In a significant blow to cybercrime, US authorities have seized 145 domains and an undisclosed amount of cryptocurrency linked to BidenCash, a dark web marketplace notorious for trafficking stolen credit card information and personal data. The operation underscores growing global efforts to combat illicit activities powered by cryptocurrencies.

BidenCash: A Hub for Stolen Data

Launched in March 2022, BidenCash quickly emerged as a major player in the dark web ecosystem. The marketplace amassed over 117,000 users and facilitated the sale of more than 15 million stolen payment card numbers alongside other personally identifiable information (PII). Authorities estimate the platform generated over $17 million in revenue during its operational period.

Beyond stolen credit card data, BidenCash offered compromised login credentials, enabling unauthorized computer access. To attract new users, it deployed aggressive promotional tactics, such as releasing 3.3 million stolen credit card records for free between October 2022 and February 2023.

Coordinated Crackdown on Dark Web Marketplaces

The domain seizure was part of a court-authorized operation targeting BidenCash’s infrastructure and financial flows, announced on June 5 by the US Attorney’s Office for the Eastern District of Virginia. The confiscated domains now redirect visitors to a law enforcement-controlled server.

The investigation was spearheaded by the US Secret Service’s Frankfurt Resident Office, the FBI’s Albuquerque Field Office, and the Cyber Investigative Section. This coordinated effort reflects the US government’s broader commitment to dismantling crypto-enabled criminal networks operating on the dark web.

Crypto Seizures and Broader Enforcement Actions

In addition to the domain takedowns, US authorities secured court approval to seize cryptocurrency funds linked to BidenCash’s illegal activities. While the amount of cryptocurrency recovered has not been disclosed, the move highlights the increasing scrutiny of crypto assets tied to illicit operations.

BidenCash’s takedown is part of a larger enforcement initiative. In May, Operation RapTor dismantled multiple dark web drug trafficking platforms, resulting in 270 arrests across ten countries and the seizure of $200 million in assets, including significant cryptocurrency holdings.

Darknet Markets: An Evolving Threat

The BidenCash case echoes broader trends in the darknet ecosystem. According to TRM Labs’ 2025 Crypto Crime Report, darknet marketplaces generated $1.7 billion in revenue in 2024, reflecting a slight increase from the previous year. The report highlighted the dominance of Russian-language darknet markets, driven by a perceived low risk of enforcement within Russia.

In March, the US also sanctioned the operator of Nemesis, a defunct darknet marketplace facilitating the sale of illicit goods and services. Sanctions targeted 44 Bitcoin and five Monero addresses that collectively received over $850,000 between July 2022 and March 2024.

The seizure of BidenCash’s domains and assets marks another milestone in the fight against cybercrime. While dark web marketplaces remain resilient, the coordinated efforts of international law enforcement agencies are increasingly disrupting their operations. As cryptocurrencies continue to play a central role in enabling such activities, regulatory and enforcement measures are poised to intensify, underscoring the need for vigilance in the digital economy.