U.S. Authorities Dismantle BidenCash Darknet Marketplace, Seize Crypto and Stolen Data

U.S. law enforcement has shut down BidenCash, a darknet marketplace known for trafficking stolen credit card data and personal information. In a coordinated operation led by the U.S. Attorney’s Office for the Eastern District of Virginia, authorities announced on June 4, 2025, that the platform has been dismantled, with crypto assets and web domains seized as part of the action.
The BidenCash takedown involved confiscating cryptocurrency wallets linked to illegal transactions, although the total value of assets seized was not disclosed. Officials also seized control of 145 domain names, spanning both darknet and traditional web infrastructure, effectively cutting off the marketplace’s access and operations.
The crackdown underscores the increasing attention federal agencies are giving to cybercrime hubs that leverage cryptocurrencies for illicit trade. BidenCash had gained notoriety for enabling the sale of stolen financial data, often in bulk, to buyers around the world.
As part of the shutdown, all domains affiliated with BidenCash now redirect to a law enforcement-controlled server. This redirection signals to would-be visitors that the marketplace is no longer operational—and that digital footprints are being monitored.
This latest bust comes amid a broader wave of cyber threats stemming from darknet platforms, many of which have recently targeted the cryptocurrency sector. In March 2025, cybercriminals claimed to have breached crypto exchange Binance, offering sensitive user data for sale. Binance denied the breach and said its internal review found no evidence of a leak originating from its systems.
🚨Alleged data leak of Binance emails/passwords logs
— Dark Web Informer - Cyber Threat Intelligence (@DarkWebInformer) March 26, 2025
The compromised data reportedly contains 132,744 lines of information
URL:LOGIN:PASS format pic.twitter.com/AgtDaUeY46
Shortly after, another darknet post claimed access to Gemini’s internal database, with up to 100,000 user records allegedly compromised. These incidents, while unverified by the exchanges, highlight how intertwined the darknet and crypto ecosystems have become—making enforcement operations like the BidenCash takedown increasingly significant.