US takes down 145 domains linked to $17M darknet marketplace and seize crypto wallets

US law enforcement agencies seized 145 domains and crypto linked to BidenCash, a darknet marketplace known for selling stolen credit card data, and personal information, according to a June 4 statement.

The takedown followed a court-approved investigation that targeted the platform’s infrastructure. The seized domains now redirect users to a server controlled by the authorities, featuring official insignias from the DOJ, FBI, Secret Service, and Dutch High Tech Crime Unit.

Meanwhile, the authorities confirmed the seizure of crypto used by BidenCash to process illegal payments, but did not disclose the total amount or asset type.

However, on-chain data from Arkham Intelligence suggests that the US government seized roughly $43,000 worth of USDT, a stablecoin issued by Tether.

BidenCash

BidenCash was known for its open sale of stolen credit card data, login credentials, and personally identifiable information.

Investigators estimate that during its lifespan, the platform enabled the trade of more than 15 million compromised card records and generated at least $17 million in revenue. At its peak, the marketplace served over 117,000 users.

To boost its reach among criminals, the site tends to release millions of stolen card details for free in what appeared to be a promotional tactic.

According to the authorities:

“Between October 2022 and February 2023, the BidenCash marketplace published 3.3 million individual stolen credit cards for free to promote the use of their services. The stolen data included credit card numbers, expiration dates, Card Verification Value (CVV) numbers, account holder names, addresses, email addresses, and phone numbers.”

Meanwhile, despite this enforcement success, security analysts have identified several active domains still tied to the BidenCash network. Cybersecurity expert Vmprotect, using domainhunter.pro, flagged at least seven still-active addresses as of press time.

This highlights the resilience of such criminal operations and the technical hurdles in achieving total disruption.

In 2025 alone, law enforcement agencies have taken down hundreds of darknet-related domains and servers. Yet, threat actors continue to adapt, creating new channels to maintain operations.

The post US takes down 145 domains linked to $17M darknet marketplace and seize crypto wallets appeared first on CryptoSlate.