CyberIntel ⬡ News
★ Saved ◆ Cyber Reads
← Back ◇ Industry News & Leadership

Incognito Market admin sentenced to 30 years for running $105 million dark web drug empire

Graham Cluley Archived Mar 16, 2026 ✓ Full text saved

He promised "the best security there is" to hundreds of thousands of drug buyers, while quietly making the kind of mistake that guaranteed a 30-year sentence. And maybe training police on cryptocurrency while running a running a vast Tor-hidden drug bazaar wasn't such a good idea. Read more in my article on the Hot for Security blog.

Full text archived locally
✦ AI Summary · Claude Sonnet


    INDUSTRY NEWS 2 min read Incognito Market admin sentenced to 30 years for running $105 million dark web drug empire Graham CLULEY February 05, 2026 Promo Protect all your devices, without slowing them down. Free 30-day trial A Taiwanese man who ran one of the world's largest dark web drugs marketplaces has been sentenced to 30 years in a US federal prison, in what the judge described as "the most serious drug crime I have ever been confronted with in 27.5 years." 24-year-old Rui-Siang Lin operated Incognito Market under the alias "Pharaoh" from October 2020 until March 2024, facilitating over $105 million in illegal drug sales to more than 400,000 customers across the globe. The dark web marketplace, accessible via the Tor browser, hosted more than 1,800 vendors and processed over 640,000 transactions, selling cocaine, methamphetamine, heroin, MDMA, and counterfeit prescription medications. Lin had overall control over the Incognito Market's operations, managing vendors, customers, and employees while taking a 5% commission for himself on every sale. The site operated its own cryptocurrency payment system, dubbed "Incognito Bank", promising that users could "buy whatever you desire with the best security, friendly interface and streamlined user experience there is." However, for all his technical prowess, Lin made a fundamental error in his own security that led to his downfall. Imvestigators were able to trace the site's domain registration back to Lin after he - astonishingly - used his real name, phone number, and address. What is perhaps most remarkable, however, is that - as The Record reports - while managing Incognito Market from St Lucia, Lin ran a four-day training session for local police on "Cybercrime and Cryptocurrency" - even bragging about it on Facebook. Things turned deadly in January 2022 when Lin allowed the sale of opiates on Incognito Market. Fake prescription pills started to be listed on the site - some of which were actually fentanyl disguised as oxycodone. In September 2022, a 27-year-old man from Arkansas died after taking pills he had bought from the site. Prosecutors said Lin's marketplace was directly responsible for the man's death. In March 2024, Lin abruptly shut down Incognito Market without warning, stealing at least US $1 million in user deposits. He then attempted to extort users by threatening to publish their transaction histories and cryptocurrency addresses, writing "YES, THIS IS AN EXTORTION!!!" on the site. In May 2024, Lin was arrested when he flew into New York's JFK Airport en route to Singapore, and subsequently pleaded guilty to drugs-related charges and money laundering. US District Judge Colleen McMahon has now given Lin a 30-year prison sentence, describing Incognito Market as "a business that made [Lin] a drug kingpin." In addition to the prison term, Lin was sentenced to five years of supervised release and ordered to forfeit US $105,045,109.67. According to US Attorney Jay Clayton, Lin was "responsible for at least one tragic death, and he exacerbated the opioid crisis and caused misery for more than 470,000 narcotics users and their families." Lin has three decades in a US federal prison to ponder whether training the police in cybercrime while simultaneously running a massive drug marketplace was perhaps not the wisest decision of his life. TAGS industry news AUTHOR Graham CLULEY Graham Cluley is an award-winning security blogger, researcher and public speaker. He has been working in the computer security industry since the early 1990s. View all posts RIGHT NOW TOP POSTS SCAM HOW TO Scammer phone number lookup. How to check if a phone number is a scam April 19, 2024 FAMILY SAFETY How to Outsmart AI Voice Scammers Pretending to Be Your Family March 03, 2026 SCAM DIGITAL PRIVACY HOW TO How scammers gain access and hack your WhatsApp account and what you can do to protect yourself May 01, 2024 INDUSTRY NEWS 200,000 naked Snapchat images leaked, after third-party hack October 13, 2014 FOLLOW US ON SOCIAL MEDIA YOU MIGHT ALSO LIKE INDUSTRY NEWS Free parking in Russia after Distributed Denial-of-Service attack knocks city's parking system offline Graham CLULEY March 16, 2026 2 min read INDUSTRY NEWS FBI Warns Gamers About Malware Hidden in Indie Steam Games Silviu STAHIE March 16, 2026 3 min read INDUSTRY NEWS DIGITAL PRIVACY Meta to halt Instagram end-to-end encryption for DMs on May 8, 2026 Vlad CONSTANTINESCU March 16, 2026 2 min read BOOKMARKS You have no bookmarks yet. Tap to read it later.
    💬 Team Notes
    Article Info
    Source
    Graham Cluley
    Category
    ◇ Industry News & Leadership
    Published
    Archived
    Mar 16, 2026
    Full Text
    ✓ Saved locally
    Open Original ↗