Blockchain Forensics - Unmasking Anonymity in Dark Web Transactions

Responses in investigations of drug and sex traffic related crimes often originate in the Dark Web. Internet and cybercrimes are increasingly becoming reliant on criminal justice practitioners to help solve them. However, while the demand for criminal justice participation in cyber investigations increases daily, most law enforcement agencies or state law enforcement accrediting bodies are lagging in their educational and training opportunities for new police officers entering the law enforcement fields. This article discusses the need incorporate education courses covering the Dark and Deep Web in the law enforcement curriculum. A review of existing cyber-criminal justice programs in Texas (N=28) and nationally suggests that most colleges, with a cyber program, have yet to develop courses/programs in understanding and investigating the dark web on the internet. The federal government and a few companies have limited training on the Dark Web for law enforcement officers. The Dark Web serves as the new “Criminal Neighborhood” for illegal activity and needs to be better understood so it can be investigated. This research outlines the need for police officers and police investigators to learn the geographies of the Dark Web.

Sovereignty and Consensus Defining the security concerns of the Caribbean and developing strategies for dealing with these concerns vary considerably among its nations. Yet there are certain affecting that security upon which most analysts and policy makers find consensus. These realities include: the multidimensionally of security, the saliency of to security, and the necessity for cooperation. Security is Multidimensional Security in the Caribbean has not been viewed just as protection from external military threats, or as military force, equipment, or even military activity. Security is multidimensional, with military, political, economic, and environmental dimensions. The Caribbean approach to security has been concerned not only with protection from external threats; the internal arena is very much part of the security purview. Moreover, the prevailing view does not focus on the state as the only unit of analysis. Non-state actors are equally important. Some non-state actors have more assets than those of some Caribbean nations. For instance, the operating budgets of some cruise lines are larger than those of several Eastern Caribbean states combined. Moreover, some drug traffickers have more and better weapons than some law enforcement agencies in the region. Drugs are the Primary Threat There is near-universal agreement among officials in various Caribbean, North American, and European capitals that the top security concerns of the region are drug production, consumption and abuse, trafficking, and money laundering. The Caribbean has the misfortune of being close to South America, a major drug supply source, and to North America, a major drug demand area. Most of the world's cocaine is produced in South America, and a significant amount of its heroin and marijuana also comes from South and Central America. And, the United States has the dubious distinction of being the world's largest drug consuming nation. Yet, not all the trafficked through the Caribbean are destined for North America. Europe is also a huge drug consumer, and a considerable amount of the consumed there comes through the Caribbean. A glimpse at drug seizures over the past five years (see Table 1) indicates the scope and scale of trafficking. Other narcotics problems are drug production, consumption and abuse, and money laundering. Although the three main danger drugs in the Caribbean are cocaine, heroin, and marijuana, only marijuana is produced there. Jamaica, St. Vincent and the Grenadines, Guyana, Trinidad and Tobago, and St. Lucia are among the countries with the highest marijuana production. Drug consumption and abuse are not limited to any social or economic group. Marijuana, for example, is predominantly a working class drug of choice. Crack cocaine is widespread among lower and middle class people because it is cheap and has the attributes of being hard and a status drug. Heroin, on the other hand, is a rich man's drug. Apart from the cost factor, the impact of heroin abuse in the region has been mitigated by a needle phobia in the region. Like production, drug abuse differs from place to place. The greatest drug abuse problems are in Puerto Rico, Jamaica, the Dominican Republic, Belize, Guyana, Trinidad and Tobago, and in parts of the Eastern Caribbean. Money laundering is another aspect of the narcotics phenomenon. Indeed, it is partly the money laundering reputation of the Caribbean that made Anguilla the choice for Operation Dinero, a major money laundering under-cover operation that ran from January 1992 through December 1994. By the time the operation ended, U.S. and British authorities had seized nine tons of cocaine and $90 million worth of cash and assets. They also made 116 arrests and gathered a wealth of intelligence on world-wide drug trafficking and money laundering operations. Caribbean countries are vulnerable to money laundering because of their relative political stability, bank secrecy, low taxation, and relatively well-developed telecommunications. …

Purpose– Money laundering schemes are inextricably linked to corruption whereby the latter is utilised either as “a means to an end or as an end in itself”. The prevalence of one of these offences in a country usually signifies the prevalence of the other. The foregoing connection is supported by studies carried out by the World Bank and Asian Development Bank to correlate the connection between money laundering and corruption. Corruption has been exploited to facilitate commission of other crimes such as drug trafficking, prostitution, small arms trafficking and illegal currency trafficking. It has destroyed the myth that corruption is a domestic political issue amenable within individual states borders. Therefore, the design of anti-corruption policy measures should incorporate effective implementation anti-money laundering (AML) strategy and their enforcement on corrupt public officials. It needs to be noted that money accrued from corruption constitutes criminal property under the majority of global AML/CFT frameworks which have been domesticated by individual national governments. Both corruption and money laundering thrive in an environment of bad governance, lack of requisite local oversight institutions, a tenuous legal systems and laws and bad governance. These offences have become so intertwined that it is not easy to tell which is which because they are embedded in each other and in the context of this paper are symbiotic.Design/methodology/approach– The paper articulates that there is a close connection between corruption and money laundering offences. It was undertaken by evaluating primary and secondary data sources to demonstrate the interconnectivity of the foregoing criminal offences in the regulatory realm. The overlapping relationship between corruption and money laundering has been acknowledged by many oversight institutions and national governments. For example, Singapore enacted a legislation: “Corruption, Drug Trafficking and other Serious Crimes (Confiscation of Benefits) Act” in (1999) recognizing the foregoing interconnectivity. The G20 imposed on Financial Action Task Force the requirement to incorporate mechanisms within its framework to combat money laundering and terrorist financing measures to fight corruption. Therefore, this paper has demonstrated a close correlation between corruption and money laundering and what ought to be done at various oversight levels to forestall them.Findings– Corruption and money laundering are inextricably linked such that where one exists, the other one will be also lurking in the background. The paper has articulated the connection between corruption and money laundering and the context they are manifested either together or differently. It has demonstrated that the foregoing offences are literally “Keith and Kin” and should be accorded the same level of attention as serious financial crime, both in theory and practice of states.Research limitations/implications– While there are many papers which have been published on the subject of money laundering and corruption, not many articulate the connection between corruption and money laundering in the context of this paper. The paper was undertaken by evaluating primary and secondary data sources and analysing this data in different contexts of this paper. However, it would have been better to corroborate some of the foregoing sources by working with oversight AML/corruption institutions. Therefore, the author will ensure that future studies carried out on the subject matter of money laundering and corruption are undertaken with a high measure of collaboration with oversight AML/corruption agencies and possibly also civil society organisation which have a mandate on these similar issues.Practical implications– This paper is of practical significance for governments, policy and oversight institutions in dealing with issues relating to corruption and money laundering. The paper provides insights into the dynamics of the foregoing twin offences, the context they are manifested and how the law can be better utilised to forestall them. Corruption and money laundering have eviscerated the individual economies capacity to engage in national development programmes, and they need to be addressed as a matter of seriousness, both nationally and internationally. This paper will provide insights into what states need to do to harness the law relating to corruption and money laundering offences, both at an oversight institution and individual national government’s level.Social/implications– Corruption and money laundering crimes have eroded the fabric of societies, eviscerated individual states capacity to pursue national development goals and not to mention fuelling other crimes such as financing of terrorism, human and small arms trafficking, drugs trafficking, to mention but a few. Therefore, no state can afford to ignore the foregoing transgressions against humanity because no state can claim to be immune from the offshoot effects of corruption and money laundering.Originality/value– There are not many published papers which articulate the connection between money laundering and corruption in the context of this paper. This paper is one of its kind, original and a must read. It is a must read because it has a lot offer literally to every one û academics, researchers, students, policy and regulatory institutions and the list goes on.

Money laundering is one of the most insidious and sophisticated threats to the integrity of worldwide financial systems. With criminals increasingly employing sophisticated methods to disguise the origin of ill-gotten gains, formal and informal financial structures are acutely exposed to abuse. This chapter discusses the underlying mechanisms and stages of the laundering process—placement, layering, and integration. It discusses the profound interlinkages between money laundering and other criminal activities, such as drug trafficking, terrorist financing, and kleptocracy, to establish its status as the fulcrum of world illicit economies. Economic consequences of illicit financial flows are carefully weighed, citing their role in undermining market integrity, facilitating capital flight, undermining tax systems, and exacerbating social inequality. Case studies, such as the FinCEN Files and the Danske Bank case, expose structural weaknesses in regulation and enforcement. An assessment of international legal mechanisms—such as the FATF Recommendations, EU AML Directives, and US PATRIOT Act—examines their efficacy, implementation, and cross-border cooperative frameworks. Key compliance tools such as know-your-customer (KYC), suspicious transaction reporting (STR), and beneficial ownership registers are evaluated in the context of the evolving role of financial intelligence units. Lastly, this chapter discusses the new challenges posed by digital finance, namely with regard to crypto-assets and decentralized finance platforms. It assesses the potential of regulatory technology, artificial intelligence, and blockchain analytics in strengthening enforcement measures. This chapter concludes with recommendations for reforms aimed at enhancing transparency, institutional coordination, and global financial resilience against laundering operations.

The article is devoted to a topical topic – the analysis of a new way of selling drugs via the Internet and using cryptocurrency. In the article, the authors analyzed the Internet as a medium for drug trafficking; the composition of the criminal offense, which consists of the illegal sale of drugs; the social conditionality of criminalization of drug trafficking via the Internet; trends in the use of cryptocurrencies for drug trafficking; money laundering from drug trafficking through cryptocurrencies and measures to combat drug trafficking online and through cryptocurrency. It is emphasized that the appearance of this way of selling drugs is due to the development of technologies and their undoubted advantages, which criminals, from small fraudsters to criminal groups, adapt to carry out illegal activities. The number of people who buy illegal drugs on the dark web is gradually increasing; more and more buyers prefer to pay with cryptocurrency, and criminals are trying to legalize the proceeds of drug crime through the crypto market. All this indicates the increased social danger of such drug trade compared to other forms of their sale due to significant profits, the involvement of a large number of consumers, and direct and hidden effects on the growth of a country: public health issues, organized crimes, security concerns, etc. However, the fight against drug trafficking on the Internet and with the use of crypto-currency has not been properly regulated at the national and international levels. Considering this to fight against such actions effectively, the following is necessary today: an official definition of the status of cryptocurrency in legislation and the development of new methods, tactics, and technologies for the investigation of crimes. Drug business on the Internet and through cryptocurrencies, which will consider the latter's peculiarities and will be constantly updated in accordance with the pace of evolution of digital currencies; establishment of cooperation of cryptocurrency exchanges, financial institutions, regulators, law enforcement agencies, and technology providers.

PurposeThis paper aims to conduct a comparison on the effectiveness of the law enforcement agencies (LEAs) of Australia and Malaysia in investigating money laundering cases by looking into the legal system and operational issues faced in conducting the investigation.Design/methodology/approachThe purpose of this paper is to review and analyze the data collected from the Financial Action Task Force (FATF) Mutual Evaluation Report, focusing on the information outlined in the third chapter. The legal system and operational issues cover the area of technical compliance and effectiveness compliance, which were introduced in the latest FATF Evaluation Methodology issued in 2013.FindingsThe results show that both countries have the power needed to investigate money laundering and terrorism financing under their respective Anti-Money Laundering Act. However, Australia is seen to have a better investigative support system to assist LEAs during the investigation process. This explains the reason for difficulties in increasing the number of prosecutions for money laundering and terrorism financing cases. Hence, improvement actions are needed in curbing this issue.Practical implicationsThe result suggests that Malaysia should strengthen the cooperation, coordination and capacity among LEAs to ensure effective targeting, investigation and prosecution of money laundering. The government should also revise the money laundering investigation time frame and broaden the power of LEAs in retrieving information during the investigation process. Malaysia should also enhance the investigative support system, which will be helpful for LEAs in gathering sufficient evidence to support their money laundering charges. Unlimited power in gathering evidence is prominent to charge money launders as it helps to gather information required for prosecution.Originality/valuePrior literature focuses on the prevention mechanism, where this paper aims to focus on detection and investigation mechanism focusing on money laundering investigation conducted by LEAs. Lack of study on money laundering investigation calls for this research to be done to understand the strengths and weaknesses to improve its effectiveness in the future.

The mainstream use of the Internet and mobile technology has made it easier to reach a wide range of globalized resources. By having the numerous lawful design principles offered by Internet merchants, unregulated cyber terrorist and hacking markets by intruders actively working at online platform. Illicit web store and markets are capitalizing on the privacy and at globalized existence on the Internet, posing problems, hidden unsecure environment and obstacles for policing and security agencies. The proposed work offers a summary of the anonymous crime favored place at Dark Web and recent research on illegal Internet drug trafficking, human trafficking, terrorist funding and recruitment, money laundering, contract hacking, organ trafficking, cracked key distribution, killing contracts, forged passport, illegal post sharing and forum discussion, fraud and credit card selling, weapons order, and cybercrime and child sexual abuse markets in the Dark Web. The work presented here outlines the Tor network crawling procedure and evaluation of hidden links for analysis with the crawling of drug trafficking, Criminal activity-related signatures and posts put light on the negative side of the Dark Web platform and their services, techniques and methods use for data crawling, pattern recognition and behavior understanding of criminals followed by terrorist organizations, campaigning on social network platform using hidden identities for recruitment, fundraising and radicalization.

PurposeThis paper aims to raise, and consider, first-order questions about the United Kingdom’s anti-money laundering (AML) regime.Design/methodology/approachThe paper contrasts the original rationale for introducing AML and asset recovery to the UK with data on the assets recovered from organised crime and those involved in drug trafficking. It does this by analysing historical and contemporaneous literature – both official and academic.FindingsWhen assessed against its original aims of combating drugs and organised crime, the tentative conclusion is that the UK’s AML system does not appear to be worth the candle.Research limitations/implicationsWhile based upon publicly available information that is far from ideal, the analysis raises credible questions as to whether the UK’s AML regime is worthwhile and whether it could be done differently.Practical implicationsRaises the question of whether the impact of the AML regime could be made worthwhile by investing a great deal more in those law enforcement agencies that use the suspicious activity reporting regime. It also raises the question as to whether the AML regime could be re-purposed to achieve aims that are different from the original.Social implicationsGiven the financial costs, which run into billions of pounds, and the fact that the regime has failed to have a significant impact on the level of drug trafficking or the revenue of organised criminals, the paper raises questions as to when the policy can be re-designed or abandoned.Originality/valueWhile most other analytical work simply makes suggestions as to how to improve the number of inputs into the AML system, this paper provides a critical analysis of the costs and benefits of the AML regime in the UK.

PurposeMalaysia has implemented a comprehensive AML/CFT framework, yet its effectiveness remains questionable due to low number of prosecutions on money laundering cases. Therefore, this study aims to understand the reasons for low number of prosecutions, by addressing the challenges faced by the law enforcement agencies in conducting money laundering investigation. This study then identifies future improvement actions to enhance their effectiveness in combating money laundering in future.Design/methodology/approachThis study distributed surveys to the law enforcement agencies that are responsible for conducting money laundering investigation in Malaysia. In total, 65 surveys were distributed; however, only 61 were returned to the researchers. Out of the 61 surveys returned, only 39 can be analysed due to incomplete answers given by respective respondents.FindingsThe results show that the investigating officers are facing difficulties in gathering sufficient information to support their charges. Besides information gathering, they are also facing difficulties due to short investigation timeframe regulated in the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act (AMLATFPUAA) 2001. This study concludes that, although the law enforcement agencies have the power to investigate money laundering and terrorism financing under the act, Malaysia is lacking in having a good investigative support system to assist the law enforcement agencies during the investigation process.Practical implicationsThe results of this study are helpful to the regulators and law enforcement agencies in determining the flaws of the current money laundering investigation practices. This study also provides suggestions for future improvement action.Originality/valueLack of study focuses on money laundering investigation conducted by the law enforcement agencies, especially in the Malaysian setting, makes the study valuable to the money laundering research.

Money Laundering in the Republic of Kosovo During the Years 2013-2015

BackgroundProducing, distributing or discussing child sexual abuse materials (CSAM) is often committed through the dark web to stay hidden from search engines and to evade detection by law enforcement agencies. Additionally, on the dark web, the CSAM creators employ various techniques to avoid detection and conceal their activities. The large volume of CSAM on the dark web presents a global social problem and poses a significant challenge for helplines, hotlines and law enforcement agencies. ObjectiveIdentifying CSAM discussions on the dark web and uncovering associated metadata insights into characteristics, behaviors and motivation of CSAM creators. Participants and SettingWe have conducted an analysis of more than 353,000 posts generated by 35,400 distinct users and written in 118 different languages across eight dark web forums in 2022. Out of these, approximately 221,000 posts were written in English and contributed by around 29,500 unique users. MethodWe propose a CSAM detection intelligence system. The system uses a manually labeled dataset to train, evaluate and select an efficient CSAM classification model. Once we identify CSAM creators and victims through CSAM posts on the dark web, we proceed to analyse, visualize and uncover information concerning the behaviors of CSAM creators and victims. ResultThe CSAM classifier, based on Support Vector Machine model, exhibited good performance, achieving the highest precision of 92.3 % and accuracy of 87.6 %. While, the Naive Bayes combination is the best in term of recall, achieving 89 %. Across the eight forums in 2022, our Support Vector Machine model detected around 63,000 English CSAM posts and identified near 10,500 English CSAM creators. The analysis of metadata of CSAM posts revealed meaningful information about CSAM creators, their victims and social media platforms they used. This included: (1) The topics of interest and the preferred social media platforms for the 20 most active CSAM creators (For example, two top creators were interested in topics like video, webcam and general content in forums, and they frequently used platforms like Omegle and Skype); (2) Information about the ages and nationalities of the victims typically mentioned by CSAM creators, such as victims aged 12 and 13 with nationalities including British and Russian; (3) social media platforms preferred by CSAM creators for sharing or uploading CSAM, include Omegle, YouTube, Skype, Instagram and Telegram. ConclusionOur CSAM detection system exhibits high performance in precision, recall, and accuracy in real-time when classifying CSAM and non-CSAM posts. Additionally, it can extract and visualize valuable and unique insights about CSAM creators and victims by employing advanced statistical methods. These insights prove beneficial to our partners, i.e. national hotlines and child agencies.

The dark web has long been a subject of debate, as it raises questions about its covert threats and privacy safeguarding capabilities. It's an internet realm requiring specific software or authorization, notorious for illegal activities and untraceable transactions. Researchers and law enforcement agencies use the dark web for intelligence gathering on cybercriminals, making it crucial in understanding the evolution of the internet and emerging criminal activities. Additionally, studying the dark web helps identify cybersecurity threats and vulnerabilities.This research explores the relationship between the dark web and mental health, investigating the public's perception of the dark web as both a hidden menace and a tool for privacy protection. The primary aim is to examine the correlation between public perception and engagement in dark web services, while also exploring potential mental health ramifications.To collect data, we conducted a survey among university students and regular internet users. The research process involved identifying 18 research questions covering topics such as dark web knowledge, usage frequency, security measures, awareness of government regulations, ability to differentiate legal and illegal content, transaction methods, and understanding the dark web's role in promoting freedom of speech. We collected 158 responses from different departments of Chandigarh University, removing duplicates to retain 156 responses meeting our criteria. Data was compiled in an Excel file for further statistical evaluation.While the dark web is not widely accessed, users may experience psychological consequences due to its association with cybercrime, disturbing content, and radicalization. This connection leads to heightened anxiety, fear, and distress among users. Concerns about privacy, security, and associated risks further contribute to these apprehensions. Motivations for dark web access, such as curiosity and anonymity, may stem from underlying psychological factors. However, navigating illegal and potentially harmful content can result in emotional turmoil, moral dilemmas, guilt, or shame. These findings highlight the need for public awareness campaigns, educational initiatives, and targeted interventions promoting mental well-being and safe internet practices. Enhancing individuals' knowledge about the dark web's risks and potential psychological consequences empowers them to make informed decisions and protect their mental health in the digital age.

The expansion of cryptocurrency has reshaped financial systems by enabling decentralised transactions and new digital applications. However, its pseudonymity and global reach have also enabled ransomware, darknet trading, money laundering, and terrorism financing, creating challenges for regulators seeking to protect financial integrity. This study examines the intersection of cryptocurrency, cybercrime, and governance. It identifies techniques exploited by criminals, evaluates forensic and regulatory countermeasures, and considers the governance dilemmas posed by these developments. A qualitative, desk-based approach was adopted, drawing on peer-reviewed literature, institutional policy reports (FATF, IMF, Europol), and industry analyses (Chainalysis, Elliptic, TRM Labs). Thematic content analysis was used to trace patterns of illicit cryptocurrency use, enforcement actions, and regulatory innovations. The findings reveal that blockchain forensics and coordinated policy efforts have strengthened oversight. Yet criminals increasingly use privacy coins, decentralised finance protocols, mixers, and cross-chain laundering to bypass detection. Enforcement remains inconsistent, hindered by fragmented regulation and gaps in cross-border cooperation. Cryptocurrency-enabled crime and terrorism financing remain adaptive threats that test financial stability and governance frameworks. Stronger international coordination, harmonised regulation, and advanced forensic tools are essential to reduce risks. The study recommends deepening cross-border collaboration, investing in blockchain analytics, and adopting flexible governance models that balance innovation with accountability.

Purpose In accordance with the literature on money laundering, policymakers and researchers often use a model which distinguishes three successive stages: placement, layering and integration. But how well does this model compare to actual investigations of money laundering in relation to large-scale drug trafficking? Design/methodology/approach The basis is formed by data collected in 2012 for that year’s crime pattern analysis (CPA) for money laundering and cocaine trafficking. In all, 46 structured interviews were conducted. These interviews mostly centred around money laundering, involving the proceeds of drugs crime. As a result of the interviews, the dossiers from 16 criminal investigations were also obtained for further analysis. Findings Comparing the three-phase model with Dutch investigations on drug trafficking, three observations can be made. First of all, cash plays a larger role than the theoretical model would suggest. Second, the proceeds of crime are often moved abroad, circumventing the legal financial system. And third, money laundering often occurs in much simpler forms than the theory would lead one to suspect. Research limitations/implications The sources mainly involve criminal investigations into organized drug trafficking. Investigations involving white collar crime and fraud will probably generate different outcomes. Another caveat is that the situation in other countries may differ from the picture that emerges from the Dutch data. Practical implications Combating money laundering is sometimes a job for specialists, but many forms (involving cash and moving money around) can easily be left to ordinary investigative officers with no financial background. Money laundering therefore needs to be demystified to broaden the opportunities for investigating analyzing and researching money laundering. Furthermore, it is not always practical to depend on Financial Intelligence Unit’s information to start an investigation or to evaluate anti-money laundering efficiency. Originality/value The literature on money laundering often centres around judicial system, legal issues and theoretical solutions. Empirical data is hard to come by. This article uses information from actual investigations to illustrate aspects of money laundering that can be overlooked.

Cyber threat intelligence (CTI) is vital for enabling effective cybersecurity decisions by providing timely, relevant, and actionable information about emerging threats. Monitoring the dark web to generate CTI is one of the upcoming trends in cybersecurity. As a result, developing CTI capabilities with the dark web investigation is a significant focus for cybersecurity companies like Deepwatch, DarkOwl, SixGill, ThreatConnect, CyLance, ZeroFox, and many others. In addition, the dark web marketplace (DWM) monitoring tools are of much interest to law enforcement agencies (LEAs). The fact that darknet market participants operate anonymously and online transactions are pseudo-anonymous makes it challenging to identify and investigate them. Therefore, keeping up with the DWMs poses significant challenges for LEAs today. Nevertheless, the offerings on the DWM give insights into the dark web economy to LEAs. The present work is one such attempt to describe and analyze dark web market data collected for CTI using a dark web crawler. After processing and labeling, authors have 53 DWMs with their product listings and pricing.