Threat Intelligence
Empire Market Co-Creator Sentenced to 40 Years for $430 Million Dark Web Crime
A US court sentenced Empire Market co-creator Raheim Hamilton to 40 years in prison for running a dark web marketplace linked to $430 million in illegal trades.
Ross Grant3 min read
The short version
A man who helped run Empire Market, a dark web site for illegal trades, has been sentenced to 40 years in prison. The site let people buy drugs, stolen data, and hacking tools using cryptocurrency. Authorities seized millions in digital currency and property. The case shows that hiding behind technology does not guarantee criminals will avoid justice.
By the numbers
- $430 milliontotal value of illegal trades on Empire MarketSecurity Affairs
- 4 million+number of transactions on Empire MarketSecurity Affairs
- $75 millioncryptocurrency seized by authoritiesSecurity Affairs
- 40 yearsprison sentence for Raheim HamiltonSecurity Affairs
- $5 millionfine imposed on Raheim HamiltonSecurity Affairs
What happened?
Empire Market co-creator Raheim Hamilton was sentenced to 40 years in US federal prison for running a dark web marketplace linked to $430 million in illegal trades. The site operated from 2018 to 2020 and offered drugs, stolen credentials, and hacking tools. Authorities seized $75 million in cryptocurrency. Hamilton pleaded guilty in January 2026.
The Rise and Fall of Empire Market
Empire Market was a dark web marketplace that operated from 2018 to 2020. According to Security Affairs (opens in a new tab), it became one of the largest criminal trading platforms online, handling more than four million transactions worth over $430 million. The site allowed users to buy and sell illegal goods and services, including drugs, stolen credentials, personal data, counterfeit currency, and hacking tools. Payments were made using cryptocurrencies such as Bitcoin, Monero, and Litecoin, which made tracing transactions more difficult.
The platform was co-owned and operated by Raheim Hamilton and Thomas Pavey. Both men had previously sold counterfeit US currency on another dark web marketplace, AlphaBay, before launching Empire Market. The site grew quickly, attracting vendors and buyers from around the world. It even included features like vendor ratings, which let buyers judge how well sellers concealed drugs in shipments, showing a focus on operational security and user trust within the criminal community.
Law Enforcement Investigation and Arrests
The US Department of Justice (DoJ), along with the FBI, Homeland Security Investigations, and the US Postal Inspection Service, led the investigation into Empire Market. The authorities tracked the operators despite their use of encryption, cryptocurrency, and the anonymity of the dark web. The investigation resulted in the seizure of $75 million worth of cryptocurrency, as well as cash and precious metals.
In June 2024, Hamilton and Pavey were charged in federal court in Chicago. Hamilton, known online as "Sydney" and "Zero Angel," pleaded guilty to drug conspiracy charges in January. He agreed to forfeit assets including about 1,230 bitcoin, 24.4 Ether, and three properties in Virginia. Pavey, known as "Dopenugget," also pleaded guilty and agreed to forfeit about 1,584 bitcoin, gold bars, cars, and properties in Florida. Pavey's sentencing is scheduled for later this month.
The End of Empire Market
Empire Market shut down in 2020. The closure was abrupt, leaving users unable to withdraw funds from their escrow accounts. Some users blamed a prolonged denial-of-service (DDoS) attack, while others suspected an exit scam, where operators disappear with users' money. The shutdown highlighted the risks for users of illegal marketplaces: not only do they face legal consequences, but their funds are never truly safe.
Sentencing and Penalties
On 7 October 2026, Raheim Hamilton was sentenced to 40 years in federal prison and fined $5 million. The sentence is one of the harshest handed down for running a dark web marketplace. The DoJ press release, quoted by Security Affairs, stressed that using cryptocurrency and the dark web does not guarantee anonymity from law enforcement. The case demonstrates the US government's commitment to pursuing those who profit from large-scale online crime.
What This Means for Cybercrime and Security
The Empire Market case shows how dark web marketplaces can become large-scale criminal businesses, bringing together a range of illegal activities under one roof. It also illustrates the ongoing challenge for law enforcement: tracking and prosecuting operators who use advanced technology to hide their identities. For defenders, the case is a reminder that criminal marketplaces are a major source of stolen credentials, malware, and hacking tools that can later be used in attacks against individuals and organisations.
What Happens Next
With Hamilton sentenced, attention now turns to the sentencing of his co-operator, Thomas Pavey. The case may also encourage further investigations into other dark web marketplaces and their users. For ordinary people, the story is a reminder to be wary of where stolen data and hacking tools come from, and that law enforcement agencies continue to pursue those behind these platforms, even years after they shut down.
Claimed vs confirmed
- Confirmed
Empire Market handled over $430 million in illegal trades.
Security Affairs cites the DoJ press release stating the marketplace handled more than $430 million.
- Confirmed
Hamilton and Pavey used cryptocurrency tumbling to hide transactions.
Security Affairs reports that the operators encouraged the use of tumbling services to obscure the origin of funds.
- Unconfirmed
Empire Market shut down due to a DDoS attack or exit scam.
Some users blamed a DDoS attack, others suspected an exit scam; no official cause has been confirmed.
The impact
- Money
- Hamilton was fined $5 million and authorities seized $75 million in cryptocurrency. The maximum fine for similar cases under US law can be much higher, depending on the scale and charges. The site itself handled $430 million in trades.
- Reputation
- The case sends a strong message that running a dark web marketplace can lead to long prison sentences and public exposure. It also shows that law enforcement can reach operators even if they use advanced hiding techniques.
- Customers
- People who bought or sold on Empire Market risk prosecution and loss of funds. Stolen data and hacking tools from the site could be used in attacks against individuals and businesses.
Why it matters
This case highlights how large and profitable illegal online markets can become. It also shows that law enforcement can still track down and prosecute those behind these sites, even when they use advanced technology to hide. Stolen data and hacking tools from such markets can affect ordinary people and businesses.
How does it work?
Empire Market operated on the dark web, allowing users to anonymously buy and sell illegal goods using cryptocurrencies. The operators used encryption and encouraged the use of 'tumbling' services to mix cryptocurrencies, making transactions harder to trace. Despite these measures, law enforcement was able to identify and prosecute the operators.
Key points
- Empire Market handled over $430 million in illegal trades before shutting down in 2020.
- Co-creator Raheim Hamilton received a 40-year prison sentence and a $5 million fine.
- Authorities seized $75 million in cryptocurrency and other assets.
- The site sold drugs, stolen data, counterfeit currency, and hacking tools.
- Law enforcement can trace and prosecute operators despite the use of encryption and cryptocurrency.
Sources
Security Affairs
Reference




