Empire Market co-founder Raheim Hamilton receives 40-year prison sentence
The operator of a major dark web marketplace faces decades behind bars for facilitating $430 million in illicit trades involving drugs and stolen data.
Key points
- Raheim Hamilton was sentenced to 40 years in federal prison and fined $5 million.
- The Empire Market platform processed over 4 million transactions totaling $430 million.
- Prosecutors secured forfeiture of more than $100 million in cryptocurrency and Virginia properties.
Raheim Hamilton gained 40 years in federal prison for co-operating Empire Market, a dark web hub that enabled millions of illegal transactions. According to The Record, the 30-year-old Virginia resident pleaded guilty earlier this year to a drug conspiracy charge. He also agreed to forfeit assets worth more than $100 million, including Bitcoin holdings and several real estate properties located in Virginia.
In plain English
Empire Market functioned as an anonymous storefront for criminals. The platform allowed users to buy and sell narcotics, stolen account credentials, fake currency and hacking tools without revealing their identities. According to Security Affairs, the site supported payments in Bitcoin, Monero and Litecoin, providing a layer of financial privacy that complicated tracking efforts for investigators.
The background
Hamilton partnered with Thomas Pavey to launch the marketplace on February 1, 2018. The Record reports that the pair had previously attempted to sell counterfeit U.S. currency on the defunct AlphaBay platform. After AlphaBay shut down in 2017, they established Empire Market. The site grew rapidly, organizing illicit goods into categories such as Fraud, Drugs & Chemicals and Software & Malware.
What changes now
U.S. District Judge Steven Seeger issued the sentence on Monday, alongside a $5 million fine. The Justice Department stated it seized $75 million in cryptocurrency during the investigation, along with cash and precious metals. According to Security Affairs, Pavey, also known as "Dopenugget," pleaded guilty last year and faces sentencing separately.
What made it possible
This case illustrates how dark web marketplaces leverage cryptographic tools to obscure user identities and transaction origins. By combining encrypted communication channels with cryptocurrency mixers, operators can facilitate large-scale illicit trade while minimizing direct attribution. Security teams monitor these environments because they serve as aggregation points for diverse threats, including malware distribution and credential theft. Understanding these operational techniques helps analysts identify similar infrastructure that may support future criminal enterprises.
What to do and how to stay safe: Empire Market
- Monitor threat intelligence feeds for indicators of compromise related to known dark web marketplaces.
- Review network logs for unusual cryptocurrency-related traffic or connections to known mixer services.
- Ensure endpoint detection tools are configured to identify common hacking tools sold on such platforms.
- Verify that user authentication mechanisms include multi-factor authentication to mitigate credential stuffing risks.
General security guidance from the RedTeam Monitor newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
How much money was processed through Empire Market?
According to prosecutors, the site handled more than 4 million transactions with a total volume of $430 million.
What did Raheim Hamilton forfeit?
Hamilton agreed to forfeit more than $100 million in Bitcoin and several properties in Virginia.
When did Empire Market shut down?
The platform disappeared in the summer of 2020, leaving users unable to withdraw funds from escrow accounts.




