In 2026, the intersection of darknet marketplace activity and cryptocurrency tax enforcement has reached a defining inflection point. Law enforcement agencies across the United States and Europe have escalated seizure operations, cryptocurrency mixing services have been dismantled for laundering billions in darknet proceeds, and the IRS Criminal Investigation division has expanded its mandate well beyond domestic tax crime to target narcotics trafficking, sanctions evasion, and dark web infrastructure. The tax implications of these enforcement actions, spanning unreported gains from illicit marketplace proceeds to the forfeiture of cryptocurrency held in criminal wallets, are reshaping how regulators and prosecutors approach digital asset accountability.
At KoinX, we track the evolving enforcement landscape around cryptocurrency taxation to help investors, compliance professionals, and tax practitioners understand where regulatory pressure is concentrated. The data compiled below reflects the scale and urgency of darknet-related cryptocurrency enforcement as it stands based on the latest available research from the last two years.
This article is organized around primary statistical data drawn from government enforcement agencies, official court filings, and original research by leading blockchain analytics firms. Sections cover IRS Criminal Investigation recovery data, DOJ darknet marketplace prosecution outcomes, global on-chain darknet revenue flows, cryptocurrency mixer seizures, OFAC sanctions data, and international law enforcement operations.
Scope and Methodology
This article compiled statistics exclusively from primary institutional sources: the IRS Criminal Investigation division annual reports, the U.S. Department of Justice press releases and official court filings, the U.S. Treasury Office of Foreign Assets Control official designations, the FBI Internet Crime Complaint Center annual reports, Europol official press releases, and original research reports by Chainalysis and TRM Labs. Each of these organizations produced the data cited from their own enforcement actions, on-chain analysis, or official filings, satisfying the primary source standard applied throughout.
All statistics were published within the two-year window spanning 2024 and 2025, with original study years retained in each bullet. Data older than two years was excluded unless no more recent equivalent exists. Geographic scope covers U.S. federal enforcement data as the primary jurisdiction, with supplemental data from European enforcement operations and global on-chain flows covering Russian-language markets, international JCODE operations, and darknet market revenues across multiple regions.
Darknet Crypto Enforcement at a Glance: 2026 Statistics
- IRS Criminal Investigation (IRS-CI) identified $10.59 billion in total financial crimes in FY2025, including tax and non-tax offenses, based on the 2025 Annual Report by IRS-CI.
- IRS-CI secured 1,611 convictions in FY2025 with an 89% conviction rate, one of the highest in federal law enforcement, based on the 2025 Annual Report by IRS-CI.
- Darknet market and fraud shop BTC on-chain inflows totaled just over $2 billion in 2024, based on a 2025 Crypto Crime Report by Chainalysis.
- Aggregate darknet market crypto flows reached nearly $2.6 billion in 2025, reflecting a continuous rise since 2022, based on the 2026 Crypto Crime Report by Chainalysis.
- Illicit cryptocurrency addresses received at least $154 billion globally in 2025, a 162% year-over-year increase driven primarily by a 694% increase in value received by sanctioned entities, based on the 2026 Crypto Crime Report by Chainalysis.
- TRM Labs estimated total illicit cryptocurrency flows at $158 billion in 2025, the highest level observed in 5 years and a 140% increase from 2024, based on the 2026 Crypto Crime Report by TRM Labs.
- A darknet drug vendor operating across Silk Road, AlphaBay, Hansa, and related markets forfeited cryptocurrency accounts ultimately valued at $150 million, the largest single cryptocurrency and cash seizure in DEA history, based on a 2024 IRS press release by the IRS.
IRS Criminal Investigation Recovery and Enforcement Statistics
- IRS-CI referred 2,043 cases for prosecution in FY2025, a 14% increase compared to FY2024, based on the 2025 Annual Report by IRS-CI.
- IRS-CI executed 1,445 warrants in FY2025, a 25% increase from the prior fiscal year, based on the 2025 Annual Report by IRS-CI.
- In FY2024, IRS-CI identified over $9.1 billion in fraud from tax and financial crimes, obtained $1.7 billion in court-ordered restitution, and seized criminal assets totaling approximately $1.2 billion, based on the FY2024 IRS news release by the IRS.
- IRS-CI cyber-related cases in FY2025 resulted in defendants being sentenced to an average of 63 months in prison, with 54 convictions across cyber-related investigations, based on the 2025 Annual Report by IRS-CI.
- IRS-CI narcotics-related enforcement in FY2025 accounted for 11% of investigative time and resulted in 447 convictions, based on the 2025 Annual Report by IRS-CI.
- IRS-CI’s FY2025 tax fraud identified was more than double the amount uncovered in FY2024, growing from approximately $2.12 billion to $4.49 billion, based on the 2025 Annual Report by IRS-CI.
- IRS-CI processed 2.35 petabytes of digital data in FY2025 as part of financial crime investigations, based on the 2025 Annual Report by IRS-CI.
- In FY2025, approximately 190 IRS-CI special agents were detailed to Homeland Security Task Forces, contributing to money laundering and narcotics investigations with 2,313 seizures and 994 forfeitures in the money laundering category, based on the 2025 Annual Report by IRS-CI.
- Roman Sterlingov received a 12.5-year prison sentence in FY2025 for operating Bitcoin Fog, a darknet cryptocurrency mixer that served as a primary laundering conduit for darknet marketplace proceeds, based on the 2025 Annual Report by IRS-CI.
DOJ Darknet Marketplace Prosecution and Seizure Statistics
- Samourai Wallet co-founders were sentenced in November 2025 to 5 and 4 years in prison respectively for facilitating over $237 million in illegal transactions laundered through the mixer, with funds sourced from drug trafficking and darknet marketplaces, based on IRS-CI’s 2025 Top 10 Cases release by the IRS.
- Nemesis Market, an Iranian-operated darknet marketplace, processed more than 400,000 orders between 2021 and 2024, including over 55,000 stimulant orders and 17,000 opioid orders, before its seizure by U.S., German, and Lithuanian authorities, based on a 2025 DOJ press release by the U.S. Department of Justice.
- Empire Market, a darknet marketplace, processed approximately $430 million in illicit transactions, and federal law enforcement seized cryptocurrency valued at $75 million at the time of seizures during the investigation, based on a 2024 DOJ press release by the U.S. Department of Justice.
- Bitcoin Fog moved over 1.2 million bitcoin valued at approximately $400 million that primarily came from darknet marketplaces and was tied to illegal narcotics, computer crimes, and identity theft, based on a 2024 DOJ fact sheet by the U.S. Department of Justice Criminal Division.
- ChipMixer, a darknet cryptocurrency mixer, laundered more than $3 billion worth of cryptocurrency between 2017 and 2023, including over $200 million linked directly or through intermediaries to darknet markets and more than $60 million processed on behalf of Hydra Market customers, based on a 2023 DOJ press release by the U.S. Department of Justice.
- Incognito Market sold more than $100 million of narcotics on the dark web before its shutdown in March 2024, facilitating hundreds of kilograms of cocaine and methamphetamine, based on a 2025 DOJ Operation RapTor announcement by the U.S. Department of Justice.
- The D.C. Scam Center Strike Force seized and froze cryptocurrency exceeding $580 million from Chinese transnational criminal organizations in its first 3 months of operation, based on a 2026 DOJ press release by the U.S. Department of Justice.
- Bitzlato, a cryptocurrency exchange operating as a primary counterparty for Hydra Market users, processed more than $700 million in illicit funds including millions in ransomware proceeds, based on a 2023 DOJ press release by the U.S. Department of Justice.
Global Darknet Market Revenue and On-Chain Flow Statistics
- Hydra Market accounted for an estimated 80% of all darknet market-related cryptocurrency transactions in 2021, and received approximately $5.2 billion in cryptocurrency since 2015 before its seizure, based on a 2022 DOJ press release by the U.S. Department of Justice.
- Kraken DNM, a Russian-language darknet marketplace, received $737 million on-chain in 2024, a 68% year-over-year increase, overtaking Mega as the leading darknet marketplace by annual revenue, based on the 2025 Crypto Crime Report by Chainalysis.
- Fraud shops adjacent to darknet markets saw revenue decline from approximately $225 million to $87.5 million year-over-year in 2025, based on the 2026 Crypto Crime Report by Chainalysis.
- Incoming volume to Russian-language darknet markets grew by approximately 20% year-over-year, from $1.3 billion in 2024 to $1.6 billion in 2025, based on the 2026 Crypto Crime Report by TRM Labs.
- Drug sales through individual vendor shops fell by more than 60% in 2025 to approximately $1 billion, down from $2.75 billion in 2024, as activity consolidated into darknet marketplaces rather than individual vendors, based on the 2026 Crypto Crime Report by TRM Labs.
- Wallets downstream from darknet markets and scams hold the majority of an identified $60 billion in downstream illicit wallet balances, with darknet market administrators and vendors alone controlling over $40 billion in on-chain value, based on a 2025 report by Chainalysis.
- Darknet market admin and vendor wallets show a compound annual growth rate (CAGR) exceeding 200% in balance accumulation, based on a 2025 report by Chainalysis.
- In most illicit activity categories including darknet markets, over 50% of balances are concentrated in the top 3 wallets, based on a 2025 report by Chainalysis.
- Darknet markets and online pharmacies commonly operate for 807 to 959 days, with 50% still active during these time frames, indicating structural resilience to enforcement, based on a 2025 report by Chainalysis.
OFAC Sanctions and Darknet-Linked Cryptocurrency Designations
- OFAC designated Iran-based Behrouz Parsarad along with 49 cryptocurrency addresses for his role as the sole administrator of Nemesis darknet marketplace, which facilitated the sale of nearly $30 million worth of drugs and had over 30,000 active users and 1,000 vendors, based on a 2025 Treasury press release by the U.S. Department of the Treasury.
- OFAC re-designated Garantex cryptocurrency exchange and its successor Grinex in August 2025 for processing over $100 million in transactions linked to illicit activities since 2019, including ransomware actors and cybercriminals, based on a 2025 Treasury press release by the U.S. Department of the Treasury.
- Following the March 2025 U.S. Secret Service-led law enforcement action against Garantex, authorities seized its web domain and froze over $26 million in cryptocurrency controlled by the exchange, based on a 2025 Treasury press release by the U.S. Department of the Treasury.
- Inflows to 3 cryptocurrency exchanges sanctioned by OFAC for facilitating illicit activity (NetEx24, Bitpapa, and Cryptex) dropped an average of 82% in the 3 months following their designation, based on the 2025 Crypto Crime Report by TRM Labs.
- OFAC issued 13 sanctions designations in 2024 that included 86 cryptocurrency addresses, many targeting Russia and cyber-related individuals including members of the Trickbot ransomware group and money laundering networks, based on the 2025 Crypto Crime Report by TRM Labs.
Cryptocurrency Mixer Seizures and Darknet Laundering Statistics
- The Helix darknet mixing service processed transactions involving over $300 million worth of cryptocurrency from 2014 to 2017, and in January 2026 the U.S. government obtained legal title over more than $400 million in total forfeited assets tied to its operation, based on a 2026 DOJ press release by the U.S. Department of Justice.
- Europol and partners seized EUR 25 million in cryptocurrency during the November 2025 takedown of Cryptomixer, an illegal cryptocurrency mixing service, based on a 2025 Europol press release by Europol.
- Operation ENDGAME cumulative cryptocurrency seizures totaled more than EUR 21.2 million as of its second phase in June 2025, targeting ransomware infrastructure and darknet enablers, based on a 2025 Europol press release by Europol.
- Darknet market vendors sent a significantly higher portion of their funds to decentralized finance (DeFi) in 2024 compared to historical patterns, with direct transfers from illicit entities to exchanges collapsing from approximately 40% of quarterly value in 2021 to around 15% in Q2 2025, based on a 2025 report by Chainalysis.
- Darknet markets lead all illicit categories in concentration of cash-out infrastructure, with a 146% growth in concentration of deposit address usage at the top 10 exchanges, indicating these operations have identified reliable fiat conversion routes, based on a 2025 report by Chainalysis.
FBI Internet Crime and Cryptocurrency Fraud Loss Statistics
- The FBI IC3 2024 Internet Crime Report recorded 859,532 complaints with total reported losses exceeding $16.6 billion, a 33% increase in losses from 2023, with cryptocurrency investment fraud accounting for over $6.5 billion in reported losses, based on the 2024 Annual Report by the FBI Internet Crime Complaint Center.
- The FBI IC3 received 149,686 complaints in 2024 reporting some type of cryptocurrency use, with losses from those complaints exceeding $9.3 billion, based on the 2024 IC3 Statistics Brochure by the FBI Internet Crime Complaint Center.
- Americans who submitted complaints involving cryptocurrency to the FBI IC3 in 2025 reported the highest losses of any category, with 181,565 complaints totaling more than $11 billion, based on a 2025 FBI press release by the Federal Bureau of Investigation.
- The FBI IC3 received 1,008,597 total complaints in 2025, up from 859,532 in 2024, with approximately 453,000 cyber-enabled fraud complaints and reported losses exceeding $17.7 billion, based on a 2025 FBI press release by the Federal Bureau of Investigation.
- The FBI IC3’s Financial Fraud Kill Chain (FFKC) processed 3,020 complaints with $848.4 million in attempted fraud in 2024, achieving a 66% success rate in freezing funds across domestic ($469.1 million) and international ($92.5 million) cases, based on the 2024 Annual Report by the FBI Internet Crime Complaint Center.
International Law Enforcement Darknet Operations Statistics
- Operation RapTor resulted in 270 arrests across Austria, Brazil, France, Germany, the Netherlands, South Korea, Spain, Switzerland, the United Kingdom, and the United States, and produced more than $200 million in seized currency and digital assets along with over 180 seized firearms, based on a 2025 DOJ announcement by the U.S. Department of Justice.
- Nemesis Market had over 150,000 registered users worldwide at its peak before its March 2024 seizure by U.S., German, and Lithuanian law enforcement, based on the IRS-CI FY2025 Annual Report by IRS-CI.
- An international cryptocurrency fraud and money laundering network dismantled in January 2026 had laundered over EUR 700 million, based on a 2026 Europol press release by Europol.
- Nemesis Market’s German infrastructure seizure in March 2024 also seized $102,000 in cryptocurrency as part of coordinated international enforcement, based on a 2025 Chainalysis blog post by Chainalysis.
- A North Korean IT worker fraud scheme generated more than $17 million in illicit revenue by stealing U.S. national identities for remote job applications and was investigated in FY2025 with IRS-CI participation, based on the IRS-CI FY2025 Annual Report by IRS-CI.
Darknet Market Crypto Asset Typology Statistics
- Stablecoins account for 84% of all illicit transaction volume globally in 2025, with darknet market transactions and ransomware remaining among the few categories still predominantly settled in Bitcoin, based on the 2026 Crypto Crime Report by Chainalysis.
- Illicit drug sales through cryptocurrency increased by over 19% in 2024, with a notable shift away from traditional darknet marketplaces toward encrypted chat applications and social media platforms, based on the 2025 Crypto Crime Report by TRM Labs.
- Vendor shop drug sales through cryptocurrency nearly doubled in 2024, from $289 million in 2023 to over $600 million, reflecting diversification beyond traditional darknet market ecosystems, based on the 2025 Crypto Crime Report by TRM Labs.
- 21 new darknet markets launched in 2025, with nearly half of new markets adopting Monero (XMR)-only payments in response to enforcement pressure, the highest share of XMR-only launches observed in the dataset, based on the 2026 Crypto Crime Report by TRM Labs.
- At least 93 new ransomware variants were active in 2025, reflecting sustained growth in the broader illicit crypto ecosystem that includes darknet market infrastructure, based on the 2026 Crypto Crime Report by TRM Labs.
- Wholesale drug purchases represented between 71% and 81% of total darknet market crypto inflow in 2024, dominating the market share of transactions measured on-chain, based on the 2025 Crypto Crime Report by Chainalysis.
References