Lin managed to keep his darknet identity separate from his day job for years, even as he moved from Taiwan to the Caribbean for work. His colleagues and government employers presumably had no idea of his clandestine activities. For someone so young, Lin handled high-stakes operations with remarkable skill – Incognito’s growth attests to that. On one hand, he profited from a trade causing real harm (overdose deaths from fentanyl-laced pills sold on Incognito were very possible, and indeed the site dealt in those). On the other hand, he engaged with law enforcement and industry in fighting crypto-crime, perhaps rationalizing his actions or hedging his bets.

The market’s sophisticated security measures, coupled with its global reach, made it one of the most challenging targets they had ever faced. But the agents assigned to the case were determined, and they began to devise a plan to bring down the empire that Lin had built. In addition to switching to Monero, Incognito Market employed a decentralized internal banking system. When users deposited Bitcoin into the market, it was immediately converted into Monero, leveraging the privacy features of Monero to ensure that even if the initial Bitcoin transaction could be traced, the trail would go cold once the funds were inside the market’s banking system.
Operation RapTor: The Largest Darknet Takedown In History
According to the complaint PDF, in July 2022 and August 2023, law enforcement agents executed search warrants to gain access to three servers used to operate the marketplace and containing marketplace data. “After registering, customers were able to select which narcotics to purchase from which vendor and to pay for those narcotics using cryptocurrency, in transactions facilitated by a payment platform that Incognito Market described as a “bank” (the “Incognito Bank”).” The operator of Incognito revealed the scale of information at risk, including a comprehensive dump of 557,000 orders and 862,000 cryptocurrency transaction IDs. The extortion note implies that the users’ information included in this dump depends entirely on their actions. In addition to standard items like drugs and fraud-related materials, the market offers a wealth of unique and captivating products, all described in an engaging manner. It supports Bitcoin (BTC) and Monero (XMR) for transactions, highlighting its commitment to privacy and security, and adopts a direct payment method for each transaction, catering to users who prioritize privacy.
The Fall Of A Dark Web Kingpin: Inside The Rise And Collapse Of Incognito Market
In the end, the strategies Lin used to operate Incognito Market were a blend of tech entrepreneurship, underworld cunning, and audacious deception. He leveraged his programming and crypto knowledge to build criminal infrastructure, used his position in a government role to appear above suspicion, and exploited the trust of thousands of users until greed – and perhaps fear – drove him to perform an exit scam on his own community. It was a breathtaking run for “Pharaoh,” but as the next section shows, law enforcement was meticulously closing in on this dark web chameleon. Lin’s “strategy” as a marketplace operator combined technical savvy with an eye for community dynamics.
- Please note that our Terms and Conditions, Privacy Policy, and Disclaimers have been updated.
- By day, he worked as a diplomatic tech expert training police in cybercrime; by night, he was “Pharaoh,” the secretive mastermind of Incognito Market – one of the world’s largest dark web drug marketplaces.
- All transactions were conducted in cryptocurrency—primarily Bitcoin and Monero—allowing customers and vendors to move funds without using traditional financial rails.
- The first charge – sometimes called the “kingpin statute” – carries a mandatory minimum sentence of life in prison.
Traceable Transactions
In addition, all onion links for accessing the site have been removed and orders are being paused to protect remaining assets and prevent further losses. The administrator has promised to keep users updated as more information becomes available and efforts continue to recover the lost funds. “As ‘Pharoah’ – the leader of Incognito Market – Lin supervised all of its operations, including its employees, vendors and customers, and had ultimate decision-making authority,” the release noted. LOS ANGELES (KTLA) – A 23-year-old man from Taiwan pleaded guilty this week to selling more than $100 million in illegal narcotics from a darknet website known as “Incognito Market,” the U.S. Incognito Market has priced its extortion for vendors based on their status or “level” within the marketplace. Incognito Market deals primarily in narcotics, so it’s likely many users are now worried about being outed as drug dealers.
Incognito Links
Incognito charged vendors a 5% commission on every sale, a business model that generated millions of dollars in revenue for the platform. New vendors paid an admission fee to join, ensuring a revenue stream and a barrier against law enforcement decoys or low-effort scammers. In return, Incognito provided an infrastructure for secure (albeit illegal) transactions and acted as an escrow intermediary between buyer and seller. This approach mirrored the playbook of earlier darknet markets and contributed to Incognito’s rapid growth. Operation RapTor was a global, coordinated effort by law enforcement in the United States, Europe, South America, and Asia to disrupt fentanyl and opioid trafficking, as well as the sales of other illicit goods and services, on the darknet, or dark web.
Anthropic Shifts Privacy Stance, Lets Users Share Data For AI Training

It was during this time that Lin first encountered the world of cryptocurrencies, a discovery that would change the course of his life forever. Individuals across the world can report suspicious criminal activity to the ICE Tip Line 24 hours a day, seven days a week at 866-DHS-2-ICE. Highly trained specialists take reports from both the public and law enforcement agencies on more than 400 laws enforced by ICE. No matter where criminals hide, we will find them, dismantle their operations, and bring them to justice. This operation was about protecting innocent people from predatory criminals who profit from violence, addiction, and fear.
User Interface Of Incognito Market URL

Since that time, and through its closing in March, Incognito Market, according to the indictment, sold more than $100 million of narcotics — including hundreds of kilograms of cocaine and methamphetamines. From at least April 2021 until May 2023, McDonald and others conspired to sell fentanyl and cocaine via multiple darknet marketplaces. One trend that Incognito particularly exemplified was the increasing adoption of privacy-enhancing cryptocurrencies and features. By incorporating Monero and even providing an on-site exchange between BTC and XMR, Incognito was following a trend towards safeguarding user anonymity on the financial side. Many modern darknet markets have since gone further, with some operating exclusively in Monero to avoid the kind of blockchain tracing that helped catch Lin. However, Incognito’s case shows that even with Monero in the mix, operational security must be airtight – a single point of weakness (like Lin’s use of a BTC wallet for personal expenses) can compromise the entire scheme.
US, Japan, South Korea Meet Private Partners To Combat North Korea’s IT Work Fraud Scheme
Investigators said that prescription medication advertised as authentic very often was not. CoinTelegraph notes that Incognito Market administrators initially lied about the situation, and blamed users’ difficulties in withdrawing funds on recent changes to Incognito’s withdrawal systems. The St. Lucia government would later issue a press release lauding the success of Lin’s training course, which had been organized by the Taiwanese embassy, where Lin worked as a diplomatic specialist in IT. The statement boasted that 30 officers had learned “nuances of the dark web” and cryptocurrency tracing skills from Lin, who had “used his professional background and qualifications in the field” to teach them how to better combat cybercrime. This effort is part of an Organized Crime Drug Enforcement Task Forces (OCDETF) operation.
The market’s user-friendly interface, combined with its robust security features, attracted a diverse range of users, from small-time buyers looking for recreational drugs to large-scale vendors dealing in high volumes of illicit goods. The market’s reputation for reliability and security quickly spread, and soon, Incognito was competing with—and in many cases, surpassing—It appears the response got cut off midway. By 2023, it had become one of the most popular darknet marketplaces, attracting thousands of users from around the world.
The adulterated drugs conspiracy, which is a more unusual charge in this context, relates to the sale of fake pharmaceutical pills (like the fentanyl passed off as oxycodone) and carries up to 5 years in prison. This last charge invokes statutes under the Food, Drug, and Cosmetic Act, illustrating prosecutors’ creativity in addressing the harm caused by the marketplace (essentially treating Lin not just as a drug trafficker, but as someone endangering public health by distributing mislabeled medicine). To become an Incognito Market vendor, people were required to register with the site and pay an admission fee. In exchange for listing and selling narcotics as a vendor on Incognito Market, each vendor paid 5% of the purchase price of every narcotic sold. That revenue funded Incognito Market’s operations, including paying “employee” salaries and for computer servers. To facilitate these financial transactions, Incognito Market had its own “bank,” which allowed its users to deposit cryptocurrency on the site into their own accounts.
In March 2024, Lin abruptly shut down the marketplace, refusing to return the vendors’ and customers’ funds and threatening to publish the transaction history for all Incognito Market users unless they paid him an additional fee. Following the alleged ‘exit scam’ by the Darknet Market (DNM), multiple reports have emerged indicating that its operators are now resorting to extortion tactics. Users of Incognito have been alerted by the operators claiming to have access to transaction logs and archived conversations involving crypto assets.
“Under the promise of anonymity, Lin’s alleged operation offered the purchase of lethal drugs and fraudulent prescription medication on a global scale,” said James Smith, an assistant director in the FBI’s New York office. A 23-year-old man from Taiwan has been arrested on charges of selling at least $100 million worth of illegal drugs online through a site on the dark web known as the “Incognito Market.” One was used to host Incognito’s DDoS prevention system, one hosted the back-end marketplace data, including all completed narcotics transactions, while the third acted as the market’s bank and was used to process all cryptocurrency transactions.
OCDETF identifies, disrupts, and dismantles the highest-level criminal organizations that threaten the United States using a prosecutor-led, intelligence-drive, multi-agency approach. The DOJ said each vendor paid 5% of every sale to Incognito Market, which funded its operations and salaries. Prosecutors say the Incognito Market incorporated features from legitimate e-commerce sites, including advertising, branding and customer service. The Department of Justice said Rui-Siang Lin has been arrested in connection to allegedly operating the Incognito Market, which the DOJ says helped trade narcotics anonymously around the world. He “was scheduled to go to Singapore via New York when he was arrested by the police in New York,” he said, adding that Taiwan was closely monitoring the case. Vendors paid five percent of the purchase price of every sale to “Incognito Market,” providing Lin with millions of dollars of profits, the Justice Department said.