It likely raised eyebrows that a young diplomat was so invested in dark web analytics. Moreover, the Namecheap domain registrations under Lin’s name provided a concrete link between his real-life identity and the dark web (through that market-tracking site). Investigators could use that to build probable cause that Lin and Pharaoh were one and the same. With mounting evidence, prosecutors in the Southern District of New York quietly filed charges and obtained an indictment against Lin under seal.
Role Of “Pharaoh”: The Dual Life Of Rui-Siang Lin
The public is fed a narrative that Tor is dangerous, a technology for CSAM and terrorism. Many journalists are hesistant to even log in to see what really exists in darknet communities, there’s a perception of too much legal risk. By the time Lin reached high school, he was already proficient in several programming languages, including Python, Java, and C++.
The Double Life Of Rui-Siang Lin
Just as Incognito built on the playbook of its predecessors, future markets will learn from RapTor. But with blockchain intelligence advancing and global partnerships strengthening, law enforcement is better positioned than ever to detect, disrupt, and dismantle these operations. Lin’s undoing came in May 2024, when he was arrested while transiting through New York’s JFK Airport.
Binance Reportedly Helps Dismantle Darknet Marketplace Facilitating Illicit Activities
It supports Bitcoin (BTC) and Monero (XMR) for transactions, highlighting its commitment to privacy and security, and adopts a direct payment method for each transaction, catering to users who prioritize privacy. This section provides Incognito market users with the opportunity to vote for or against changes proposed for implementation on the market. For example, not so long ago, the Incognito community decided the fate of fentanyl on the site. Such an implementation of a democratic institution within the framework of the darknet market is a very unusual precedent and impresses us very much. Once a transaction took place, funds were transferred from a buyer’s account into the seller’s, minus a 5 percent fee collected by Incognito Market.
Incognito Market’s Exit Scam: A Darknet Cautionary Tale

We are committed to providingupdated, quality and reliable information. In terms of the number of various chips and the depth of elaboration of various details, it can compete even with Alphabay. While this week’s takedown recalls the 2013 shutdown of Silk Road, the evolution of darknet commerce is stark.
How To Report A Scam Or Illegal Activity On The Darknet

Operation RapTor involves law enforcement actions taken by JCODE member agencies, including the DEA, FBI, FDA OCI, HSI, IRS-CI, and USPIS. State, local, and other federal agencies also contributed to Operation RapTor investigations through task force participation and regional partnerships, as well as the multi-agency Special Operations Division. Listings included offerings of prescription medication that was falsely advertised as being authentic. For example, in November 2023, while operating in an undercover capacity on Incognito Market, a law enforcement agent purchased and received several tablets purported to be oxycodone. Testing revealed that these tablets were not oxycodone and were, in fact, fentanyl pills. “Operation RapTor shows that the dark web is not beyond the reach of law enforcement,” said Head of Europol’s European Cybercrime Centre, Edvardas Šileris.
- This shows how vulnerable dark web users really are, even if they think they are safe.
- HSI New York leads and directs all operational and administrative activities of the El Dorado Task Force (EDTF).
- So it’s no surprise the illicit activities worth over $100 million conducted within the Incognito Market ecosystem were already garnering attention.
- Typically, an exit scam involves the abrupt cessation of DNM operations, with administrators disappearing along with the funds held in escrow.
- Regarding the announcement of the SuperMarket co-administrator in relation to the wallets emptied by the other administrator, this has happened in the past in other cases of the “domino effect” that occurs when law enforcement makes arrests in the underground community.
This is the story of how Rui-Siang Lin, aledgely also known as ‘Pharaoh,’ built the Incognito Market into a $100 million empire—and how it all fell apart. Stay with me as we delve into the rise and fall of Incognito Market, from its inception to its inevitable collapse, and the intricate web of technology and greed that fueled it. A sketch of a dark-web market’s infrastructure that Lin emailed to himself eight months before allegedly creating Incognito Market, according to the DOJ. On other platforms, such as OpenSea, Lin sells NFTs with basketball players, and his collections appear to be up to 37 NFTs. In October 2021, the defendant also gave a YouTube interview explaining how his anti-DDoS tool “PoW Shield” worked for Pentester Academy TV, demonstrating his technical skills.
Vendors on Incognito paid a registration fee and a 5% commission on every sale. That revenue went to fund the site’s operations, including servers and what the DOJ described as “employee” salaries. All transactions were conducted in cryptocurrency—primarily Bitcoin and Monero—allowing customers and vendors to move funds without using traditional financial rails. Monero’s privacy features in particular obscured sender, receiver, and transaction amounts, posing challenges to investigators tracing flows.
He later pleaded guilty to narcotics conspiracy, money laundering, and conspiracy to sell adulterated and misbranded medications in the Southern District of New York. Lin announced that Incognito Market would be shutting down, but not before attempting to extort the market’s users. He threatened to leak private messages, transaction details, and other sensitive information unless users paid a fee ranging from $100 to $20,000. This act of desperation was a clear indication that Lin’s time was running out, and it set off alarm bells within the darknet community.
Incognito Market has emerged as a significant player in the darknet marketplace, acclaimed for its clean and minimalist design that focuses on a smooth user experience. It stands out for its strong ethical standards, particularly in its firm stance against certain illegal content, setting a model for responsible operation in this domain. Despite its growing vendor base, Incognito offers a wide array of unique and extraordinary items, going beyond what typical markets offer. I especially like the social user interaction features and the democratic election element of the innovations in the market.
Transactions within the bank were encrypted and processed using a technique known as ‘CoinJoin,’ which mixes multiple transactions together, further obfuscating the source and destination of the funds. At its core, Incognito was built on the Tor network, an anonymizing service that hides users’ identities by routing their internet traffic through a series of encrypted servers around the world. This made it extremely difficult for anyone to trace the origin of the traffic, providing a shield of anonymity for users of the market.
Incognito Links
A federal district court judge will determine any sentence after considering the U.S. From at least April 2021 until May 2023, McDonald and others conspired to sell fentanyl and cocaine via multiple darknet marketplaces. Reddit darknet markets 2021 black market prescription drugs for sale darknet markets norge incognito darknet market. Product Range & Basic Features.Incognito Market is one of the few darknet markets that decided to become niche and focus specifically on drugs. A service created to aid dark web users in uncovering compromised BTC team behind Antinalysis and Incognito Marketplace, Incognito Team.

Bitcoin Retakes $111K As Risk Assets Reverse Off Worst Levels
Instead, they focused on social engineering and exploiting human error. Many darknet users, particularly those who are less technically proficient, fail to follow proper encryption protocols. Some users reuse passwords, forget to encrypt certain messages, or make other basic mistakes that can leave them vulnerable. Incognito Market is one of the first markets to put XMR to use on the scene, XMR is an encrypted crypto-currency with a private blockchain, it is not traceable and can be used by cyber criminals to hide their tracks. Agents conducted undercover operations to gain access to the marketplace, allowing them to gather intelligence and evidence about the owner. In November 2023, the feds finally obtained a judicially authorized search warrant on Lin’s personal email account.
Even if one of his posts suggests an affinity with the current regime, HUMINT recruitment operations are only sometimes straightforward. This hypothesis may sound explainable considering the exit scheme happening in March 2024 with Incognito Marketplace. Therefore, after a month, he began to post images with training provided to some law enforcement agents in order to appear clean on a basic OSINT check or if any traces from Darkweb could lead to him.
Market Links
OCDETF identifies, disrupts, and dismantles the highest-level criminal organizations that threaten the United States using a prosecutor-led, intelligence-drive, multi-agency approach. Additional information about the OCDETF Program can be found at /OCDETF. Similarly, Lin maintained a Github account in his name, which he used to showcase his programming prowess, specifically his Proof-of-Work (PoW) shield application. This open-source protocol mitigates DDoS attacks by acting as a smart proxy between the backend service and the end user.
