Crypto Empire Torn Down: US Seizes 145 Domains, Millions Linked to Notorious BidenCash Dark Web Market
Summary:
US authorities have taken a significant step in combating cybercrime by seizing 145 domains tied to BidenCash, a dark web marketplace accused of trafficking millions of stolen credit cards and personal data. The action was taken as part of a court-authorized operation targeting the platform’s infrastructure and financial flows.
US Authorities Take Down Dark Web Marketplace BidenCash
The US Attorney’s Office for the Eastern District of Virginia announced on June 5 that its court-authorized operation had resulted in the seizure of 145 domains tied to BidenCash. These seized domains are now redirected to a law enforcement-controlled server, depriving the platform of its illicit activities and revenue streams.
In addition to the domain seizures, US authorities also secured court authorization to seize cryptocurrency funds linked to BidenCash’s illegal activities, though officials did not disclose the amount of crypto recovered. The action is part of a broader US effort to target crypto-enabled criminal networks operating on the dark web.
BidenCash was launched in March 2022 and quickly grew to over 117,000 users. During its operation, the platform facilitated the sale of more than 15 million stolen payment card numbers and other personally identifiable information. This illicit activity generated revenue exceeding $17 million for the platform’s operators.
The dark web marketplace also sold compromised login credentials for unauthorized computer access. Between October 2022 and February 2023, it released 3.3 million stolen credit card records for free, a tactic used to promote its services among cybercriminals and attract new users.
This brazen release of sensitive information demonstrates the extent to which dark web marketplaces like BidenCash aim to facilitate illicit activities while evading law enforcement scrutiny. The staggering number of compromised payment card numbers and personally identifiable information underscores the scale of the threat posed by these platforms.
The case was led by the US Secret Service’s Frankfurt Resident Office, the agency’s Cyber Investigative Section, and the FBI’s Albuquerque Field Office. Their investigation highlights the coordination and collaboration required to tackle the complex web of illicit activities on the dark web.
The Rise of Dark Web Marketplaces
Darknet marketplaces like BidenCash have gained significant traction in recent years, offering a platform for cybercriminals to buy and sell stolen goods, compromised login credentials, and other illicit services. According to TRM Labs’ 2025 Crypto Crime Report, darknet marketplaces generated over $1.7 billion in revenue in 2024.
A disturbing trend observed is the dominance of Russian-language darknet markets due to lax law enforcement actions by Russian authorities. This not only gives rise to greater opportunities for cybercrime but also provides an ideal environment for platforms like BidenCash to thrive.
BidenCash: A Brief Timeline
Mar 2022 –
BidenCash was launched on the dark web, promising users anonymity and a platform to buy or sell illicit goods and services. Over time, it grew into a significant hub for cybercrime activity.
June 5, 2024 –
US authorities announced the seizure of 145 domains tied to BidenCash as part of a court-authorized operation targeting its infrastructure and financial flows. The seized domains are now redirected to a law enforcement-controlled server.
Government Agencies Band Together
The US Secret Service’s Frankfurt Resident Office, the agency’s Cyber Investigative Section, and the FBI’s Albuquerque Field Office led the investigation into BidenCash’s operations. This collaboration showcases the growing efforts by law enforcement agencies in tackling darknet marketplaces like BidenCash.
This move follows previous large-scale operations aimed at dismantling dark web platforms engaged in illicit activities. In May 2023, Operation RapTor resulted in 270 arrests across ten countries and the seizure of $200 million worth of assets, including significant amounts of cryptocurrency.
US Focus on Crypto-Enabled Crime
BidenCash’s demise marks a key milestone in the ongoing efforts to target crypto-enabled crime networks operating on the dark web. This trend emphasizes the need for government agencies to adapt their strategies to counter emerging threats and maintain an ever-present edge among cybercriminals.
In related moves, US authorities have also taken aim at other notorious platforms like Nemesis. Sanctioned properties included 44 Bitcoin addresses and five Monero addresses that received more than $850,000 between July 2022 and March 2024.
Conclusion
The takedown of BidenCash serves as a crucial reminder of the collaborative effort required by government agencies to tackle darknet marketplaces and their operators. While recent reports suggest that revenue from such platforms has only slightly declined compared to previous years (from $1,5 billion in Crypto Crime Report 2025), US efforts remain vigilant.
Government authorities must continue working together with private sector intelligence firms like TRM Labs to monitor trends in the darknet marketplaces and disrupt platforms that facilitate illicit activities.
