U.S. Seizes Crypto and 145 Domains in Crackdown on BidenCash Dark Web Marketplace

Massive Operation Targets Illicit Cyber Marketplace

On June 5, the U.S. authorities announced a significant blow to cybercrime with the seizure of approximately 145 darknet and traditional internet domains, alongside an undisclosed amount of cryptocurrency tied to BidenCash, a notorious dark web marketplace.

Launched in March 2022, BidenCash facilitated the illegal sale of over 15 million stolen credit card numbers and personal data, amassing more than 117,000 users and generating over $17 million in revenue.

The operation, led by the U.S. Attorney’s Office for the Eastern District of Virginia, in collaboration with the FBI, U.S. Secret Service, and the Dutch National High Tech Crime Unit, marks a critical step in dismantling dark web platforms fueling financial crime.

Broader Context of Global Cybercrime Crackdowns

The BidenCash takedown is part of a broader U.S. and international effort to combat crypto-enabled cybercrime.

In May 2025, Operation RapTor resulted in 270 arrests and the seizure of $200 million in assets across 10 countries, targeting darknet drug trafficking networks. Earlier in March 2025, the U.S. sanctioned the Nemesis marketplace, freezing 44 Bitcoin and five Monero addresses.

The BidenCash operation builds on prior successes against platforms like Hydra Market and AlphaBay, reflecting a sustained campaign to disrupt illicit online marketplaces.

Despite the seizure, some BidenCash domains reportedly remain active, underscoring the resilience of darknet networks.

Scams and frauds accounted for approximately a third of all crypto crime in 2023, TRM Labs reported. Despite the overall proportion of total illicit funds in the crypto ecosystem shrinking by 9% year-on-year, criminals still handled over USD 34 billion worth of cryptocurrencies. In 2024, darknet marketplaces still generated $1.7 billion in revenue, with Russian-speaking platforms continuing to dominate, largely due to limited enforcement in certain jurisdictions.

Law Enforcement Collaboration and Future Implications

The operation involved key agencies, including the U.S. Secret Service’s Frankfurt Resident Office, the FBI Albuquerque Field Office, the Shadowserver Foundation, and Searchlight Cyber, alongside international partners like the Dutch National High Tech Crime Unit.

Seized domains now redirect to a law enforcement-controlled server displaying official insignias from the DOJ, FBI, Secret Service, and Dutch authorities, signaling a unified front against cybercrime.

“This action sends a clear message to cybercriminals: we will pursue and dismantle platforms that exploit stolen data,” said an unnamed DOJ official in a statement echoed across reports. The seizure of cryptocurrency funds, though undisclosed in amount, underscores the growing focus on disrupting the financial infrastructure of dark web operations. As cybercriminals increasingly rely on digital currencies, law enforcement agencies are leveraging advanced blockchain analytics to trace and seize illicit funds.