Darknet Forums, and How Far the Community Goes

Why the talk sits outside the market

A market's own reviews are written where the vendor can see the pen. Orders, stars, and "trusted seller" badges live on a site the seller, or the administrator, can pad. A forum sits outside that shop. The vendor does not run the software, does not delete the thread when a deal goes bad, and does not get to be the only copy of their reputation. That is the whole reason anyone bothers with a second site.

Think of it as a notice board in the hallway, not the shopkeeper's chalkboard. People pin warnings, arguments, and boasts. The useful notes are the ones that are expensive to fake: the same nickname, with the same fingerprint, showing up for months, including on the weeks when customers are angry. A fresh account with a perfect story is cheap. The buyer-safety guide already uses that distinction when it says to weigh a vendor by completed orders and by a record off the storefront. This page is about the hallway itself.

The hallway has moderators, and they are anonymous too. A sub-community can ban a user, delete a post, or decide which market gets a polite hearing. That is order, of a kind. It is not an audit. The moderator is another person with a password, and a seized forum, or a cloned one, can wear the same layout while someone else holds the password.

What Dread was built to be

Dread was announced on Reddit on 15 February 2018 by a user named HugBunter, in r/onions. He described a board that copied Reddit's shape on purpose: sub-communities, moderators drawn from the users, a familiar layout, and no JavaScript. The lack of JavaScript was the point. Tor Browser's strictest setting turns script off, and a forum that needs script to render is a forum that breaks the moment a careful reader arrives.

The recent Reddit ban-waves are always a reminder that any community can be taken down without warning at any time.

He had started the code in mid-2017, dropped it, and picked it up again a few weeks before that post. The same announcement said the site would carry market security reports and a list of onion addresses. Read that as a promise about what the board would host, not as a list to follow. A report is a post. An address in a post is a string someone typed. Neither one is the operator's signature.

The date matters because the story usually gets told backwards. Dread was already public when Reddit closed the biggest market room. HugBunter was reacting to earlier ban-waves, not to a shutdown that had not happened yet. The shutdown came five weeks later, and it is what made the new board the place people actually had left.

How far the community goes

On 21 March 2018 Reddit banned r/DarkNetMarkets. Motherboard reported that the subreddit had almost 160,000 readers before the ban. A Reddit spokesperson told Motherboard the date and the rule in one statement: as of 21 March 2018, Reddit forbade soliciting or facilitating transactions in prohibited goods, and communities focused on those transactions would be banned. The same day took related rooms with it, including r/DNMSuperlist and r/HiddenService.

As of March 21, 2018, we have made a new addition to our content policy forbidding transactions for certain classes of goods and services. Moving forward, we are prohibiting transactions that are either illicit or strictly controlled.

That number, almost 160,000 readers, is the size of the clearnet room Reddit closed. It is not a count of Dread's accounts, and this page will not borrow one. What the years since show is simpler. The discussion did not die with the subreddit. It kept a single large board, with sub-communities for particular markets and for particular complaints, and with moderators who are users rather than a company. Market staff post there when they want to be seen. When they stop, the absence is visible, which is why admin silence on the forum shows up in the exit-scam guide as an early sign rather than as trivia.

The board also goes dark and comes back, or a lookalike appears while it is gone. HugBunter's own launch note said the first version was rushed and would have bugs. Outages since are the ordinary life of an onion site run by pseudonyms: attacks, broken servers, admins who disappear. A missing board is a missing notice board. It is not, by itself, news that every market has closed, and a board that loads and looks busy is not news that a market is safe.

Around the main board there is a thinner ring. Some markets run a forum inside the market, so the conversation never leaves the shop. Some people still try to gather the same talk on the ordinary web. And there is a search tool, Recon, built by Dread's operator to index vendor histories across markets. The search-engines guide already says what Recon can and cannot do: it can help you read a vendor's trail, and it still cannot prove you are on the real market. Naming that ring is enough. A directory of forum addresses would just be another notice board, with this site holding the pins.

What a post can prove

A post can prove that a person with that account typed those words, on that board, at that time, if you are actually on that board. That is already useful. It can show that a market's admins, who had been answering every day, went quiet. It can show that the same fingerprint has been pasted for months by the same nickname. It can show a fight about a missing package while the market's own review page still shows five stars. White House Market posted its retirement on Dread as well as on the market, and the copy that mattered was the one wrapped in a signature.

A post cannot prove an address. The string in the comment is text. Editing it is how a note gets repainted: one character in a 56-character onion name, and the link opens a shop that looks identical. A cloned forum does this at scale. It copies the layout, the sub-community names, and a few real threads, then swaps the mirrors. Readers who "checked Dread" checked a painting of Dread.

The same limit applies to a key pasted under a username. Importing it and getting a cheerful "good signature" only shows that the message matches the key you imported. If the key came from the post, the post has vouched for itself. The fingerprint has to come from a second place, and the procedure for that is the PGP verification guide. Kingdom Market is the sharp case: after the seizure, police used the market's own key to send signed messages to users on Dread. A signature can be real and still be the wrong hands. The Kingdom case is the write-up.

So the honest use of the board is narrow. Read it for mood, for silence, and for whether a nickname's story stays the same over time. Do not read it for the link you should open next. Discovery and trust stay separate, the same split the search guide draws between a result that exists and an address that is genuine.

Darknet markets on Reddit

People still search "darknet markets reddit" because that subreddit was, for years, the front door. It is not the front door anymore. The ban on 21 March 2018 removed r/DarkNetMarkets and, the same day, a set of sister rooms. BleepingComputer, writing that day, noted that clone subreddits had already appeared, and expected them to be removed once admins found people arranging the same deals. What you find now under those names is a new account, a spam list, or a thread left up as bait.

A clearnet thread has a second problem the Tor board does not. It is indexed. The posts that rank are the posts someone paid, or worked, to rank. A helpful comment with a "verified link" is the oldest trick on this beat, and it works better on a site where newcomers already trust the layout. The search guide makes the same point about the Hidden Wiki: a directory someone can edit is a directory someone has edited. Reddit is that, with a brand people recognise.

There is a lawful remainder. News about seizures, court cases, and privacy tools still gets discussed on ordinary forums, and journalists still quote the old subreddit as history. That discussion is not a market list. If the thread's useful content is an onion address, or a promise that a vendor will answer by DM, you are not reading the community. You are reading an advertisement that survived the ban, or one that was written after it.

How to read the board

Arrive through Tor Browser, at the strict security setting, because the original board was built to work without JavaScript and a page that demands script is already a different site. The setup is the Tor Browser guide. Then read, and do not log into any account that has your real name. A forum account is a separate nickname. The moment it shares a password, an email, or a writing style with your ordinary life, the board has your name whether or not the software is careful.

Trust a nickname only as far as the key travels with it. If the same fingerprint shows up on the market's profile and on the forum, and you checked that fingerprint somewhere other than the post in front of you, you are looking at one keyholder in two places. If the fingerprint is new this week, you are looking at a label. Labels are free.

When the board and the market disagree, believe the narrower evidence. A hundred posts saying a market is fine do not answer a withdrawal queue that has stalled. The scam guide's point stands: watch the queue, not the uptime, and not the reassurances. And when the board itself is the thing you're unsure of, because it reappeared after a long outage or the address looks one character off a bookmark, stop using it as a source until a signature you already trust says which board is the real one. A notice board you cannot identify is just a wall of notes.

Common questions about darknet forums