout 2020. The COVID-19 pandemic prompted discussions around the availability of pandemic-related products, such as masks and test kits, which became increasingly common in darknet marketplaces⁷⁶. Users reported a surge in demand for these items, reflecting broader societal concerns about health and safety during the crisis.

Forums also served as a barometer for the shifting dynamics within the dark web. For instance, after the exit of Empire Market, discussions on Dread and Envoy Forum highlighted user migrations to White House Market, which saw its listings grow from 6,000 to 14,000 by mid-2020³. Such community-driven exchanges were essential for users navigating a landscape marked by uncertainty and volatility.

The role of these forums cannot be overstated; they acted as lifelines for users seeking reliable information and support during a time of significant transition in the dark web ecosystem.

Financial Services and Cryptocurrency Mixers

In 2020, Bitcoin mixers and cryptocurrency services played a crucial role in the dark web ecosystem, particularly as users sought to enhance transaction privacy. Mixers obfuscate the source of Bitcoin transactions by pooling funds from multiple users, making it challenging to trace individual transactions. This was especially pertinent during a year marked by increased law enforcement scrutiny and the evolution of cryptocurrency regulations.

The emergence of Monero, alongside other privacy-focused cryptocurrencies, gained momentum as users sought alternatives to Bitcoin. Monero's built-in privacy features, such as stealth addresses and ring signatures, offered enhanced anonymity for transactions. By 2020, Monero was increasingly adopted in darknet markets, with some platforms favouring it over Bitcoin due to its superior privacy capabilities.

Specific services gained prominence during this period. For instance, Wasabi Wallet, which integrates CoinJoin mixing, became popular among users for its user-friendly interface and robust privacy features. Additionally, a range of mixers like ChipMixer and Samurai Wallet attracted attention as they catered to users' needs for anonymity in financial transactions. These services became essential tools, particularly in the context of heightened law enforcement operations, such as Operation DisrupTor, which targeted darknet markets and resulted in significant arrests and seizures⁵.

The landscape of cryptocurrency services in 2020 was not solely defined by mixers. The closure of major markets like Empire Market, which experienced an exit scam involving approximately $30 million in digital assets, led to a scramble for reliable alternatives². This environment encouraged users to gravitate towards platforms that prioritised security and privacy, further driving the adoption of Monero and other privacy-centric cryptocurrencies.

The focus on financial services and mixers illustrates an ongoing trend within the dark web: as law enforcement efforts intensify, users adapt by employing more sophisticated tools to preserve their anonymity and secure their transactions.

Law Enforcement Actions and Takedowns

In 2020, law enforcement agencies intensified their efforts to disrupt dark web activities, culminating in significant operations like Operation DisrupTor. This operation, announced in September, led to the arrest of 179 individuals across six countries, including 121 in the United States and 42 in Germany⁵. The operation resulted in the seizure of over $6.5 million in cash and cryptocurrency, along with approximately 500 kilograms of drugs and 63 firearms⁵. Such actions contributed to a notable decline in the number of active darknet markets.

By November 2020, only 37 darknet markets were operational, marking the lowest number since November 2017¹. This reduction was exacerbated by the closure of major platforms, including Empire Market, which exited with approximately $30 million in digital assets in August 2020². The aftermath of these takedowns led to a rapid shift in user behaviour, with many migrating to alternatives such as White House Market. Following Empire's exit, White House Market's user base surged by nearly 10% within days, reflecting users' need for reliable options⁴.

The community's response to these law enforcement actions was adaptive. Users began prioritising platforms that offered enhanced security and privacy features. For instance, White House Market expanded its listings significantly, from 6,000 in January 2020 to 14,000 by June³. Furthermore, discussions in forums like Dread became crucial for users seeking updates on market stability and safety, especially during the turmoil following high-profile market closures⁵.

The impact of law enforcement on the dark web ecosystem was clear: as scrutiny increased, the landscape shifted from growth to consolidation, with fewer marketplaces dominating the scene. This trend underscored the ongoing challenges for both users and authorities in navigating the complexities of the dark web.

COVID-19's Impact on Dark Web Activity

The COVID-19 pandemic significantly influenced dark web activities in 2020, with notable spikes in specific product categories. Scams related to personal protective equipment (PPE), fake vaccines, and counterfeit medical supplies became prevalent as users sought items to combat the virus. An April 2020 scan of 20 darknet markets identified COVID-19-related products, including surgical masks and antiviral medicines, underscoring the demand for these goods during the health crisis⁷.

User behaviour shifted dramatically in response to the pandemic. Initially, sales fluctuated, but by March 2020, the situation stabilised as buyers adapted to the changing landscape⁶. This adaptation included a growing interest in products that addressed the immediate needs created by the pandemic. For instance, masks and test kits emerged as the most frequently encountered COVID-19 related items on dark web marketplaces⁶.

New scam types also surfaced during this period. As fear and uncertainty prevailed, fraudsters exploited the situation by selling non-existent vaccines and fake medical supplies. This increase in fraudulent activity reflects a broader trend where criminal enterprises capitalise on global crises. The heightened demand for legitimate health-related products created opportunities for unscrupulous vendors to deceive desperate consumers.

Market dynamics were affected as well. The closure of major platforms like Empire Market in August 2020, which had previously boasted over 1 million registered users, led to a surge in activity on alternative sites like White House Market. Following Empire's exit scam, which involved approximately $30 million in digital assets, White House Market's user count increased by nearly 10% within days²⁴. This migration illustrates how users sought reliable alternatives amidst uncertainty.

The pandemic's impact on dark web activity highlights a complex interplay between user demand, criminal behaviour, and the ongoing challenges of law enforcement in addressing these evolving threats. As the landscape continues to shift, the need for vigilance and awareness remains paramount for dark web users and cybersecurity professionals alike.

Security and Anonymity Tools from 2020

In 2020, maintaining security and anonymity on the dark web was paramount as users navigated a landscape marked by increased law enforcement scrutiny and market volatility. The tools and practices employed during this period reflect the evolving needs of the community.

Tor Browser Versions and Updates

The Tor Browser, essential for accessing the Tor network, underwent several updates in 2020 to enhance user security. Notably, the release of Tor Browser 10.0 in January introduced improved privacy features and stability. Continuous updates aimed to patch vulnerabilities and improve the overall user experience, especially as the number of active darknet markets decreased to 37 by November 2020, the lowest total since 2017¹.

Recommended VPN Services

Virtual Private Network (VPN) services were commonly recommended for dark web access in 2020. Users often sought VPNs to add an extra layer of anonymity by encrypting their internet traffic and masking their IP addresses. Popular choices included NordVPN and ExpressVPN, known for their strong privacy policies and no-logs guarantees. These tools complemented the Tor Browser, providing users with enhanced security when accessing onion links.

PGP Tools and Operational Security Practices

Pretty Good Privacy (PGP) encryption tools were integral to operational security for dark web users. PGP became standard for securing communications between vendors and buyers, ensuring that sensitive information remained confidential. Commonly used PGP tools included GnuPG and Enigmail, which facilitated encrypted emails and messages.

Operational security practices also evolved. Users were advised to adopt measures such as using unique usernames, avoiding sharing personal information, and employing disposable email addresses. This emphasis on security was underscored by high-profile law enforcement operations like Operation DisrupTor, which resulted in significant arrests and seizures, prompting users to be more vigilant in their online activities⁵.

The combination of updated Tor Browser versions, reliable VPN services, and robust PGP encryption reflected the community's response to the challenges of 2020. As the dark web landscape continued to shift, these tools remained vital for users seeking to maintain their anonymity and security.

Comparison: 2020 vs. Current Dark Web Ecosystem

The dark web landscape has undergone significant changes since 2020. Several platforms from that year remain active today, while others have disappeared entirely. White House Market, which experienced a surge in users following the closure of Empire Market in August 2020, continues to operate and has expanded its offerings. In contrast, Empire Market, which was once the largest with over 1 million registered users, exited the scene due to an exit scam that involved approximately $30 million in digital assets²³. Other notable closures include Flugsvamp 2.0 and DarkMarket, which have not resurfaced in the current ecosystem¹.

Security practices and user behaviour have evolved considerably since 2020. The increase in law enforcement activities, epitomised by Operation DisrupTor that resulted in 179 arrests and the seizure of over $6.5 million in cash and cryptocurrency⁵, has prompted users to adopt more sophisticated security measures. Many now prioritise platforms that offer enhanced privacy features, such as those integrating advanced encryption methods and reliable escrow systems. This shift reflects a growing awareness of the risks involved in dark web transactions.

Lessons learned from 2020 have shaped the current dark web environment. The rapid adaptation of users to market closures and law enforcement actions highlights the resilience of the community. For instance, following the closure of major markets, users flocked to alternatives like White House Market, which saw a nearly 10% increase in user count shortly after Empire Market's exit⁴. Additionally, the prevalence of COVID-19-related scams and health-related products during the pandemic prompted a more cautious approach among users, with a focus on verifying vendor legitimacy before making purchases⁷⁶.

Overall, the dark web today is characterised by fewer but more resilient marketplaces, heightened security awareness, and an adaptive user base. This evolution underscores the ongoing challenges and complexities faced by both users and law enforcement in navigating this hidden segment of the internet.

Dark Web 2020 Timeline and Marketplace Comparison

Month	Event	Marketplace Status	Reasons for Closure/Survival
January 2020	Empire Market reaches 1M users	Active	N/A
April 2020	COVID-19 product scan conducted	Active	N/A
August 2020	Empire Market exits with $30M	Closed	Exit scam
September 2020	Operation DisrupTor announced	N/A	N/A
November 2020	Only 37 markets active	N/A	Market consolidation

Common Mistakes and Misconceptions

Assuming All 2020 Links Still Function Today

Many researchers treat 2020 onion addresses as if they remain operational. In reality, the dark web ecosystem experienced dramatic consolidation throughout that year, with only 37 active markets by November – the lowest count since November 2017¹. Empire Market, which boasted over 1 million users in January 2020, vanished in August following a $30 million exit scam²³. Treating historical links as current resources leads to wasted time and potential security risks from honeypot sites.

Overlooking the Pandemic's Measurable Effect on Market Offerings

The assumption that COVID-19 merely caused temporary disruption misses the structural shift in dark web commerce. An April 2020 scan of 20 markets identified specific pandemic-related products: vaccines, antiviral medicines, diagnostic tests, and PPE including N95 masks⁷. Masks and test kits became the most frequently encountered COVID-19 items on dark web marketplaces⁶. This wasn't fleeting opportunism – it represented a fundamental expansion of product categories that persisted beyond initial lockdowns.

Believing Market Closures Resulted Solely from Exit Scams

Attributing every 2020 market closure to vendor greed ignores the coordinated law enforcement pressure. Operation DisrupTor, announced in September, arrested 179 individuals across six countries and seized over $6.5 million in cash and cryptocurrency alongside 500 kilograms of drugs and 63 firearms⁵. The operation targeted vendors across AlphaBay, Dream, WallStreet, Nightmare, Empire, White House, DeepSea, and Dark Market⁵. Natural market consolidation combined with sustained law enforcement operations created the decline, not exit scams alone.

Ignoring User Migration Patterns After Major Closures

The misconception that users abandoned the dark web after Empire Market's August 2020 exit contradicts observable behaviour. White House Market's user count increased 9.83% within days of Empire's closure, surpassing 200,000 users, whilst vendor count rose 11.76%⁴. The platform had already expanded from 6,000 listings in January to 14,000 by June³. Users didn't disappear – they rapidly consolidated onto surviving platforms with perceived stability.

Treating 2020 Security Practices as Adequate for Current Use

Relying on 2020-era operational security measures creates false confidence. The tools and threat landscape have evolved substantially since then. Whilst PGP encryption and Tor Browser updates were standard in 2020, the subsequent years brought new vulnerabilities and attack vectors. Historical security advice provides context for understanding today's practices but shouldn't substitute for current threat assessments and updated tooling.

Overlooking How 2020 Shaped Today's Market Structure

Viewing 2020 as an isolated year rather than a pivotal transition point misses its lasting influence. The year's market consolidation – from growth through February to decline by November¹ – established patterns still visible today. Platforms that survived 2020's law enforcement pressure and exit scam wave developed resilience features now standard across the ecosystem. Understanding this progression explains why certain current markets emphasise escrow systems and vendor verification more rigorously than their 2019 predecessors.

Key Takeaways

• Historical links rarely function today: The 2020 dark web landscape consolidated dramatically, with only 37 markets active by November – treating old addresses as current resources wastes time and exposes users to honeypot risks.

• COVID-19 permanently expanded product categories: Pandemic-related items (masks, test kits, vaccines) weren't temporary opportunism but structural shifts that persisted beyond initial lockdowns⁷⁶.

• Law enforcement pressure drove closures alongside exit scams: Operation DisrupTor arrested 179 individuals and seized $6.5 million, demonstrating coordinated international action shaped the ecosystem as much as vendor fraud⁵.

• User migration patterns reveal resilience: White House Market's 9.83% user increase within days of Empire's August exit shows the community adapts rapidly rather than abandoning the dark web⁴.

• 2020 security practices require updating: Whilst PGP and Tor Browser updates were standard then, relying on historical measures creates false confidence against today's evolved threat landscape.

For a broader understanding of how these 2020 patterns influence today's environment, explore Exploring the Dark Web: A Comprehensive Overview.

Still wondering?

What dark web marketplaces were active in 2020?

Empire Market dominated with over 1 million users by January 2020, whilst White House Market expanded from 6,000 to 14,000 listings between January and June³. Operation DisrupTor targeted vendors across AlphaBay, Dream, WallStreet, Nightmare, DeepSea, and Dark Market alongside the major platforms⁵. By November, only 37 markets remained active – the lowest count since November 2017¹.

Are 2020 dark web links still working?

Most 2020 onion addresses no longer function due to exit scams and law enforcement actions. Empire Market vanished in August 2020 after an alleged $30 million exit scam, whilst Flugsvamp 2.0 closed permanently²¹. White House Market survived the consolidation and remains operational, but historical links generally lead to dead sites or potential honeypots.

What happened to dark web markets in 2020?

The ecosystem experienced severe consolidation, declining from growth through February to just 37 active markets by November¹. Empire Market exit scammed with approximately $30 million in August, prompting White House Market's user count to surge 9.83% within days²⁴. Operation DisrupTor arrested 179 individuals across six countries and seized over $6.5 million in assets, targeting vendors on multiple platforms⁵.

How did COVID-19 affect the dark web?

An April 2020 scan of 20 markets identified pandemic-specific products including vaccines, antiviral medicines, diagnostic tests, and N95 masks⁷. Masks and test kits became the most frequently encountered COVID-19 items on dark web marketplaces throughout the pandemic⁶. After initial sales fluctuations in early March, the situation stabilised, demonstrating the ecosystem's rapid adaptation to demand shifts⁶.

Sources and further reading

• 1. Chainalysis - Covid is Causing Shipping Issues, But Natural Competitive Forces Are Causing Darknet Market Consolidation
• 2. Bitcoin.com News - After Empire's Exit Scam, Darknet Market Patrons Scramble to Find Alternatives
• 3. Bitcoin.com News - Darknet Markets Flourish as White House and Empire
• 4. Ixonae on Security - August Dark Markets Update - Empire is Gone. Who's Left?
• 5. DEA - International law enforcement operation targeting opioid traffickers on the Darknet
• 6. Europol - Catching the virus: cybercrime, disinformation and the COVID-19 pandemic
• 7. Australian Institute of Criminology - Availability of COVID-19 related products on Tor darknet markets