German Police Shut Down Relaunched Crimenetwork Marketplace, Arrest Admin
German law‑enforcement agencies, led by the Federal Criminal Police Office (BKA) and the Hessian State Criminal Police Office (LKA Hessen) in close coordination with Europol’s European Cybercrime Centre (EC3) and the Dutch National Police, have dismantled the revived version of the illicit Dark‑Web marketplace Crimenetwork. On 14 March 2026, a joint operation culminated in the seizure of three servers hosted in a data centre in the greater Rotterdam area, the arrest of the alleged administrator, a 34‑year‑old German national identified as Florian M., known online as ‘Krypton’, and the confiscation of digital evidence including cryptocurrency wallets and encrypted databases.
The platform, which first emerged in 2020 and was taken down in 2022, relaunched in early 2025 with a new infrastructure built on the Tor network’s v3 hidden‑service protocol and protected by AES‑256 encryption for stored data and TLS 1.3 for client‑server communications. To evade blockchain analysis, the marketplace exclusively accepted Bitcoin (BTC) and the privacy‑coin Monero (XMR) through a custom multisig escrow system. According to the BKA, the relaunch generated more than €3.6 million in transaction volume, hosted roughly 3,200 listings—ranging from stolen credit‑card data and forged identity documents to ransomware kits—and attracted more than 11,500 registered buyers.
Investigators traced the marketplace’s activity through a combination of blockchain forensics, dark‑net traffic analysis, and intelligence supplied by the Joint Cybercrime Action Taskforce (J‑CAT). By correlating Bitcoin public ledger data with on‑site IP leakage identified during a test purchase, the BKA’s Cyber‑Crime Unit was able to pinpoint the server location and obtain a European Investigation Order. The subsequent server image revealed a comprehensive admin panel, user‑review logs, and an internal ticketing system, all of which have been added to Europol’s cybercrime evidence database for further analysis.
The takedown underscores the continued vulnerability of even sophisticated dark‑web services to coordinated international law‑enforcement efforts. Europol’s EC3 highlighted that the operation disrupted a major hub for data‑theft and malware distribution, and that the seized evidence will aid ongoing investigations into downstream criminal networks. The arrested administrator faces charges of operating a criminal online marketplace, money laundering, and facilitating cyber‑offences under the German Criminal Code, with potential extradition considerations if the suspect’s activities spanned multiple jurisdictions.