In the DOJ’s criminal complaint against Lin, it points to a handwritten document the FBI pulled from his email, which appears to sketch out a flow chart for a dark-web market’s mechanics. The complaint’s FBI affidavit says Lin emailed himself the sketch in March 2020 when he was at most 19 years old. It describes functionality such as how “vendors” and “buyers” would register, make purchases, and encrypt shipping addresses.
On 28th February, a few Incognito Market vendors reported missing withdraws. 6 days later, on 6th March, vendors were locked out of crucial market features and missing all withdraws. On 9th March, Incognito Market started to extort vendors and buyers, asking for payments in a range between $100 – $20.000 in accordance to the level of vendor market’s. Initially, users from the USA were prohibited from using the Incognito, but now they welcome buyers and sellers from all over the world. The team behind Incognito Market also created libre forum, a darknet discussion board. When it comes to security, incognito market provides everything you need to make secure shopping at the highest level.
Markets: Incognito
But Lin’s arrest was more than just a victory for law enforcement—it was a turning point in the fight against cybercrime. The investigation had demonstrated that even the most sophisticated darknet operations could be infiltrated and dismantled, given enough time and resources. It also highlighted the growing importance of cryptocurrency forensics and blockchain analysis in combating cybercrime. On May 18, 2024, as Rui-Siang Lin prepared to board a flight at John F. Kennedy International Airport, he was arrested by Homeland Security Investigations. Within days, Lin was arraigned in Manhattan Federal Court, where he was charged with multiple counts, including engaging in a continuing criminal enterprise, narcotics conspiracy, money laundering, and distributing adulterated drugs. Users began to panic, and many quickly tried to withdraw their funds from the market.
- Our commitment is unwavering,” said Chief Postal Inspector Gary Barksdale, United States Postal Inspection Service.
- Even if one of his posts suggests an affinity with the current regime, HUMINT recruitment operations are only sometimes straightforward.
- On May 18, 2024, as Rui-Siang Lin prepared to board a flight at John F. Kennedy International Airport, he was arrested by Homeland Security Investigations.
- Lin managed to keep his darknet identity separate from his day job for years, even as he moved from Taiwan to the Caribbean for work.
- Before sharing sensitive information, make sure you’re on a federal government site.
Incognito Market Built-in Wallet

The EDTF is the premier money laundering task force in the nation and is comprised of more than 200 law enforcement personnel representing approximately thirty-five (35) federal, state, and local law enforcement and regulatory agencies. The EDTF encompasses a standalone Cyber Division as part of an effort to stay abreast of emerging criminal threats and in keeping with current and future investigative priorities. The mission of the EDTF is to disrupt, dismantle, or render ineffective, organizations involved in the laundering of proceeds of narcotics trafficking and other financial crimes. Since its inception in 1992, the Task Force has been responsible for the seizure of approximately $600 million and more than 2100 arrests.
How did a young man from Taiwan, a brilliant developer with a promising career, end up as one of the most wanted cybercriminals in the world? This is the story of how Rui-Siang Lin, aledgely also known as ‘Pharaoh,’ built the Incognito Market into a $100 million empire—and how it all fell apart. Stay with me as we delve into the rise and fall of Incognito Market, from its inception to its inevitable collapse, and the intricate web of technology and greed that fueled it. A sketch of a dark-web market’s infrastructure that Lin emailed to himself eight months before allegedly creating Incognito Market, according to the DOJ.
There is a dark history of scammers, and even of government agents, making false and misleading public statements to people who browse Tor hidden services. In addition to switching to Monero, Incognito Market employed a decentralized internal banking system. When users deposited Bitcoin into the market, it was immediately converted into Monero, leveraging the privacy features of Monero to ensure that even if the initial Bitcoin transaction could be traced, the trail would go cold once the funds were inside the market’s banking system.
Decoding Incognito Exit Scam

This shows how vulnerable dark web users really are, even if they think they are safe. It’s a warning to anyone who believes their anonymity on such sites is foolproof, especially when the site operator can be the biggest threat. According to the head of the cyber threat research team at IntSights, Ariel Ainhoren, wallstreet market darknet if the online chatter about the closure proves to be true, the Dark Web economy is likely to take a massive blow.

Cypher Darknet Market
Similarly, Lin maintained a Github account in his name, which he used to showcase his programming prowess, specifically his Proof-of-Work (PoW) shield application. This open-source protocol mitigates DDoS attacks by acting as a smart proxy between the backend service and the end user. Based on this publicly available information, authorities concluded that Lin possessed the requisite technical knowledge and experience to operate Incognito Market.
What Are Top Darknet Marketplaces And How Do They Work?
The site allowed buyers to search through thousands of listings for narcotics of their choice. In the 41 months that Incognito Market was open, it facilitated the sale of more than $100 million of narcotics. Only earlier this week did it become clear exactly what Lin’s “professional background and qualifications in the field” allegedly entailed, seemingly unbeknownst to either his Taiwanese employers or his St. Lucian law enforcement trainees. That was before Lin’s alleged theft of his own users’ funds earlier this year and then his arrest last week by the FBI in New York’s JFK airport. According to the indictment, between 2022 and 2023, law enforcement agents executed search warrants to gain access to three servers used to operate the marketplace and containing marketplace data. One of the servers searched by the agents was the so-called “bank”, a database containing all cryptocurrency transactions.
Unraveling The Seedy Underbelly Of The Darknet Marketplaces
The legal case against Rui-Siang Lin is being prosecuted in the Southern District of New York, a jurisdiction known for tackling high-profile cybercrime and narcotics cases. Once Lin was in custody, the indictment against him was unsealed, revealing an array of serious charges. Lin was accused of being the principal operator of a Continuing Criminal Enterprise (CCE) – often referred to as the “kingpin” or “drug lord” statute – due to the large-scale, ongoing narcotics trafficking conspiracy he oversaw.
Market Links

He majored in computer science, focusing on cybersecurity and blockchain technology. His professors described him as a prodigy, someone who could solve complex problems with ease and elegance. Lin quickly became involved in various research projects, often working late into the night on coding challenges and cryptography puzzles. It was during this time that Lin first encountered the world of cryptocurrencies, a discovery that would change the course of his life forever.
Coinbase Equity Futures To Blend Mag 7 Tech Stocks With Crypto ETFs

Another significant obstacle for law enforcement was Incognito’s use of PGP encryption for all communications. PGP (Pretty Good Privacy) is one of the most secure forms of encryption available, and it is widely used in both legitimate and illicit operations to protect sensitive information. On Incognito, buyers, sellers, and administrators were required to use PGP to encrypt their messages, ensuring that even if law enforcement managed to intercept communications, they would be virtually unreadable without the corresponding private key.
Incognito Link
After logging in with a unique username and password, users were able to search thousands of listings for narcotics of their choice. Incognito Market sold illegal narcotics and misbranded prescription medication, including, heroin, cocaine, LSD, MDMA, oxycodone, methamphetamines, ketamine and alprazolam. Throughout the investigation, law enforcement also leveraged the darknet community’s own reactions to Incognito’s collapse. When Pharaoh attempted to extort his users, many panicked vendors likely reached out to trusted contacts or even law enforcement for help.
It simply includes products which can be used digitally without needing physical existence, such as credit cards, hacked accounts, e-books, software etc. Cybercriminals can use an access to an online store to steal clients’ credit card information. This is because the idea of this market place is to support the free market and does not follow local regulation restrictions. District Judge Colleen McMahon and is scheduled to be sentenced on March 27, 2025. A federal district court judge will determine any sentence after considering the U.S.