Darknet market safety: a threat model for buyers

Who you're actually defending against

Different threats need different defenses, and mixing them up is how people end up doing a lot of inconvenient things that protect them from the wrong enemy. There are four worth naming.

Someone who steals your account or money

Phishing clones, malware, a reused password. This is the most common harm by a distance, and the defenses are cheap: an address checked against the signed announcement (the link page shows how), PGP login, and a small balance.

Your own network or device seeing what you do

An ISP, an employer's network, a shared computer. Tor hides the sites you visit from your ISP and your IP address from the sites, and it does nothing about what's already on the machine.

A vendor or the market itself

A vendor who scams, a market that vanishes with its balances. Escrow, vendor vetting, and keeping little on deposit are the controls here.

Law enforcement, at the package or later

The risk with the hardest consequences and the fewest tools. Most of what protects you here is about not connecting the parcel to you.

Know which one you're worried about before you spend effort. Someone concerned mainly about being scammed needs a different routine from someone concerned about being identified, and the second case has no complete answer.

A clean environment: Tor, Tails, and a separate device

The baseline is Tor Browser, set up as the access walkthrough describes. The next step up is Tails, an operating system that runs from a USB stick, sends all its traffic through Tor, and forgets everything when you shut it down. The Tails documentation covers installing it. I'd pick Tails over a regular system running Tor Browser for anyone who plans to do this more than once, because a normal computer keeps traces (recent files, a swap file, a download history), and Tails keeps none unless you create an encrypted persistent volume deliberately.

A device used only for this is better again, and a cheap secondhand laptop booting Tails costs less than most single orders. What matters is that the machine you use for the market never logs into your email, your social accounts, or your bank. The walls between them are what hold; a clever setup that shares a browser profile with your ordinary life has no walls.

If you're doing this on your everyday computer with Tor Browser, that's a step down and still a reasonable one, as long as you keep the market in its own Tor Browser, keep PGP keys somewhere you control, and don't install add-ons. The PGP guide assumes that setup.

Keeping your identity out of it

Most identification doesn't come from breaking Tor. It comes from the things a person writes and reuses. The habits that undo people are dull ones:

• A username, a PGP key, or a writing style that appears on a forum or another site under their real name, which lets anyone search from one to the other.
• A deposit from an exchange account that knew their identity, covered in the payments guide.
• Talking about orders to friends, in chat apps, or in a group, which creates witnesses and records you can't see.
• Boasting, in any form: a screenshot, a post on social media, a story to a coworker.
• Sending an address in plain text instead of encrypting it to the vendor's key.

The principle behind the list is compartments. What you use for the market, you use for nothing else: its own username, password, key, device, and deposit route. Compartments also have to hold over time. A handle that was clean a year ago stops being clean the first time it turns up anywhere else, and there is no way to make it clean again.

Receiving a package

This is where the law reaches you, so it's where you should be most cautious about anything I say. Legality of the goods and the rules on receiving them differ widely between countries, and between states in the US, and what is a fine in one place is a prison sentence in another. Look up your local rules, by yourself, before you order.

The delivery address is the point where an anonymous order meets a real person, and nothing earlier in the chain changes that. Tor, Monero, and PGP protect the order on its way there; none of them does anything for the parcel once it is in the post, or for whoever's name and door it reaches. Catharsis also offers dead-drop handoff, which takes the post out of it but brings failure modes of its own: a spot a stranger finds first, or goods left sitting somewhere while a delay plays out.

Harm reduction: testing what arrives and dosing low

The thing most buyers worry about least is the one with the quickest consequences. Product on any market can be mislabelled, cut with something different from what the listing says, or much stronger than expected, and the danger is greatest with anything that is dosed in milligrams.

• Test what you receive. Reagent kits identify a substance by colour change and are a reasonable first check; they can't tell you how strong it is or what else is in it. Fentanyl test strips catch one very dangerous contaminant, and no result from a strip is a guarantee. DanceSafe's drug-checking guide explains what each test tells you and where it stops.
• Start with a small amount, a fraction of what you'd normally take, and wait longer than you think necessary before taking more.
• Don't use alone, and don't mix substances; the deaths are mostly from combinations and from using with no one nearby.
• Know the basics of the emergency response where you live, naloxone included where opioids are involved.

I'm not telling anyone what to take, and I'd rather you took less than took the risk blindly. If you want a professional, a local harm reduction service will talk to you without judging.

Why escrow and vendor vetting count as safety

Orders go wrong in three ways: no delivery, the wrong product, and a delivery that's the right product but not what you'd expect. Escrow and vetting reduce the first two. Reading a vendor's history before you buy, and not releasing money until you hold the goods, belong in a safety routine just as much as the technical steps; the escrow guide covers how. The third failure, the right product at a strength or purity nobody expected, is one neither of them touches, which is why testing has its own section above.

Darknet market opsec: the mistakes that get buyers caught

Darknet market opsec, short for operational security, is the set of small habits that decide whether anything links a person to an order, and it's where buyers actually get caught. It is rarely a broken cipher. The identity leaks listed above account for much of it; the rest are lapses in a routine that was sound on the first day and wore down by the tenth: the evening the market account gets opened on the everyday laptop because the Tails stick is in a drawer, just this once. How to stay safe on darknet markets, in practice, is to be unremarkable, with the same small routine every time, including the times it feels unnecessary.

One habit is worth adding to that routine. Keep your phone out of the room when you work, or at least off, because a phone is a location log and a microphone that you didn't choose to bring.

All of this assumes you're ordering for yourself. Buying to share or sell on is charged far more heavily in most countries, often on quantity alone, and if that's your situation the person to ask is a criminal defence lawyer where you live.