$430M Empire Market Sales Land Operator With 40-Year Prison Term and $100M Asset Seizure
A federal judge sentenced the dark web marketplace operator to four decades in prison, fining him $5 million and seizing over $100 million in assets.
Key points
- Raheim Hamilton received a 40-year federal prison term and a $5 million fine.
- Prosecutors linked Empire Market to more than 4 million transactions totaling $430 million.
- Authorities seized over $100 million in Bitcoin and Virginia properties from Hamilton.
U.S. District Judge Steven Seeger sentenced Raheim Hamilton to 40 years in federal prison on Monday. The 30-year-old co-creator of the Empire Market dark web marketplace also received a $5 million fine for his role in facilitating illegal commerce.
Hamilton pleaded guilty earlier this year to a drug conspiracy charge. As part of his plea agreement, he consented to the forfeiture of more than $100 million in Bitcoin and several properties located in Virginia. The sentencing reflects the scale of the criminal enterprise he helped build.
Market Scale and Operations
Empire Market operated from 2018 to 2020 alongside co-owner Thomas Pavey. According to prosecutors, the platform processed more than 4 million transactions with a total volume of $430 million. The vast majority of this activity involved drug sales, which accounted for approximately $375 million.
Dealers used the site to sell fentanyl, cocaine, methamphetamine and heroin. The platform also facilitated the trade of stolen account credentials, personal documents, fake currency and hacking tools. Users could communicate via encryption and launder proceeds through cryptocurrency mixers.
Who Is Affected
Hamilton and Pavey previously sold counterfeit U.S. currency on the now-defunct AlphaBay site. After AlphaBay shut down in 2017, they launched Empire Market on February 1, 2018. The Justice Department seized $75 million in cryptocurrency during its investigation into the platform.
Empire Market disappeared in the summer of 2020. Operators allegedly stole an estimated $30 million in Bitcoin from users during the shutdown. Thomas Pavey pleaded guilty last year and is scheduled for sentencing later this month. The Justice Department has prioritized takedowns of similar platforms like BreachForums and Archetyp.
Defender's checklist
Organizations should monitor for mentions of Empire Market in threat intelligence feeds to identify potential residual risks. Security teams must verify that no legacy systems contain credentials or data potentially sold on the platform. Incident response plans should include procedures for detecting the use of stolen credentials or malware tools previously available there.
Operational impact
Leadership teams usually review third-party risk after high-profile marketplace takedowns. Check whether any vendors used services linked to these platforms for payments or communications. Ensure that internal policies prohibit the use of unverified cryptocurrency mixers or dark web services. Communicate clearly with legal counsel about any potential exposure to stolen data or counterfeit goods.
Background: Incident response plans
An incident response plan is a documented procedure for detecting, containing, and recovering from security breaches. It defines roles, communication channels, and technical steps to minimize damage, preserve evidence, and restore normal operations quickly.
Read the full guide: Incident Response Plans: Why Your Security Tools Fail Without One
What to do and how to stay safe: Empire Market
- Audit employee access logs for signs of compromised credentials that may have been sold on illicit marketplaces.
- Review financial transaction records for any unusual patterns that could indicate exposure to money laundering schemes.
- Update vendor risk assessments to explicitly exclude suppliers with ties to known dark web operations.
- Once the vendor provides an update, apply patches to systems that might have been targeted by hacking tools sold on the site.
Step-by-step guide: DDoS Attacks Explained: How Flooding Works and What to Do
General security guidance from the InfoSec Ledger newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
How much money did Empire Market process?
Prosecutors stated the platform handled more than 4 million transactions totaling $430 million.
What assets did Raheim Hamilton forfeit?
He agreed to forfeit more than $100 million in Bitcoin and several properties in Virginia.
When did Empire Market shut down?
The platform disappeared in the summer of 2020, with operators allegedly stealing funds from users.
