This revelation helped the Feds identify the exact transaction and his wallet details. Illegal drug trafficking and sales have always been a major focus among the FBI, Department of Homeland Security and other agencies. So it’s no surprise the illicit activities worth over $100 million conducted within the Incognito Market ecosystem were already garnering attention.
US Treasury Sanctions Iranian National For Operating Darknet Market Nemesis
When users deposited Bitcoin into the market, it was immediately converted into Monero, leveraging the privacy features of Monero to ensure that even if the initial Bitcoin transaction could be traced, the trail would go cold once the funds were inside the market’s banking system. At its core, Incognito was built on the Tor network, an anonymizing service that hides users’ identities by routing their internet traffic through a series of encrypted servers around the world. This made it extremely difficult for anyone to trace the origin of the traffic, providing a shield of anonymity for users of the market. He majored in computer science, focusing on cybersecurity and blockchain technology.
Lin was arrested at John F. Kennedy Airport on May 18, and will be presented in Manhattan federal court before U.S. Lin allegedly made millions from operating Incognito Market, which took a 5% cut of every sale. The darknet market had its own “bank,” prosecutors said, which gave users an additional layer of anonymity by allowing them to deposit cryptocurrency into their own accounts, which the site then automatically transferred from buyers to sellers, minus the fee. The first charge – sometimes called the “kingpin statute” – carries a mandatory minimum sentence of life in prison.
Comwave Networks Faces Alleged Cyberattack From Medusa Ransomware Group

The dangers of Lin’s operation were highlighted during undercover investigations, where drugs sold as safe medications turned out to be deadly. For instance, pills purported to be oxycodone were actually fentanyl, significantly increasing the risk to public health. The first major breakthrough in the investigation came in late 2023, when an undercover agent made a crucial purchase on Incognito Market. The agent had ordered what was supposed to be oxycodone, a prescription painkiller that is frequently sold on the dark web. However, when the drugs arrived and were sent to a lab for testing, it was revealed that the pills were not oxycodone at all—they were fentanyl, a potent synthetic opioid that has been responsible for thousands of overdose deaths worldwide. This discovery gave law enforcement agencies the leverage they needed to intensify their efforts against Incognito.
Incognito Market MultiSignature Escrow
Law enforcers’ investigation into Incognito Market operations and Lin’s subsequent arrest involved a combination of sophisticated techniques and international cooperation. In May 2024, the US Department of Justice (DOJ) announced the arrest of alleged Incognito Market mastermind Rui-Siang Lin. The 23-year-old darknet kingpin, popularly known as Pharoah or Faro, had long been on the FBI’s radar and eventually met his comeuppance at JFK airport. On the X platform, formerly known as Twitter, where he has been active since March 2022, most of Lin’s posts are about cryptocurrencies. He also posted about the training he did for the Saint Lucia Police, but this time, he covered his face with an emoji. In an interesting post, he appeared to be proud of the newly elected president in Taiwan, suggesting that he likes the current regime, which is opposing China’s pressure.
Identify And Arrest
In a fourth example, a San Fernando Valley man, Brian McDonald, 23, was sentenced to more than 20 years in federal prison in the Central District of California for using darknet marketplaces to sell hundreds of thousands of dollars’ worth of fentanyl-laced pills and cocaine to buyers nationwide. The rise and fall of Incognito Market is a chapter in the ongoing evolution of darknet marketplaces – a world that has proven remarkably adaptive in the face of law enforcement crackdowns. To put Incognito’s trajectory in context, it helps to compare it with its predecessors and contemporaries, and to consider what its downfall implies for the future of illicit online markets.

Payment On Incognito Darknet
- For someone so young, Lin handled high-stakes operations with remarkable skill – Incognito’s growth attests to that.
- With Incognito’s fall, many users are migrating to alternative markets like Nemesis or MGM Grand Market.
- “This arrest underscores the dedicated, ongoing efforts of law enforcement to identify and dismantle illicit drug networks operating from every shadowy recess of the marketplace,” NYPD Commissioner Edward A. Caban said in a statement.
- One was used to host Incognito’s DDoS prevention system, one hosted the back-end marketplace data, including all completed narcotics transactions, while the third acted as the market’s bank and was used to process all cryptocurrency transactions.
Incognito also distinguishes itself with exclusive services such as tailored hacking solutions, malware, and in-demand data dumps, solidifying its role as a pioneer in the darknet market space. Indeed, Lin’s arrest is part of a larger trend in the fight against crypto-facilitated crimes. Last week, the Department of Justice arrested two brothers who allegedly conducted a $25 million theft on the Ethereum blockchain. 6 days later, on 6th March, vendors were locked out of crucial market features and missing all withdraws. On 9th March, Incognito Market started to extort vendors and buyers, asking for payments in a range between $100 – $20.000 in accordance to the level of vendor market’s.
User Interface Of Incognito Market URL
The Center investigates large-scale cybercrime threats and provides expertise on cybercrime investigations to the field. It also uses global law enforcement networks, like Europol, to combat cybercrime threats. According to Krebs On Security, the administrators pulled off an “exit scam” that left users unable to withdraw millions of dollars from the platform. Rui-Siang Lin – who also went by the online pseudonym “Pharoah” or “faro” – is accused of having run the entire business. This included supervising all the platform’s operations, its employees, vendors, and customers, and holding “ultimate decision-making authority over every aspect of the multimillion-dollar operation.” Enterprising youngster, allegedly.
In mid-March 2024, the Incognito administrator(s) announced an exit scam and threatened to release all of the vendor information and private messages between vendors and buyers to law enforcement. Pharaoh asked vendors for payment by April 1, 2024 in exchange for not releasing information to law enforcement. While on April 1, 2024, Pharoah announced that the extortion announcement had been a joke, vendors on the platform had already looked for other options. This banking service obscured the locations and identities of vendors and customers from each other and from law enforcement. It kept the financial information of vendors and buyers separate, making it more difficult for any one actor on the marketplace to learn any other actor’s true identity, a complaint filed against Lin said. One particularly revealing moment came in February 2024, when Incognito users reported that BTC withdrawals were disabled—likely part of a deliberate “exit scam.” Lin, or others acting on his behalf, threatened to leak vendor identities to law enforcement unless paid.
- From a legal perspective, Lin’s case may also influence how future investigations proceed.
- The indictment alleges the illegal sale of more than $100 million in illicit narcotics and misbranded prescription drugs, including heroin, cocaine, LSD, MDMA, oxycodone, methamphetamines, ketamine, and alprazolam.
- This resulted in all the mirrors to appear offline so that others wouldn’t fall for the extortion.
- By 2022, the FBI and Homeland Security had begun to take a serious interest in Incognito Market.
Federal IT Contractor Pays $1475 Million Fine To Settle Cyber Fraud Charges

It stands out for its strong ethical standards, particularly in its firm stance against certain illegal content, setting a model for responsible operation in this domain. Despite its growing vendor base, Incognito offers a wide array of unique and extraordinary items, going beyond what typical markets offer. Another significant obstacle for law enforcement was Incognito’s use of PGP encryption for all communications. PGP (Pretty Good Privacy) is one of the most secure forms of encryption available, and it is widely used in both legitimate and illicit operations to protect sensitive information. On Incognito, buyers, sellers, and administrators were required to use PGP to encrypt their messages, ensuring that even if law enforcement managed to intercept communications, they would be virtually unreadable without the corresponding private key. By exploiting a vulnerability in the market’s cryptocurrency ‘bank’ system, they were able to trace several key transactions back to a wallet linked directly to Rui-Siang Lin.

This gave Incognito a competitive advantage, as users didn’t have to worry about moving their funds in and out of external wallets, which often exposed them to risks such as law enforcement tracking or theft from other hackers. Incognito Market wasn’t just another player in the dark web economy—it was a game-changer. The market’s user-friendly interface, combined with its robust security features, attracted a diverse range of users, from small-time buyers looking for recreational drugs to large-scale vendors dealing in high volumes of illicit goods. The market’s reputation for reliability and security quickly spread, and soon, Incognito was competing with—and in many cases, surpassing—It appears the response got cut off midway.
On May 18, 2024, as Rui-Siang Lin prepared to board a flight at John F. Kennedy International Airport, he was arrested by Homeland Security Investigations. Within days, Lin was arraigned in Manhattan Federal Court, where he was charged with multiple counts, including engaging in a continuing criminal enterprise, narcotics conspiracy, money laundering, and distributing adulterated drugs. Lin’s decision to implement a banking system within the market also had a profound impact on the dark web’s economy. By keeping transactions within Incognito’s ecosystem, Lin effectively created a closed-loop financial system, similar to those used by legitimate online platforms.
