German prosecutors announce shutdown of DarkMarket and arrest of its suspected operator
German authorities announced over the weekend that they successfully dismantled the darknet marketplace known as DarkMarket and arrested its alleged operator. The operation was led by the Central Criminal Inspectorate of Oldenburg (ZKI) in coordination with the State Central Cybercrime Office (LZC) of the Koblenz Public Prosecutor’s Office, according to a statement released by Attorney General Dr. Jürgen Brauer.
After months of intensive investigation, law enforcement shut down the marketplace and took its servers offline on January 11. The takedown was carried out with international support from the U.S. Federal Bureau of Investigation (FBI), Drug Enforcement Administration (DEA), and Internal Revenue Service (IRS), as well as authorities from the United Kingdom, Denmark, Switzerland, Australia, Ukraine, and Moldova.
At the time of its closure, DarkMarket was considered one of the world’s largest illegal darknet marketplaces. The platform reportedly served nearly 500,000 registered users and more than 2,400 vendors who traded a wide range of illicit goods and services, including drugs, malware, anonymous SIM cards, counterfeit currency, and stolen credit card information. Investigators estimate the site facilitated at least 320,000 transactions. The marketplace’s cryptocurrency flow included more than 4,650 bitcoins and roughly 12,800 Monero, amounts that correspond to a value exceeding €140 million (approximately $170 million) at current exchange rates.
Monero is a privacy-focused cryptocurrency that obscures sender and receiver addresses and conceals transaction amounts, attributes that make it attractive for criminal activity and more difficult for investigators to trace. Because of these privacy features, Monero and other privacy coins such as Zcash and Dash have drawn regulatory scrutiny. The U.S. Financial Crimes Enforcement Network (FinCEN) recently proposed a rule change that would introduce additional reporting requirements for certain privacy-centric cryptocurrencies to address the risk of illicit finance.
German investigators first became aware of DarkMarket during a broader probe into Cyberbunker, a controversial web-hosting operation located in a former NATO bunker in southwestern Germany where the marketplace was temporarily hosted. The DarkMarket takedown follows similar international operations that shut down major darknet markets such as AlphaBay in 2017 and Wall Street Market in 2019.
As part of the operation, investigators seized extensive infrastructure tied to DarkMarket, including more than 20 servers located in Moldova and Ukraine. Authorities said they will analyze the data recovered from those systems to pursue further investigations targeting moderators, buyers, and sellers who used the marketplace.
The individual arrested in connection with operating DarkMarket is a 34-year-old Australian national who was detained near the German-Danish border. When presented to an investigating judge, he declined to provide information about the case and was remanded in custody pending further legal proceedings.