Illicit domains and crypto seized in US takedown of BidenCash darknet marketplace

BidenCash, a darknet marketplace with over 117,000 users, has been taken offline in a US operation targeting crypto-fueled cybercrime.

On June 5, the US Attorney’s Office for the Eastern District of Virginia announced the seizure of 145 domains and an undisclosed amount of cryptocurrency linked to the marketplace.

The move follows a court-authorised operation targeting BidenCash’s infrastructure, which facilitated the sale of stolen credit card data and personally identifiable information (PII).

According to prosecutors, BidenCash was launched in March 2022 and quickly grew into a major player on the dark web.

Over its two-year run, the platform trafficked more than 15 million payment card numbers and generated over $17 million in revenue.

US officials say the site charged fees on each transaction, making it a profit-driven hub for cybercriminals.

The seized domains have been redirected to a law enforcement-controlled server, effectively ending BidenCash’s online presence.

In addition to card data, the marketplace sold compromised login credentials used to access computer systems without authorisation.

Investigators accuse BidenCash of promoting its services by releasing 3.3 million stolen credit card records for free between October 2022 and February 2023.

The investigation was led by the US Secret Service’s Frankfurt Resident Office and Cyber Investigative Section, along with the FBI’s Albuquerque Field Office. 

Authorities received assistance from international law enforcement and cybersecurity partners, including the Dutch National High Tech Crime Unit, Shadowserver Foundation, and Searchlight Cyber.

As of press time, the total amount of cryptocurrencies seized was not publicly available.

US crackdown on illicit platforms

BidenCash is the latest in a series of darknet platforms dismantled as part of the US government’s intensified push against illicit activity that often involves crypto use.

For instance, in May, Operation RapTor dismantled multiple dark web drug markets across ten countries, resulting in 270 arrests and the seizure of $200 million in cash, crypto, and assets.

Earlier in March, authorities sanctioned the operator of Nemesis Market, a darknet platform used for trafficking drugs, forged IDs, and hacking services.

The US Treasury blacklisted 44 Bitcoin and five Monero addresses linked to the operator, which had received over $850,000.

In April, the Treasury Department moved against Cambodia-based Huione Group, proposing to sever its access to the US financial system.

The conglomerate was accused of laundering billions in crypto tied to cyber scams, North Korean operations, and human trafficking-linked online marketplaces.

Last year, the FBI arrested Rui-Siang Lin, the alleged operator of Incognito Market, a $100 million dark web drug marketplace.

Authorities traced illicit crypto transfers through a combination of blockchain forensics and KYC data from exchanges, leading to Lin’s capture at JFK Airport.

According to TRM Labs, darknet marketplaces processed over $1.7 billion in crypto transactions in 2024 alone. 

The post Illicit domains and crypto seized in US takedown of BidenCash darknet marketplace appeared first on Invezz