Guides
Service graveyard
Mixers, markets, cash-out desks, and adjacent infrastructure taken offline by public cyber enforcement (seizure, sanctions, operator conviction) or a documented operator wind-down. Scams aren't listed here. Operations live in Law enforcement operations.
77 of 77 services
| Date | Service | Type | Fate | Lead | What happened | Source |
|---|---|---|---|---|---|---|
| 2026-09-09 | Xinbi Guarantee | marketplace | Sanctioned | United States | OFAC designated the Chinese-language illicit marketplace; DOJ Scam Center Strike Force seized related infrastructure. | Source |
| 2026-08-21 | NoOnes | exchange | Sanctioned | European Union | Closed its P2P marketplace on 21 Aug 2026 following sanctions-related restrictions. | Source |
| 2026-08-10 | lnp2pbot | exchange | Operator shutdown | International | Operator indefinitely suspended the Telegram P2P bot on 10 August 2026; it no longer processes orders or payments. | Source |
| 2026-06-11 | AudiA6 | exchange | Seized | United States | International coalition including DOJ and Secret Service disrupted the AudiA6 laundering platform; Dark2Web advertising forum seized with it. | Source |
| 2026-06-11 | Dark2Web | marketplace | Seized | United States | Cybercrime forum used to advertise the AudiA6 laundering service; seizure banners replaced the sites. | Source |
| 2025-12-01 | CryptoMixer.io | mixer | Seized | European Union | Operation Olympia: Europol, BKA and fedpol seized cryptomixer.io servers, domain, and about €25 million in Bitcoin. | Source |
| 2025-12-01 | DDoS-for-hire (Poland) | marketplace | Seized | European Union | Administrators arrested and US-seized domains in a crypto-paid booter takedown. | Source |
| 2025-11-15 | Lumma infostealer | marketplace | Seized | European Union | Europol and Microsoft disrupted Lumma, described as one of the largest infostealer operations. | Source |
| 2025-11-01 | 8Base / Phobos | marketplace | Charged | European Union | JC3 partners arrested key figures and dismantled leak-site infrastructure. | Source |
| 2025-10-10 | SIMCARTEL farms | hosting | Seized | European Union | Raids dismantled SIM-farm infrastructure used for OTP bypass and account takeover. | Source |
| 2025-09-18 | TradeOgre | exchange | Seized | Canada | RCMP seized the exchange and a large crypto haul. | Source |
| 2025-08-20 | Tai Chang scam domain | marketplace | Seized | United States | DOJ seized a domain used in a cryptocurrency investment-scam compound. | Source |
| 2025-08-14 | Grinex | exchange | Sanctioned | United States | OFAC designated Garantex’s successor and related executives after the March 2025 domain seizure. | Source |
| 2025-08-14 | AWEX | exchange | Sanctioned | United States | Another OFAC-designated exchange listed alongside Suex, Chatex, Bitpapa, and NetEx24. | Source |
| 2025-08-01 | Stolen-password database | marketplace | Seized | United States | DOJ announced seizure of a stolen-password database used for bank-account takeover. | Source |
| 2025-07-16 | NoName057(16) | botnet | Charged | European Union | Operation Eastwood against the pro-Russian DDoS network; European arrests and US charges. | Source |
| 2025-06-15 | Volt Typhoon botnet | botnet | Seized | United States | US government disrupted a PRC-linked botnet used to conceal hacking of critical infrastructure. | Source |
| 2025-06-01 | e-Note | exchange | Seized | United States | FBI disrupted a virtual money-laundering service used to facilitate criminal activity, including ransomware cash-out. | Source |
| 2025-05-14 | Operation RapTOR | market | Charged | United States | JCODE/Europol wave against darknet narcotics vendors across remaining markets after Incognito, Kingdom, and Nemesis. | Source |
| 2025-05-14 | Nemesis Market | market | Sanctioned | United States | Named in the RapTOR wave; OFAC separately designated Iranian national Behrouz Parsarad in connection with Nemesis. | Source |
| 2025-04-30 | eXch | exchange | Seized | European Union | German BKA shut the no-KYC exchange after large stolen-crypto flows, including Bybit-hack proceeds. | Source |
| 2025-03-06 | Garantex (domains) | exchange | Seized | United States | Secret Service seized garantex.org/.io/.academy; Germany and Finland seized servers. Two administrators charged. | Source |
| 2024-11-07 | LocalMonero | exchange | Operator shutdown | International | Operator-announced wind-down after May 2024 notice; P2P Monero desk closed rather than seized. | Source |
| 2024-11-07 | Agoradesk | exchange | Operator shutdown | International | Sister P2P desk to LocalMonero; same staged escrow wind-down and November 2024 closure. | Source |
| 2024-09-26 | Cryptex | exchange | Sanctioned | United States | OFAC designated the SVG-registered exchange operating from Russia as a ransomware cash-out rail. | Source |
| 2024-09-26 | PM2BTC | exchange | Sanctioned | United States | FinCEN identified PM2BTC as a primary money-laundering concern in the same wave as the Cryptex OFAC action. | Source |
| 2024-05-29 | 911 S5 | botnet | Seized | United States | Residential proxy botnet used to conceal cybercrime disrupted. | Source |
| 2024-05-20 | Incognito Market | market | Charged | United States | Operator Rui-Siang Lin arrested as Pharaoh; market ran Oct 2020–Mar 2024 with crypto-settled narcotics sales. | Source |
| 2024-05-07 | Operation Endgame droppers | botnet | Seized | European Union | Largest-ever action against dropper-malware ecosystems delivering ransomware. | Source |
| 2024-04-24 | Samourai Wallet | mixer | Seized | United States | Infrastructure seized; founders arrested over Whirlpool and related tools. | Source |
| 2024-04-24 | Whirlpool (Samourai) | mixer | Seized | United States | Samourai’s CoinJoin coordinator; seized with the wallet infrastructure in the April 2024 arrests. | Source |
| 2024-03-25 | Bitpapa | exchange | Sanctioned | United States | OFAC designated the P2P exchange for operating in Russia’s financial sector and transacting with Hydra and Garantex. | Source |
| 2024-03-25 | NetEx24 | exchange | Sanctioned | United States | Moscow fintech TOEP/Netexchange/Netex24 designated for ruble and virtual-currency payments to designated Russian banks and Hydra. | Source |
| 2024-02-20 | LockBit infrastructure | marketplace | Seized | United Kingdom | US and UK action disrupted LockBit leak sites and recovered decryptors. | Source |
| 2023-12-15 | Kingdom Market | market | Seized | United States | Administrator arrested at Newark; kingdommarket.live and .so later forfeited. | Source |
| 2023-11-29 | Sinbad.io | mixer | Sanctioned | United States | OFAC designation plus European server seizures. | Source |
| 2023-08-29 | Qakbot | botnet | Seized | United States | International cyber action disrupted Qakbot infrastructure used as ransomware initial access. | Source |
| 2023-05-02 | Operation SpecTor | market | Charged | United States | International action against darknet traffickers, with large-scale arrests and seizures. | Source |
| 2023-04-20 | Operation PowerOFF booters | marketplace | Seized | United Kingdom | NCA and partners shuttered booter/stresser portals and arrested administrators. | Source |
| 2023-04-18 | Genesis Market | marketplace | Seized | United States | Stolen-credential and bot marketplace disrupted by court-authorized action (Operation Cookie Monster). | Source |
| 2023-03-15 | ChipMixer | mixer | Seized | European Union | BKA seized servers and more than $46 million in bitcoin; DOJ charged alleged operator Minh Quốc Nguyễn. Europol said it was then the largest mixer of its kind. | Source |
| 2023-03-15 | BreachForums (Pompompurin) | marketplace | Seized | United States | Successor to RaidForums; administrator Conor Fitzpatrick arrested and the forum taken down. | Source |
| 2023-01-26 | Hive ransomware panel | marketplace | Seized | United States | FBI infiltrated the Hive leak panel, obtained decryptors, and disrupted the variant. | Source |
| 2023-01-18 | Bitzlato | exchange | Seized | United States | Founder arrested in Miami; French and EU partners seized infrastructure. FinCEN named it a primary money-laundering concern. | Source |
| 2022-08-08 | Tornado Cash | mixer | Sanctions lifted | United States | OFAC designated the mixer on 8 Aug 2022; related developer prosecutions followed. Treasury removed Tornado Cash from the SDN list on 21 Mar 2025. The 2022 record is kept here. Roman Storm’s legal defence fundraiser: https://freeromanstorm.com/donate | Source |
| 2022-05-06 | Blender.io | mixer | Sanctioned | United States | First OFAC mixer designation, citing DPRK-linked laundering. | Source |
| 2022-04-12 | RaidForums | marketplace | Seized | United States | FBI seized raidforums.com and related domains; founder charged over trade in stolen databases. | Source |
| 2022-04-05 | Hydra Market | market | Seized | United States | Largest darknet market at shutdown; servers and crypto seized with German partners. | Source |
| 2022-04-05 | Garantex | exchange | Sanctioned | United States | OFAC designated the Russia-based exchange the same day Hydra fell, citing ransomware and darknet cash-out. | Source |
| 2021-11-08 | Chatex | exchange | Sanctioned | United States | OFAC designated the exchange and support companies as a nested cash-out rail tied to Suex and ransomware. | Source |
| 2021-09-21 | Suex OTC | exchange | Sanctioned | United States | First OFAC designation of a virtual-currency exchange, for laundering ransomware proceeds. | Source |
| 2021-06-10 | DoubleVPN | hosting | Seized | European Union | VPN marketed to cybercriminals seized in an international operation. | Source |
| 2021-04-27 | Bitcoin Fog | mixer | Operator convicted | United States | Operator Roman Sterlingov arrested; later convicted in connection with the long-running mixer. | Source |
| 2021-01-27 | Emotet | botnet | Seized | European Union | International disruption of Emotet loader infrastructure used for ransomware and banking malware. | Source |
| 2021-01-27 | NetWalker | marketplace | Charged | United States | DOJ announced global action against NetWalker, including charges and seizures tied to ransom payments. | Source |
| 2021-01-12 | DarkMarket | market | Seized | European Union | Then the largest illegal dark-web marketplace; seized in Germany. | Source |
| 2020-09-22 | Operation DisrupTor vendors | market | Charged | United States | International action against darknet opioid vendors, with arrests and seizures of cash, drugs, weapons, and crypto. | Source |
| 2019-12-03 | Helix | mixer | Operator convicted | United States | Operator Larry Harmon charged for laundering darknet proceeds; later convicted. | Source |
| 2019-12-03 | Helix Light | mixer | Operator convicted | United States | Grams/Helix Light was the public-facing mixer API tied to Harmon’s Helix darknet mixer; same case. | Source |
| 2019-10-08 | Welcome to Video | marketplace | Seized | United States | Largest CSAM darknet site of its kind seized; Bitcoin payments traced. | Source |
| 2019-05-22 | Bestmixer.io | mixer | Seized | European Union | FIOD and Europol seized servers and published mixer records. | Source |
| 2019-05-07 | DeepDotWeb | marketplace | Charged | United States | Site that indexed darknet markets taken down; admin charged with laundering referral kickbacks. | Source |
| 2019-05-03 | Wall Street Market | market | Seized | European Union | Administrators arrested; marketplace seized. | Source |
| 2018-02-07 | Infraud | marketplace | Charged | United States | Carding organization whose sellers monetized stolen cards via BTC escrow and mule cashouts. | Source |
| 2017-07-26 | BTC-e | exchange | Seized | United States | Exchange charged and taken offline; Alexander Vinnik arrested in Greece. | Source |
| 2017-07-20 | AlphaBay | market | Seized | United States | Largest darknet market of its time seized; administrator arrested in Thailand. | Source |
| 2017-07-20 | Hansa Market | market | Seized | European Union | Dutch police ran the market covertly after AlphaBay, then shut it down. | Source |
| 2017-04-10 | Kelihos botnet | botnet | Operator convicted | United States | Peter Levashov pleaded guilty to operating the Kelihos botnet used for spam and malware. | Source |
| 2016-12-01 | Avalanche network | hosting | Seized | European Union | Fast-flux hosting ring used to deliver banking malware; hundreds of thousands of domains seized. | Source |
| 2016-10-01 | GozNym crew | marketplace | Charged | United States | DOJ and Europol targeted the GozNym banking-trojan crew that drained accounts into mule and BTC cash-out rails. | Source |
| 2014-11-06 | Silk Road 2.0 | market | Seized | United States | Operation Onymous: Silk Road 2.0 seized with Blake Benthall arrested as alleged operator Defcon. | Source |
| 2014-11-06 | Pandora Market | market | Seized | United States | One of the Tor markets seized with Silk Road 2.0 in Operation Onymous. | Source |
| 2014-11-06 | Blue Sky Market | market | Seized | United States | Darknet market seized in the same Onymous forfeiture action as Silk Road 2.0. | Source |
| 2014-11-06 | Cloud Nine Market | market | Seized | United States | Another Onymous-seized Tor market offering drugs, stolen cards, and fake IDs. | Source |
| 2014-11-06 | Hydra (Onymous) | market | Seized | United States | Early Tor Hydra market (not the later Russian Hydra) seized in Operation Onymous. | Source |
| 2013-10-02 | Silk Road | market | Seized | United States | FBI seized the original Silk Road marketplace and arrested Ross Ulbricht. | Source |
| 2013-05-28 | Liberty Reserve | exchange | Seized | United States | DOJ shut down Liberty Reserve as an unlicensed money-transmitting business used to move criminal proceeds. | Source |
No services match these filters.