Today (June 16, 2025), Europol announced the successful dismantling of Archetyp Market, the longest-running darknet drug marketplace, following a sweeping international operation coordinated across six countries. From June 11 to 13, 2025, law enforcement authorities in Germany, the Netherlands, Romania, Spain, Sweden, and the United States executed a series of synchronized actions targeting the platform’s administrator, moderators, top vendors, and core infrastructure. Approximately 300 officers were deployed to secure digital evidence, seize assets, and arrest key suspects. The takedown was led by German authorities, with Europol and Eurojust facilitating intelligence sharing, operational coordination, and legal cooperation across borders.
Scale and reach of Archetyp Market
Archetyp Market had operated for over five years, amassing more than 600,000 registered users and processing at least EUR 250 million in transactions. With more than 17,000 product listings, the platform served as a hub for narcotics trafficking, including the sale of cocaine, MDMA, amphetamines, and particularly dangerous synthetic opioids such as fentanyl — making it one of the few major markets to openly permit such listings. The site’s infrastructure, hosted in the Netherlands, was taken offline during the operation. Authorities arrested the alleged administrator, a 30-year-old German national, in Barcelona, while enforcement actions in Germany and Sweden targeted one of the site’s moderators and six of its highest-volume vendors. In total, authorities seized EUR 7.8 million in assets.
Europol’s response and criminal impact
Europol’s Deputy Executive Director of Operations, Jean-Philippe Lecouffe, called the takedown a decisive strike against a platform that had become a critical node in the global supply chain for some of the world’s most dangerous substances. He noted that the investigation involved years of mapping Archetyp’s technical architecture, tracing crypto-financial flows, and conducting deep forensic analysis — culminating in a rare but highly impactful disruption of a darknet ecosystem that had achieved status alongside now-defunct giants like Dream Market and Silk Road.
Operation RapTor and continued disruption
The takedown of Archetyp comes on the heels of another major operation: the May 2025 dismantling of Incognito Market under Operation RapTor, which resulted in 270 arrests across ten countries and the seizure of over USD 200 million in cryptocurrency, cash, and contraband. In Operation RapTor, which resulted in the largest darknet market takedown to date, law enforcement leveraged blockchain intelligence to trace cryptocurrency transactions, identify key vendor wallets, and link crypto flows to fentanyl, methamphetamine, and cocaine distribution networks operating across darknet platforms. Like Archetyp, Incognito had become a dominant marketplace before its fall, with over USD 100 million in drug-related transactions since its launch.
Evolution of the darknet ecosystem
Yet even as major darknet platforms fall, TRM Labs data shows that the ecosystem remains highly adaptive. Following the 2022 shutdown of Hydra Market, TRM identified the emergence of new Russian-language darknet markets that by 2024 accounted for more than 97% of global darknet drug revenues. Although some darknet operators, particularly of Western darknet marketplaces, have historically attempted rebrands or exit scams following law enforcement action, full-scale rebuilds appear to be becoming less common.
TRM’s 2025 Illicit Drug Sales Deep Dive also highlighted a significant behavioral shift: many vendors are now bypassing traditional darknet marketplaces entirely, opting instead to sell directly via encrypted messaging apps such as Telegram and Signal. These peer-to-peer models offer faster turnaround times, reduced fees, and a lower risk of platform takedown, complicating enforcement efforts.
Market consolidation and the rise of Monero
The Archetyp Market takedown comes at a time of continued growth and transformation in the digital drug trade. According to TRM Labs, cryptocurrency-enabled online drug sales grew by more than 19% from 2023 to 2024, reaching nearly USD 2.4 billion in total volume. At the same time, 2024 saw a 42% decline in the number of new darknet marketplaces launched year over year — a signal that while the market is consolidating, it is also becoming more sophisticated. Notably, the proportion of newly launched marketplaces that accept only Monero, a privacy-focused cryptocurrency, rose sharply from just over one-third in 2023 to nearly half in 2024, highlighting a growing shift toward obfuscation and anti-surveillance tactics among darknet operators.
Continued challenges and the role of blockchain intelligence
TRM’s research further documents how darknet operators attempt to stay ahead of law enforcement through pseudonymous domain registration, rapid rebranding after takedowns, and the laundering of proceeds through high-risk exchanges. In the case of Nemesis Market — another platform covered in TRM’s reporting — US authorities sanctioned an Iranian national linked to more than USD two million in cryptocurrency transactions involving narcotics, stolen data, and illicit services. That case, like Archetyp, demonstrates how darknet infrastructure is often transnational, technically sophisticated, and deeply intertwined with the global financial system.
Looking ahead
The takedown of Archetyp Market is a clear signal that law enforcement agencies, supported by advanced blockchain intelligence, can disrupt even the most entrenched illicit platforms. But the resilience and evolution of these networks underscore the need for continued cross-border collaboration, technical innovation, and real-time monitoring to stay ahead of the next generation of darknet threats.
Access our coverage of TRON, Solana and 23 other blockchains
Fill out the form to speak with our team about investigative professional services.
