Breaking
Cyber CrimeDeveloping Story

Empire Market Founder Gets 40 Years

Raheim Hamilton, co-creator of the dark web's Empire Market, is sentenced to 40 years for facilitating $430 million in illegal transactions.

··2 hours ago·6 min read
silhouette photography of man
Photo by Chris Yang on Unsplash

A 30-year-old man from Virginia will spend the next four decades in federal prison for building and running what prosecutors describe as one of the largest dark web marketplaces in operation before its collapse. The sentence closes a case that stretched from the market's launch in 2017 through a 2024 indictment and a guilty plea earlier this year, and it lands alongside forfeiture orders that reach into cryptocurrency wallets, real estate, and precious metals.

The scale of the operation, according to the Justice Department, was substantial: more than four million transactions between vendors and buyers, roughly 1.68 million registered accounts at the site's peak, and a drug trade that alone accounted for nearly $375 million in sales. The government says the marketplace existed for one purpose — moving contraband and money while keeping its operators beyond the reach of investigators.

From AlphaBay Vendor to Operator

Raheim Hamilton, who went by the usernames "Sydney" and "ZeroAngel" online, owned and operated Empire Market from August 2017 until the site abruptly went dark in 2020. Before that, between June 2016 and July 2017, he sold on AlphaBay under the "ZeroAngel" handle — the marketplace that authorities shut down in 2017 in a coordinated international action.

Empire Market was built as a hidden service reachable only through the TOR browser, and it was modeled and advertised as an AlphaBay clone. It also carried a co-defendant: Thomas Pavey, known online as "Dopenugget," who pleaded guilty in January to a federal drug conspiracy charge. Pavey is scheduled to be sentenced later this month.

The pair's operation wasn't limited to narcotics. Empire Market also listed counterfeit currency, stolen account credentials, computer hacking tools, and personally identifiable information, according to the government. But drug sales dominated the site's activity, totaling nearly $375 million across its lifespan, with more than 166,000 listings for controlled substances alone.

The Numbers Behind the Marketplace

Federal prosecutors laid out the scope of Empire Market's footprint in court filings, and the figures paint a picture of a platform operating at industrial scale. At its peak in August 2020, the marketplace counted roughly 1.68 million unique registered users — a population that included more than 5,000 vendors and nearly 360,000 buyers. Between vendors and buyers, the site facilitated more than four million transactions.

  • $430 million in illegal transactions facilitated from 2018 to 2020
  • More than 4 million transactions between vendors and buyers
  • Nearly $375 million in drug sales over the site's lifespan
  • Over 166,000 listings for controlled substances
  • Roughly 1.68 million unique registered users at peak in August 2020
  • More than 5,000 vendors and nearly 360,000 buyers
  • $75 million worth of cryptocurrency seized during the investigation
  • Approximately 1,230 bitcoin and 24.4 Ether to be forfeited by Hamilton

The drug quantities described in the government's statement were specific and large. "The controlled substances sold on the market included approximately at least 13,314.23 grams of fentanyl, 446,683.15 grams of cocaine, 71,992.33 grams of methamphetamine, and 103,396.21 grams of heroin," the Department of Justice said.

Designed to Evade Detection

When Hamilton entered his guilty plea in January, he admitted that Empire Market was built with a specific architectural goal: helping its users avoid law enforcement detection and launder money. Every transaction on the platform was conducted in cryptocurrency, a design choice that the government says was intentional and central to the site's operation.

The Justice Department described the mechanics in detail. "Hamilton and Pavey established that all transactions on the site must be conducted using only cryptocurrency. They encouraged users to use tumbling and mixing services to conceal cryptocurrency transactions and utilize encryption while communicating on the site. They also allowed users to rate vendors based on how well the vendors concealed the drugs they shipped."

That rating system turned vendor operational security into a public metric, letting buyers gauge how effectively a seller could get contraband past postal inspection. The government's statement suggests this was one of several features — alongside mandatory crypto-only payments and mixing-service guidance — meant to insulate participants from tracing.

Moderators, Disputes, and Daily Management

Running a marketplace at Empire's scale required more than two people. According to court documents, Hamilton and Pavey hired moderators to resolve disputes between customers and vendors. Hamilton supervised approximately five moderators and personally handled some cases himself.

That layer of dispute resolution is a standard feature of dark web marketplaces, where escrow arrangements and buyer-seller conflicts require some form of arbitration. The government's filings indicate Empire Market followed that pattern, with a small management team overseeing a much larger population of vendors and buyers.

The marketplace's end came abruptly in 2020 amid persistent extortion-based DDoS waves. Users weren't given time to withdraw funds from their escrow accounts before the site went dark, which prompted exit-scam claims from a community left holding the bag. An abrupt shutdown in 2020 followed those attacks, and the market never returned.

Undercover Purchases and Interdiction

The investigation that eventually brought down Empire Market involved direct law enforcement action on the platform. According to the plea agreement, agents made multiple undercover purchases between April 2019 and May 2020, buying at least 143.5 grams of methamphetamine and 105.4 grams of heroin. Authorities also intercepted a package containing 443.5 grams of methamphetamine that had been ordered on the marketplace.

Those purchases and the intercepted shipment provided physical evidence linking the site's operations to real-world drug distribution. When the U.S. Justice Department charged Hamilton and Pavey in July 2024, it also announced that authorities had already seized $75 million worth of cryptocurrency during the investigation — a figure that reflects the scale of the financial infrastructure the site had accumulated.

The plea agreement and court records also show the government pursuing assets well beyond digital currency. Hamilton has agreed to forfeit three Virginia properties along with approximately 1,230 bitcoin and 24.4 Ether. Pavey, who will be sentenced later this month, agreed to forfeit two Florida properties, approximately 1,584 bitcoin, two boxes containing 25-ounce gold bars, and three cars.

What the Forfeitures Signal

The asset recovery in this case extends past cryptocurrency into real estate and physical gold — a reminder that the proceeds of dark web marketplaces don't stay purely digital. Federal prosecutors are seeking to claw back properties in two states, thousands of bitcoin, Ether, gold bars, and vehicles from the two defendants.

The 40-year sentence for Hamilton is among the longest handed down in a dark web marketplace prosecution. The government's case rested on transaction records, undercover buys, intercepted packages, and the defendants' own admissions about how the site was designed to defeat detection and launder proceeds.

Pavey's sentencing later this month will complete the criminal proceedings against the two men. His forfeiture package — two Florida properties, roughly 1,584 bitcoin, two boxes of 25-ounce gold bars, and three cars — reflects a similarly aggressive recovery effort by federal authorities.

Why This Matters Beyond the Sentence

For businesses and security teams, the Empire Market case illustrates how dark web marketplaces function less as chaotic bazaars and more as structured platforms with escrow, dispute resolution, vendor ratings, and anti-detection features baked into their design. The stolen credentials and hacking tools that moved alongside drugs on Empire Market are the same categories of goods that feed into account takeover, fraud, and ransomware operations — meaning the takedown of a single marketplace can disrupt downstream criminal supply chains, at least temporarily.

The forfeiture figures also suggest that law enforcement is increasingly capable of tracing cryptocurrency flows that operators once assumed were untraceable. With $75 million seized during the investigation and thousands of bitcoin subject to forfeiture from both defendants, the financial trail proved as useful to prosecutors as the physical evidence from undercover buys. That could shape how future marketplace operators think about the durability of their proceeds — and how investigators prioritize financial forensics alongside traditional narcotics enforcement.

For the thousands of buyers and vendors who used Empire Market, the 40-year sentence and the asset seizures represent a definitive end to a platform that vanished without warning in 2020. The escrow funds that users couldn't withdraw before the shutdown are gone, and the criminal case that followed has now produced one of the harshest penalties yet for a dark web marketplace operator.

#dark web#empire market#cybercrime#drug trafficking#cryptocurrency

Sources

Iliyas

Founder & Editor, Xploitwire

This article was written and reviewed against the sources listed above before publication, under editorial policies set by Iliyas. Read our Editorial Policy →

← Back to all stories