Highly trained specialists take reports from both the public and law enforcement agencies on more than 400 laws enforced by ICE. No matter where criminals hide, we will find them, dismantle their operations, and bring them to justice. This operation was about protecting innocent people from predatory criminals who profit from violence, addiction, and fear. Our commitment is unwavering,” said Chief Postal Inspector Gary Barksdale, United States Postal Inspection Service.
Traceable Transactions
While Silk Road and Hydra had laid the groundwork for darknet markets, they were not without their flaws. Silk Road, the first major darknet market, was revolutionary but ultimately flawed in its security protocols, leading to its downfall and the arrest of its founder, Ross Ulbricht. Hydra, on the other hand, was massive, dominating the Russian-speaking dark web but limiting its reach and user base. He envisioned Incognito as a global marketplace that combined the best features of its predecessors while addressing their weaknesses. Another incredible detail of the case is the way in which the administrator(s) of Incognito Market (presumably including Lin) “exit scammed” vendors on the site.
Additionally, Lin made the critical mistake of using identifiable personal information at some point during his operations, which law enforcement was able to capture. This could have been during the registration of online accounts or through other transactions that required some form of identification. In October 2020, Lin allegedly launched Incognito Market on the Tor network, a platform designed with the sole purpose of enabling anonymous transactions for illegal goods.

User Interface Of Incognito Market URL
This tactic – arresting a target during international transit – is often used when a suspect is based in a country with no easy extradition. Taiwan does not have a formal extradition treaty with the U.S., so luring or waiting for Lin to enter U.S. soil was the surest way to get custody of him. The arrest operation at the airport was coordinated and swift, giving Lin little time to react or attempt any digital sabotage (like wiping devices). It’s not clear whether Lin obtained his Chainalysis certification to bolster a new career training law enforcement in blockchain analysis or, if US prosecutors are to be believed, to advance his previous alleged career as a dark-web criminal.

Identify And Arrest
“This arrest underscores the dedicated, ongoing efforts of law enforcement to identify and dismantle illicit drug networks operating from every shadowy recess of the marketplace,” NYPD Commissioner Edward A. Caban said in a statement. If found guilty, Lin could face a mandatory minimum sentence of life in prison for participating in a continuing criminal enterprise. “As alleged, Rui-Siang Lin’s brazen operation resulted in the illicit sale of over $100 million in narcotics, including those that were mislabeled and later found to include deadly fentanyl,” said Homeland Security Investigations Special Agent Ivan J. Arvelo.
Role Of “Pharaoh”: The Dual Life Of Rui-Siang Lin
In the case of SuperMarket, users will likely migrate to other illegal communities due to a lack of trust in the platform. At that time, the project administration threatened to publish a complete dump of 557,000 orders and 862,000 hashes of cryptocurrency transactions by the end of May. They understood that the administrators had already committed an exit scam, as they could not withdraw their money. To facilitate the millions of dollars in transactions, Incognito Market had its own “bank,” allowing users to deposit cryptocurrency into “bank accounts” that would transfer the agreed-upon amount to a seller’s “bank account” minus Lin’s 5% fee.
- Lin was arrested at New York’s John F. Kennedy Airport on Saturday and will be presented in front of a Southern District of New York (SDNY) magistrate judge today.
- Allegedly, DNM absconded with significant amounts of bitcoin (BTC) and monero (XMR), following a pattern observed since the early days of DNMs, reminiscent of the infamous Silk Road.
- They understood that the administrators had already committed an exit scam, as they could not withdraw their money.
- As Pharoah — the leader of Incognito market — Lin supervised all of its operations, including its employees, vendors and customers, and had ultimate decision-making authority over every aspect of the multimillion-dollar operation.
Undercover Operations
Typically, an exit scam involves the abrupt cessation of DNM operations, with administrators disappearing along with the funds held in escrow. However, in this case, Incognito’s administrators have resorted to coercing money from users and vendors who frequented the platform. It began by freezing their cryptocurrency funds, so they couldn’t withdraw their money. Then, the scammers threatened to share the private chat details that were supposed to be secret. Incognito Market, once one of the most secure and reliable platforms on the dark web, was no more. Other darknet markets quickly took notice, with many administrators shutting down their operations in fear of being the next target.
Incognito Darknet Market Mass-Extorts Buyers, Sellers
To further complicate matters, reports suggest that a whitelist portal will be established, allowing purchasers to potentially erase their records. Ironically, amidst these threats, the administrator expresses “gratitude” towards customers and vendors for their involvement with Incognito Market, a sentiment that clashes starkly with their current extortion tactics. Incognito expands its product offerings beyond conventional boundaries, encompassing categories like drugs, fraud, hacking, counterfeits, and even defense/intelligence, each with in-depth subcategories. While popular items like cannabis and stimulants are available, the market excels with its ‘Other’ section in fraud, which includes a variety of unique guides and tools. Incognito also distinguishes itself with exclusive services such as tailored hacking solutions, malware, and in-demand data dumps, solidifying its role as a pioneer in the darknet market space.

Incognito Market MultiSignature Escrow

This wasn’t just a simple wallet for storing Bitcoin or Monero—it was a full-fledged banking system that allowed users to deposit funds, conduct transactions, and even earn interest on their deposits. The ‘bank’ also facilitated the exchange of different cryptocurrencies, giving users more flexibility in how they conducted their transactions. “Lin collected millions of dollars of profits from Incognito. To facilitate these financial transactions, Incognito Market had its own ‘bank,’ which allowed its users to deposit cryptocurrency on the site into their own ‘bank accounts,'” explained the DoJ. Lin’s undoing came in May 2024, when he was arrested while transiting through New York’s JFK Airport.
Unraveling The Seedy Underbelly Of The Darknet Marketplaces
The FBI tracked Rui-Siang Lin, a 23-year-old alleged to control a notorious dark web marketplace. This development marks a significant breakthrough in combating cyber-enabled drug distribution. The key is constant vigilance – using trusted forums to vet markets, verifying links at Torhunter.com to avoid phishing, encrypting communications, and never letting your guard down. As the dust settles, we at Torhunter.com have been analyzing what went wrong and what lessons darknet market users can take away from this unfortunate incident.
For example, in November 2023, an undercover law enforcement agent received several tablets that purported to be oxycodone, which were purchased on Incognito Market. Testing on those tablets revealed that they were not authentic oxycodone at all and were, in fact, fentanyl pills. Rui-Siang Lin, also known as “Pharoah,” was arrested at John F. Kennedy Airport in New York on Saturday and was to appear in court on Monday, the Justice Department said, calling it “one of the largest illegal narcotics marketplaces on the internet.” Two new dark web services are marketing to cybercriminals who are curious to see how their various cryptocurrency holdings and transactions may be linked to known criminal activity. Dubbed “Antinalysis” and “AMLBot,” the services purport to offer a glimpse into how one’s payment activity might be flagged by law enforcement agencies and private companies that try to link suspicious cryptocurrency transactions to real people.
When users deposited Bitcoin into the market, it was immediately converted into Monero, leveraging the privacy features of Monero to ensure that even if the initial Bitcoin transaction could be traced, the trail would go cold once the funds were inside the market’s banking system. At its core, Incognito was built on the Tor network, an anonymizing service that hides users’ identities by routing their internet traffic through a series of encrypted servers around the world. This made it extremely difficult for anyone to trace the origin of the traffic, providing a shield of anonymity for users of the market. He majored in computer science, focusing on cybersecurity and blockchain technology. His professors described him as a prodigy, someone who could solve complex problems with ease and elegance.