Dark web market owner arrested in New York after FBI traces crypto

The FBI claimed it found Incognito Market’s alleged owner, Rui-Siang Lin, by tracking crypto from the dark web drug market to a crypto exchange account allegedly in his name.

A 23-year-old man has been arrested in New York and charged with owning, running and profiting from a $100 million dark web narcotics marketplace after authorities claimed to have tracked crypto transfers that uncovered his real identity.

Rui-Siang Lin, known online as “Pharoah,” was arrested at New York’s John F. Kennedy Airport on May 18 and appeared in federal court on Monday, May 20, the Manhattan United States Attorney’s Office wrote in a statement.

“For nearly four years, Rui-Siang Lin allegedly operated ‘Incognito Market,’ one of the largest online platforms for narcotics sales, conducting $100 million in illicit narcotics transactions and reaping millions of dollars in personal profits,” added FBI Assistant Director in Charge James Smith.

Incognito Market was an onion-based e-commerce platform accessed using the Tor web browser — referred to as the “dark web” or “dark net.”

It allowed users to buy and sell drugs including cocaine, LSD, MDMA and prescription amphetamines such as Adderall using Bitcoin (BTC) and Monero (XMR) as payment methods.

The marketplace demanded buyers and vendors use its own crypto services so it could skim 5% of every purchase and offer an escrow service, the Justice Department alleged.

The DOJ noted that the marketplace had closed in March this year, coinciding with a previously reported exit scam that allegedly stole millions of dollars worth of customer’s BTC and XMR.

Lin was charged with engaging in a criminal enterprise, narcotics conspiracy, conspiracy to sell misbranded medication and money laundering.

If convicted, Lin faces a mandatory life sentence on the criminal enterprise charge. The narcotics conspiracy charge carries a maximum life sentence.

The Justice Department has issued a forfeiture for crypto held in Lin’s Binance and Kraken accounts.

FBI traced crypto transfers

The FBI found Lin and alleged his ties to the dark web site partly by tracing Incognito Market crypto transfers to an unnamed centralized crypto exchange account in Lin’s name.

In a deposition, FBI task force officer Mark Rubens said a crypto wallet controlled by Lin received funds from Incognito Market’s wallet which was then sent to an exchange account in Lin’s name.

Rubens outlined at least four transfers the FBI traced allegedly showing Lin’s crypto wallet sending Incognito Market-derived BTC to a “swapping service” to exchange it for XMR — which was then deposited into a crypto exchange account the FBI claimed is Lin’s.

Related: US authorities bust $73M crypto scam, make two arrests

The exchange provided the FBI with Lin’s Taiwanese driver’s license used to open the account along with an email address and phone number, Reubens wrote.

The FBI claimed it tied the email and phone number to a Namecheap account which used funds from Lin’s alleged crypto wallet and account to buy a domain for a site that promoted Incognito Market.

The deposition alleged the deposits to Lin’s crypto exchange account grew with Incognito Market, from around $63,000 in 2021 to nearly $4.2 million over the course of 2023 and a second unnamed exchange account saw $4.5 million deposited between July and November last year.