Darknet Vendor Analysis Finds Distinct Selling Patterns and Limits of Username-Based Tracking
Summary
An analysis of 7,314 vendors across 53 darknet markets found distinct drug and fraud selling patterns and showed that usernames alone are unreliable for linking vendors across platforms.
Key points
- The dataset covers vendors active from January through April 2026; 285 high-activity vendors posted more than 50 new listings.
- Most vendors were transient and low-volume, with more than 2,000 posting one listing and over 1,000 posting two.
- Drug vendors, particularly cannabis sellers, tended to specialize in narrow product categories; high-activity fraud vendors more often offered varied goods such as financial instruments, identity documents, and compromised accounts.
- The username victorviran appeared on eleven markets, but accounts with that name had substantially different listing profiles; some similar profiles appeared under different names.
- The analysis presents vendor fingerprints based on normalized listing-category distributions as a similarity signal, not proof of shared identity.
- The dataset and fingerprint analysis are from DarkOwl’s DarkMart, covering 7,314 vendors across 53 markets.
Article Details
- Publisher
- DarkOwl
- Report Period
- January-April 2026
- Scope
- Vendor behavior across darknet markets, based on DarkOwl’s DarkMart dataset.
- Sample Size
- 7,314 active vendors across 53 markets; high-activity subset: 285 vendors with at least 50 new listings.
- Key Statistics
- More than 2,000 vendors posted exactly one listing during the period.
- More than 1,000 vendors posted exactly two listings during the period.
- The high-activity subset contained 285 vendors who posted more than 50 new listings.
- The username victorviran appeared on eleven markets during the period.
- Recommendations
- Treat vendor fingerprints as similarity signals, not as proof of identity or attribution.
- Analyze high-activity vendors as a separate population rather than assuming they represent all vendors.
- Reflect vendor specialization in investigative profiles; distinguish narrowly focused drug vendors from diversified fraud vendors.