In a significant blow to the cybercrime underworld, US authorities have dismantled the digital infrastructure of BidenCash, a notorious dark web marketplace that facilitated the sale of stolen payment card data and personal information. The operation resulted in the seizure of 145 web domains and an undisclosed amount of cryptocurrency, sending a strong message to darknet operators worldwide.
BidenCash: A Marketplace of Stolen Identities
Launched in March 2022, BidenCash quickly gained notoriety for trafficking in millions of stolen credit cards, compromised login credentials, and personally identifiable information (PII). With a user base of over 117,000 and more than 15 million stolen card numbers sold, the platform generated an estimated $17 million in revenue before being taken down.

One of BidenCash’s more aggressive marketing strategies involved releasing massive troves of stolen data for free. Between October 2022 and February 2023, the site distributed over 3.3 million credit card records, aiming to attract new users by showcasing the volume and quality of its stolen datasets. This move heightened its profile in the cybercriminal ecosystem and drew the attention of law enforcement agencies.
Operation Led by US Secret Service and FBI
The operation was led by the US Secret Service’s Frankfurt Resident Office, working in collaboration with the Cyber Investigative Section and the FBI’s Albuquerque Field Office. With court approval, authorities moved to not only shut down the marketplace but also target its financial lifelines, including crypto wallets connected to illegal transactions.
The 145 seized domains now redirect to a law enforcement-controlled server, effectively cutting off access for users and operators alike. Though the exact amount of cryptocurrency seized remains undisclosed, the US Attorney’s Office for the Eastern District of Virginia confirmed the assets were tied directly to the marketplace’s unlawful activities.
This enforcement action is part of a broader US strategy aimed at crippling dark web marketplaces that depend on cryptocurrency to operate anonymously. With the rise in blockchain intelligence and global cybercrime cooperation, authorities are becoming increasingly effective in tracing and freezing illicit digital assets.
A Pattern of Dark Web Disruption
The takedown of BidenCash adds to a growing list of enforcement actions against cybercriminal networks. Just last month, Operation RapTor dismantled several dark web drug trafficking platforms, resulting in 270 arrests across 10 countries and the seizure of $200 million in assets, including significant amounts of crypto.

In March 2024, the US sanctioned crypto addresses linked to Nemesis, another now-defunct darknet marketplace. Used for selling drugs, fake IDs, and hacking tools, Nemesis processed over $850,000 in Bitcoin and Monero transactions between July 2022 and March 2024. The sanctioned properties included 44 Bitcoin and five Monero addresses, spotlighting the growing importance of privacy coins in cybercrime.
According to the 2025 Crypto Crime Report by TRM Labs, darknet marketplaces generated over $1.7 billion in revenue in 2024, a slight increase from the previous year. The report also highlighted the dominance of Russian-language markets, which continue to flourish due to the minimal enforcement risk posed by Russian authorities.
Crypto and Crime: The Cat-and-Mouse Game Continues
Cryptocurrency remains a double-edged sword. While it enables innovation in finance and decentralised governance, it also offers a veil of anonymity that appeals to cybercriminals. However, global regulators and law enforcement are quickly catching up, leveraging advanced blockchain analysis tools and international cooperation to track down illegal funds.
The BidenCash takedown serves as a reminder that no digital hideout is truly secure when governments are equipped with the right tools and resolve. It also underscores the growing ability of law enforcement to trace, seize, and prosecute crypto-enabled crimes, even on the darkest corners of the internet.