Dark web markets mainly sell drugs (the largest category), stolen data such as credentials and card numbers, fraud tools like phishing kits and malware, counterfeit goods, hacked accounts, and increasingly corporate network access. The theatrical listings — weapons, ‘hitmen’, ‘red rooms’ — are overwhelmingly scams or law-enforcement operations.
- Drugs are the largest and oldest category
- Stolen data and network access now define the modern market
- Fraud tools, counterfeits and hacked accounts are common
- Weapons and “hitmen” listings are overwhelmingly fake
- The whole trade is smaller than the coverage implies
The honest inventory of what's sold on the dark web is narrower and duller than the imagination suggests — and a large share of the theatrical stuff is fake. Here's what actually changes hands, and what's mostly a scam aimed at the credulous.
What's actually sold
- Drugs — the original and still the largest category.
- Stolen data — login credentials, payment-card numbers, full identity packages.
- Fraud tools — phishing kits, malware, how-to guides.
- Counterfeits — fake documents, forged papers, imitation goods.
- Hacked accounts — streaming, finance, and everything between.
- Network access — increasingly, the raw material for ransomware, sold by access brokers.
The shift toward data
The popular image is a drug bazaar, but the centre of gravity for the trade that matters to businesses has shifted to data and access. Stolen credentials, stealer logs, and corporate network access now define the modern market, feeding the fraud and ransomware economy.
What's mostly fake
The theatrical listings — weapons, “hitmen,” exotic horrors, “red rooms” — are overwhelmingly either scams or law-enforcement operations. The people making money from “hire a hacker” are the scammers selling the fantasy, not any actual service.
And it's smaller than you think
The entire trade is smaller than the coverage implies: a persistent, policed niche, not a shadow economy rivalling the real one. Most dark web traffic is people reading, not buying — the markets are a loud minority.
Frequently asked questions
What can you buy on the dark web?
A better way to think of it is a small, mostly illegal marketplace for a handful of recurring categories. Drugs dominate by listing volume: opioids, stimulants, benzodiazepines, cannabis, and prescription medicines are traded in user-to-user transactions, often with vendor ratings and escrow. Stolen data is the second major category and includes login credentials, payment card numbers, bank account details, identity documents, and medical records. Fraud tools range from carding software and phishing kits to money-laundering guides and SIM-swapping services. Counterfeit goods — fake documents, currency, branded goods — and hacked accounts for streaming, email, or social platforms appear constantly. The most dangerous category is corporate network access: initial-access brokers sell remote desktop credentials, VPN logins, and compromised employee accounts that feed ransomware attacks. The theatrical listings like weapons and ‘hitmen’ are overwhelmingly scams or police operations.
Are hitmen and red rooms real on the dark web?
No. These are overwhelmingly scams or urban legends. ‘Hire a hitman’ and ‘red room’ listings take cryptocurrency and deliver nothing — the only people profiting are the scammers selling the fantasy. Academic research and law-enforcement reporting consistently find that these sites are either fake, operated by fraudsters, or run by police as honeypots to identify would-be offenders. Victims who pay never receive the promised service, and there is no verified case of a genuine hitman-for-hire marketplace operating at scale on the dark web. Red rooms — supposedly live-streamed torture or murder — are technically implausible to run secretly and are widely considered a myth.
What is the most common thing sold on the dark web?
Drugs remain the largest single category by number of listings and transaction volume, with opioids, stimulants, and prescription medicines consistently appearing across marketplaces. But stolen data and network access have become the most consequential: stolen credentials, payment card details, and initial-access listings for corporate networks feed the fraud and ransomware economy that affects businesses worldwide. A single compromised remote desktop login can be sold for a few dollars and later enable a six-figure ransomware incident, making initial-access brokering one of the most profitable niches despite its smaller volume. In other words, the most commonly sold item may be a drug, but the most damaging item is often a leaked password or an open RDP port.
Can you buy weapons on the dark web?
Weapons listings exist but are overwhelmingly scams or law-enforcement stings. The category is far smaller and far more fraudulent than its reputation suggests. Most offers are fake, designed to take payment and disappear, or are run by undercover agents to identify buyers. Genuine firearm or explosives listings are extremely rare, often posted by small-time criminals rather than established vendors, and they are quickly removed by marketplace administrators because they attract law-enforcement attention and increase shutdown risk. In practice, buying a weapon on a dark-web market is more likely to result in losing money or being arrested than receiving a functioning firearm.
Is the dark web trade as big as people think?
No. It's a persistent but policed niche, not a shadow economy rivalling the real one. The total value of dark-web market transactions is estimated by researchers at a few hundred million dollars per year, compared with trillions in legitimate e-commerce — often less than a single major retailer's annual online sales. Most dark web traffic is people reading forums, browsing leaked documents, or accessing privacy-focused services, not buying — the markets are a loud minority. Even at their peak, such as during the Silk Road era or the COVID-era market booms, the number of active buyers was small, and each major law-enforcement takedown (Silk Road, AlphaBay, Hansa, Hydra) showed that the ecosystem is fragile, fragmented, and constantly rebuilding rather than expanding into a vast hidden economy.