DarkMarket — Europol's 2021 Seizure and 150TB Data Haul
Historical profile of DarkMarket, seized by Europol and the BKA in January 2021 with 500,000 users, 320,000 transactions, and 150TB of server data preserved.
DarkMarket was, at the time of its January 2021 seizure, the world's largest active darknet marketplace by user count — according to Europol's own assessment. It had over 500,000 registered users, more than 2,400 active vendors, and had processed nearly 320,000 transactions totaling 4,650 BTC and 12,800 XMR. Its takedown produced a 150-terabyte trove of server data expected to fuel prosecutions for years.
Key Facts
| Detail | Value |
|---|---|
| Launch | ~2019 |
| Closure | January 11, 2021 |
| Cause | Europol + German BKA seizure |
| Registered users | 500,000+ |
| Active vendors | 2,400+ |
| Transactions processed | ~320,000 |
| Payments | Bitcoin (BTC), Monero (XMR) |
| Data seized | 150 terabytes of server logs and records |
How DarkMarket Operated
DarkMarket launched around 2019 and grew during one of the most fragmented periods in darknet market history. The Empire Market exit scam in August 2020 displaced a large vendor and buyer population looking for a reliable alternative; DarkMarket captured part of that migration.
It operated as an English-language platform with multi-cryptocurrency support — Bitcoin and Monero — placing it in the mainstream of post-2018 market design. Listings covered drugs, counterfeit goods, stolen data, and related categories. The market reached 500,000 registered accounts, a figure Europol cited in its January 12, 2021 press release as making it the largest active marketplace at the time of seizure.
The scale of 2,400 active vendors across 320,000 completed transactions represents a substantial operational footprint, particularly given that the market had been running for approximately two years.
The Europol Takedown
German prosecutors led the investigation, which identified the alleged operator as an Australian national living near the German-Danish border. He was arrested without incident on January 10, 2021. German state prosecutors in Koblenz held jurisdiction.
DarkMarket's server infrastructure was located in Ukraine and Moldova. Europol coordinated the cross-border seizure of those servers, which were taken offline on January 11, 2021. The physical seizure of servers in two separate countries, requiring coordination with Ukrainian and Moldovan authorities alongside Europol's logistics, illustrates the operational complexity of modern darknet market takedowns.
Europol's press release, published on January 12, 2021, confirmed the seizure and the 150 terabytes of preserved data. The announcement described it as the "world's largest illegal dark web marketplace" — a designation based on active user count at the time of closure.
The law enforcement operations guide provides context on how multi-jurisdiction coordination works in these cases.
The 150TB Data Trove
The 150 terabytes of seized data is the most consequential long-term aspect of the DarkMarket takedown. That volume encompasses message logs, transaction records, user account data, vendor communications, and order histories.
For context on what that data enables: the Dutch police operation against Hansa Market in 2017 — which ran covertly for 27 days and collected roughly comparable categories of user data — generated prosecution leads against vendors and buyers across multiple European countries over the following two years.
DarkMarket's 150TB was collected from a live operational market, not from a brief covert operation, and spans the full period of the market's existence. Law enforcement agencies across the countries where DarkMarket's vendor and buyer population was concentrated — primarily Western Europe, the UK, Australia, and the United States — would have received relevant portions of that dataset through Europol's Joint Investigation Teams.
For researchers, the DarkMarket seizure sits alongside Hydra Market's April 2022 takedown as one of the two most data-rich darknet market seizures in the market takedowns timeline.
Scale in Context
The statistics Europol published on DarkMarket require some interpretive framing. "500,000 registered users" includes dormant accounts, browser-tab signups, and duplicate registrations — the active buyer population would have been a fraction of that number. The 2,400 "active vendors" and 320,000 completed transactions are more reliable operational indicators.
For comparison: Silk Road processed roughly 1.2 million transactions over two-plus years; AlphaBay processed considerably more during its three years. DarkMarket's 320,000 completed transactions in approximately two years placed it solidly in the mid-tier of historical market volume — large enough to matter significantly, not the dominant network that Hydra or AlphaBay represented.
Frequently Asked Questions
What was DarkMarket?
DarkMarket was an English-language darknet marketplace that operated from approximately 2019 until its seizure by Europol and the German BKA in January 2021. It accepted Bitcoin and Monero and had processed approximately 320,000 transactions across 2,400+ active vendors.
Who shut down DarkMarket?
German state prosecutors in Koblenz led the investigation. Europol coordinated the multi-jurisdiction seizure. The alleged operator — an Australian national — was arrested near the German-Danish border on January 10, 2021. Servers in Ukraine and Moldova were seized the following day.
What data was seized from DarkMarket?
150 terabytes of server data, including transaction records, user accounts, message logs, and order histories. Europol expected this dataset to support prosecutions of vendors and buyers across multiple countries over an extended period following the initial seizure.